Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.mft
File:                     Atv3XVA9g429Z-8XXlY1wLANpFY.mft (raw, json)
Hash identifier:          K2ICskRUZJofJ46juAz3gS/pNYmMOkTua6OsUiohSng=
Subject key identifier:   A1:79:99:A0:05:CB:B4:07:23:66:77:89:28:EB:B2:11:2B:DD:A0:D9
Authority key identifier: 02:DB:F7:5D:50:3D:83:8D:BD:67:EF:17:5E:56:35:C0:B0:0D:A4:56
Certificate issuer:       /CN=02dbf75d503d838dbd67ef175e5635c0b00da456
Certificate serial:       0191BF7BACB8DD5F47DB626C07ABE721A105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Atv3XVA9g429Z-8XXlY1wLANpFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.mft
Manifest number:          0198
Signing time:             Thu 05 Sep 2024 00:00:39 +0000
Manifest this update:     Thu 05 Sep 2024 00:00:39 +0000
Manifest next update:     Fri 06 Sep 2024 00:00:39 +0000
Files and hashes:         1: Atv3XVA9g429Z-8XXlY1wLANpFY.crl (hash: 2Zoehzy+GqD/fTnuQnJb464pvC6WOVUSUzad40wNZhc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:bf:7b:ac:b8:dd:5f:47:db:62:6c:07:ab:e7:21:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02dbf75d503d838dbd67ef175e5635c0b00da456
        Validity
            Not Before: Sep  5 00:00:39 2024 GMT
            Not After : Sep  6 00:00:39 2024 GMT
        Subject: CN=a17999a005cbb4072366778928ebb2112bdda0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f9:28:15:14:d5:d3:16:0e:ac:f8:d1:ef:e1:
                    b7:09:a7:cd:d3:b5:70:8f:ef:b6:79:4c:e5:51:d4:
                    fc:f0:c7:ad:6f:58:aa:a0:81:94:b3:48:7f:62:f5:
                    1f:8c:bf:e3:1d:74:f2:18:aa:03:ac:8b:5d:fc:97:
                    84:1a:76:01:c1:b8:f0:00:b6:26:36:95:92:87:0f:
                    74:89:f1:be:ab:58:e5:42:7a:7d:f6:cf:a9:28:0e:
                    16:e3:6f:f7:24:19:da:d1:82:89:ce:a0:70:db:d1:
                    42:59:93:30:a4:39:9a:b0:dd:7e:73:0c:e7:b2:51:
                    00:98:2f:1b:77:f2:37:2a:a1:79:47:47:ad:dd:f4:
                    06:c3:22:e5:0d:63:43:93:7b:a1:a7:af:f9:99:1b:
                    9f:44:9c:24:eb:a0:b8:80:1e:c5:3b:23:05:d0:10:
                    4d:f7:bb:d0:38:1f:3b:dc:41:56:cc:3c:dd:57:f9:
                    de:e6:7c:f4:b1:c0:27:91:6a:2d:c4:43:72:38:a1:
                    e6:cf:da:09:2a:b0:30:93:3d:8f:28:1d:5c:c5:5f:
                    0f:5b:4b:7f:c7:75:ca:a6:4f:14:40:b8:a1:e2:ce:
                    ac:0a:be:85:20:81:a2:cb:fe:60:71:32:27:e4:39:
                    7a:49:a4:37:75:f5:a4:1c:e0:dc:1f:68:21:f9:b7:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:79:99:A0:05:CB:B4:07:23:66:77:89:28:EB:B2:11:2B:DD:A0:D9
            X509v3 Authority Key Identifier:
                keyid:02:DB:F7:5D:50:3D:83:8D:BD:67:EF:17:5E:56:35:C0:B0:0D:A4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Atv3XVA9g429Z-8XXlY1wLANpFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:10:1b:6e:aa:4c:22:26:a3:2a:e2:0c:30:63:51:ba:ae:b0:
         33:51:87:e1:99:0c:13:ff:20:16:b8:21:9f:fe:68:5c:c5:d5:
         6d:67:f2:bf:3f:14:9a:8b:35:d3:74:e5:f8:15:5f:77:84:bf:
         7f:aa:61:bc:7a:a9:c0:68:aa:4f:95:54:3c:e2:c8:53:63:2e:
         48:62:0b:ba:1f:ac:74:a0:97:ed:89:d8:5a:88:ae:01:86:e4:
         e9:26:00:c9:11:57:b7:b8:eb:87:2c:6a:7b:c0:85:8c:68:4f:
         64:d1:6f:1b:18:34:25:64:b5:39:f8:91:ed:6c:af:ae:91:b1:
         c9:90:f0:95:4d:82:36:78:8d:df:05:d5:48:22:f0:ff:bc:5e:
         5a:fd:d5:eb:87:63:35:42:8b:a2:a6:46:a3:c2:41:b9:a5:9d:
         67:f0:74:8d:89:c6:26:f8:d7:73:47:05:fc:de:43:64:71:1d:
         59:8b:c4:0e:3c:8d:18:4a:a3:6c:21:d7:ac:54:26:45:e6:10:
         cc:a7:51:89:d3:8d:ae:cb:c0:43:70:46:71:96:24:92:ce:66:
         66:34:6d:cb:73:3d:42:a2:1a:d9:ca:f9:c0:99:af:cb:06:3e:
         bc:0c:b9:4a:b9:7f:ce:60:10:1e:04:ed:b4:3e:19:a9:80:c0:
         35:2e:9e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:15:10 2025 by rpki-client