Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
File:                     Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft (raw, json)
Hash identifier:          m17FNYyudYk8M0KIxXz780YPRno76U6+iExLI8ZUa+U=
Subject key identifier:   E7:1C:3C:81:D3:AA:AA:2A:A0:A8:5A:D9:B7:3E:2D:3F:51:E1:6D:5C
Authority key identifier: 39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC
Certificate issuer:       /CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
Certificate serial:       0194BCE0BF942E1E079F4A17797C8B700857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft
Manifest number:          0181
Signing time:             Fri 31 Jan 2025 15:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:33 +0000
Files and hashes:         1: Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl (hash: GrUKK5fzHjID4RS9U+VFM1Xm4VzHHmNv/M6ANnxBH0M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:bf:94:2e:1e:07:9f:4a:17:79:7c:8b:70:08:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ef4aa5977f1f37133e7310809fff8935c0c8bc
        Validity
            Not Before: Jan 31 15:00:33 2025 GMT
            Not After : Feb  1 15:00:33 2025 GMT
        Subject: CN=e71c3c81d3aaaa2aa0a85ad9b73e2d3f51e16d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:6d:89:ca:07:71:ce:76:fd:f6:d0:76:10:
                    1b:23:0f:3f:bd:04:82:27:10:1f:3d:a0:a5:0f:ca:
                    9d:8c:16:8f:f7:ff:ad:6b:05:5a:08:0d:b6:26:6e:
                    dc:fd:59:98:3f:80:6c:03:fe:2b:fb:07:7d:27:92:
                    7e:f0:d8:51:13:d2:98:25:01:dd:42:bc:cf:f4:de:
                    d6:2c:f6:94:07:00:fa:08:68:2f:da:d5:7d:6a:8b:
                    39:31:4a:00:9f:0c:0d:53:da:74:55:d9:e3:af:ca:
                    e5:89:38:53:4d:95:1d:e1:3e:1c:4a:53:1d:8c:31:
                    c4:2c:a8:3b:5d:d0:3e:8f:e5:bf:d7:10:3f:37:27:
                    b5:7a:02:43:71:d3:6f:72:2a:dc:a5:34:01:4f:39:
                    28:c1:51:3c:32:79:50:2f:fb:18:38:55:16:32:2a:
                    a2:7c:af:4b:2e:ba:00:a1:06:7e:75:9b:20:2f:81:
                    a0:61:7d:ee:a0:52:17:51:22:dd:55:dc:2f:3f:39:
                    cc:0e:29:cb:f2:e6:97:9f:30:2d:52:d4:17:72:fa:
                    8a:c5:62:99:27:d7:92:55:b2:06:4b:e5:59:7a:91:
                    87:55:9a:5f:3d:1b:d3:2e:90:d7:f5:6e:04:d9:de:
                    15:97:74:29:ca:3d:cc:c4:58:b7:2c:83:b9:a2:91:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1C:3C:81:D3:AA:AA:2A:A0:A8:5A:D9:B7:3E:2D:3F:51:E1:6D:5C
            X509v3 Authority Key Identifier:
                keyid:39:EF:4A:A5:97:7F:1F:37:13:3E:73:10:80:9F:FF:89:35:C0:C8:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/148f71-ab2c-4409-ae1f-e7d5fce6bfac/1/Oe9KpZd_HzcTPnMQgJ__iTXAyLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:c2:b2:1a:2e:5d:0f:6b:e0:dc:43:22:ce:fc:0b:2b:f1:9c:
         42:0e:ea:a2:0a:4e:7e:ef:81:00:34:ec:30:d5:cd:72:0c:6d:
         82:55:70:9e:a1:5d:1d:2b:d1:e9:ea:94:f3:42:2f:87:f6:45:
         07:8a:f4:16:aa:79:b4:cb:36:f4:00:b3:8c:83:21:a0:83:dc:
         33:d9:d1:2d:f2:d7:79:43:c5:a3:25:b3:a5:5b:d1:27:71:45:
         36:9f:49:19:4f:0a:c3:7b:4b:73:a8:e0:90:b1:4c:a8:47:ac:
         d5:62:e5:8c:58:11:b9:ba:ab:81:76:67:15:08:d0:1b:99:9a:
         8c:3e:2e:f1:01:80:0a:f7:69:d9:56:01:ec:2f:3a:7a:d3:cc:
         85:ee:38:bb:c5:e4:2e:52:fb:db:0d:b7:1f:e2:fd:85:3f:b2:
         06:77:42:c9:3c:b0:47:e9:3c:41:db:2e:69:f1:4f:2d:47:f2:
         e5:bb:7e:3f:af:ed:eb:cc:d9:4f:bf:51:eb:93:de:57:7e:08:
         ae:8c:ba:7d:2b:be:02:14:69:83:d6:65:c6:e3:26:16:ad:01:
         60:ad:63:8a:24:95:c3:6d:d7:ee:11:0c:55:8f:b6:c3:d3:66:
         db:f3:b9:c6:8d:73:e0:53:6f:d4:a5:cc:9c:95:70:57:91:a6:
         24:73:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:55 2025 by rpki-client