Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
File:                     3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft (raw, json)
Hash identifier:          nLRaPUJ38z5b9xurGhFhZZ+jwv6i0bu5IO6ZDgzbtC0=
Subject key identifier:   6B:E2:9C:5F:B0:C0:D7:08:19:54:20:C0:82:6C:40:15:8E:59:BE:56
Authority key identifier: DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71
Certificate issuer:       /CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
Certificate serial:       0195E15972DCE21FFFB0149697817C751ED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft
Manifest number:          05FC
Signing time:             Sat 29 Mar 2025 10:01:30 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:30 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:30 +0000
Files and hashes:         1: 3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl (hash: PaS5S+xWJ/65YRAKaH+PW2c9rcDZz5/k4lH2sII/Yng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:72:dc:e2:1f:ff:b0:14:96:97:81:7c:75:1e:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6c3dd8ddeffd9ae4c855c5f94838047dc9ad71
        Validity
            Not Before: Mar 29 10:01:30 2025 GMT
            Not After : Mar 30 10:01:30 2025 GMT
        Subject: CN=6be29c5fb0c0d708195420c0826c40158e59be56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:f2:9a:f2:c2:69:f9:47:c7:1a:20:56:69:
                    93:53:22:9d:f7:0e:75:40:94:56:7e:99:c8:60:c3:
                    24:d3:ab:34:f7:44:3a:ec:8e:bb:50:80:80:21:5a:
                    16:e7:10:a5:dd:0e:0c:2d:31:50:28:69:1c:64:d0:
                    0e:e5:e5:d1:d6:17:e7:cd:1b:f2:7f:d8:5f:b5:57:
                    d6:78:ee:c7:a3:d1:d7:48:81:fd:ae:28:f5:ca:a5:
                    1f:10:8e:e0:e9:a1:0f:22:05:87:41:fa:17:63:e9:
                    36:62:93:06:5b:e9:22:4d:5b:87:29:7e:4d:94:cf:
                    7f:68:4f:29:f6:bc:c5:e2:b1:4e:56:cc:86:54:6a:
                    72:b2:05:de:88:f7:95:79:4b:30:98:3d:cc:33:59:
                    cb:c0:21:f1:b8:41:2b:e0:4a:38:22:20:97:8d:9e:
                    f8:21:89:80:5f:5b:15:1f:9c:00:fd:f3:23:ae:5a:
                    7c:03:74:7a:50:02:bd:9a:6b:c9:0a:78:20:59:f2:
                    66:08:08:49:b0:26:b9:d8:c8:f0:1f:ec:6c:82:60:
                    0b:10:8e:c2:e9:15:d2:ea:34:9a:e8:d7:a3:0b:51:
                    05:5e:28:78:d2:71:c1:88:92:92:e8:89:fa:38:ef:
                    6f:d8:d2:b9:26:d1:05:86:f9:12:20:6d:3c:bf:e9:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E2:9C:5F:B0:C0:D7:08:19:54:20:C0:82:6C:40:15:8E:59:BE:56
            X509v3 Authority Key Identifier:
                keyid:DD:6C:3D:D8:DD:EF:FD:9A:E4:C8:55:C5:F9:48:38:04:7D:C9:AD:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/7935bb-b014-4255-9a0c-a2bc72b159d7/1/3Ww92N3v_ZrkyFXF-Ug4BH3JrXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:de:53:86:ed:13:e8:ca:0f:15:f2:1e:5b:9a:0a:2d:23:a8:
         af:96:f4:63:db:f2:e4:86:53:28:1b:1d:ca:fa:28:97:ac:6e:
         0a:01:10:a4:f1:78:e7:c5:56:f7:a6:cd:b4:3f:e7:d8:dd:fd:
         e9:b5:3c:00:d3:4c:a8:7d:0b:e4:0e:98:b3:c9:c3:b1:3d:d1:
         a7:43:a3:f2:44:8a:f4:22:82:31:41:be:6f:1d:a0:92:d9:cf:
         db:99:9f:ea:86:4f:19:bb:c3:c3:0a:f1:46:aa:59:0c:51:8b:
         00:5d:d8:79:e3:fc:b9:e1:09:24:e7:09:fe:4f:1c:6a:d6:6c:
         54:d2:ec:27:d7:e8:8b:94:ec:fe:6e:8e:18:f7:b1:56:30:3f:
         9c:8b:6b:43:4e:59:51:18:58:b2:fb:f3:a3:f3:59:34:cc:19:
         5e:d9:6e:22:6a:69:0d:22:3c:a3:af:ac:21:8e:00:99:3e:ae:
         6c:8d:ed:e4:b8:4e:23:1d:50:55:09:0a:f1:7e:4b:ca:ad:a3:
         20:c8:72:dd:d8:42:4d:c2:2e:cc:05:16:00:af:5f:2c:93:ef:
         86:f4:d5:2a:eb:25:d3:b7:b6:7d:04:5e:1c:43:d7:f3:c3:6f:
         7f:9a:3a:66:ad:b4:40:84:53:b6:71:d7:13:8e:c2:4c:0f:28:
         c9:1f:c8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:14:34 2025 by rpki-client