Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
File:                     mlTioC3EzxKTf8ybLqE7M0GggGE.mft (raw, json)
Hash identifier:          bPShpSzcpk1Sx1ik/T1ZtDwYaaOCCBy2pYOZ+VX9IXY=
Subject key identifier:   C1:54:ED:43:F3:11:B6:49:F9:02:F4:75:23:B5:09:44:71:55:E3:45
Authority key identifier: 9A:54:E2:A0:2D:C4:CF:12:93:7F:CC:9B:2E:A1:3B:33:41:A0:80:61
Certificate issuer:       /CN=9a54e2a02dc4cf12937fcc9b2ea13b3341a08061
Certificate serial:       0195E159E8BBEA804B1F73000C221903E59E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlTioC3EzxKTf8ybLqE7M0GggGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft
Manifest number:          0B54
Signing time:             Sat 29 Mar 2025 10:02:00 +0000
Manifest this update:     Sat 29 Mar 2025 10:02:00 +0000
Manifest next update:     Sun 30 Mar 2025 10:02:00 +0000
Files and hashes:         1: mlTioC3EzxKTf8ybLqE7M0GggGE.crl (hash: zdcVxVfavC8xp7k8+t6CcOkRMRRK8qVBNWcVvobOk0k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:e8:bb:ea:80:4b:1f:73:00:0c:22:19:03:e5:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a54e2a02dc4cf12937fcc9b2ea13b3341a08061
        Validity
            Not Before: Mar 29 10:02:00 2025 GMT
            Not After : Mar 30 10:02:00 2025 GMT
        Subject: CN=c154ed43f311b649f902f47523b509447155e345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:eb:70:8a:84:17:70:d3:a7:13:75:c5:21:
                    68:c7:bd:b3:b4:4f:cf:22:5f:a2:bc:f4:da:a5:b1:
                    b7:b5:f3:91:1b:01:cf:79:a2:47:31:ce:fb:f8:10:
                    50:8c:b4:62:39:74:29:cf:46:14:8c:68:fe:29:f8:
                    ec:dd:b6:6c:01:59:d2:95:cc:5e:2d:ef:ba:db:1a:
                    6a:4c:8a:ae:87:ee:6d:36:c4:f7:a3:44:bc:10:ca:
                    ec:0c:2a:9c:e4:b0:52:3e:60:99:26:ec:fa:99:a9:
                    d1:7e:e3:65:7b:a1:e2:15:4e:05:81:05:6a:7a:61:
                    fe:fb:1e:dd:26:18:6d:0a:a5:ac:2d:8b:c7:6e:41:
                    f9:b2:f8:2a:a4:42:1b:9a:9d:02:6b:9f:4f:97:31:
                    b7:6a:54:04:57:6b:84:fc:ca:53:0f:8a:10:ba:6e:
                    63:f3:27:f4:54:2c:89:60:bc:50:d3:d3:7c:f8:98:
                    eb:b5:f6:ec:36:69:4f:91:09:39:d6:37:37:56:aa:
                    08:0a:67:4c:7e:c3:fe:76:52:b7:cc:f8:45:42:15:
                    d6:1b:e0:d2:73:41:b5:b0:87:1a:fa:6c:1d:e4:55:
                    77:93:e2:53:59:1f:23:1d:ab:35:01:8d:50:b9:d4:
                    03:16:3e:de:78:5e:84:ac:67:29:89:e0:ac:5e:11:
                    4e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:54:ED:43:F3:11:B6:49:F9:02:F4:75:23:B5:09:44:71:55:E3:45
            X509v3 Authority Key Identifier:
                keyid:9A:54:E2:A0:2D:C4:CF:12:93:7F:CC:9B:2E:A1:3B:33:41:A0:80:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlTioC3EzxKTf8ybLqE7M0GggGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/662ccc-2a03-4432-a416-5d485959c8cd/1/mlTioC3EzxKTf8ybLqE7M0GggGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:5d:a8:04:73:42:b9:3c:8a:1c:d1:6e:19:26:ae:42:a2:
         00:79:22:c8:60:bf:83:ed:e8:a0:30:53:7d:f1:ba:0a:83:82:
         b7:15:e9:b0:2f:eb:5b:46:c9:c6:82:0d:c6:1f:e6:b1:68:e7:
         2d:96:50:a8:90:7d:05:12:9c:bd:3d:53:07:ae:f9:b0:69:f4:
         74:6c:f6:ba:ca:b4:bc:8e:a1:1a:f4:97:29:9d:2f:bd:ad:6e:
         13:f5:3e:92:2a:a6:3e:de:b2:78:e3:e9:6b:c7:be:34:c6:91:
         8e:2a:d8:29:0c:7b:54:40:c9:d8:9c:d2:0b:c0:ec:8e:b6:38:
         46:f2:85:e6:1d:23:a6:69:74:34:19:e5:6f:13:06:09:eb:79:
         0b:e9:33:72:c1:8c:5d:b8:e8:29:b6:0d:15:30:fa:f8:2c:87:
         2b:a0:5b:96:62:78:de:40:c5:ca:b9:17:f9:81:4a:4b:cb:7a:
         3c:48:6f:8e:bc:cd:e8:c1:2b:f8:84:c3:58:a7:75:23:af:75:
         7c:88:f5:f1:53:7f:07:0b:c1:13:1f:ab:8c:c5:b4:6a:f2:18:
         11:ad:35:f0:ac:72:19:cd:74:ae:92:77:df:bc:f3:48:35:13:
         da:51:62:dd:cd:96:f9:5a:1d:ce:c0:5d:99:b2:17:1d:cc:44:
         19:68:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:30 2025 by rpki-client