Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
File:                     i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft (raw, json)
Hash identifier:          G6QVLq5VKgGGPNOF/iNcZbClMMqM2JK+Yu1npuqbkrE=
Subject key identifier:   15:14:1B:16:5D:3A:D5:F9:22:5B:8A:19:4E:AD:91:A4:F7:DF:DA:F2
Authority key identifier: 8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF
Certificate issuer:       /CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
Certificate serial:       0194BD178B3FC58004AE1DC198557675D21C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft
Manifest number:          2C
Signing time:             Fri 31 Jan 2025 16:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:24 +0000
Files and hashes:         1: fvjwad8hv5M8RT1bW6F3smOFB2Y.roa (hash: at0gl2Sa+um/oWDDDgR4biQkEbCFJi5QlnnXaGwjc0g=)
                          2: i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl (hash: b5FCr4t++jXD4e1R3p3h/GVWPH3i2ERRtXqMTgKaxXM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:8b:3f:c5:80:04:ae:1d:c1:98:55:76:75:d2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc3948d8b93a21e6d57d9c6554d5edd107d09af
        Validity
            Not Before: Jan 31 16:00:24 2025 GMT
            Not After : Feb  1 16:00:24 2025 GMT
        Subject: CN=15141b165d3ad5f9225b8a194ead91a4f7dfdaf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:45:eb:bd:a1:33:04:18:6b:d8:91:8d:4a:
                    02:b5:da:9d:c3:fd:5f:79:dc:ca:fd:2a:ff:48:e9:
                    4d:d2:90:9e:10:0a:51:f5:eb:f8:17:94:51:a4:83:
                    1b:df:0a:8e:a2:7e:fc:3c:88:dd:c8:78:11:e7:ed:
                    59:55:22:35:4a:e9:f1:16:4d:cf:5e:9d:16:af:9a:
                    d4:77:14:4f:1e:c0:43:8c:d3:68:5f:a3:55:ab:52:
                    61:54:d5:9b:15:5a:92:b3:07:05:0b:32:e9:94:3f:
                    da:51:00:7f:a2:18:9e:54:21:77:16:3e:ed:4f:7d:
                    a0:8a:58:a4:28:94:98:42:a0:c5:09:e7:71:a1:cd:
                    0a:e4:ee:8d:1d:4c:97:26:c6:c7:1d:da:49:b8:58:
                    a0:99:1d:26:37:df:00:1c:19:bc:d6:40:bc:e4:95:
                    f1:46:24:02:9c:c4:a9:2d:10:f8:fd:e8:a6:d0:92:
                    d0:5f:3e:cb:fa:04:00:ae:60:63:64:d1:b4:b8:59:
                    d0:7a:e5:82:83:5c:1a:bf:ac:06:8c:5b:71:48:c7:
                    e6:23:59:12:8c:31:8d:33:83:6f:09:6c:5a:7b:55:
                    2b:6d:5b:3d:bb:4f:c9:4b:f9:a9:19:c1:e8:4a:d2:
                    b5:2e:75:61:b9:c3:2c:bb:32:d2:c6:4e:29:0f:c9:
                    c7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:14:1B:16:5D:3A:D5:F9:22:5B:8A:19:4E:AD:91:A4:F7:DF:DA:F2
            X509v3 Authority Key Identifier:
                keyid:8B:C3:94:8D:8B:93:A2:1E:6D:57:D9:C6:55:4D:5E:DD:10:7D:09:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8OUjYuToh5tV9nGVU1e3RB9Ca8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/510e57-38da-494d-8200-891fa21c6f0b/1/i8OUjYuToh5tV9nGVU1e3RB9Ca8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e1:ec:6e:0d:4c:e1:5a:94:70:4a:73:21:5f:d7:9d:be:48:
         49:cf:0e:28:cd:a4:95:2e:0e:0d:ee:e3:42:10:27:ef:e6:8c:
         a5:a1:4e:df:b2:aa:ac:01:6a:56:03:95:b5:c8:c6:40:c4:a8:
         96:7b:be:df:e6:e2:d4:69:ff:4e:10:0d:1e:bc:44:c7:19:9c:
         5e:b9:8d:7d:97:84:32:ac:cf:13:6f:85:2b:16:46:5b:02:8c:
         56:5c:8e:42:90:d6:68:8a:0f:a5:9d:cb:db:e6:89:8f:73:85:
         a4:63:bd:a0:32:71:4c:09:eb:e4:2e:1c:df:3f:72:dc:cd:ff:
         bb:59:79:2f:cf:3a:22:cb:e3:77:bd:ee:dd:ca:c2:38:6e:04:
         87:25:6a:3a:27:ef:d9:db:19:e6:99:d5:7f:f8:e6:9a:51:b2:
         0c:a0:ac:8d:ce:bd:6b:9a:f2:4c:7b:b7:ba:64:bb:18:32:90:
         66:2d:c6:e9:94:b3:16:bc:54:f7:fa:0c:8e:e8:2a:a9:d9:dd:
         17:7f:98:d2:00:85:ec:eb:86:5f:0f:57:14:b1:b9:6c:97:fa:
         5e:fc:c9:d5:d4:fe:37:26:2a:e3:ec:1c:b4:0c:53:df:c8:ce:
         91:b8:de:4c:65:cf:af:6c:f6:c6:74:71:f5:dc:4c:7a:aa:e3:
         f4:a2:a3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:50 2025 by rpki-client