Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.mft
File:                     DheA2BVCvjaq8H64jkhtBCcjQfQ.mft (raw, json)
Hash identifier:          4Fs4PbDNSmQHhNfDB6yvfdJ/S0SmXH6yWZ4y22B6IqY=
Subject key identifier:   8D:0E:A1:50:B3:AD:13:CA:CD:F2:F8:B8:04:08:02:2F:65:81:33:1F
Authority key identifier: 0E:17:80:D8:15:42:BE:36:AA:F0:7E:B8:8E:48:6D:04:27:23:41:F4
Certificate issuer:       /CN=0e1780d81542be36aaf07eb88e486d04272341f4
Certificate serial:       019415BB528F2E0169EF46762F0B577B819E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DheA2BVCvjaq8H64jkhtBCcjQfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.mft
Manifest number:          0A0C
Signing time:             Mon 30 Dec 2024 04:03:05 +0000
Manifest this update:     Mon 30 Dec 2024 04:03:05 +0000
Manifest next update:     Tue 31 Dec 2024 04:03:05 +0000
Files and hashes:         1: DheA2BVCvjaq8H64jkhtBCcjQfQ.crl (hash: wnmK2AKR7TLjlKfjNG2YTM76ptlgre3rlsuvRSWcKCk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:15:bb:52:8f:2e:01:69:ef:46:76:2f:0b:57:7b:81:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e1780d81542be36aaf07eb88e486d04272341f4
        Validity
            Not Before: Dec 30 04:03:05 2024 GMT
            Not After : Dec 31 04:03:05 2024 GMT
        Subject: CN=8d0ea150b3ad13cacdf2f8b80408022f6581331f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:99:49:87:b0:d1:91:01:7e:7a:23:17:27:69:
                    6c:88:cc:4a:a9:e6:aa:81:b5:69:9d:00:d7:6d:f2:
                    92:b2:92:13:8b:a7:cc:45:f5:db:d9:7d:04:c4:fc:
                    b1:b4:07:fc:54:83:51:54:44:94:de:c0:9b:0b:7c:
                    32:6e:e5:ad:2e:62:d2:3e:55:f2:46:8c:bd:ec:5a:
                    3c:ef:f0:cf:50:7d:3d:71:14:c1:aa:91:16:61:da:
                    d2:94:50:24:5c:4f:70:7e:d7:56:90:46:5a:bc:46:
                    9f:23:5e:89:4f:0f:78:59:b1:5d:20:f0:af:c8:48:
                    c0:6b:d7:4c:c7:a3:f5:77:46:67:47:5e:1e:0a:1f:
                    a5:21:cd:4d:01:dd:d6:ca:48:44:85:e7:ce:c0:f2:
                    99:a4:9b:47:01:27:23:3f:6f:6e:cb:4b:80:be:f5:
                    a1:e0:e2:79:a5:a9:8d:35:63:cb:0e:81:60:5b:1f:
                    94:4d:99:94:08:44:ce:7c:08:c5:81:4e:74:ef:be:
                    66:38:47:98:80:d6:10:74:15:4b:d0:54:d5:9a:aa:
                    a6:56:ce:66:0e:11:d9:bf:db:69:c8:c9:1a:dc:15:
                    79:ae:83:18:8e:1a:96:a4:dc:e5:ec:06:4d:55:03:
                    0e:76:32:1f:cc:31:0f:53:67:50:8f:96:88:cf:5d:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0E:A1:50:B3:AD:13:CA:CD:F2:F8:B8:04:08:02:2F:65:81:33:1F
            X509v3 Authority Key Identifier:
                keyid:0E:17:80:D8:15:42:BE:36:AA:F0:7E:B8:8E:48:6D:04:27:23:41:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DheA2BVCvjaq8H64jkhtBCcjQfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/278831-52df-4d3c-adb2-7360fc483a51/1/DheA2BVCvjaq8H64jkhtBCcjQfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f0:82:d3:79:b5:bc:84:5c:d1:dc:11:73:48:68:0c:46:45:
         cc:46:75:b7:99:50:37:73:8c:d3:b9:5b:94:c0:79:d8:c1:09:
         93:3e:fe:11:37:13:66:24:9f:d5:f7:a3:48:72:55:ac:d1:61:
         5b:d5:ae:5d:0e:ca:7f:4b:c1:c6:23:ee:c6:4c:8a:ab:bd:fc:
         56:33:61:30:ce:ea:99:5e:03:f5:27:f9:eb:23:3f:e8:d0:56:
         59:6d:7d:e2:b0:c5:b7:b1:14:8f:86:82:dc:e8:86:7d:de:94:
         bc:da:67:9d:18:2e:7b:35:20:77:bc:8d:88:97:0a:df:70:bf:
         69:a8:36:33:1f:3a:9b:36:ce:cc:fc:f9:ea:81:b1:07:c7:20:
         b6:c2:fc:99:73:16:67:b4:4b:39:98:5b:cd:21:59:77:b1:1f:
         08:0f:ab:04:66:1c:b6:48:9d:84:7f:ec:58:a7:2e:69:9b:e7:
         d4:d2:46:72:b8:41:a2:25:89:3b:9f:c0:61:80:28:ff:0d:11:
         e3:09:18:48:58:45:2f:5d:6f:27:08:eb:21:79:c2:9f:a6:17:
         ba:7c:cd:c7:26:90:f5:c3:b4:4e:2b:c6:56:4e:1d:20:90:6d:
         54:8b:a5:c7:50:4c:61:04:fe:49:2a:8f:68:9b:c0:7b:02:1c:
         92:ee:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:59:24 2025 by rpki-client