Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft
File:                     ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft (raw, json)
Hash identifier:          GJvxYwYsf8AahehpHHtZeSpPyWU0pFYF4BMkuPwoWwo=
Subject key identifier:   F0:EC:39:58:B9:DE:81:86:83:97:43:ED:66:3C:FC:2C:A5:E3:8F:A2
Authority key identifier: A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34
Certificate issuer:       /CN=a1f2eb61f52f0a30e76d97c1a6c8aafcec86db34
Certificate serial:       0189D2DF54AA0D73BC24F1C180134EB67A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft
Manifest number:          085C
Signing time:             Tue 08 Aug 2023 01:59:58 +0000
Manifest this update:     Tue 08 Aug 2023 01:59:58 +0000
Manifest next update:     Wed 09 Aug 2023 01:59:58 +0000
Files and hashes:         1: 0Cji_IYJvme6M0s3ZbGeKrrXEYw.roa (hash: HV4pN38B+9Vt5+Rp5kLf/0Hs32qbFkSpny7V2QD4q1A=)
                          2: ofLrYfUvCjDnbZfBpsiq_OyG2zQ.crl (hash: eocBX4rFRxugwbNjc3Ncm+NuADKmpfhUaCtEOymEIiw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d2:df:54:aa:0d:73:bc:24:f1:c1:80:13:4e:b6:7a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f2eb61f52f0a30e76d97c1a6c8aafcec86db34
        Validity
            Not Before: Aug  8 01:59:58 2023 GMT
            Not After : Aug  9 01:59:58 2023 GMT
        Subject: CN=f0ec3958b9de8186839743ed663cfc2ca5e38fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b8:be:13:94:68:f6:01:2f:0f:7f:72:59:b1:
                    dc:81:5a:ab:f8:1b:48:af:fd:66:dc:22:a8:2f:da:
                    45:c8:52:7f:fa:22:25:17:a2:35:eb:7e:02:89:39:
                    3e:c8:52:b9:d6:67:ad:d6:b7:6c:8e:ce:2c:96:31:
                    93:77:db:cb:00:b3:e7:79:e3:17:59:73:5a:03:f9:
                    8a:b2:48:e3:c4:b7:88:32:99:a8:52:8a:00:8e:f0:
                    0f:2e:84:f2:05:c5:c0:f1:36:15:25:61:b8:28:6a:
                    8b:d0:fc:81:fb:ba:f6:2d:53:20:ea:ad:db:07:9b:
                    a9:6b:b0:56:de:30:bb:e6:32:77:af:fa:94:35:6c:
                    8f:f3:fb:90:f1:76:7e:8a:ab:a4:e1:71:15:77:ea:
                    e1:78:7c:6f:a8:85:fd:23:61:2f:0f:6f:9d:bd:38:
                    8d:57:e2:e8:02:aa:d4:e0:83:71:5b:84:11:6a:3d:
                    a5:d9:38:8e:c9:d1:ea:c9:2a:98:5b:a0:6b:74:2c:
                    16:88:2d:b3:aa:44:b5:5d:d9:88:fd:8b:17:08:a6:
                    43:47:45:1e:8b:f8:e3:88:bd:74:b4:1b:7a:b8:13:
                    dd:90:39:42:74:4b:b0:01:0b:08:fb:5d:22:df:60:
                    43:16:11:80:ad:65:94:30:93:48:8a:d0:93:3a:cb:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:EC:39:58:B9:DE:81:86:83:97:43:ED:66:3C:FC:2C:A5:E3:8F:A2
            X509v3 Authority Key Identifier:
                keyid:A1:F2:EB:61:F5:2F:0A:30:E7:6D:97:C1:A6:C8:AA:FC:EC:86:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5ceeb5-224f-423e-881f-c0ec96300316/1/ofLrYfUvCjDnbZfBpsiq_OyG2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:22:b6:7a:5f:8e:3d:ff:3c:0c:4d:ab:84:bd:4c:5f:73:83:
         87:bf:cd:02:b2:e3:91:81:c5:38:4c:36:0a:5d:c5:6e:64:44:
         e6:c9:56:67:4a:33:8c:e9:7c:bb:91:08:e4:ac:93:0d:70:e2:
         c4:f9:31:59:6e:83:fa:ab:de:c7:8b:9a:72:42:50:30:cf:36:
         ba:16:17:a1:99:0a:c9:59:52:e0:20:f3:b3:e2:41:13:63:2f:
         c7:bb:0d:e6:35:96:99:11:52:81:b8:39:e6:33:c4:68:cf:10:
         25:d0:39:3f:2c:a2:88:17:df:c0:64:06:d5:ae:74:9e:0b:e6:
         1f:2d:28:2b:4e:d2:a0:13:f8:aa:0d:3f:6c:b1:12:1f:01:7a:
         4f:09:a5:0b:f9:87:2f:d8:dd:88:e6:97:4c:a9:04:a0:be:eb:
         91:23:52:60:cb:de:db:64:cc:e9:ef:8b:94:7e:1f:b4:be:99:
         95:3e:7e:f9:84:b7:b9:37:aa:29:f5:48:bb:a4:67:16:93:37:
         e0:8b:ad:62:08:15:08:65:1f:a4:1d:98:a6:2c:ab:44:79:8f:
         6b:3e:99:08:9b:80:e9:b6:f4:64:13:43:83:59:2b:71:12:6e:
         da:f2:89:9e:0d:8a:bb:f7:fc:6d:77:6c:87:4d:82:6b:95:1b:
         ef:7d:69:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:26 2025 by rpki-client