Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
File:                     AsLBh9mLRgOATtEWWttFCbYwqDo.mft (raw, json)
Hash identifier:          p3yyMplEcgJZUoXe4mtnhXNLo5lTCTRkyx33pb8CWX4=
Subject key identifier:   A0:74:A1:EC:AD:15:54:81:33:B7:26:6D:78:DF:E7:FD:73:6B:51:53
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Certificate issuer:       /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial:       0194BCE09551C66FD1A8785DFBC720061600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft
Manifest number:          091F
Signing time:             Fri 31 Jan 2025 15:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:22 +0000
Files and hashes:         1: AsLBh9mLRgOATtEWWttFCbYwqDo.crl (hash: O/Tc2oDfFFG+hcdxWpnVhZ/zPmUpthKRPME5neE8qVU=)
                          2: vSD8XToST3_PVTIy1XwVerhMPWI.roa (hash: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:95:51:c6:6f:d1:a8:78:5d:fb:c7:20:06:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
        Validity
            Not Before: Jan 31 15:00:22 2025 GMT
            Not After : Feb  1 15:00:22 2025 GMT
        Subject: CN=a074a1ecad15548133b7266d78dfe7fd736b5153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d4:c9:8d:e2:58:aa:a8:0d:df:bf:e9:de:f2:
                    4c:ac:c0:ec:0f:a9:11:32:d6:d4:67:d2:65:8d:be:
                    9c:a2:6e:cb:c1:be:53:e7:a3:9d:9e:01:fa:ff:16:
                    20:eb:6f:53:56:e1:95:79:1a:51:fc:fc:fe:dc:ab:
                    f9:97:70:a3:34:80:d5:fe:17:11:4f:da:57:ae:63:
                    29:4d:09:eb:69:1e:58:11:d2:51:05:27:39:f3:46:
                    c0:84:95:ce:f8:5f:43:d0:7b:09:ab:f2:b4:39:95:
                    3d:85:6c:8e:dd:fc:9c:44:84:e3:fd:73:8e:98:07:
                    7b:7d:4c:ee:dc:46:7b:3c:43:cd:69:2a:61:70:3f:
                    96:66:6d:b3:06:e3:4a:0e:08:d3:f3:47:d4:7b:14:
                    73:6f:6e:7d:b7:84:f4:b0:8f:94:bb:28:45:16:67:
                    b6:8d:ea:75:05:f8:8b:a4:e1:f8:58:26:df:9e:a2:
                    cd:cf:68:5a:f2:45:f2:cd:46:e4:79:23:97:48:1d:
                    2f:c8:c1:2c:c7:5b:34:2f:de:93:c0:16:95:b6:dc:
                    d2:54:65:1b:45:d0:2f:83:6a:5d:b7:47:48:49:56:
                    c3:ab:86:e6:2a:a1:63:04:f3:9d:43:35:52:3b:bb:
                    6d:2d:f8:ec:d5:8c:ca:66:dd:9f:fd:49:6f:44:c9:
                    46:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:74:A1:EC:AD:15:54:81:33:B7:26:6D:78:DF:E7:FD:73:6B:51:53
            X509v3 Authority Key Identifier:
                keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:61:27:0b:8b:21:1a:f0:9f:be:52:67:eb:74:e9:ec:f7:
         01:ce:60:86:4b:97:3f:eb:13:d7:65:d3:39:72:26:46:d3:20:
         a9:4a:39:13:59:2d:d9:20:6c:3f:86:a7:0f:39:d9:9b:82:e5:
         e1:db:f7:71:a9:26:fb:25:95:31:de:0f:27:e8:ad:22:72:c5:
         9e:5c:88:67:92:22:35:7f:52:cb:8e:92:2f:bb:c4:e1:6c:e1:
         15:96:76:f7:b3:8a:89:7e:3d:3f:32:cb:3a:4a:71:32:19:d2:
         d7:f9:ab:d6:7d:ca:9d:77:68:ad:80:d3:96:23:37:ed:d1:3f:
         d7:d2:b5:eb:cf:e6:c1:91:bc:93:0e:86:4a:d8:e5:a3:b9:4b:
         74:7c:c4:3f:4e:96:bb:fd:ca:82:75:f5:2a:97:90:37:ce:b2:
         ef:d2:7a:79:db:df:8d:fa:f2:61:24:04:da:3f:ef:d1:f6:22:
         28:84:79:6b:f3:6d:a9:9c:e2:7a:9b:9d:46:36:b0:fe:2e:ae:
         a9:da:88:d7:dc:de:2d:fb:8d:9f:5b:a4:77:ae:6a:47:a0:4c:
         4b:70:35:f3:96:dc:df:0b:7e:07:f8:57:2d:18:6a:1f:1b:21:
         96:34:ed:be:bb:aa:af:96:0f:ef:bc:fd:54:f8:8e:ad:58:81:
         86:69:33:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:33:03 2025 by rpki-client