Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
File:                     0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json)
Hash identifier:          +yetZ7BPGBH1tXG8/COmXsXnMJXc+uVZlc+tgC1FBKE=
Subject key identifier:   AE:97:F1:E1:0A:B6:F5:77:F6:5C:EC:EA:8B:14:41:CA:E7:C0:44:75
Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76
Certificate issuer:       /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
Certificate serial:       0194BBCE9A70CF39604D22373C5064D6B2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft
Manifest number:          0F28
Signing time:             Fri 31 Jan 2025 10:01:06 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:06 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:06 +0000
Files and hashes:         1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: wm6sz8ppS/mEYvDd/MdvMwfhlP2s8E4sjpgZMfl3NVo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9a:70:cf:39:60:4d:22:37:3c:50:64:d6:b2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976
        Validity
            Not Before: Jan 31 10:01:06 2025 GMT
            Not After : Feb  1 10:01:06 2025 GMT
        Subject: CN=ae97f1e10ab6f577f65cecea8b1441cae7c04475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0f:b6:9b:7b:53:67:44:2d:d9:53:28:ff:61:
                    a6:0a:ac:43:a9:79:6c:51:da:fe:7e:aa:ec:ca:25:
                    4d:62:2b:3f:02:12:7c:b0:16:71:f8:99:3d:e0:88:
                    c2:a9:a1:7e:8f:68:2d:8a:bf:97:d5:96:f2:07:3c:
                    0d:a9:70:07:80:b1:6b:f0:21:6e:5d:f0:a1:53:74:
                    4b:4f:c5:e4:98:3e:a9:ff:25:52:48:dc:a2:a8:4b:
                    da:c7:25:96:59:1f:2e:0e:ab:36:69:a5:69:8b:99:
                    5a:86:ed:fa:f0:a4:1b:19:25:c0:f8:0d:28:bd:12:
                    51:08:52:8d:69:8a:4f:e3:b6:cd:a4:6e:b0:2e:a2:
                    3e:56:d2:2b:cb:fa:82:da:97:15:95:29:e0:64:46:
                    92:13:7a:45:53:bf:7d:3a:67:9c:fa:fa:36:2a:ae:
                    41:88:b5:61:7e:9b:f2:63:38:0d:d7:fb:ac:c2:10:
                    0c:82:2d:fb:da:e9:e6:32:8d:ab:e4:34:76:3f:a3:
                    83:f3:d2:a7:c9:6e:61:87:a4:75:09:8f:f9:bb:23:
                    b4:e7:5f:33:ae:b5:bd:22:07:a1:96:dd:3a:6d:3c:
                    95:ae:33:34:2a:a5:d5:a4:2f:e9:94:52:5f:f4:e7:
                    53:34:9a:e5:62:37:b7:c6:95:44:16:e4:20:cc:0a:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:97:F1:E1:0A:B6:F5:77:F6:5C:EC:EA:8B:14:41:CA:E7:C0:44:75
            X509v3 Authority Key Identifier:
                keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f4:83:92:a9:61:b6:c5:61:66:f5:3e:f8:cc:ee:2f:dc:e1:
         74:c8:68:01:e4:63:c9:24:dd:e2:88:fb:15:28:ac:45:f5:67:
         9e:72:7a:75:1f:fb:46:51:8a:bf:64:50:ce:7b:35:13:8b:b0:
         75:66:11:46:05:cc:f9:4a:5b:02:2d:9b:04:0e:d2:e8:e7:51:
         39:57:88:99:58:12:83:05:2a:09:bc:37:13:88:23:40:ee:41:
         d5:c0:40:40:fa:f4:85:5c:da:5c:7f:2c:ea:c9:30:ed:28:90:
         8a:e8:28:de:3a:d5:a4:ec:85:ac:4d:7e:0c:c5:79:db:63:be:
         b1:ca:d1:84:7c:89:82:7b:48:e4:af:73:99:ef:8e:94:68:03:
         cc:5a:1d:e1:9e:45:4f:c2:8e:83:26:32:f4:ac:d0:30:fe:45:
         f6:99:2a:b8:19:ee:4f:82:4b:88:42:04:eb:1f:34:c6:63:b2:
         0b:eb:97:7d:25:81:49:9b:71:bb:ef:6f:30:01:fd:42:3c:36:
         a9:94:79:60:fb:7d:03:e5:14:63:b1:2c:36:55:d2:94:60:28:
         c1:d1:79:e7:7d:b4:ea:b0:a7:29:3f:51:1b:af:39:d3:38:52:
         56:4f:2a:6c:b8:02:d8:89:20:17:14:16:78:75:b3:ce:06:b5:
         d8:7f:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:15 2025 by rpki-client