Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft
File:                     1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft (raw, json)
Hash identifier:          py0ROONCQ3Lh11Hiq2L38OIT86rWbXE4dWEyOCmyd2E=
Subject key identifier:   96:7D:2D:12:F1:E8:EC:37:BD:F5:12:9F:55:84:CD:02:CD:03:A0:E0
Authority key identifier: D5:27:E9:35:2F:14:E8:48:39:97:A3:BC:C3:22:C5:13:D2:A0:7D:B6
Certificate issuer:       /CN=d527e9352f14e8483997a3bcc322c513d2a07db6
Certificate serial:       01955FF55A4092AE84120C03783C03232996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft
Manifest number:          0700
Signing time:             Tue 04 Mar 2025 07:01:09 +0000
Manifest this update:     Tue 04 Mar 2025 07:01:09 +0000
Manifest next update:     Wed 05 Mar 2025 07:01:09 +0000
Files and hashes:         1: 1SfpNS8U6Eg5l6O8wyLFE9KgfbY.crl (hash: iQdc/Gx2+MED00eGX6ZR75Vxi5xxEj6q1YQMaHAdrG0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:5f:f5:5a:40:92:ae:84:12:0c:03:78:3c:03:23:29:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d527e9352f14e8483997a3bcc322c513d2a07db6
        Validity
            Not Before: Mar  4 07:01:09 2025 GMT
            Not After : Mar  5 07:01:09 2025 GMT
        Subject: CN=967d2d12f1e8ec37bdf5129f5584cd02cd03a0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:0e:cf:5a:94:29:34:df:19:95:a6:33:46:
                    e5:c5:89:2d:d6:81:1b:52:39:db:85:77:89:5e:8d:
                    4b:11:f4:39:9b:e8:0b:ab:35:72:96:bd:40:00:86:
                    90:ea:56:b7:eb:90:71:40:73:69:48:f0:35:d3:83:
                    84:a6:4a:1e:5a:27:cd:be:19:76:da:f3:ec:e6:83:
                    31:12:28:0d:2a:b2:1a:35:9f:de:b3:d3:b8:e9:45:
                    50:d8:86:02:b9:18:7f:49:36:69:da:ac:50:be:f0:
                    19:f3:94:d3:e9:b6:28:2f:34:ab:45:d0:71:2d:e7:
                    c0:74:0c:2b:74:0a:44:a3:c9:21:13:78:81:01:54:
                    4f:a5:b2:4d:c7:3f:8c:0a:b0:ce:4f:f9:0e:b1:f9:
                    f7:7f:db:46:54:f7:cf:a8:df:04:57:b1:2e:02:c5:
                    95:8b:26:c9:27:37:ab:c4:d1:41:d0:01:07:fc:d8:
                    8f:a5:e6:45:ba:33:cd:c7:72:bd:66:d9:9b:1e:4d:
                    e9:f5:e8:c0:ab:00:b4:16:db:5e:cb:4e:11:fc:a2:
                    42:9c:ac:22:fe:34:11:f1:c0:3f:8a:2d:cb:b8:b3:
                    b7:41:51:03:9e:86:2f:60:e8:41:8a:84:c0:4c:d9:
                    e6:a1:aa:2a:5d:c8:ff:ee:b6:ef:0d:b8:79:d0:74:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7D:2D:12:F1:E8:EC:37:BD:F5:12:9F:55:84:CD:02:CD:03:A0:E0
            X509v3 Authority Key Identifier:
                keyid:D5:27:E9:35:2F:14:E8:48:39:97:A3:BC:C3:22:C5:13:D2:A0:7D:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/dbbc5b-1da5-409c-b20e-4d8337a91d43/1/1SfpNS8U6Eg5l6O8wyLFE9KgfbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c5:a6:5e:1e:93:c9:fe:f4:2f:47:f9:59:38:f3:0b:9f:42:
         44:17:7d:9d:e8:61:19:d9:bf:1b:33:9b:3d:5c:ef:33:f3:09:
         60:ad:e9:36:21:d1:da:d3:b5:68:67:55:38:03:6d:13:54:e0:
         05:82:2c:66:d2:c2:60:d7:88:70:a5:be:23:72:c4:e9:6d:3f:
         5f:34:27:9d:62:b5:79:c8:c1:95:9e:ca:80:37:b5:ea:b2:ff:
         5d:01:46:88:ec:a1:7b:9f:1d:91:c3:cd:a9:44:0e:b5:c6:49:
         19:65:db:68:ea:a3:e8:b3:ea:2f:6d:7c:e2:d4:d5:71:cb:da:
         69:81:11:e8:3e:d8:3f:82:82:6d:4c:7b:43:7d:18:e9:f2:81:
         5f:6d:0b:2e:09:10:0e:f0:f5:bc:20:12:32:d9:9a:ef:c9:6c:
         f3:a8:25:83:3b:79:74:a0:ab:e0:44:e3:52:70:55:bc:93:7f:
         48:98:f8:cf:d6:ef:85:79:0f:f6:84:7b:e6:10:60:be:3f:54:
         33:db:e4:97:3f:42:0e:7b:0c:3a:7f:5d:a5:25:71:cd:3a:23:
         ce:25:99:e0:e1:4c:0b:72:1a:b9:47:07:e3:41:e7:21:3a:e4:
         bf:8f:00:db:47:5b:85:b7:77:10:2d:f0:73:16:c9:86:93:dc:
         9c:9a:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:45:35 2025 by rpki-client