Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c87961-30ce-40e2-8e4c-709fa8abcecb/1/FWSdt6C3K6OwTEFXBtQrdV7xyoo.mft
File:                     FWSdt6C3K6OwTEFXBtQrdV7xyoo.mft (raw, json)
Hash identifier:          QjMlTHWcsRRZceG03sb7Eg6FPnNeGd+sCPgw5YKGP1k=
Subject key identifier:   24:75:DB:EB:AC:4C:EE:83:25:AB:56:E7:6E:70:66:9B:38:49:67:2C
Authority key identifier: 15:64:9D:B7:A0:B7:2B:A3:B0:4C:41:57:06:D4:2B:75:5E:F1:CA:8A
Certificate issuer:       /CN=15649db7a0b72ba3b04c415706d42b755ef1ca8a
Certificate serial:       0191D63BA0976F6466ABF017DEC2801BB699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FWSdt6C3K6OwTEFXBtQrdV7xyoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/c87961-30ce-40e2-8e4c-709fa8abcecb/1/FWSdt6C3K6OwTEFXBtQrdV7xyoo.mft
Manifest number:          03F0
Signing time:             Mon 09 Sep 2024 10:01:57 +0000
Manifest this update:     Mon 09 Sep 2024 10:01:57 +0000
Manifest next update:     Tue 10 Sep 2024 10:01:57 +0000
Files and hashes:         1: FWSdt6C3K6OwTEFXBtQrdV7xyoo.crl (hash: Ft/3XrdeQgMR4LcweW0yAtwv3cRwYgVmJDxAWC+02cg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d6:3b:a0:97:6f:64:66:ab:f0:17:de:c2:80:1b:b6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15649db7a0b72ba3b04c415706d42b755ef1ca8a
        Validity
            Not Before: Sep  9 10:01:57 2024 GMT
            Not After : Sep 10 10:01:57 2024 GMT
        Subject: CN=2475dbebac4cee8325ab56e76e70669b3849672c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:ba:2d:13:96:e0:3d:8d:c2:1a:c8:f5:3d:
                    9a:bd:a0:72:a4:f8:cb:c0:c9:c9:af:21:9d:9a:86:
                    71:14:0d:60:a3:fc:44:7d:40:ff:e0:f3:9c:8a:7e:
                    2f:32:93:5e:d3:a7:46:bf:f2:b4:ca:f9:3f:d8:18:
                    bf:3c:73:61:06:54:5a:a3:6e:80:4e:b6:ff:3a:8a:
                    33:63:84:b2:3f:6c:de:4b:64:15:b5:73:07:3d:a1:
                    db:61:bd:6c:44:ad:d0:31:2a:c9:34:12:67:9c:76:
                    4d:06:a7:7f:b9:79:55:63:48:26:c7:71:e0:c1:a1:
                    01:a3:33:b7:44:a2:89:bc:d6:2c:60:76:e0:93:6e:
                    27:90:08:39:81:92:b1:cb:63:2c:72:2c:e5:8d:55:
                    fa:e2:08:70:03:f6:c8:b2:32:96:fa:05:5a:89:b3:
                    9d:be:53:00:8b:79:26:15:81:42:19:41:6d:c1:35:
                    7c:b0:34:33:30:dc:17:ae:37:be:93:9b:0d:8f:ea:
                    74:cc:db:32:da:7a:bf:68:0f:43:55:1a:a4:56:4f:
                    f3:7c:07:fb:64:c2:a4:83:26:e3:84:d8:30:7f:04:
                    1d:dd:b2:b7:a8:af:b1:74:c4:4d:fd:95:b5:17:e3:
                    29:0b:47:47:98:67:a1:13:b6:0d:87:fa:78:dd:1a:
                    18:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:75:DB:EB:AC:4C:EE:83:25:AB:56:E7:6E:70:66:9B:38:49:67:2C
            X509v3 Authority Key Identifier:
                keyid:15:64:9D:B7:A0:B7:2B:A3:B0:4C:41:57:06:D4:2B:75:5E:F1:CA:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWSdt6C3K6OwTEFXBtQrdV7xyoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c87961-30ce-40e2-8e4c-709fa8abcecb/1/FWSdt6C3K6OwTEFXBtQrdV7xyoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c87961-30ce-40e2-8e4c-709fa8abcecb/1/FWSdt6C3K6OwTEFXBtQrdV7xyoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2c:b3:a1:80:46:0b:83:9c:eb:e2:c2:ab:60:a9:d0:98:76:
         21:26:de:ab:5f:f8:e1:f6:16:3c:2d:47:f1:d9:8a:6b:c3:da:
         31:c7:9a:d3:d5:86:d8:69:d3:6c:c3:9a:c0:4f:dc:cb:92:14:
         72:a3:fa:bd:cf:53:9f:6b:d4:1d:ae:36:ea:cc:9f:e8:69:cf:
         ca:24:37:48:b8:af:71:6d:68:a0:cc:33:f6:0f:2e:7d:98:89:
         23:7a:92:43:37:ff:3e:4a:5b:dc:b2:4f:60:42:fc:c0:64:09:
         05:61:4b:d6:f7:83:fc:aa:50:5d:9c:dc:6d:72:14:67:ab:ed:
         03:5f:fe:d2:1b:4c:38:42:b4:56:ca:88:ee:e2:09:1a:79:b6:
         1f:b3:23:90:bc:b8:22:a8:7a:e2:32:f9:ea:01:7f:09:13:82:
         70:51:8a:e5:31:b3:c2:92:93:42:d7:9e:e1:eb:d8:1c:80:06:
         a1:6b:a1:38:65:e7:b4:77:1a:dc:6c:8c:75:32:b7:72:91:a7:
         34:33:6d:8e:be:55:bc:04:e0:f7:4b:11:2e:6d:99:30:50:5b:
         77:27:9b:f4:95:6b:06:e9:2b:7a:f6:0d:3d:64:0a:2b:8d:62:
         5f:1f:1b:53:72:4f:2e:b1:c6:79:f3:86:77:c2:08:af:da:69:
         01:12:80:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:32:07 2025 by rpki-client