Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/dL28aP1NJWcr91Nv3BTM5t0TMOU.mft
File:                     dL28aP1NJWcr91Nv3BTM5t0TMOU.mft (raw, json)
Hash identifier:          8GzXsJ767+8R55JCJHFF2M/90R2TMyD7YX1ZhrHd+Xw=
Subject key identifier:   AC:12:6D:74:79:FB:34:CA:36:73:8C:9A:E9:AD:7A:51:E4:CA:83:78
Authority key identifier: 74:BD:BC:68:FD:4D:25:67:2B:F7:53:6F:DC:14:CC:E6:DD:13:30:E5
Certificate issuer:       /CN=74bdbc68fd4d25672bf7536fdc14cce6dd1330e5
Certificate serial:       086995C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dL28aP1NJWcr91Nv3BTM5t0TMOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/dL28aP1NJWcr91Nv3BTM5t0TMOU.mft
Manifest number:          092F
Signing time:             Tue 03 May 2022 07:00:59 +0000
Manifest this update:     Tue 03 May 2022 07:00:59 +0000
Manifest next update:     Wed 04 May 2022 07:00:59 +0000
Files and hashes:         1: dL28aP1NJWcr91Nv3BTM5t0TMOU.crl (hash: LngZKyPudZ55scEjQ2b5eFpfZwuYKyUv5wW8A56/3ZY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141137346 (0x86995c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bdbc68fd4d25672bf7536fdc14cce6dd1330e5
        Validity
            Not Before: May  3 07:00:59 2022 GMT
            Not After : May  4 07:00:59 2022 GMT
        Subject: CN=ac126d7479fb34ca36738c9ae9ad7a51e4ca8378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:5e:3e:b0:61:60:87:66:f1:52:87:8b:a7:
                    7a:f5:4f:49:7f:62:87:6f:11:92:16:8f:25:7c:4b:
                    f9:f9:33:88:e8:a6:6b:2e:95:9c:2e:04:15:f8:c2:
                    3f:42:ab:42:d2:38:ec:43:69:20:b6:f1:83:df:bf:
                    bb:69:4b:ec:7c:29:bd:f4:f9:92:87:5b:04:7a:94:
                    c8:7f:fc:78:7a:90:f3:e3:39:08:9b:4c:af:bf:ca:
                    f6:a4:f1:0c:ef:c9:51:d5:31:6c:29:aa:28:a6:93:
                    3f:7f:7d:05:6c:72:4a:9e:50:53:54:68:15:25:71:
                    7f:6f:3f:1a:f0:3a:ec:cd:f9:32:37:32:cc:c7:00:
                    b9:26:bb:72:32:07:68:38:09:f9:44:73:25:1f:88:
                    f7:90:77:ea:3a:e0:84:b0:6c:25:80:dd:48:4e:90:
                    dc:f4:f4:71:a6:82:0e:59:21:8d:12:86:8c:8c:08:
                    eb:9c:d0:19:3c:db:83:58:13:1c:ed:d8:b0:68:35:
                    5a:5b:b4:c4:b1:12:bd:c1:f0:09:fd:b2:cb:42:77:
                    45:09:f1:fb:a1:16:58:ae:82:0f:68:7d:1c:ee:dc:
                    99:f5:74:6e:91:a2:a0:25:d6:cf:8a:db:cc:cd:2b:
                    33:7c:56:7e:62:62:d4:d0:71:3f:0e:10:11:d6:51:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:12:6D:74:79:FB:34:CA:36:73:8C:9A:E9:AD:7A:51:E4:CA:83:78
            X509v3 Authority Key Identifier:
                keyid:74:BD:BC:68:FD:4D:25:67:2B:F7:53:6F:DC:14:CC:E6:DD:13:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL28aP1NJWcr91Nv3BTM5t0TMOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/dL28aP1NJWcr91Nv3BTM5t0TMOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/abd793-aaf5-43f4-a211-0b1e73b0ea81/1/dL28aP1NJWcr91Nv3BTM5t0TMOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3b:fa:d7:39:9d:9b:86:61:e8:6d:0b:d0:c0:60:f9:88:f0:
         0e:09:f9:46:5c:ab:02:b5:98:ea:c1:49:a1:67:07:17:39:9d:
         18:3f:ad:10:14:7e:ef:36:35:3c:8e:ab:6c:ea:67:23:35:16:
         61:2d:47:ef:f7:22:e2:a0:13:ec:b5:c9:c9:20:a2:15:d4:b4:
         54:cc:35:04:66:6e:8e:9a:a0:ae:43:6d:1d:3b:8e:0f:1f:bb:
         5f:24:ec:be:04:3c:12:b8:cb:fe:ef:35:d6:43:d3:92:c0:1a:
         0f:db:5d:16:7c:e8:d7:49:59:37:d9:de:46:0e:43:0c:9c:aa:
         e3:a5:55:46:e8:15:b4:a8:d3:e3:55:a1:8b:22:7d:9b:cd:2e:
         68:01:53:4f:67:19:05:99:ac:dd:8f:3a:a0:5e:c8:8a:5e:0e:
         6f:cb:25:d1:84:91:46:d6:7b:e8:b6:a5:f9:50:f7:e8:20:31:
         c4:0f:44:a9:57:2c:bd:a5:bc:8d:e7:6e:c3:05:d6:01:52:e1:
         52:c5:99:ab:92:91:0a:a2:3b:55:9b:cf:38:20:3b:72:7a:e5:
         7f:d0:8e:60:04:43:cb:ae:26:1c:e5:22:fa:3c:5f:78:ef:36:
         8a:33:74:47:4d:e8:ec:08:fb:29:2b:6b:63:a1:d5:67:67:57:
         7f:f9:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:46:37 2025 by rpki-client