Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
File:                     3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft (raw, json)
Hash identifier:          YfMlikdET4+V3odnxftU05rdheLgnw5489AUnuh8enE=
Subject key identifier:   78:7F:44:91:2D:1F:6C:46:C5:8C:D1:B3:E7:1D:9B:72:02:3C:CD:A8
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Certificate issuer:       /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial:       0193AB14024C96846392FF615407905A8764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
Manifest number:          0B23
Signing time:             Mon 09 Dec 2024 11:00:35 +0000
Manifest this update:     Mon 09 Dec 2024 11:00:35 +0000
Manifest next update:     Tue 10 Dec 2024 11:00:35 +0000
Files and hashes:         1: 3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl (hash: fdmhKQ5G+7CBKD0c+vNussSVMJJqXlLXMFXF3ernBko=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ab:14:02:4c:96:84:63:92:ff:61:54:07:90:5a:87:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
        Validity
            Not Before: Dec  9 11:00:35 2024 GMT
            Not After : Dec 10 11:00:35 2024 GMT
        Subject: CN=787f44912d1f6c46c58cd1b3e71d9b72023ccda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:29:84:dc:a4:0f:35:a1:7b:fc:66:5e:7f:
                    8d:d4:b9:f2:b8:95:79:80:73:5f:b4:9e:6f:09:a4:
                    b7:40:81:6b:c0:1b:ae:f0:8d:4f:16:01:73:08:9d:
                    19:75:7a:4c:b2:98:ef:b4:d4:04:51:94:f9:1f:d2:
                    03:a1:27:43:26:82:aa:06:e5:c0:70:f0:7c:56:43:
                    69:fb:b3:d9:5c:32:86:6c:41:d1:11:87:e2:c9:59:
                    f5:4f:c2:02:72:80:49:7e:61:f3:1c:54:fc:31:d2:
                    67:d4:47:67:3e:64:ff:a9:24:ec:e4:c2:14:a5:e0:
                    11:62:69:24:3c:1a:53:09:f7:80:9a:30:fa:93:2c:
                    6d:30:ed:0a:79:ca:c0:fc:27:be:69:a4:b2:d3:1d:
                    2f:a0:04:7b:29:e1:82:2a:d2:e1:fc:66:ef:8d:3c:
                    b3:45:98:00:13:b7:99:d7:24:58:37:76:ce:94:9a:
                    20:05:b0:2b:d9:96:9f:ea:09:b8:4f:23:8d:d4:f4:
                    59:8d:73:17:11:13:c8:68:cd:76:c6:5d:37:f2:d0:
                    13:3d:26:0c:23:aa:e8:15:5e:16:87:34:4e:97:e2:
                    ee:1f:f1:d1:60:41:5d:b7:30:5e:e5:a6:78:2c:04:
                    33:1f:02:5e:fa:91:02:e7:df:ce:8e:d4:08:11:4a:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7F:44:91:2D:1F:6C:46:C5:8C:D1:B3:E7:1D:9B:72:02:3C:CD:A8
            X509v3 Authority Key Identifier:
                keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:49:ed:a9:c4:b0:4d:31:e3:49:3b:ed:2c:50:12:c2:1e:39:
         0e:f6:77:6f:07:7b:d7:4a:0b:13:e3:7b:7d:ee:36:29:ed:c0:
         10:3f:5d:fd:0b:f5:46:60:b5:02:7b:bd:72:00:3c:4d:f6:96:
         fb:3d:24:1f:5d:bc:2d:52:50:8f:fc:c5:05:b9:cd:50:08:00:
         90:de:a5:f3:e2:14:0f:df:2d:9a:09:56:93:9b:c3:de:05:25:
         b8:38:e1:27:be:ba:85:56:77:0c:d7:d4:a7:9e:dc:c0:91:c0:
         9b:8e:ee:b8:59:f1:5b:77:90:f8:40:c9:5f:c4:ed:73:f8:43:
         39:67:d9:2e:a5:3e:b7:c9:a2:82:cd:90:03:ef:e7:6d:79:56:
         79:13:3c:e6:a7:c9:b4:b2:07:0f:e0:bc:f3:78:1e:39:7c:a1:
         cf:57:60:e1:c3:46:2a:d6:f9:c6:6d:08:e1:29:e8:f2:c8:7a:
         aa:a3:95:b0:35:a1:fc:4f:e0:a2:e0:14:5e:f4:f9:50:75:78:
         14:ae:97:7f:e4:61:5a:97:31:06:cd:39:0c:01:50:22:2c:41:
         1e:14:33:83:0e:0d:2a:a9:32:03:8d:78:13:17:9d:0d:26:4c:
         89:d1:81:a5:d1:c4:10:6a:d3:79:6d:8e:d9:68:0d:27:38:f4:
         47:e7:e0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:15:24 2025 by rpki-client