Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft
File:                     vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft (raw, json)
Hash identifier:          ioNBuBj3yaluiaZu3NUVSYPv7bDK5Laele3agH5DXso=
Subject key identifier:   93:58:17:21:31:20:D9:48:89:CC:7F:C7:7B:F9:97:34:77:0F:25:E5
Authority key identifier: BC:21:74:1F:77:C2:12:7E:49:CF:3E:99:70:66:9A:CC:7E:95:CA:E9
Certificate issuer:       /CN=bc21741f77c2127e49cf3e9970669acc7e95cae9
Certificate serial:       01957EDACEF840A8AA08B75E8BDA8BCB9749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft
Manifest number:          0DAE
Signing time:             Mon 10 Mar 2025 07:00:23 +0000
Manifest this update:     Mon 10 Mar 2025 07:00:23 +0000
Manifest next update:     Tue 11 Mar 2025 07:00:23 +0000
Files and hashes:         1: vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.crl (hash: 6uZWupdcyhN85kqVC8gJn3j/wfgLA77DOeg5xsKMbeM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7e:da:ce:f8:40:a8:aa:08:b7:5e:8b:da:8b:cb:97:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc21741f77c2127e49cf3e9970669acc7e95cae9
        Validity
            Not Before: Mar 10 07:00:23 2025 GMT
            Not After : Mar 11 07:00:23 2025 GMT
        Subject: CN=935817213120d94889cc7fc77bf99734770f25e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:49:9a:da:43:ee:e6:5f:95:94:b9:e3:0f:47:
                    07:6b:fd:df:21:83:b6:d7:2d:5e:bb:57:dc:d1:bb:
                    1e:7a:c0:15:19:4b:de:0d:5d:85:e9:48:5d:46:7c:
                    4f:f7:48:c2:f7:9c:9a:b1:6b:86:ae:a8:e3:3f:02:
                    cf:1e:70:b2:06:3b:13:64:e9:16:af:a7:c7:15:52:
                    4d:80:d9:33:a8:c0:9a:53:42:11:c0:b9:9f:dd:98:
                    20:cc:cd:0c:c1:21:53:86:6c:76:03:f2:cf:ae:aa:
                    3c:82:73:79:e9:66:5e:a1:9f:19:88:31:63:50:5b:
                    c8:be:f4:95:a1:50:b3:76:83:41:59:fd:aa:49:df:
                    7a:62:8d:44:f0:5a:0a:80:95:6e:ca:73:bc:f6:9f:
                    05:5a:42:62:46:cb:75:d8:ec:12:9b:76:b4:35:d7:
                    01:06:51:95:92:51:22:96:a3:ce:29:70:6c:ba:dd:
                    26:22:8f:3b:7e:e7:e2:bf:ee:79:05:25:8b:a1:9f:
                    33:ae:42:63:ab:a2:29:a7:13:cc:2e:2b:14:60:e6:
                    7d:0b:df:a5:d6:2e:ba:98:55:33:1b:30:a1:61:ad:
                    88:34:cf:cd:a8:9f:ff:43:05:3d:a1:02:00:ac:90:
                    d0:f2:b4:11:1f:8d:14:62:35:e3:6a:8e:c5:e0:d7:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:58:17:21:31:20:D9:48:89:CC:7F:C7:7B:F9:97:34:77:0F:25:E5
            X509v3 Authority Key Identifier:
                keyid:BC:21:74:1F:77:C2:12:7E:49:CF:3E:99:70:66:9A:CC:7E:95:CA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aabdbb-c663-4b36-9511-700e163118e1/1/vCF0H3fCEn5Jzz6ZcGaazH6Vyuk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:87:08:e3:0f:1d:46:20:05:ad:33:77:e2:c3:f0:12:59:6a:
         01:2f:2c:5a:2e:ac:dc:a7:cf:ae:07:a0:66:c6:90:5b:8d:a0:
         bf:d6:1c:de:55:af:6a:4d:aa:e7:9a:76:26:11:54:6c:9a:c9:
         c2:98:8c:fb:33:4c:aa:1b:fa:a6:3b:d4:3a:cf:be:67:62:92:
         db:14:0f:a4:fd:28:f1:3e:06:22:6a:82:75:c7:77:5f:c1:75:
         d9:7c:f1:ad:8d:cd:25:85:b4:7e:bf:1e:d6:47:3a:0e:b2:52:
         3a:ff:44:9b:9f:21:88:db:bc:83:06:6f:f4:17:dc:1f:b7:55:
         14:d8:76:5d:ed:19:62:27:d1:06:d3:27:bd:34:b9:ca:3c:13:
         32:4b:be:00:a2:f9:33:96:4a:9b:e0:ec:c1:51:fd:63:47:39:
         8f:e2:b3:bd:5f:07:03:de:53:cd:f7:17:d1:b2:28:cf:1b:41:
         0b:8a:e6:c9:f5:e5:93:20:e0:d1:03:96:3a:38:a3:05:59:67:
         a4:02:36:c7:73:e4:f0:17:4d:db:09:8f:87:08:19:e6:98:5b:
         4c:38:42:a3:0e:35:d7:5f:5a:5b:1a:21:bf:1b:fb:9b:ec:53:
         7b:25:7e:bb:86:5a:b0:b9:20:d8:71:6e:b1:66:1b:09:fb:da:
         53:b8:67:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:48:18 2025 by rpki-client