Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
File:                     Oexx3D1ozej5B3069mdRwp_O6kw.mft (raw, json)
Hash identifier:          QAcFyfLG2TgnVxRH/C5Xxhp07pvaN9b9K9X2TjXwkAY=
Subject key identifier:   C5:CF:1A:07:A4:9E:50:E2:2D:3D:D0:4F:81:71:16:E8:F5:02:20:43
Authority key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Certificate issuer:       /CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Certificate serial:       0194BBCE7F7F8728AD286BE570EF7A8B22A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
Manifest number:          0784
Signing time:             Fri 31 Jan 2025 10:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:59 +0000
Files and hashes:         1: 5MBvIRiYFms3iGBeHF3RQe9ll34.roa (hash: ZOt4HY8JzWPIwKbCM0yXoS+siw4USQmatYhxT9gEU9M=)
                          2: Oexx3D1ozej5B3069mdRwp_O6kw.crl (hash: G4XZ91EtBp0vZmrKcTf5k9PlzQOuGDZ3JVTQ3PxRAm8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:7f:7f:87:28:ad:28:6b:e5:70:ef:7a:8b:22:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
        Validity
            Not Before: Jan 31 10:00:59 2025 GMT
            Not After : Feb  1 10:00:59 2025 GMT
        Subject: CN=c5cf1a07a49e50e22d3dd04f817116e8f5022043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:32:ae:cf:cf:b7:3f:21:2b:6f:93:c8:46:
                    54:df:e6:ac:16:ca:89:3f:5e:6e:8d:fb:db:27:05:
                    f3:32:76:f2:48:20:ad:ab:20:23:da:de:39:94:5d:
                    0e:8e:d4:19:a8:55:c2:73:ba:b3:95:30:62:5a:d0:
                    0a:4a:2b:0f:7b:28:c3:d7:3e:3d:a3:8d:a3:6b:2e:
                    24:38:db:c6:6c:fd:20:59:93:c7:9f:e3:e5:4c:90:
                    59:60:6e:7c:de:c0:af:c3:7f:9a:f2:60:38:7e:9c:
                    73:f5:da:78:59:ba:aa:ff:89:20:3f:bd:b0:4a:ab:
                    7e:5c:34:33:a8:42:be:46:38:5a:99:5a:d1:d0:4e:
                    b4:91:5d:31:db:f5:15:4d:56:2d:63:a2:34:86:b1:
                    5c:bc:37:db:0f:01:30:34:34:a4:65:7a:6f:74:24:
                    16:7c:23:d5:28:c6:bd:17:c2:c0:26:60:56:d0:7b:
                    4b:06:89:0a:d3:2f:de:fc:83:d2:b1:cf:bc:e9:00:
                    34:71:a8:81:e1:44:97:6c:fb:d7:38:e3:67:b9:22:
                    55:9c:48:d1:d2:07:cc:24:a4:25:48:14:1d:8f:d8:
                    9a:d3:32:a4:a7:f8:8c:95:51:ea:88:7d:53:c6:af:
                    f7:89:3c:e2:4f:b7:7a:2b:94:37:86:50:1d:6f:28:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CF:1A:07:A4:9E:50:E2:2D:3D:D0:4F:81:71:16:E8:F5:02:20:43
            X509v3 Authority Key Identifier:
                keyid:39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:99:63:fd:4f:df:15:b9:fd:83:e3:ab:51:9b:f7:51:d2:
         f7:5d:2e:6d:64:a7:d6:90:02:ac:d1:f5:a2:58:18:0a:52:ae:
         2a:51:ab:5f:82:95:ab:91:99:dd:e7:a2:0f:83:3e:b8:5f:71:
         ed:71:21:38:3d:23:75:52:e3:73:bb:15:3e:56:c8:d4:b4:bb:
         86:d6:1a:bb:a6:35:d1:6c:f0:91:6a:db:92:65:e4:b3:f1:d6:
         a5:ce:0f:42:f7:36:d2:f3:9c:05:b9:eb:b6:79:55:c1:74:35:
         a6:8c:b8:6b:92:af:e5:0e:7d:e0:7b:b1:50:d8:7d:63:2f:4b:
         5b:9d:5d:2f:00:65:08:25:4f:a7:7b:92:13:d5:d4:bc:6d:44:
         0b:7a:21:ad:65:aa:0b:cf:3b:48:c0:90:6f:53:b9:94:62:26:
         6f:fd:af:4d:5c:f2:00:ee:6e:fe:cf:9d:7b:3c:37:c3:4e:fe:
         0b:ce:95:97:8e:9e:f3:05:79:4c:5f:61:8b:da:f7:19:0e:4c:
         ff:5c:a4:ad:dc:96:2e:23:08:3a:47:2c:72:3d:e7:74:bc:a5:
         7f:bb:ce:5e:b4:30:f0:10:94:68:7b:77:11:53:47:3b:2d:ab:
         b7:76:f9:d8:d0:16:ba:7a:0b:17:c9:9c:7f:49:88:e1:13:d7:
         4e:69:cc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:55:39 2025 by rpki-client