Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft
File:                     Fxdwd73DVA6sRor-xpZBBYmX8-I.mft (raw, json)
Hash identifier:          WbXNni+y6DNBfNQ/gsyu72Fo+5HKHyd8goK6h4gJ/+Q=
Subject key identifier:   9F:CB:18:2F:77:FF:3A:E6:83:26:2D:D1:02:20:A7:99:C5:C1:48:E3
Authority key identifier: 17:17:70:77:BD:C3:54:0E:AC:46:8A:FE:C6:96:41:05:89:97:F3:E2
Certificate issuer:       /CN=17177077bdc3540eac468afec69641058997f3e2
Certificate serial:       0190FF6F6C4C811717FA17722354AEAC44ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxdwd73DVA6sRor-xpZBBYmX8-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft
Manifest number:          0D
Signing time:             Mon 29 Jul 2024 17:00:10 +0000
Manifest this update:     Mon 29 Jul 2024 17:00:10 +0000
Manifest next update:     Tue 30 Jul 2024 17:00:10 +0000
Files and hashes:         1: Fxdwd73DVA6sRor-xpZBBYmX8-I.crl (hash: 2ws7D+Xv/PYerQCf69Ps2X10MNVZzo8+dCKvV3+jRT8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ff:6f:6c:4c:81:17:17:fa:17:72:23:54:ae:ac:44:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17177077bdc3540eac468afec69641058997f3e2
        Validity
            Not Before: Jul 29 17:00:10 2024 GMT
            Not After : Jul 30 17:00:10 2024 GMT
        Subject: CN=9fcb182f77ff3ae683262dd10220a799c5c148e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:d1:30:7f:df:45:29:1f:ef:b4:cb:8e:b6:
                    c9:3c:9a:99:3b:06:8e:bb:e8:33:19:4f:ba:4a:b6:
                    96:f2:ee:a0:39:03:79:02:72:53:22:b7:5c:01:e9:
                    fb:0a:fd:c2:af:81:42:0e:58:73:72:c7:98:55:dd:
                    43:7d:d7:6b:5e:5d:f9:48:f6:b6:bc:6b:d4:97:e2:
                    9a:b5:68:fa:e4:ed:26:2e:52:8d:12:f5:8d:ea:e2:
                    ed:02:e2:20:c1:5c:fa:38:cf:ef:5f:2c:2b:52:3b:
                    fd:bd:23:cd:b4:1f:85:17:d9:3f:3d:e3:68:54:f0:
                    db:74:8a:9a:8c:30:2e:66:ba:88:06:80:ed:84:a7:
                    4a:7b:88:ec:0e:d2:24:57:e4:da:47:a1:8e:40:2e:
                    9f:76:34:89:29:df:21:4e:e6:34:6c:b0:9f:07:4a:
                    72:de:21:15:b7:f9:7b:18:27:85:d0:e0:d0:00:4f:
                    3e:d9:a9:e7:5d:1d:e1:16:7a:17:d9:ba:60:ff:e4:
                    fe:3e:bb:ef:02:a6:60:8b:5b:0e:f1:1c:8d:71:09:
                    56:c7:19:7d:ba:36:3f:83:9c:3a:ed:10:53:00:6a:
                    11:8f:ef:cf:9f:30:d4:52:23:57:0c:ad:49:02:47:
                    7a:29:d6:ab:6c:27:41:c3:bb:5e:74:b1:fa:3d:3f:
                    d7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CB:18:2F:77:FF:3A:E6:83:26:2D:D1:02:20:A7:99:C5:C1:48:E3
            X509v3 Authority Key Identifier:
                keyid:17:17:70:77:BD:C3:54:0E:AC:46:8A:FE:C6:96:41:05:89:97:F3:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxdwd73DVA6sRor-xpZBBYmX8-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0aff22-ecf2-4617-8fea-43586778600b/1/Fxdwd73DVA6sRor-xpZBBYmX8-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:c8:37:b7:42:b0:97:a3:be:d5:04:22:d4:d4:bc:29:fc:
         27:bb:6e:6e:7b:be:97:3a:75:1a:f0:ad:83:0d:cb:2f:a6:48:
         8e:26:ef:64:31:4e:95:eb:b9:83:3b:fd:09:48:19:60:64:59:
         29:ce:0a:1f:f7:64:8e:8b:cb:46:72:06:cb:d3:05:9e:01:d0:
         23:99:54:f1:22:04:1e:59:4e:4c:9b:0b:df:5c:d2:1a:a0:27:
         5f:fa:c6:ee:54:ba:06:34:e5:9f:2b:ef:d4:92:d8:58:b9:f4:
         f5:1f:0e:90:c1:36:1a:86:54:1b:34:f9:46:63:e1:4c:aa:66:
         10:73:a0:68:12:dc:21:72:71:e5:a9:a1:47:a3:11:04:56:51:
         18:b8:16:df:42:83:3f:09:cf:5a:30:65:69:41:6f:8c:99:c0:
         c3:79:0b:de:e7:36:1a:9e:f9:ea:58:7a:67:5f:7b:c0:ed:04:
         89:2c:cb:b9:68:1b:c5:3f:fc:48:85:82:ce:7e:ed:26:df:ee:
         62:c2:37:20:06:63:8c:e1:56:60:e4:7b:f8:96:3f:87:1f:d8:
         c7:84:a0:2b:72:67:b8:04:59:cc:40:68:1b:22:72:8e:50:18:
         a3:85:b7:21:6c:f0:11:1d:d4:ec:e0:61:ef:c3:4d:17:e4:d8:
         5e:f3:3e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:34:24 2025 by rpki-client