Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
File:                     0elU3oMurd0srwpAxtM-8RiJlLw.mft (raw, json)
Hash identifier:          3T4HCTWnAn32A5h329Qmh2bPSkBToe6/4Z0xtfPvccY=
Subject key identifier:   1E:27:28:60:81:9B:A5:57:6E:E4:C1:12:1F:DA:D8:10:0F:EB:4D:DC
Authority key identifier: D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC
Certificate issuer:       /CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
Certificate serial:       01939457C16F5B3B75929A44F1AC360F059E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft
Manifest number:          0488
Signing time:             Thu 05 Dec 2024 01:03:19 +0000
Manifest this update:     Thu 05 Dec 2024 01:03:19 +0000
Manifest next update:     Fri 06 Dec 2024 01:03:19 +0000
Files and hashes:         1: 0elU3oMurd0srwpAxtM-8RiJlLw.crl (hash: C3PN7KLxKlT1kWAWZdR0ScD4u7QuLKsaVe4Z7lJm+jQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:94:57:c1:6f:5b:3b:75:92:9a:44:f1:ac:36:0f:05:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1e954de832eaddd2caf0a40c6d33ef1188994bc
        Validity
            Not Before: Dec  5 01:03:19 2024 GMT
            Not After : Dec  6 01:03:19 2024 GMT
        Subject: CN=1e272860819ba5576ee4c1121fdad8100feb4ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:ab:98:20:1d:b6:86:64:c3:70:b7:13:13:
                    6f:04:a8:53:77:cc:15:b5:b9:f0:52:ca:50:d7:eb:
                    17:2e:85:e2:e9:40:22:35:3c:db:4a:24:a9:72:02:
                    a1:1e:6e:5b:25:7d:83:15:f9:d0:14:16:9a:52:ec:
                    53:c0:10:5d:e8:28:04:01:c9:f6:ac:d9:b4:14:cd:
                    77:5b:51:3c:a0:dc:e1:84:97:6b:72:98:9c:55:22:
                    d9:ac:33:df:27:92:94:cd:66:6c:60:6f:61:88:c9:
                    45:1e:2a:80:7f:f3:6b:65:d3:f1:15:94:ca:ff:f8:
                    ed:07:a7:fa:f7:ae:8a:be:15:8a:bb:71:6c:8c:ca:
                    bc:46:f1:f7:33:18:af:05:51:4d:b8:fc:c2:f2:a0:
                    13:5c:cf:70:90:fc:62:03:ef:2b:60:90:7a:cc:1c:
                    89:e6:3b:84:af:3a:a6:20:26:f1:ab:ce:f7:02:b3:
                    42:be:d4:83:b7:c6:88:60:bd:28:df:9c:a5:7c:3d:
                    1f:cd:b0:bd:94:3f:96:a5:00:87:d5:60:f7:7f:a4:
                    c0:e2:2c:00:84:e1:13:c0:77:90:58:39:5a:8c:71:
                    5d:b6:d3:8a:85:05:66:7e:75:a5:e9:db:c4:db:f6:
                    ef:33:4d:e6:46:a8:cd:46:77:9f:3d:55:68:8b:75:
                    ca:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:27:28:60:81:9B:A5:57:6E:E4:C1:12:1F:DA:D8:10:0F:EB:4D:DC
            X509v3 Authority Key Identifier:
                keyid:D1:E9:54:DE:83:2E:AD:DD:2C:AF:0A:40:C6:D3:3E:F1:18:89:94:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0elU3oMurd0srwpAxtM-8RiJlLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/2a0d1e-c2fa-4a20-934c-b9ccd9a2b4bb/1/0elU3oMurd0srwpAxtM-8RiJlLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:7e:07:49:d3:1a:7f:26:9c:99:6e:06:f5:61:66:e1:f5:f5:
         6e:77:e4:6f:fa:70:2c:2d:71:60:93:d3:b5:ae:cd:4b:90:03:
         56:3b:56:1a:75:46:94:93:5d:60:d1:39:e6:62:ab:f9:c6:fd:
         a0:58:f7:5e:fc:63:d7:2a:8d:39:f4:b3:12:87:5b:0e:b9:4a:
         44:43:90:d9:5e:0d:3d:58:9b:23:a9:be:d5:e1:5f:a5:47:2f:
         12:ce:82:39:63:d6:65:3a:39:f2:8a:7e:7c:af:86:ea:5e:b7:
         63:69:da:cb:3e:94:bd:e5:c0:99:ec:46:0f:eb:0b:f7:c5:68:
         a7:82:d5:60:7f:f5:35:b1:5b:4a:f4:58:d7:fb:cf:1e:45:9e:
         5c:d0:45:48:a6:8e:55:6e:d9:08:ed:80:7b:3b:d7:9a:82:ed:
         9f:66:a7:39:68:b0:af:94:7d:38:3f:0b:7f:8f:45:44:da:b6:
         9f:d7:70:5a:be:6e:38:f0:5d:e1:78:78:76:af:a5:e5:b5:56:
         01:ef:97:fa:16:a4:e8:bb:22:dc:9b:24:e0:36:14:48:44:2b:
         6b:b2:83:e4:97:f0:e4:60:3c:25:6b:cb:c7:ac:67:2c:b1:5b:
         41:57:0c:2a:ec:8c:5c:e8:27:b1:f4:ee:fd:33:a1:e7:e7:3a:
         48:fa:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:31 2025 by rpki-client