Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          IWsdh+BVX+HpJ4XxBPdz7gxH93fS/ky1lAGNuFPlwoU=
Subject key identifier:   04:1E:CA:B2:E9:C1:13:A8:4A:37:09:10:3D:4C:E0:09:8D:88:1C:9E
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       0195E19063DCDB4EDE5D4BCBC5E0398A9570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          0364
Signing time:             Sat 29 Mar 2025 11:01:31 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:31 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:31 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: k9+DNYYPLi0ixRmIUvUyhDqXSkzoB8q29EkxN2Wkg4U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:63:dc:db:4e:de:5d:4b:cb:c5:e0:39:8a:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Mar 29 11:01:31 2025 GMT
            Not After : Mar 30 11:01:31 2025 GMT
        Subject: CN=041ecab2e9c113a84a3709103d4ce0098d881c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:06:08:3e:db:c6:87:27:60:7e:5e:f1:1f:d4:
                    8e:74:8b:96:18:0b:c2:0b:3d:49:81:92:17:28:be:
                    f2:8a:db:a3:5f:82:f5:fa:52:54:a3:4d:bd:b4:33:
                    9a:e6:ee:a7:ef:7b:fc:06:f2:eb:96:ec:b8:3a:1e:
                    6f:40:ee:74:0a:56:ee:b6:a4:1a:7b:1d:e9:ca:78:
                    74:0b:04:63:40:9b:7e:4b:e8:0a:12:21:46:33:d8:
                    87:f2:9d:a9:3e:dd:37:ee:96:38:69:c0:3d:4e:7b:
                    74:aa:72:c8:80:ad:79:2f:4f:19:42:dd:89:a4:ad:
                    68:d7:d4:e9:86:3d:fe:c0:72:85:de:c2:64:26:63:
                    70:81:91:92:cd:a9:ba:8c:08:78:af:f6:ee:94:3a:
                    e0:f4:eb:c1:8c:5a:a8:93:fb:79:d2:c0:62:31:14:
                    86:50:50:97:b3:43:a1:05:a0:44:00:da:97:f8:cf:
                    ac:ac:54:73:c7:3f:e8:45:e5:cd:91:70:3b:d7:53:
                    f8:fa:23:c0:82:f9:e8:7e:94:6b:0c:bf:e0:47:30:
                    25:39:85:0d:86:63:4b:52:79:5c:72:a2:ec:18:11:
                    f5:37:7a:3a:cd:3c:56:6f:64:6a:b8:1b:e1:77:90:
                    f4:c8:b3:48:2a:16:41:ec:60:3b:0f:30:eb:ef:e6:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1E:CA:B2:E9:C1:13:A8:4A:37:09:10:3D:4C:E0:09:8D:88:1C:9E
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:37:b6:ca:3c:e5:13:d1:bc:5b:dd:be:fe:e0:0c:cf:a6:4b:
         08:28:43:3c:38:e5:e2:50:04:e6:69:8e:8f:ed:f6:f8:83:36:
         3e:bd:23:84:65:14:32:c1:5c:a3:53:ad:d7:e1:8f:23:de:e3:
         e2:1d:24:13:2b:d2:50:77:65:6e:4b:cf:76:e1:bc:0b:8e:f8:
         6b:de:4b:33:b9:e5:f7:8a:e5:ca:f1:69:59:39:0c:59:d8:40:
         c4:63:86:62:1a:fe:73:c4:4f:d6:be:ca:18:41:64:3d:8b:92:
         6b:5e:f4:19:c0:1f:df:66:03:16:79:0a:6c:59:be:87:77:84:
         7a:59:38:04:2e:23:c1:ed:29:13:61:97:5f:96:94:2e:14:ff:
         63:d9:14:65:09:b5:33:b0:30:01:52:dd:eb:72:87:ff:c3:eb:
         02:29:92:17:2c:b3:67:83:33:c3:9e:8b:90:66:e0:63:85:33:
         aa:36:67:08:af:d8:f4:bc:21:be:10:d5:19:d6:35:b3:f2:65:
         85:78:18:e3:30:1c:e2:2e:e6:06:29:30:2d:01:35:54:0f:cd:
         7d:2c:8d:63:f5:14:59:ba:cc:c4:84:8a:61:fa:1e:e4:9e:80:
         d1:71:97:8e:8d:35:53:99:9a:49:e6:8a:fc:53:9c:68:e8:19:
         ea:ad:d4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:19 2025 by rpki-client