Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
File:                     a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft (raw, json)
Hash identifier:          lXgk/43MRTVoigreSGsA7h+xjdJqmHFSl5H3ANjBC5I=
Subject key identifier:   67:EC:B5:58:47:03:AC:4D:7B:68:27:47:FC:88:29:91:C4:F2:48:FC
Authority key identifier: 6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB
Certificate issuer:       /CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
Certificate serial:       0194BBCE5D542E53C246918B53868589DEEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft
Manifest number:          2F
Signing time:             Fri 31 Jan 2025 10:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:51 +0000
Files and hashes:         1: a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl (hash: +Wovyt9D+hPi5sCJL42kwrLWJ6F27XoNnfGBZeahD9U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:5d:54:2e:53:c2:46:91:8b:53:86:85:89:de:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b6a35cc30ec3116420c0ff04c59e4793e9193fb
        Validity
            Not Before: Jan 31 10:00:51 2025 GMT
            Not After : Feb  1 10:00:51 2025 GMT
        Subject: CN=67ecb5584703ac4d7b682747fc882991c4f248fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:13:8f:41:6e:95:08:16:ca:7d:ec:e2:b7:7c:
                    9b:44:65:80:8c:5e:af:2c:4a:a6:00:1f:75:03:40:
                    d1:a3:44:d3:7c:bc:bf:2b:b9:7a:e3:bd:61:af:18:
                    70:6c:d0:f2:2a:e4:e9:80:db:81:b5:a8:f5:a8:85:
                    8a:58:64:78:18:64:a6:a0:97:68:67:09:1f:c4:cf:
                    93:0c:0c:8f:fa:c1:a5:d0:54:4f:7e:d4:f5:08:b6:
                    91:eb:23:d0:41:64:42:07:5e:8a:9a:0b:d7:55:f6:
                    25:23:8c:29:67:a4:d1:f4:2f:4f:a3:1f:3b:da:1a:
                    d9:0d:40:1e:93:69:ce:c5:99:cf:d5:4e:c9:16:b8:
                    ee:10:27:de:80:4b:78:3b:b4:f8:06:4a:e7:4c:19:
                    2e:fc:75:9e:69:cc:97:82:c0:27:61:d0:c3:20:50:
                    2c:ee:6b:ad:8a:13:b5:75:7b:23:06:f4:be:e2:d4:
                    0b:47:70:a7:76:7c:ec:5a:d6:48:a5:e8:a3:64:90:
                    37:27:0c:0c:78:c5:4c:90:c9:19:d7:93:c7:a2:9c:
                    72:c4:4c:4e:15:0f:39:a5:3e:f7:48:24:9a:ca:31:
                    dc:cd:48:cf:7f:d3:62:19:d6:9c:b4:6c:80:fe:d2:
                    e5:87:89:9c:f8:25:29:cd:48:72:00:7e:0a:53:00:
                    92:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:B5:58:47:03:AC:4D:7B:68:27:47:FC:88:29:91:C4:F2:48:FC
            X509v3 Authority Key Identifier:
                keyid:6B:6A:35:CC:30:EC:31:16:42:0C:0F:F0:4C:59:E4:79:3E:91:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/89226d-1fee-4571-8106-51fb82eff3d6/1/a2o1zDDsMRZCDA_wTFnkeT6Rk_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d2:e7:f4:97:f2:91:b4:7e:d7:36:5e:37:5a:5e:bb:a9:bf:
         80:fe:50:35:6d:f7:7d:31:ce:73:a8:47:1a:fc:70:a0:fb:7a:
         53:c5:8c:63:90:eb:96:cf:30:77:7a:93:af:5f:aa:ff:78:5c:
         db:8c:b7:92:e0:ef:e1:af:50:bd:e1:3c:39:df:39:8e:38:47:
         d8:2d:e9:6b:97:4c:20:fb:27:c0:92:f5:c5:e7:ab:02:8e:7d:
         61:d4:88:51:1d:a9:de:df:e8:26:d4:d8:10:2f:c1:77:f8:a1:
         2c:08:e0:45:e9:95:67:d6:3b:df:e9:1c:3d:da:e9:e7:e7:c3:
         bc:cf:51:ab:a1:7c:f5:88:2d:26:9c:0c:a5:35:c0:e8:bd:b9:
         fb:0f:b9:cc:d2:05:c6:36:04:62:8e:6a:5c:57:81:88:4e:41:
         f7:26:bd:a1:f5:4b:7a:b7:d3:b3:1d:28:44:67:a8:5b:8d:59:
         01:76:aa:36:80:88:23:f5:83:b4:a2:ce:d0:42:96:11:8c:96:
         70:68:56:5e:fc:a1:33:73:b7:33:84:71:67:28:c2:c7:1e:1c:
         31:f4:dc:8a:af:a5:17:35:1b:36:aa:1b:8b:49:e9:a4:06:f7:
         b9:a6:8c:af:cb:47:63:56:5f:5d:bd:a9:51:ed:34:17:96:da:
         0e:55:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:08:10 2025 by rpki-client