Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
File:                     v9aef9UBKJF3mCF6xh-OgrH6FOs.mft (raw, json)
Hash identifier:          eDl9kaIiFOlSj0WsNLfiVC8Rc1eEEPM/Pg4OxZkGHYY=
Subject key identifier:   68:3D:CD:64:6C:F7:44:17:78:FF:72:93:E0:1A:1C:CC:50:89:75:5B
Authority key identifier: BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB
Certificate issuer:       /CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
Certificate serial:       01953C1F5615CCE902DDDDF40A02832A367B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft
Manifest number:          03EE
Signing time:             Tue 25 Feb 2025 08:00:41 +0000
Manifest this update:     Tue 25 Feb 2025 08:00:41 +0000
Manifest next update:     Wed 26 Feb 2025 08:00:41 +0000
Files and hashes:         1: v9aef9UBKJF3mCF6xh-OgrH6FOs.crl (hash: c1mdJIr8TyjQvPHKoP9iuO5I6GiYivcJnUfWtUj/CRk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3c:1f:56:15:cc:e9:02:dd:dd:f4:0a:02:83:2a:36:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd69e7fd50128917798217ac61f8e82b1fa14eb
        Validity
            Not Before: Feb 25 08:00:41 2025 GMT
            Not After : Feb 26 08:00:41 2025 GMT
        Subject: CN=683dcd646cf7441778ff7293e01a1ccc5089755b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:68:f4:63:47:7c:e8:c2:09:21:a6:db:21:d5:
                    e8:28:05:fd:e4:fa:32:db:0f:4b:57:ef:1f:d1:5f:
                    ec:8a:08:30:02:33:c8:ce:a9:5c:df:19:2c:e5:86:
                    fe:02:5b:cc:14:52:2c:ce:10:fe:1e:c6:63:96:52:
                    cc:2f:1a:88:b0:d1:91:26:d7:15:d3:c2:d4:82:ce:
                    10:50:62:53:a1:ab:fb:3f:26:d1:6c:29:dc:ac:22:
                    19:67:8b:67:bc:2a:86:db:98:1d:7f:13:f4:18:4f:
                    93:de:c4:70:b7:ba:77:8e:05:1c:fc:e0:5e:b9:0e:
                    f9:06:c3:6d:5c:ec:68:39:e9:71:a1:46:04:5c:f9:
                    57:cd:e2:4c:8a:eb:28:62:fb:aa:61:ef:23:2e:fe:
                    aa:f9:21:ea:71:c9:36:79:40:2f:7f:ea:68:e1:b3:
                    98:6e:fb:16:34:e1:14:45:ce:74:75:f3:7d:06:d4:
                    de:a3:ff:8f:ff:b6:47:7f:c3:ec:29:09:58:fd:5b:
                    68:77:f1:a3:07:d0:54:40:35:a8:40:3d:e3:12:2d:
                    06:43:82:e9:5b:aa:e5:e3:3a:7e:30:4c:85:68:39:
                    f7:fa:6e:5f:ae:f9:90:a3:5f:d3:68:ee:fa:2a:8a:
                    65:ba:53:a0:74:39:62:36:27:af:75:ca:4d:99:8d:
                    84:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3D:CD:64:6C:F7:44:17:78:FF:72:93:E0:1A:1C:CC:50:89:75:5B
            X509v3 Authority Key Identifier:
                keyid:BF:D6:9E:7F:D5:01:28:91:77:98:21:7A:C6:1F:8E:82:B1:FA:14:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9aef9UBKJF3mCF6xh-OgrH6FOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/19af62-56d7-453c-b69f-77e19e60c328/1/v9aef9UBKJF3mCF6xh-OgrH6FOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ca:e5:40:90:b0:c0:fa:39:64:80:b8:04:56:78:b3:8d:5e:
         8b:1e:1e:5b:ea:ba:50:10:c3:9b:c5:08:bb:4c:cf:69:21:5f:
         2b:93:72:8a:7b:8f:42:ff:54:58:65:cf:be:0a:de:11:26:e6:
         7a:88:46:e7:45:fc:40:eb:c9:5f:f3:f3:b6:34:51:27:07:d6:
         82:8a:2c:f9:49:a1:ae:5a:38:03:cf:78:77:45:d2:65:f3:98:
         78:70:93:b3:74:9e:f7:43:6b:b2:6b:35:c1:af:e6:49:7c:13:
         7e:b7:b0:e8:30:dc:99:07:d8:b2:87:90:c9:83:ac:81:b4:85:
         21:2b:13:ba:8d:e5:76:b8:d1:67:52:10:fb:c3:d2:16:3b:72:
         40:c1:83:f2:28:e1:06:6d:f7:14:a7:c8:f0:09:2c:a6:e2:97:
         1b:d0:8f:0f:cc:ce:38:ee:65:71:80:c1:4f:e1:e2:7d:fe:a7:
         e7:64:e8:e8:67:a9:7d:a9:ae:c2:d3:91:48:73:8c:48:39:9b:
         aa:94:df:37:3f:4a:dd:fe:a1:0d:9e:ae:57:20:f8:83:d4:ef:
         a4:a5:a6:70:06:0e:b0:5e:49:5d:d3:87:a0:07:9e:f8:83:5d:
         c8:19:b0:f9:22:17:96:0f:52:b0:22:70:0d:38:f1:1f:07:91:
         8a:33:4d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:32:21 2025 by rpki-client