Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/L9XXanm6KQxBItgHxb5ekmgKKwU.mft
File:                     L9XXanm6KQxBItgHxb5ekmgKKwU.mft (raw, json)
Hash identifier:          b/slmWC9FMDM2z7duiUtk5zxDwWLlp+flHfCcxNyx8c=
Subject key identifier:   D7:65:A5:56:3A:00:13:5C:40:A3:A0:B5:04:84:19:B9:B2:2A:5C:F5
Authority key identifier: 2F:D5:D7:6A:79:BA:29:0C:41:22:D8:07:C5:BE:5E:92:68:0A:2B:05
Certificate issuer:       /CN=2fd5d76a79ba290c4122d807c5be5e92680a2b05
Certificate serial:       018DEA03C241CA946B09E2BA0F22482386FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L9XXanm6KQxBItgHxb5ekmgKKwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/L9XXanm6KQxBItgHxb5ekmgKKwU.mft
Manifest number:          0802
Signing time:             Tue 27 Feb 2024 10:02:11 +0000
Manifest this update:     Tue 27 Feb 2024 10:02:11 +0000
Manifest next update:     Wed 28 Feb 2024 10:02:11 +0000
Files and hashes:         1: L9XXanm6KQxBItgHxb5ekmgKKwU.crl (hash: RTpzO7NUwenWDI3c54+fhFKWJN7zSIQ1pvAT6SIynTg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ea:03:c2:41:ca:94:6b:09:e2:ba:0f:22:48:23:86:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd5d76a79ba290c4122d807c5be5e92680a2b05
        Validity
            Not Before: Feb 27 10:02:11 2024 GMT
            Not After : Feb 28 10:02:11 2024 GMT
        Subject: CN=d765a5563a00135c40a3a0b5048419b9b22a5cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f5:de:eb:56:8a:78:7a:75:f2:45:36:fb:f5:
                    4d:71:73:31:85:90:66:73:5b:a9:1d:7f:be:00:9b:
                    43:a2:8e:fc:f4:65:bb:09:0d:8d:ac:ef:04:df:ac:
                    f2:cc:98:72:85:82:44:e2:93:07:2f:0a:6e:4c:3b:
                    23:f7:09:ae:1b:2f:dd:4a:d4:ba:db:11:42:9c:7e:
                    09:78:16:eb:db:fe:3c:88:5f:22:4e:3a:61:e8:9b:
                    cc:30:ef:6e:dc:f3:c4:93:ac:e9:77:01:fe:12:3b:
                    a4:95:41:ab:16:ae:86:59:5d:52:43:8c:c3:e7:06:
                    bb:e1:40:32:67:8b:25:43:bf:c3:ec:34:aa:61:01:
                    3d:f4:95:af:eb:e6:64:54:93:54:8f:a3:78:8f:47:
                    fa:4c:ac:c5:ac:01:73:0b:67:19:2a:9c:f3:46:55:
                    de:04:97:49:3c:b2:ab:d5:20:f4:da:db:1b:b1:18:
                    4d:29:e1:db:db:cc:4c:3c:72:0c:ef:f2:b1:81:0f:
                    d2:47:98:22:5c:6f:24:c2:c0:d4:a3:e8:de:7d:23:
                    c0:be:88:d2:1f:ea:1c:95:32:cd:18:59:1e:66:48:
                    b0:72:81:01:57:da:54:36:ef:93:fc:12:1c:f7:6b:
                    10:f7:da:c5:9c:bf:e1:85:c5:49:24:b7:41:94:70:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:65:A5:56:3A:00:13:5C:40:A3:A0:B5:04:84:19:B9:B2:2A:5C:F5
            X509v3 Authority Key Identifier:
                keyid:2F:D5:D7:6A:79:BA:29:0C:41:22:D8:07:C5:BE:5E:92:68:0A:2B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L9XXanm6KQxBItgHxb5ekmgKKwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/L9XXanm6KQxBItgHxb5ekmgKKwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/6a14c0-523c-47ce-92d4-03b896d68112/1/L9XXanm6KQxBItgHxb5ekmgKKwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:a8:fd:ec:b5:3e:bd:5e:f3:8a:ef:f7:85:1e:73:cc:98:09:
         a9:0c:94:26:10:ce:73:73:8b:08:93:5b:bd:46:65:fa:b2:3a:
         68:60:ed:18:29:47:8f:d5:3b:99:e5:f0:6d:9d:ab:c8:ca:46:
         ed:54:c8:e3:12:91:51:c1:4b:b8:03:5b:b2:4a:ca:a4:bc:98:
         2d:87:34:9b:5c:14:23:be:da:2c:a3:6a:6f:7f:7f:4d:5a:47:
         41:9a:f8:39:93:28:2d:6d:9f:b9:c8:74:e5:4a:99:04:f0:cd:
         e1:4f:22:0d:f4:3d:29:87:73:5c:ba:f2:60:94:4f:ee:e5:68:
         13:ea:88:5b:17:60:55:66:e8:40:ee:c7:f6:27:59:52:f6:02:
         61:c7:af:90:a1:f3:f0:a2:b5:4b:e6:e8:d8:48:b7:49:d8:fb:
         35:50:e9:6a:35:d7:a5:2a:ab:81:8c:a0:dc:5f:37:01:11:c3:
         7e:db:44:c1:73:09:e1:9d:a3:20:2c:d7:ba:92:c7:2a:14:5b:
         4a:ad:bb:88:77:b4:e0:43:19:9a:19:9c:1d:ca:a9:cb:63:03:
         3c:9e:dc:c0:04:c0:11:f0:04:f1:ec:46:af:05:28:d4:d9:f6:
         59:b8:c2:37:1b:26:f6:1d:ba:08:f5:3e:76:d4:25:05:b6:ba:
         a4:ce:33:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:59:42 2025 by rpki-client