Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
File:                     tATMDgOOsOaX7G565J0ChhRuDBo.mft (raw, json)
Hash identifier:          Mvle+Z252Jw2j+LDIARs22qadbeQZMGGGzkjxRbfZ48=
Subject key identifier:   77:E3:95:85:09:B0:6F:0C:F5:7B:5F:48:F8:9B:08:BC:ED:A9:9C:71
Authority key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Certificate issuer:       /CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Certificate serial:       0194BC7307C081581AF382A2F0D499A0BDC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
Manifest number:          0B87
Signing time:             Fri 31 Jan 2025 13:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:42 +0000
Files and hashes:         1: UKm_UMtvpGrkU1Nu7y__DDnEPuk.roa (hash: s8C+wz9gxxRZtvljlAJGIx8hAPJhRLZF/TFKsZo9Kz8=)
                          2: tATMDgOOsOaX7G565J0ChhRuDBo.crl (hash: 8Xt79Wv1m13nGVv7+JKtNLEIc5g0Efp7qkrLmtSH5XI=)
                          3: tVfNb6vANMjkCnwkn_zqjQ9R46g.roa (hash: sIFbcv+pjLFEVXCoeuZdGPtO8JDvf+xPKrDKXkHq+5k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:07:c0:81:58:1a:f3:82:a2:f0:d4:99:a0:bd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
        Validity
            Not Before: Jan 31 13:00:42 2025 GMT
            Not After : Feb  1 13:00:42 2025 GMT
        Subject: CN=77e3958509b06f0cf57b5f48f89b08bceda99c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:99:82:eb:e1:a1:57:c3:44:a2:57:d0:80:
                    e6:dd:68:7a:5b:26:fb:3f:6d:eb:2b:da:cb:b9:97:
                    72:a5:9f:70:d4:c8:46:90:63:66:4e:8f:40:02:9d:
                    a0:b1:bb:ed:fe:52:5f:59:91:2a:7b:c7:e9:30:f5:
                    c3:d7:e0:98:cc:55:4d:bd:14:1b:ed:4a:4d:2e:4a:
                    f9:34:10:69:45:06:25:72:48:f4:d5:3e:4d:ad:af:
                    4e:b4:7e:61:63:62:34:02:dd:52:7f:2e:8f:b5:ba:
                    37:9d:66:75:0a:f4:85:d9:8d:8e:24:92:76:7d:47:
                    06:fc:42:60:7b:1c:40:82:9a:4e:ad:57:4b:07:d7:
                    50:05:a3:8e:8a:53:13:95:63:b7:72:2f:2e:23:4c:
                    fa:7d:ff:b8:aa:50:5f:d6:01:d7:16:a8:61:5e:c0:
                    05:ff:55:33:12:86:f3:f1:99:43:20:dd:57:e2:b8:
                    db:c3:d0:51:7a:10:a5:cd:df:ad:46:4b:9d:b9:39:
                    e2:c3:45:b7:14:b0:cf:91:c0:01:a8:ce:42:b7:45:
                    09:b6:a3:e2:45:bd:34:52:cf:8b:cc:d7:07:b4:33:
                    4b:9f:4b:be:8d:27:17:66:ed:f6:4a:3e:9a:f1:2b:
                    ca:1f:0b:2b:0a:ba:9e:e9:85:2a:34:d3:64:6d:ee:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E3:95:85:09:B0:6F:0C:F5:7B:5F:48:F8:9B:08:BC:ED:A9:9C:71
            X509v3 Authority Key Identifier:
                keyid:B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:dd:66:0f:e9:38:f3:af:42:7b:71:22:ef:14:f2:b0:f8:61:
         1e:3a:c6:be:94:c4:be:b1:73:66:ba:e4:dc:31:d1:5c:b2:d1:
         20:c0:39:fc:90:d8:eb:90:bb:6b:41:fe:53:94:24:a7:df:66:
         f5:4b:37:51:d0:e7:ad:6f:d4:8b:a0:54:54:22:30:aa:ca:57:
         8e:70:de:40:e8:ea:f8:84:6c:f0:32:f8:47:c9:73:19:31:a3:
         bb:2c:31:3a:f7:21:1b:10:76:2f:95:ef:9d:b8:ff:e4:ed:85:
         aa:e2:64:2e:bb:9e:e7:55:03:55:53:e7:3d:43:22:d6:21:ca:
         e9:cb:17:0c:07:43:51:49:36:b2:18:e3:69:1e:56:50:6c:5a:
         c1:e4:d6:4d:0e:8d:7f:8f:ab:05:51:56:0e:20:43:d0:7f:65:
         db:97:69:34:df:e7:fa:e1:08:1e:30:0f:74:e9:23:83:c6:b5:
         c4:6e:7b:af:ea:7b:43:88:b0:b4:da:dd:50:47:ac:e7:65:66:
         24:62:e0:41:ba:9c:06:00:2a:59:b3:c8:59:34:2f:32:1c:83:
         09:e7:71:6b:d4:a1:54:dd:fc:bb:89:12:7c:71:2c:30:13:a9:
         bc:f4:90:37:5c:01:82:c1:f2:1d:26:d0:38:64:8b:9e:5f:3d:
         2e:af:bd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:03:01 2025 by rpki-client