Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ae0ca7-627e-4d3a-aa74-7c348aefc009/1/hg9P2ehtpwvJjCKB4HdRKAdpwzs.mft
File:                     hg9P2ehtpwvJjCKB4HdRKAdpwzs.mft (raw, json)
Hash identifier:          EpBQlZqaNfsv+REWnLKPi05qPjt6qjZJCo4wSEIp8xo=
Subject key identifier:   03:42:92:F2:B5:9F:D1:4D:4E:E6:48:9E:99:C2:03:34:F1:5C:CF:F6
Authority key identifier: 86:0F:4F:D9:E8:6D:A7:0B:C9:8C:22:81:E0:77:51:28:07:69:C3:3B
Certificate issuer:       /CN=860f4fd9e86da70bc98c2281e07751280769c33b
Certificate serial:       0184E0EC0E2588D3D77EF2D9294A2C77DB15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hg9P2ehtpwvJjCKB4HdRKAdpwzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ae0ca7-627e-4d3a-aa74-7c348aefc009/1/hg9P2ehtpwvJjCKB4HdRKAdpwzs.mft
Manifest number:          0881
Signing time:             Mon 05 Dec 2022 06:14:37 +0000
Manifest this update:     Mon 05 Dec 2022 06:14:37 +0000
Manifest next update:     Tue 06 Dec 2022 06:14:37 +0000
Files and hashes:         1: hg9P2ehtpwvJjCKB4HdRKAdpwzs.crl (hash: fhWrGwg2zsN8jCFbIrm3GhPuMLUPabiEIJCJeRYtrrE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e0:ec:0e:25:88:d3:d7:7e:f2:d9:29:4a:2c:77:db:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=860f4fd9e86da70bc98c2281e07751280769c33b
        Validity
            Not Before: Dec  5 06:14:37 2022 GMT
            Not After : Dec  6 06:14:37 2022 GMT
        Subject: CN=034292f2b59fd14d4ee6489e99c20334f15ccff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:47:fa:36:3e:f9:82:48:77:f7:03:56:4b:
                    ab:2f:e0:57:09:44:6f:96:96:00:09:bd:69:cc:80:
                    fc:9c:f9:12:fa:d3:63:d0:0a:75:fa:c0:d4:63:77:
                    4b:69:c6:f4:e5:ee:9e:86:ff:df:22:72:b9:6c:a9:
                    5b:2f:ba:c6:9c:3e:6a:f5:11:74:99:2a:cc:85:0b:
                    9f:dc:70:f5:85:fd:0d:3d:02:55:66:79:60:16:80:
                    e0:f0:0f:32:4b:37:ba:14:ed:20:37:d7:ad:19:df:
                    91:fe:e3:50:d8:12:4d:32:91:59:e8:9f:2a:bf:7a:
                    8e:23:d7:be:39:91:38:0a:e7:00:54:ce:f4:e4:ad:
                    f5:1a:ae:70:71:fa:0a:98:2f:23:52:f8:28:c5:ef:
                    83:9a:e8:af:6e:47:13:e6:c7:fc:48:8a:e5:b3:bf:
                    ab:85:82:fa:09:d7:83:2a:62:7d:08:80:2a:43:d2:
                    81:5e:ba:73:be:4c:42:bb:fd:93:1b:be:fa:ff:7c:
                    2a:9d:d8:8b:3e:fc:7a:9f:7f:e7:88:ff:56:79:10:
                    ab:4d:2f:31:f4:78:8e:d2:97:cd:57:8e:3f:bd:e8:
                    44:42:43:66:86:6a:1a:79:0b:35:aa:4b:5f:b8:3c:
                    01:05:5a:ae:36:55:77:27:e8:f8:16:73:10:1c:2b:
                    ec:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:42:92:F2:B5:9F:D1:4D:4E:E6:48:9E:99:C2:03:34:F1:5C:CF:F6
            X509v3 Authority Key Identifier:
                keyid:86:0F:4F:D9:E8:6D:A7:0B:C9:8C:22:81:E0:77:51:28:07:69:C3:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg9P2ehtpwvJjCKB4HdRKAdpwzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ae0ca7-627e-4d3a-aa74-7c348aefc009/1/hg9P2ehtpwvJjCKB4HdRKAdpwzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ae0ca7-627e-4d3a-aa74-7c348aefc009/1/hg9P2ehtpwvJjCKB4HdRKAdpwzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:75:5d:c6:7d:04:69:98:28:39:ee:09:ba:2a:db:87:d6:b5:
         9e:6a:32:15:87:fc:6f:66:67:5a:ba:e9:4b:ab:db:f8:78:da:
         35:8b:07:ef:33:24:79:1c:8a:98:81:af:f4:e5:f2:7a:e5:2e:
         03:76:2f:8e:53:53:b2:40:72:98:86:66:94:ff:39:f5:07:d2:
         de:97:d8:40:3e:af:f0:6f:94:6f:6d:a7:62:86:74:c1:86:a2:
         67:da:08:39:4d:34:4a:f5:92:50:51:36:af:d7:f9:3d:ba:41:
         c2:1c:b5:20:72:33:b9:8f:b8:6d:91:12:a2:30:22:81:70:1c:
         6e:08:ae:4d:27:be:fe:f4:bd:85:97:cc:2b:18:fc:84:e5:92:
         04:10:d2:51:f6:d7:1d:58:c2:53:7a:72:b4:a4:1a:99:9e:ff:
         be:04:b4:8b:68:d9:a2:84:98:1b:a3:ab:3f:0e:b7:d7:a7:cd:
         54:9b:4f:0c:af:93:e8:9f:49:79:02:4a:50:bf:84:32:f9:5b:
         67:61:fd:f6:a6:db:84:8b:f1:97:54:bf:ca:78:7c:3b:53:97:
         1a:4e:5c:99:d3:4f:a7:ca:7c:40:d0:2a:fc:f2:3f:b5:ea:a0:
         d3:c2:e7:a2:9c:1c:c1:a4:7c:39:38:b1:d4:60:1f:97:58:b5:
         f2:e8:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:54 2025 by rpki-client