Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.mft
File:                     6iQrmqR01WYgQ3bp5Rk8LLY5SOY.mft (raw, json)
Hash identifier:          cK5nBT8fRL2hmm3u3Gw6XE/KvXfPvTFzqKJniG6ojWY=
Subject key identifier:   E7:81:E2:3A:42:F5:4F:36:30:86:0E:88:15:D6:95:AA:A8:6D:C1:31
Authority key identifier: EA:24:2B:9A:A4:74:D5:66:20:43:76:E9:E5:19:3C:2C:B6:39:48:E6
Certificate issuer:       /CN=ea242b9aa474d566204376e9e5193c2cb63948e6
Certificate serial:       018D2205F9629AABEF6C7FE979D8081BC9F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.mft
Manifest number:          014B
Signing time:             Fri 19 Jan 2024 14:00:33 +0000
Manifest this update:     Fri 19 Jan 2024 14:00:33 +0000
Manifest next update:     Sat 20 Jan 2024 14:00:33 +0000
Files and hashes:         1: 6iQrmqR01WYgQ3bp5Rk8LLY5SOY.crl (hash: B8dFFygBApmPcEqWvSVMlhPbt8Neg5ywZ8+XNXwmLek=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:22:05:f9:62:9a:ab:ef:6c:7f:e9:79:d8:08:1b:c9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea242b9aa474d566204376e9e5193c2cb63948e6
        Validity
            Not Before: Jan 19 14:00:33 2024 GMT
            Not After : Jan 20 14:00:33 2024 GMT
        Subject: CN=e781e23a42f54f3630860e8815d695aaa86dc131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6a:6b:02:7c:e3:12:41:80:81:2a:7b:3b:8b:
                    2b:3e:43:cc:67:06:68:79:e6:8b:22:60:96:e0:2f:
                    da:fe:c7:e4:19:5c:1e:e8:67:ff:d1:f2:0c:66:11:
                    0d:b6:fd:ab:33:33:a8:05:45:55:43:8c:32:0f:08:
                    0f:dc:9d:2f:89:86:74:9f:d0:77:3d:08:84:4e:21:
                    49:19:82:5a:13:25:53:38:fc:d5:bc:a7:76:c4:c2:
                    93:3f:fa:a3:e3:c9:7f:15:f0:c5:f1:2f:42:d3:84:
                    08:23:92:ad:fc:79:90:85:1c:c4:f4:d1:8b:e4:f6:
                    ef:95:59:c7:0c:e7:93:ca:fe:21:bc:6d:a0:ec:51:
                    53:9d:46:1e:c3:83:8f:d6:e9:55:9f:89:53:1c:f2:
                    bd:fe:e4:e7:2c:c3:ea:b1:26:c5:f0:1d:05:ac:89:
                    40:a3:1d:1d:3f:0e:f9:0d:2f:cf:c7:ff:56:4d:6e:
                    64:b1:78:01:a6:a5:02:36:d9:8b:2e:e3:3d:7c:c3:
                    ce:2f:13:e0:2e:70:3a:07:20:71:4f:66:bc:b5:88:
                    3a:19:fc:2c:3f:6d:40:a6:23:24:6f:08:4f:f5:f1:
                    fb:32:21:43:65:fe:e2:05:05:9b:1a:62:d8:0b:30:
                    4e:47:5f:7a:1e:6a:b4:95:90:ac:2f:7f:f7:96:88:
                    f1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:81:E2:3A:42:F5:4F:36:30:86:0E:88:15:D6:95:AA:A8:6D:C1:31
            X509v3 Authority Key Identifier:
                keyid:EA:24:2B:9A:A4:74:D5:66:20:43:76:E9:E5:19:3C:2C:B6:39:48:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/90509d-e2ee-4c41-8e3a-395847ed9112/1/6iQrmqR01WYgQ3bp5Rk8LLY5SOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:90:a7:4f:af:2c:74:29:cf:f7:71:06:7a:ad:4b:37:3b:86:
         a7:dd:40:c8:ce:98:2f:70:72:58:b6:c0:ba:e5:21:3f:ea:dd:
         55:35:18:f5:2f:03:b0:61:32:e5:43:7c:44:75:af:ac:c3:cd:
         ba:cb:93:2c:a8:00:95:b0:70:10:a9:cb:e4:d4:93:71:d8:91:
         50:dc:de:93:53:a1:6e:18:0b:f6:22:42:56:90:ee:53:6f:d3:
         23:41:c5:f1:5e:b2:fb:18:c2:16:0b:28:d7:0a:0b:5d:62:8a:
         a6:c4:d0:51:c5:01:cd:37:2d:75:8a:29:f8:62:4f:29:4e:8d:
         3a:83:31:00:40:07:35:7e:85:95:ac:f7:f6:4f:03:52:3a:95:
         7b:c9:9b:20:ce:77:3d:b2:c6:f7:3c:47:bb:20:d8:fa:82:ba:
         90:75:62:b6:51:75:03:15:2c:88:43:11:f5:47:b2:4c:93:52:
         0c:f0:ab:4b:05:c2:22:ad:ea:e4:60:9e:b0:82:29:23:62:ec:
         53:a0:b6:a5:3e:26:26:ae:a1:98:e8:62:5a:ce:f9:86:a6:f9:
         68:85:08:de:b1:8c:8a:fd:85:16:b4:7f:8b:c2:56:cf:56:e7:
         70:c1:3a:4d:7c:cf:f8:f4:0b:fb:1c:f2:a3:63:e2:0b:fc:1b:
         a1:28:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:58:03 2025 by rpki-client