Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          SyHMTdUK0SjQwsbmPeDrOXVHNkWTO+ECB2ai4UqJX4c=
Subject key identifier:   B0:05:35:05:3B:FD:68:DA:F7:DA:AD:FB:FF:76:ED:B6:85:84:B1:71
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       0194BC3CA6378EAB7594F9718E7996EF066A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          1154
Signing time:             Fri 31 Jan 2025 12:01:18 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:18 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:18 +0000
Files and hashes:         1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: YoWOO5739qekxQNFf8PBlZ4j8U+5sgAO+FQD8wWWgwg=)
                          2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:a6:37:8e:ab:75:94:f9:71:8e:79:96:ef:06:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: Jan 31 12:01:18 2025 GMT
            Not After : Feb  1 12:01:18 2025 GMT
        Subject: CN=b00535053bfd68daf7daadfbff76edb68584b171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8a:55:af:a7:87:10:a4:df:32:b1:08:36:ac:
                    b5:00:02:85:50:ef:37:72:c0:e7:69:67:35:ce:12:
                    79:e2:b8:8d:bc:0b:bd:60:89:29:99:b0:66:bf:5d:
                    6e:d7:f3:e6:f7:4d:2b:31:a0:51:26:84:2c:8f:d1:
                    f2:40:b3:dd:37:0c:b6:b0:66:01:28:02:e1:90:70:
                    8c:ce:9f:fb:23:f9:45:ae:d5:da:e4:7a:5c:25:0c:
                    90:b1:49:0d:1d:67:51:0b:58:a4:52:94:48:cf:9f:
                    ca:75:ad:ec:81:33:00:f4:81:3b:1d:a8:c1:a7:b7:
                    10:88:2b:f4:d3:ec:4f:f0:2a:e2:50:11:f3:fb:aa:
                    0b:e5:61:87:5c:e4:e5:f1:e5:19:d5:c2:18:c2:b2:
                    8a:5f:ca:92:97:47:00:1c:1d:70:be:15:c2:da:16:
                    c2:81:e3:ed:3e:f9:97:fb:7f:ed:b7:90:b7:18:60:
                    be:70:76:c7:67:49:29:ff:71:e9:69:0a:7c:f8:09:
                    39:48:16:26:37:21:61:3b:e0:b2:7b:cf:9c:22:5b:
                    1f:fe:e7:d6:22:65:a6:00:34:91:73:40:63:a9:74:
                    ce:8a:d3:7a:6e:79:fb:e4:6a:58:4c:45:92:43:8e:
                    2c:13:ee:cc:ed:5d:1a:2c:39:79:c1:09:67:b9:23:
                    63:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:35:05:3B:FD:68:DA:F7:DA:AD:FB:FF:76:ED:B6:85:84:B1:71
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:6b:82:8e:f0:80:8b:b3:d1:9a:51:89:d4:dc:4e:81:0f:5b:
         76:cd:b0:6e:1d:8a:50:0d:03:75:f4:e7:8a:6d:f6:88:15:01:
         9f:2f:ae:aa:36:40:8f:1d:f9:2c:30:74:b8:93:af:d2:7f:11:
         18:09:70:b0:4c:79:8d:ae:05:97:ae:03:1d:bf:9f:f5:34:90:
         a5:de:99:61:ca:ad:95:6c:12:8b:24:ed:45:bb:51:3e:09:38:
         32:e3:e3:2e:78:76:66:fd:54:99:f0:2d:6e:d6:18:57:b5:b5:
         94:8e:43:a0:f2:07:8a:c1:79:90:93:8c:91:2e:f6:2e:06:f5:
         97:e6:51:36:fd:4b:02:87:24:f6:d3:78:12:0a:ee:ca:8d:29:
         4d:4f:b4:a0:33:73:f9:73:ce:3a:ef:9c:95:b9:d5:ae:7b:9c:
         45:dd:22:2e:f1:cf:1e:76:ff:02:45:34:72:01:57:eb:1d:d8:
         26:f6:34:f5:8a:ff:a6:05:ed:96:eb:b0:5a:08:67:92:f1:08:
         f6:17:88:16:95:47:7e:80:e8:f3:1e:5d:a4:33:1b:02:00:61:
         01:b6:b5:bc:b5:c7:6e:f3:0a:36:54:ff:f6:ce:c1:3c:ea:dc:
         2c:58:58:2c:0e:92:3d:fc:ba:ee:cc:e4:82:9f:62:ce:38:27:
         68:90:37:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:53 2025 by rpki-client