Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
File:                     DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json)
Hash identifier:          bM69rUxmCljLqzFkGC70QbaGK6rfA6segftlBmuAcV4=
Subject key identifier:   C8:30:CA:BF:F9:5D:79:E1:C5:1F:AC:37:91:4B:D2:9C:C4:6F:31:91
Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76
Certificate issuer:       /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
Certificate serial:       0194BD85A1C99C25CC816A4481D1CDE836B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft
Manifest number:          016B
Signing time:             Fri 31 Jan 2025 18:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:39 +0000
Files and hashes:         1: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: R2isLRHiPKBuIkTj+w+88Hb3Zhn4wquEDdMQR23vbUc=)
                          2: WBCctmrLBY9TZchWHVefCJRpgwo.roa (hash: ha4SM2FYKNPb6uYgJ7O/6N/bp7uHsy7szwwtLn89ZkM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a1:c9:9c:25:cc:81:6a:44:81:d1:cd:e8:36:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776
        Validity
            Not Before: Jan 31 18:00:39 2025 GMT
            Not After : Feb  1 18:00:39 2025 GMT
        Subject: CN=c830cabff95d79e1c51fac37914bd29cc46f3191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:18:6f:b9:d8:07:e9:70:5c:bf:f0:c7:3d:
                    84:b7:e3:a9:e7:02:be:0d:05:6d:9d:67:45:8b:15:
                    29:a6:59:30:9f:8d:88:4f:34:9e:c1:d6:23:05:ad:
                    8e:67:5c:6e:58:24:fb:3a:f0:54:c9:5e:a7:0f:99:
                    38:92:d7:8b:d5:66:11:8a:cc:7d:e4:51:6a:c6:18:
                    90:7c:34:e0:32:b6:ce:79:f3:69:3c:50:75:66:03:
                    ce:af:27:43:54:cb:53:57:79:70:b9:4f:e3:64:f8:
                    69:4b:c5:37:f4:9e:c7:75:3c:13:76:20:f7:35:c1:
                    e5:2b:eb:f3:2e:ef:0d:bc:2d:ca:d9:0d:8e:55:ad:
                    2b:d8:58:83:35:4a:39:d7:81:39:0b:4d:8b:57:d4:
                    f5:e0:63:13:49:3a:48:b6:3d:df:bf:42:c0:c6:a4:
                    50:c1:d5:e1:45:47:29:e3:7b:fd:b6:e9:e5:79:9d:
                    16:a0:a9:96:6e:24:23:95:41:fa:53:67:59:9c:68:
                    81:dc:0b:04:fd:f2:90:51:6b:19:dd:5e:19:20:0a:
                    fc:98:c6:ea:85:98:f1:11:03:f0:ef:8e:7e:a1:d5:
                    2b:96:d0:99:7e:2d:37:ce:b8:36:bb:dd:f0:85:aa:
                    01:be:92:7a:e5:b0:21:bc:28:77:95:e0:8c:82:08:
                    13:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:30:CA:BF:F9:5D:79:E1:C5:1F:AC:37:91:4B:D2:9C:C4:6F:31:91
            X509v3 Authority Key Identifier:
                keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f6:70:0c:ae:84:41:5f:08:d5:37:13:7e:1b:f3:a2:6a:3c:
         ad:c8:16:b3:45:a7:1f:00:ac:02:10:99:07:a9:a7:cf:11:f4:
         05:91:4e:86:6c:97:f6:86:33:ce:42:56:31:11:a6:e2:a2:8e:
         0e:33:14:2b:0e:fa:3d:87:d1:9b:93:34:26:2b:a4:f1:e6:8f:
         5d:2f:6c:1f:5c:c5:8e:ef:76:0c:96:16:02:8f:0c:0e:ec:ec:
         41:e3:4c:e5:f9:23:3e:1d:44:9b:20:bf:fa:28:a2:ce:b7:30:
         9c:bd:63:0d:f7:4d:a0:d4:e5:75:ed:35:d6:7f:06:12:97:05:
         ad:5a:87:4f:46:c9:43:41:70:ce:37:05:71:07:3b:17:bd:21:
         85:46:f9:02:ac:8d:51:93:9c:e3:c4:1e:0e:51:d3:dc:90:f3:
         90:3e:c2:27:3e:f7:96:a8:3f:79:e9:a8:3c:fa:54:e6:52:e1:
         2d:98:ef:e6:29:0f:cf:00:3d:a7:25:bc:3a:c4:40:f0:40:6e:
         3d:04:c5:52:be:2f:57:20:2e:24:91:c2:b6:20:f7:2b:3d:c3:
         e8:e8:85:1c:ea:d9:8b:21:06:de:fa:9a:c2:7a:ad:b4:64:ca:
         49:eb:dc:d5:57:89:18:7d:ee:be:ad:f1:2a:7d:ee:15:39:fc:
         79:8b:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:44 2025 by rpki-client