Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File:                     mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier:          tXwoSqk+0GjEGZnv4xBUS9PLEbRrRw+WlMZ66GeORuk=
Subject key identifier:   45:93:3B:C1:B5:15:F1:48:BA:94:12:10:D9:3E:CF:09:76:0A:62:1D
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer:       /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial:       0194BC7281B2109F27B96A3AFA33FDE86EDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number:          017D
Signing time:             Fri 31 Jan 2025 13:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:08 +0000
Files and hashes:         1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
                          2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
                          3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: tQX1lNEIUaI5BYmaDMNqJAo+K/YoUQwhROnkoNo2IU8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:81:b2:10:9f:27:b9:6a:3a:fa:33:fd:e8:6e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
        Validity
            Not Before: Jan 31 13:00:08 2025 GMT
            Not After : Feb  1 13:00:08 2025 GMT
        Subject: CN=45933bc1b515f148ba941210d93ecf09760a621d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:24:2b:a1:bd:40:6d:3b:c5:6d:87:f9:0f:
                    38:9d:24:ca:88:e9:00:ce:c2:76:cb:e6:b0:8b:27:
                    6b:ed:ed:7c:28:b2:2b:65:f1:d8:9d:21:7a:f5:c8:
                    b9:ac:27:3b:0c:73:2f:a3:b9:2c:ca:77:98:8d:52:
                    2e:a9:c0:85:0a:f8:d0:58:d6:a2:5f:ac:33:c7:d4:
                    1d:dc:f5:68:ac:75:cd:b8:de:5d:d6:89:83:1f:e9:
                    13:65:02:73:a7:52:56:6c:2f:d5:b3:23:bd:b6:cd:
                    c9:a1:c9:9d:ff:ea:0f:7e:f2:5b:1f:29:a3:f7:e7:
                    a3:89:81:3b:fc:28:22:f1:ff:1b:e2:f8:80:9b:56:
                    9a:60:e6:d9:78:43:cc:b6:db:48:8b:25:e6:63:91:
                    64:b0:38:71:99:44:8e:f6:a2:8b:ac:9b:1f:c1:92:
                    90:8d:82:b5:3e:92:8b:72:6c:4b:d1:15:ff:48:f8:
                    15:bc:5a:80:45:ed:58:7c:af:dd:f1:ac:3d:af:98:
                    a4:c7:be:73:f9:11:e0:8a:72:d8:9e:8a:d6:6a:45:
                    59:c1:9e:ea:5e:e4:cd:28:62:3c:93:9f:30:0b:0d:
                    31:6e:8d:39:41:da:2d:94:eb:2d:54:e2:52:04:a2:
                    29:bc:2b:dc:e6:ed:6f:ed:b5:4e:1f:d1:3d:5f:b2:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:93:3B:C1:B5:15:F1:48:BA:94:12:10:D9:3E:CF:09:76:0A:62:1D
            X509v3 Authority Key Identifier:
                keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d4:af:37:ee:f7:f5:12:3f:96:68:a9:5a:96:7f:97:dd:b8:
         99:ef:59:e6:7f:c0:77:4e:d7:ac:4c:e7:0a:55:ff:ba:07:01:
         95:80:0f:af:24:56:86:b4:e6:5c:fd:53:70:74:1a:d0:d1:61:
         b1:08:84:0d:73:9e:ff:6c:a5:5b:7e:d4:72:04:85:d7:79:5e:
         5a:c9:24:3e:69:a0:71:03:54:29:6b:5b:21:86:3d:e6:55:3a:
         e5:63:34:b5:b9:71:00:15:0a:55:c9:64:e5:41:58:8a:83:08:
         bc:6d:65:87:59:d1:0c:a5:8e:8c:86:8f:ef:52:e5:9c:92:41:
         6f:88:6c:79:96:af:72:26:ac:e0:48:fa:10:37:50:c8:36:4b:
         6c:2d:65:37:57:bf:b4:e6:93:97:f8:7b:0c:6a:22:c1:9b:af:
         50:f7:a5:30:dd:72:c0:02:bb:e8:f9:a0:48:b2:b1:da:f8:7e:
         4f:ce:e2:47:34:aa:24:b8:1e:2d:12:b9:9a:47:e6:31:51:ea:
         07:91:ab:f3:3c:12:af:9e:e9:d9:fd:bb:b1:21:f4:c6:f0:62:
         60:de:52:3c:04:6b:7d:1b:7d:e1:a4:0a:34:d2:6e:e9:83:1b:
         08:6a:44:47:5a:d3:28:59:12:c3:ba:fb:7c:7e:25:3a:77:c2:
         08:83:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:12 2025 by rpki-client