Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.mft
File:                     ok5SPzBOIuroz_iA2DiEk8WgEXg.mft (raw, json)
Hash identifier:          ag+/SBZD2/xGmYC3f+RaMLayk8/BlmOHQYYCf41rl9s=
Subject key identifier:   29:CF:E2:B5:F9:36:EB:B2:7F:D9:E9:E8:7A:58:5A:8F:A3:C1:57:B8
Authority key identifier: A2:4E:52:3F:30:4E:22:EA:E8:CF:F8:80:D8:38:84:93:C5:A0:11:78
Certificate issuer:       /CN=a24e523f304e22eae8cff880d8388493c5a01178
Certificate serial:       0190E98D1ECD6DB2C450C8CC59F054669680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ok5SPzBOIuroz_iA2DiEk8WgEXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.mft
Manifest number:          0FFB
Signing time:             Thu 25 Jul 2024 11:00:57 +0000
Manifest this update:     Thu 25 Jul 2024 11:00:57 +0000
Manifest next update:     Fri 26 Jul 2024 11:00:57 +0000
Files and hashes:         1: ok5SPzBOIuroz_iA2DiEk8WgEXg.crl (hash: 381VSuFq31eROkvrhpyc5UyORNwJ5pFuNEoPyqwxGmw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e9:8d:1e:cd:6d:b2:c4:50:c8:cc:59:f0:54:66:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24e523f304e22eae8cff880d8388493c5a01178
        Validity
            Not Before: Jul 25 11:00:57 2024 GMT
            Not After : Jul 26 11:00:57 2024 GMT
        Subject: CN=29cfe2b5f936ebb27fd9e9e87a585a8fa3c157b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:94:9b:2b:fc:85:b7:83:2c:17:76:61:e5:
                    ca:17:2b:1c:f4:87:e0:6d:35:80:8e:ab:52:62:33:
                    c1:e0:3a:6d:3a:bb:2a:a5:0f:21:fe:ee:11:0c:25:
                    46:e5:ee:c2:47:19:ce:63:35:e5:52:16:a9:17:63:
                    07:67:55:07:78:13:25:c5:6c:74:6a:1e:dd:02:57:
                    6d:0a:f3:87:26:44:44:87:00:db:06:d9:70:01:7f:
                    42:05:da:15:03:10:d7:81:73:12:a9:0d:0c:8a:e7:
                    ba:66:14:07:14:ed:2b:0c:e3:4f:fb:31:7a:33:94:
                    d6:11:dc:46:7b:30:5f:93:3d:9d:48:3a:59:ee:fa:
                    b1:e3:b0:02:33:af:df:22:82:5b:43:0e:d2:87:e1:
                    57:68:35:43:2a:a4:bd:8a:d2:e6:c3:62:91:ae:89:
                    f3:8b:ec:1c:28:e3:bb:45:cc:7e:e2:ca:1b:ea:c6:
                    40:2f:da:2f:f6:ef:a4:a8:ef:f1:0e:19:d4:33:b9:
                    f6:4c:92:af:f1:f6:f7:26:0d:35:61:24:df:0d:12:
                    a4:71:4c:b7:cf:b6:47:7e:0a:ed:62:82:2c:01:f8:
                    fb:1c:ae:63:9d:f9:51:31:4f:1c:76:4b:b3:b6:7d:
                    88:57:15:3e:54:66:fe:9f:2d:46:c4:80:46:8c:23:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:E2:B5:F9:36:EB:B2:7F:D9:E9:E8:7A:58:5A:8F:A3:C1:57:B8
            X509v3 Authority Key Identifier:
                keyid:A2:4E:52:3F:30:4E:22:EA:E8:CF:F8:80:D8:38:84:93:C5:A0:11:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ok5SPzBOIuroz_iA2DiEk8WgEXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0ee012-ba7b-4606-9d7c-c4ace4f834b5/1/ok5SPzBOIuroz_iA2DiEk8WgEXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:f4:01:70:26:58:9b:2a:76:aa:bc:26:94:1c:42:87:1f:
         d8:b0:36:01:72:4e:28:ef:e5:95:a7:67:81:48:6b:8a:85:ab:
         bc:7c:44:ca:c7:5d:12:19:14:e3:10:71:21:72:3b:28:e5:c1:
         b0:42:08:de:0b:58:25:6a:db:62:2f:a8:a8:d8:af:62:da:85:
         4d:c5:cf:bc:00:ba:08:c2:9d:24:33:57:00:0f:4d:e6:c8:c1:
         08:6f:fb:90:5c:ec:4f:6f:20:ae:ff:d2:bd:0f:01:a0:02:b3:
         a4:f4:84:66:a0:21:8a:aa:3d:0c:74:70:f4:50:84:3b:3a:b3:
         72:8a:e3:a7:25:2e:ec:ba:18:b0:26:f6:e0:0f:b0:32:4d:8c:
         59:4c:46:26:51:56:64:0d:50:7e:e4:d5:20:4c:39:2e:d4:73:
         c2:6c:d5:7b:43:18:e4:13:a2:8d:f2:b8:0b:2d:93:92:e1:a4:
         40:0e:02:c8:37:6a:88:bc:fa:d5:ca:3d:a0:cb:7f:4b:59:aa:
         d8:02:9e:77:b3:96:b4:58:08:07:c1:48:c4:24:42:fc:68:33:
         52:a0:2a:f6:08:84:8d:1c:b5:5a:9f:d7:88:1c:3b:4e:72:8b:
         96:50:7f:ac:08:b1:77:a0:b1:4a:c7:05:88:a8:2a:40:f5:fe:
         93:8a:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:01:05 2025 by rpki-client