Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File:                     o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier:          jZLBB1DaHFaLIqneN6Vq1mjDQhgMozD2U6U/wuj7QR4=
Subject key identifier:   D4:C0:98:3B:EA:8B:7C:4A:25:D7:02:23:64:67:05:86:57:4A:5A:26
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer:       /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial:       0194BC04C3527F8E73A9F595CBFEDA333119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number:          136C
Signing time:             Fri 31 Jan 2025 11:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:16 +0000
Files and hashes:         1: 8M6EvOOueKa7PM6SUMWysNV1P1E.roa (hash: tXy3k1V6q4E+Xjy/ypSFyuA9ZzVHmCAzqLsaHasRW9o=)
                          2: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: A7eHjXFRwcXVQCGgx+8jr7L89Jf3I4HWAaX7Jk98bgs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:c3:52:7f:8e:73:a9:f5:95:cb:fe:da:33:31:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
        Validity
            Not Before: Jan 31 11:00:16 2025 GMT
            Not After : Feb  1 11:00:16 2025 GMT
        Subject: CN=d4c0983bea8b7c4a25d7022364670586574a5a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:6d:fb:f6:9d:da:fe:94:c6:a8:ea:e4:21:
                    70:51:c0:e6:b1:58:62:4b:b2:8d:6e:ea:d1:05:b8:
                    f1:5f:b6:a8:be:f2:de:6b:63:7b:20:39:9e:e0:05:
                    f8:78:27:88:2b:9a:6b:64:84:39:a2:39:ac:8a:a6:
                    3b:62:37:94:70:be:2b:96:97:fb:37:39:09:47:4c:
                    8b:2d:e4:3c:39:dd:31:06:85:60:7f:1b:be:06:42:
                    43:66:ea:02:fb:d6:8a:ae:d9:6d:7c:18:7f:f4:7b:
                    ae:31:fb:ed:e2:26:b6:56:be:4e:c5:f2:f0:f0:dd:
                    7a:c8:2e:e7:49:78:59:e3:13:b6:a0:09:88:59:d5:
                    56:63:97:55:af:0f:de:13:1d:69:73:4d:ef:e8:24:
                    95:bb:f3:ef:3c:d2:a4:4b:3b:96:14:31:e7:05:ef:
                    3b:ec:9d:fa:6e:5a:c7:91:df:87:0a:0b:34:34:82:
                    4a:e9:61:0a:19:86:ab:5e:ce:c5:fa:6d:35:6e:ce:
                    ab:55:f1:f8:6a:24:c4:fe:66:76:c2:3f:e1:ad:81:
                    9f:d1:3f:e9:38:bd:9b:4c:5d:c2:65:33:18:62:04:
                    b8:c1:3e:08:09:bf:f1:01:8d:66:f2:6a:2e:58:e7:
                    16:7a:3a:53:e7:d0:60:7e:48:62:3d:39:f6:32:c0:
                    ff:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C0:98:3B:EA:8B:7C:4A:25:D7:02:23:64:67:05:86:57:4A:5A:26
            X509v3 Authority Key Identifier:
                keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:82:b3:e6:cf:33:e3:de:37:da:f0:64:90:5d:d7:bc:ed:23:
         59:2c:9d:61:1f:b6:ff:43:71:76:97:54:5f:cb:e8:e6:68:05:
         4d:a9:3e:1a:0b:e7:29:50:d3:ea:3d:3d:bf:e9:17:c0:2f:f8:
         39:da:b2:b7:ab:c4:fd:34:bc:16:d1:ab:79:c1:56:8b:9f:ca:
         37:1c:f8:5e:ed:5c:4e:e7:cd:75:fb:1d:04:48:4f:d7:4a:86:
         0e:41:c4:10:c1:29:34:8c:52:a4:0d:0c:fc:17:40:10:df:34:
         64:ee:a7:4e:d9:91:14:9c:67:2b:fb:46:fe:1c:e0:29:b6:16:
         01:85:46:0a:43:ec:b3:2b:8d:1e:c9:2c:1a:99:be:5a:fc:b0:
         8d:ce:60:9c:51:2c:04:c6:ce:33:9c:fa:1c:db:d5:4a:e7:61:
         2c:77:dd:a8:2d:f9:f2:5a:ed:9c:50:80:b3:af:7e:95:9f:8f:
         29:86:b0:07:dd:56:17:7b:76:a7:b1:21:ed:45:47:a1:8d:e8:
         f7:e2:cf:d7:a6:42:10:3a:d3:16:cc:57:b5:1e:22:90:ae:a6:
         43:28:49:88:28:4b:52:44:04:f4:38:09:b9:8e:5b:67:10:d0:
         1b:a0:7d:a5:85:6d:08:12:4f:b7:0b:2d:98:f1:67:97:eb:b4:
         b4:8e:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:01 2025 by rpki-client