Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft
File:                     cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft (raw, json)
Hash identifier:          mwkyzyyvv80BlH/fOsr2gbxGi3VtxrWXOEH5Ma1pIds=
Subject key identifier:   F7:88:2B:0D:54:47:BB:91:29:69:0F:4F:DA:E8:6F:83:00:E8:83:A5
Authority key identifier: 72:5D:97:54:AB:FC:37:86:62:34:D0:76:10:BA:CC:A0:01:72:1F:C4
Certificate issuer:       /CN=725d9754abfc37866234d07610bacca001721fc4
Certificate serial:       019438EA4E5BF2520F1E6C106505A4133C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft
Manifest number:          0A88
Signing time:             Mon 06 Jan 2025 00:01:06 +0000
Manifest this update:     Mon 06 Jan 2025 00:01:06 +0000
Manifest next update:     Tue 07 Jan 2025 00:01:06 +0000
Files and hashes:         1: cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.crl (hash: ultagrjy8a88yjrli8Eff/F9RNP39L3ILboRqet/u08=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:38:ea:4e:5b:f2:52:0f:1e:6c:10:65:05:a4:13:3c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=725d9754abfc37866234d07610bacca001721fc4
        Validity
            Not Before: Jan  6 00:01:06 2025 GMT
            Not After : Jan  7 00:01:06 2025 GMT
        Subject: CN=f7882b0d5447bb9129690f4fdae86f8300e883a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:e6:65:04:ad:6a:75:5b:36:9e:d1:94:2d:
                    69:fd:8d:32:61:ad:73:9f:a9:06:6d:f2:25:ee:a0:
                    32:f3:e0:be:02:bb:bd:46:94:8a:48:04:f2:97:a4:
                    ee:72:71:f2:91:42:2d:9a:51:e5:c5:5b:5d:0e:7e:
                    0d:1e:0a:44:e1:13:ca:8f:03:f7:38:5f:95:6e:ee:
                    aa:66:f7:0a:ba:94:fd:e1:54:12:f8:37:50:c2:e3:
                    90:fe:2f:56:95:f1:14:72:dd:7f:5f:e1:01:5f:52:
                    41:ba:cb:ad:ce:c7:3b:98:03:f8:54:47:55:c1:b7:
                    78:cc:cb:c2:fd:04:e2:73:36:1c:ee:97:71:dc:5f:
                    a5:72:b9:15:c9:70:e2:b2:ca:18:8c:23:d0:6c:06:
                    97:8d:e2:81:31:f8:6c:19:b1:32:80:f0:6f:27:04:
                    de:88:e7:9d:38:db:19:44:29:82:7d:9f:39:b2:3a:
                    2d:50:d3:7c:71:86:ff:e5:f7:cf:f7:2e:28:fa:91:
                    30:87:aa:14:9d:ec:d2:3a:9e:ff:e4:79:94:ad:f3:
                    10:a4:02:01:29:b5:c2:d5:07:3e:b6:6f:e5:3c:5f:
                    49:d4:b9:35:27:51:ac:5c:b5:52:29:69:2f:a4:47:
                    ca:48:fb:5b:72:bc:93:77:90:df:c9:49:a4:66:b4:
                    8c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:88:2B:0D:54:47:BB:91:29:69:0F:4F:DA:E8:6F:83:00:E8:83:A5
            X509v3 Authority Key Identifier:
                keyid:72:5D:97:54:AB:FC:37:86:62:34:D0:76:10:BA:CC:A0:01:72:1F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c2efcd-eeee-4853-a2bb-720995a18cd9/1/cl2XVKv8N4ZiNNB2ELrMoAFyH8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:c1:e4:f7:c3:38:34:70:39:28:e7:6f:44:96:51:4f:29:
         58:e9:27:cd:38:ab:72:65:1b:ce:04:a5:b8:75:de:af:e2:10:
         0c:99:05:a8:43:50:ed:ac:c4:d0:c2:e7:ff:1a:a5:d2:c8:18:
         3c:49:eb:d0:3c:11:00:db:84:72:1b:36:38:bb:89:98:40:d1:
         9a:7f:fd:37:e8:c1:67:b4:8e:ec:21:2d:db:a1:ad:99:87:8e:
         a8:74:b3:9c:fe:75:d9:65:e0:b9:fb:7e:0e:6e:cf:65:d2:74:
         63:c2:58:86:6a:18:4d:1e:17:72:f7:82:b9:c8:a1:7d:b5:db:
         bd:2d:12:17:f8:9d:e5:ec:0b:49:44:7a:21:a1:75:aa:ba:46:
         1c:38:15:4f:83:86:67:5d:32:07:df:94:9c:fd:c2:48:f2:bf:
         8d:22:a5:4a:6f:a6:92:bb:7a:70:47:d3:ff:c2:6a:39:c3:65:
         6d:1e:ee:e3:28:26:e4:ca:e3:62:65:eb:ad:b0:5d:46:06:b8:
         53:25:27:65:cf:86:3a:d7:d7:4c:bc:6f:06:29:96:20:83:7b:
         70:4c:3f:70:ba:1b:b9:62:4c:dc:29:e2:2e:0b:af:54:5a:df:
         ad:44:0c:15:ca:bd:92:38:fa:4d:b6:15:16:5a:0e:ae:ef:81:
         18:8e:c0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:56 2025 by rpki-client