Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft
File:                     F5k4MKGvO8hzO8KTSkpEPMX0P48.mft (raw, json)
Hash identifier:          wY0WUaQnYih5E7yfls/cr87wu6ItnIbVMFkD4YBzsyk=
Subject key identifier:   21:2B:1C:A7:26:C5:9A:9E:28:9F:02:B6:5D:93:E2:E3:F3:4B:E8:25
Authority key identifier: 17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F
Certificate issuer:       /CN=17993830a1af3bc8733bc2934a4a443cc5f43f8f
Certificate serial:       01843DB396CC09319F9BD191BD9F3EFC2633
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5k4MKGvO8hzO8KTSkpEPMX0P48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft
Manifest number:          0ADD
Signing time:             Thu 03 Nov 2022 13:34:50 +0000
Manifest this update:     Thu 03 Nov 2022 13:34:50 +0000
Manifest next update:     Fri 04 Nov 2022 13:34:50 +0000
Files and hashes:         1: F5k4MKGvO8hzO8KTSkpEPMX0P48.crl (hash: P28XxeQWQEyC7P6jDnDjkiFmuD7BGkpQUJgPZzXdVd4=)
                          2: xycylJPoLJYznykxES5GXbkC7CQ.roa (hash: XodbnyvvOSlb7ywKVa3CS2cINhkIElNGXiZJ0W4UswY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3d:b3:96:cc:09:31:9f:9b:d1:91:bd:9f:3e:fc:26:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17993830a1af3bc8733bc2934a4a443cc5f43f8f
        Validity
            Not Before: Nov  3 13:34:50 2022 GMT
            Not After : Nov  4 13:34:50 2022 GMT
        Subject: CN=212b1ca726c59a9e289f02b65d93e2e3f34be825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:75:ee:0e:da:ff:37:d3:29:f5:8b:df:c4:a6:
                    7d:a7:d9:87:da:36:9d:74:38:9a:d3:e4:d2:55:97:
                    9f:5a:52:b7:2a:d4:0d:d1:f8:56:9c:9c:a3:7c:29:
                    7c:f4:74:9a:b3:85:13:4b:ed:9c:db:f1:1f:3e:7b:
                    0d:c9:2b:3c:a9:af:3f:d4:aa:56:b6:8a:05:1b:4b:
                    1e:8a:02:75:ec:1a:16:a4:99:e6:70:03:f0:77:03:
                    6f:f8:2e:d3:e6:76:17:d1:92:ed:1a:01:79:2c:64:
                    53:57:9e:7f:ae:8e:ee:b0:19:91:88:e8:e5:06:23:
                    39:96:60:53:25:9f:af:e7:33:42:90:a6:8e:9e:5b:
                    8a:d5:03:62:8c:75:8a:c5:c2:9e:2d:24:e3:c0:37:
                    66:8e:d5:43:6c:c9:13:65:dd:83:2b:d9:9e:37:41:
                    c5:2a:4a:7f:9a:31:35:60:24:b7:3c:c4:9d:99:4d:
                    d4:69:fc:c7:2d:16:a7:a1:c6:49:76:8e:a9:f5:96:
                    cc:2c:94:99:a0:20:90:db:9b:f1:76:96:16:c4:5b:
                    d0:b5:6f:bd:1a:f7:d9:e2:f6:b4:a2:b2:50:9b:b3:
                    71:b0:9e:6e:8c:bb:0a:13:9a:32:af:8f:4f:98:69:
                    46:62:3c:2b:83:68:4f:fe:a7:f2:c2:fd:7f:03:50:
                    d1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:1C:A7:26:C5:9A:9E:28:9F:02:B6:5D:93:E2:E3:F3:4B:E8:25
            X509v3 Authority Key Identifier:
                keyid:17:99:38:30:A1:AF:3B:C8:73:3B:C2:93:4A:4A:44:3C:C5:F4:3F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5k4MKGvO8hzO8KTSkpEPMX0P48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6ab497-16d9-4c09-94d9-1be4c416a09c/1/F5k4MKGvO8hzO8KTSkpEPMX0P48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b3:d5:89:54:50:af:2b:76:3e:3d:a7:b7:da:b0:28:76:a1:
         90:f7:17:16:b3:75:8c:f7:db:99:e3:d6:f9:19:39:9c:33:fa:
         a3:e1:78:a2:1b:fe:18:1d:fd:f3:ef:94:fb:e2:6e:3d:f7:85:
         15:11:93:5d:07:1f:cd:03:c5:95:c5:9e:97:a2:36:a7:30:62:
         f6:cc:33:af:63:19:87:bd:a4:88:5f:71:97:46:67:98:7f:1e:
         13:76:24:5a:2d:88:04:33:39:fd:10:9e:44:fa:2e:b4:c3:c8:
         06:51:81:20:dc:e1:be:ce:42:98:d8:05:b2:29:22:ad:d9:c0:
         e7:a4:2c:3c:b3:0a:7a:a9:7d:64:e2:5d:1d:1e:3c:9f:e0:d5:
         b1:b3:8a:47:57:73:e0:a1:29:46:60:96:c2:4f:16:3a:c7:16:
         4b:b8:76:36:88:b5:c4:94:b2:8a:3a:6c:b5:38:63:88:59:d1:
         bc:05:9e:b4:7c:3b:8b:6e:5c:97:1b:f9:ce:35:27:75:ff:3c:
         d9:b6:3d:5f:19:8a:02:bb:b9:60:06:17:7a:ef:c7:b0:f6:86:
         24:8e:0e:82:c3:2a:f2:39:84:8b:c6:7a:01:42:98:42:76:a0:
         5a:ce:be:01:2d:04:af:e8:d7:54:67:e4:98:b5:3f:1e:17:88:
         d1:1b:69:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:44 2025 by rpki-client