Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File:                     mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier:          o5eJOMtDxfOY3DR4U8fPG6+clN5oBdXSQpiFbypw/fM=
Subject key identifier:   7C:1D:43:69:57:F1:CD:B7:23:CC:B3:8E:36:BD:E4:F9:9C:E5:4F:4C
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer:       /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial:       0194BD852B94353C65921F2101E01F0A50A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number:          0327
Signing time:             Fri 31 Jan 2025 18:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:08 +0000
Files and hashes:         1: 6X834B5gcsNjXymrQMfROjTj6Pc.roa (hash: eUjrS9xR0GNckSwbqncq7fyluCC422BD9P+h/ci+z+8=)
                          2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: 7nyUc5P7z865ZHA3OD5Te0QLw/VssEXjT/d19iBOwNQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:2b:94:35:3c:65:92:1f:21:01:e0:1f:0a:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
        Validity
            Not Before: Jan 31 18:00:08 2025 GMT
            Not After : Feb  1 18:00:08 2025 GMT
        Subject: CN=7c1d436957f1cdb723ccb38e36bde4f99ce54f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:09:a0:7a:35:b7:22:5a:a5:c9:81:c5:33:
                    9e:d0:ec:fc:5c:8c:e0:89:ff:f1:35:da:48:58:7d:
                    b8:ac:c3:8c:5f:ff:b8:96:23:a6:d5:f9:72:3a:53:
                    35:cc:64:5c:cf:9c:0e:0a:a8:6f:0c:cc:a0:ab:18:
                    4c:6d:38:42:c1:bc:d9:96:78:30:ae:fd:7d:fc:b7:
                    b1:f2:18:11:e6:ff:c0:74:58:e4:a2:fa:1c:c3:9d:
                    b5:3e:a8:8e:42:60:a4:cf:29:b0:f7:e0:08:c6:eb:
                    72:ef:0c:89:b5:19:dc:af:44:ae:27:22:10:4b:09:
                    bb:aa:9c:13:ed:e5:96:e1:f4:7f:0d:b1:55:b7:e7:
                    5f:89:ae:17:c8:6e:f0:c9:6a:09:bc:64:4c:70:bc:
                    a1:8e:7e:8b:68:34:d5:f0:4f:78:7a:1c:d3:13:89:
                    2d:4d:04:6f:ec:68:9b:b3:d3:10:51:a2:f6:1b:9b:
                    01:4e:11:c6:30:03:93:f3:6b:eb:0a:73:f8:63:c8:
                    8c:e1:38:dd:04:80:39:17:5c:06:af:4b:4c:4b:2c:
                    5b:90:2b:2e:9c:23:2a:7c:b1:e0:05:61:3a:8a:13:
                    26:dc:5f:a4:de:f9:e7:29:05:20:52:b7:d3:82:02:
                    d0:1c:ae:fc:32:42:33:d7:42:b7:8d:1c:0c:64:e3:
                    57:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:43:69:57:F1:CD:B7:23:CC:B3:8E:36:BD:E4:F9:9C:E5:4F:4C
            X509v3 Authority Key Identifier:
                keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:c8:f8:4a:3c:cc:48:48:d6:8d:fb:6d:f2:aa:fb:ad:3a:
         52:40:2d:66:ee:c2:8f:99:15:5c:70:fa:16:7f:b2:a6:a2:68:
         64:32:21:2b:aa:98:cb:10:62:d2:0e:13:28:4d:a8:c6:1f:e9:
         5b:3c:19:9c:8b:3c:f8:cd:2a:41:e8:de:4f:fb:ed:89:ea:ae:
         e6:0b:29:27:9d:e4:a4:bf:6b:18:ee:72:2f:c7:3c:bb:76:ee:
         fd:ed:ab:1d:52:26:36:75:7a:c3:39:16:f4:50:b5:71:43:d0:
         90:5d:9e:9c:a6:a0:7a:ba:cd:62:98:b9:09:73:b0:58:d8:54:
         68:1f:17:d5:77:7e:06:2e:b0:46:75:83:51:33:7c:dd:0e:42:
         4f:9c:9c:11:32:c6:fb:da:63:59:ff:f4:f3:f7:bc:c2:5b:08:
         ee:55:8b:fa:4d:cc:d8:c1:e7:16:3a:05:16:b5:37:ed:23:0f:
         96:69:2e:35:df:1a:28:db:10:f3:a4:cc:62:f2:39:24:ed:93:
         57:86:99:32:4e:0c:66:c8:e6:49:38:89:68:68:86:c7:ed:cc:
         42:d8:e7:8a:2c:93:f2:51:fd:d8:5c:9e:79:bc:38:e0:98:40:
         0f:76:20:db:05:e9:d9:4d:07:e2:10:4a:38:f3:3e:08:ac:ad:
         bf:f9:bb:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:00:55 2025 by rpki-client