Manifest

$ rpki-client -vvf nostromo.heficed.net/repo/1123981/4/47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.mft
File:                     47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.mft (raw, json)
Hash identifier:          CHCUlUOvnvltpvMv9stmFFWepxYXPIoERmhozLUgWsY=
Subject key identifier:   84:CD:7C:EA:07:E9:71:95:87:96:5C:6D:3C:3E:A7:4E:85:1E:26:71
Authority key identifier: 47:F4:AC:60:A2:21:42:AE:DA:C3:A8:17:A8:B5:6B:4B:F9:FC:2E:34
Certificate issuer:       /CN=47f4ac60a22142aedac3a817a8b56b4bf9fc2e34
Certificate serial:       4D2D757BA741955DD09B885BA7A964084EAC8C28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R_SsYKIhQq7aw6gXqLVrS_n8LjQ.cer
Subject info access:      rsync://nostromo.heficed.net/repo/1123981/4/47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.mft
Manifest number:          4B
Signing time:             Thu 03 Feb 2022 06:00:00 +0000
Manifest this update:     Thu 03 Feb 2022 05:55:00 +0000
Manifest next update:     Fri 04 Feb 2022 06:00:00 +0000
Files and hashes:         1: 47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.crl (hash: 3TmDYe8Nk+wE64fWYqwqwuwxvZPvZejMz4Oc0kwUJOs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2d:75:7b:a7:41:95:5d:d0:9b:88:5b:a7:a9:64:08:4e:ac:8c:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47f4ac60a22142aedac3a817a8b56b4bf9fc2e34
        Validity
            Not Before: Feb  3 05:55:00 2022 GMT
            Not After : Feb 10 06:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:69:bb:c8:d2:0d:b1:0d:7e:60:4b:10:89:eb:
                    0f:aa:e7:e8:16:e6:80:22:ab:a0:0d:a5:2b:87:a9:
                    17:21:0a:2f:1a:1b:19:f2:8b:42:52:45:c0:75:4c:
                    a4:61:d8:1d:59:90:0e:5b:ea:3e:ce:87:23:40:74:
                    ba:78:49:e5:a5:cd:aa:3b:98:82:ce:3b:cc:44:27:
                    68:f4:92:62:92:5c:6c:c9:b9:19:f5:c6:8b:96:41:
                    7a:ae:36:e0:4c:12:00:a4:7b:48:50:b2:36:3f:47:
                    84:3b:bc:aa:61:71:3f:96:96:fa:85:75:9a:ca:84:
                    60:2b:6f:49:25:5b:37:24:af:8d:da:1c:ca:70:04:
                    e0:ce:66:1b:62:d2:1a:14:00:e2:e7:76:4e:bd:4d:
                    95:8e:74:49:83:b1:6d:e5:0f:2b:d4:8c:b7:20:a1:
                    f7:f4:f9:91:a5:e0:33:8e:ad:d9:5d:b9:0d:72:31:
                    57:af:32:b8:94:02:3d:d9:76:b1:50:d7:00:95:6f:
                    34:5d:e4:25:37:68:1d:c3:fd:bb:91:93:14:73:e0:
                    c4:21:4f:2b:83:f6:3b:43:42:61:c1:71:39:c9:6c:
                    42:92:f5:17:2d:ca:8a:b1:42:53:c3:56:86:fa:a9:
                    61:77:e3:58:0d:8b:d7:b3:0a:71:81:38:fb:10:ba:
                    72:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:CD:7C:EA:07:E9:71:95:87:96:5C:6D:3C:3E:A7:4E:85:1E:26:71
            X509v3 Authority Key Identifier:
                keyid:47:F4:AC:60:A2:21:42:AE:DA:C3:A8:17:A8:B5:6B:4B:F9:FC:2E:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://nostromo.heficed.net/repo/1123981/4/47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_SsYKIhQq7aw6gXqLVrS_n8LjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://nostromo.heficed.net/repo/1123981/4/47F4AC60A22142AEDAC3A817A8B56B4BF9FC2E34.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fa:cb:a0:6e:f3:df:f6:5b:4a:74:af:b0:52:6a:e2:60:fb:
         0f:8b:58:a6:1b:4a:9d:22:f4:20:50:04:fe:8a:fa:0f:7b:e1:
         22:71:42:b8:3c:52:8d:20:22:8b:f2:4a:13:d1:de:3f:89:bd:
         48:1b:0f:a7:42:f6:bc:2d:35:87:ce:31:75:cc:87:57:54:8e:
         72:b4:d8:03:45:63:22:bd:86:83:0a:d9:3c:17:4b:2f:fc:f0:
         fe:07:48:80:f2:6b:7b:1c:a3:67:c4:f2:3b:2c:8b:4a:71:38:
         e8:a5:d2:ca:cb:4a:21:92:d1:df:7c:83:6e:69:ba:27:48:4b:
         2b:2c:6f:aa:1b:ca:3e:b9:ef:10:0d:b4:41:0f:21:19:51:ed:
         05:70:86:e0:ea:c7:36:3a:bb:de:51:c5:cb:a1:52:46:be:49:
         fe:83:9e:6a:66:b9:d1:1f:48:aa:85:a1:41:79:15:8b:90:cc:
         67:44:0e:18:2d:69:99:e5:b3:a5:2e:c7:80:45:2c:db:a8:b9:
         a3:ef:3d:0e:f2:a9:ee:93:08:1f:91:eb:0c:49:57:f2:d1:d5:
         cf:5c:ab:4d:c9:39:53:53:3f:53:3a:c1:c6:d1:d9:3c:45:4c:
         d8:9f:b6:80:7f:ec:1a:7d:68:68:65:91:43:ae:a6:31:70:c7:
         8c:79:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:39:37 2025 by rpki-client