Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
File:                     Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft (raw, json)
Hash identifier:          88ADjfCd0tVSEKqgbF5EeUN7QVTbgwkQH+poY5x1szs=
Subject key identifier:   91:3D:B3:E7:05:DC:FF:A4:5C:BC:7F:86:93:2A:0A:4B:95:02:61:87
Authority key identifier: 3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43
Certificate issuer:       /CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
Certificate serial:       0194BCAA3380062A64376F59F47C932D4524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft
Manifest number:          0E62
Signing time:             Fri 31 Jan 2025 14:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:58 +0000
Files and hashes:         1: Mu4iTpkBhKid85hQkXUqPdd3l28.roa (hash: m9wF2k+Ifz07DvZ8KG/nCFZD2LO8ELnkwbys5hG5IQw=)
                          2: Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl (hash: bSfG8dsoV2fa+GHUx6SXecYjZnAjeToL1jpyZNK/xfk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:33:80:06:2a:64:37:6f:59:f4:7c:93:2d:45:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3acd90cb637d3d2c73d99dea9a4fe813e6485843
        Validity
            Not Before: Jan 31 14:00:58 2025 GMT
            Not After : Feb  1 14:00:58 2025 GMT
        Subject: CN=913db3e705dcffa45cbc7f86932a0a4b95026187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:7f:38:a2:b0:ba:27:6a:0d:d5:29:6a:47:
                    94:20:20:90:5c:47:c2:88:ec:05:bb:04:42:86:67:
                    86:2a:ac:b0:fa:86:a4:a6:70:5b:66:8d:49:0e:ad:
                    29:e7:51:58:fb:2c:28:49:34:bb:5c:90:44:9a:06:
                    93:8e:15:eb:d8:32:3e:ba:3c:d4:5d:8f:20:48:4a:
                    57:fc:12:df:10:3e:16:f1:f3:d4:6b:33:5e:c6:3b:
                    b0:92:6e:6a:a0:c7:da:68:c6:ef:0d:68:6a:12:04:
                    2f:df:eb:28:44:0c:3c:e5:81:ce:a1:1c:3b:ea:0f:
                    90:3d:c0:b8:0d:e8:97:b1:b9:c3:92:9c:c7:89:73:
                    5c:32:36:66:e4:71:dd:d6:9a:2e:50:e8:e7:e7:50:
                    a9:97:3d:4b:bb:58:fd:90:89:f6:a8:76:6b:9f:0d:
                    9d:3d:90:cc:5c:a4:d6:33:fe:e2:f1:37:d4:77:0b:
                    a3:fd:80:8f:08:cb:8b:14:b3:4f:bf:0c:7c:2f:e2:
                    7e:64:42:f5:d0:9d:1c:10:20:14:1d:c8:3c:db:71:
                    35:f1:d6:b6:ba:a5:15:64:6a:e8:c6:56:5f:92:32:
                    13:ab:ab:4f:43:a4:a6:8f:84:16:61:3d:ca:17:ba:
                    21:81:e4:62:5c:e5:b3:20:7e:2b:8c:a5:3d:76:ef:
                    e8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3D:B3:E7:05:DC:FF:A4:5C:BC:7F:86:93:2A:0A:4B:95:02:61:87
            X509v3 Authority Key Identifier:
                keyid:3A:CD:90:CB:63:7D:3D:2C:73:D9:9D:EA:9A:4F:E8:13:E6:48:58:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/098cf4-07c0-4ab7-9cc7-be8c78c06fc7/1/Os2Qy2N9PSxz2Z3qmk_oE-ZIWEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ad:73:ba:f5:1b:8e:1d:09:ac:2c:11:e8:3f:9e:95:12:c4:
         93:4b:63:f9:ae:dc:38:2c:ce:e0:6b:f4:cd:bb:e4:ca:ff:d8:
         b4:4b:73:94:7a:c1:3a:41:13:d9:53:c0:8a:c8:c7:48:99:e3:
         32:37:3f:12:ed:25:7e:38:35:4c:b4:57:b0:c2:44:f8:8d:78:
         b4:60:54:05:b6:b4:09:bd:1d:81:12:84:92:91:bb:03:44:75:
         24:21:bd:f0:c0:e0:ca:ed:6b:d7:16:0d:d4:cc:2a:dc:58:2f:
         99:1c:b1:b0:29:d6:c6:b5:31:43:40:58:e9:5a:1c:f7:e9:04:
         93:f1:7d:bc:6b:cf:97:cf:d2:7a:6f:d0:b5:fc:1c:a8:9e:b7:
         c4:92:21:0d:04:51:e0:00:f7:2a:e0:2c:22:52:94:2d:47:db:
         02:92:2e:9e:2e:5a:cd:60:24:e6:8e:cc:6d:2f:b0:27:2c:4d:
         6e:07:db:c2:b9:d4:53:da:2a:ba:0c:c1:94:2e:73:73:f4:ed:
         1d:b5:ad:d9:39:10:f6:dc:03:3e:30:b3:d0:a0:6e:4d:b9:ad:
         7b:36:95:e4:15:67:c0:07:4e:3b:fe:08:a4:6f:bc:ec:75:75:
         48:7c:b1:4c:b1:dd:ad:9c:ba:70:44:22:8b:dd:52:00:6e:e0:
         de:80:96:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:50:33 2025 by rpki-client