Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
File:                     0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft (raw, json)
Hash identifier:          D1rcxZ3wTFGrrfx71bf+1gPZfDXVOeDO1kRqSNUP2KE=
Subject key identifier:   61:5F:7B:9D:F4:E2:AF:0A:29:7C:A6:31:8D:93:C9:98:AF:82:0A:B5
Authority key identifier: D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1
Certificate issuer:       /CN=d08db08e1338a579ad3789535fa73a5e54511ff1
Certificate serial:       0195E046875AC29F85D825D161B32187219C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 05:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:13 +0000
Files and hashes:         1: 0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl (hash: OjYrzQ44jfTBzsmdwZLIU6Xz8bhji/+e+t6SdK3ia/c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:87:5a:c2:9f:85:d8:25:d1:61:b3:21:87:21:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08db08e1338a579ad3789535fa73a5e54511ff1
        Validity
            Not Before: Mar 29 05:01:13 2025 GMT
            Not After : Mar 30 05:01:13 2025 GMT
        Subject: CN=615f7b9df4e2af0a297ca6318d93c998af820ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:46:c3:01:19:4d:80:2b:80:03:f5:6d:46:d9:
                    02:a8:e7:9b:91:11:bc:69:60:88:9d:96:ef:f1:23:
                    08:aa:11:b4:17:3a:a9:d8:ed:9b:a5:ca:d4:52:d3:
                    f7:a2:73:9a:bb:e5:83:73:46:85:71:32:41:c3:af:
                    7c:b5:92:dc:1f:d8:ea:db:5b:06:c1:c3:3d:67:a5:
                    c8:a9:d9:50:36:41:63:66:82:64:5f:cf:dd:78:1c:
                    65:eb:7f:a8:7d:e1:98:3f:92:16:52:57:0c:5d:6e:
                    b2:06:75:40:47:39:9f:3c:32:82:2e:ce:02:ba:df:
                    99:b4:cb:05:49:81:57:c2:8f:20:d4:27:4c:c2:b4:
                    1d:0c:6e:fe:cc:e8:3b:ea:ef:ca:75:95:1d:8b:5e:
                    89:70:99:48:2b:2b:56:61:67:c2:76:db:3b:8c:14:
                    62:43:ab:c1:89:a9:cd:30:73:26:b9:fe:16:df:21:
                    01:69:1f:06:19:29:3a:57:77:9b:f5:e0:80:00:38:
                    82:82:6a:e8:27:7a:34:31:5e:c2:9b:09:30:12:a7:
                    55:2d:fe:33:b9:28:b3:d7:cc:58:84:2f:12:d3:71:
                    af:33:6e:96:fa:77:3c:bf:f9:52:c6:5f:b0:cc:e7:
                    6c:20:f9:50:dd:07:4a:32:79:26:54:34:fa:b8:38:
                    27:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:7B:9D:F4:E2:AF:0A:29:7C:A6:31:8D:93:C9:98:AF:82:0A:B5
            X509v3 Authority Key Identifier:
                keyid:D0:8D:B0:8E:13:38:A5:79:AD:37:89:53:5F:A7:3A:5E:54:51:1F:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2wjhM4pXmtN4lTX6c6XlRRH_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2b2cb3-ccb6-41e0-89bc-1b760451dac8/1/0I2wjhM4pXmtN4lTX6c6XlRRH_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:75:44:b5:2b:69:cc:13:5b:d0:1a:57:4c:2d:ab:56:d1:6f:
         40:a4:6a:41:62:80:36:5f:ff:c8:37:2e:42:30:cd:b7:53:c4:
         c8:a2:4c:aa:b5:d8:ca:5b:ec:90:aa:42:e6:8f:2a:8b:9a:18:
         ce:44:74:e9:c8:ab:4d:a1:98:dc:0e:c3:e4:0a:bf:c6:51:49:
         f3:19:00:f0:b8:dc:ff:f8:23:53:d9:6d:c2:88:51:72:6e:3e:
         23:93:22:48:da:70:df:af:bc:55:44:41:25:9e:7d:05:d7:e0:
         ea:50:77:01:61:77:4a:1d:df:d7:45:df:c6:98:21:bc:6e:9d:
         72:43:e9:55:fc:81:a2:07:7b:a5:bc:b0:33:ce:21:f5:ed:09:
         9f:59:e0:96:3c:6f:95:a8:8b:48:1f:8b:51:04:29:c5:af:b8:
         fd:70:c7:48:86:21:06:b7:6c:e1:8e:31:f6:b0:2f:fb:37:1e:
         cc:d0:86:db:cc:ca:b1:cc:11:c0:33:2c:80:2e:01:d7:26:ed:
         82:88:6a:58:06:4c:a9:96:25:bd:97:92:dd:90:db:fb:f1:f4:
         28:ab:e7:c1:7a:39:fc:8e:d5:08:4b:c0:ca:f2:da:a9:08:8c:
         d8:f9:95:cc:1b:37:ba:4d:99:b9:b8:d5:60:3a:cb:9a:ee:1d:
         74:50:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:53 2025 by rpki-client