Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.mft
File:                     juc6DUPuGdAsXkf3KPffbziy2jU.mft (raw, json)
Hash identifier:          yVKaeZ1tAPeJeru2XDtB8f8KXSJ/FkrKMk84kSXQhDw=
Subject key identifier:   00:15:D4:23:6D:72:27:65:10:34:91:02:57:46:15:6C:02:1F:25:EE
Authority key identifier: 8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35
Certificate issuer:       /CN=8ee73a0d43ee19d02c5e47f728f7df6f38b2da35
Certificate serial:       01831B11571BA43578727DCF790D4AB984AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/juc6DUPuGdAsXkf3KPffbziy2jU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.mft
Manifest number:          0AA7
Signing time:             Thu 08 Sep 2022 03:07:44 +0000
Manifest this update:     Thu 08 Sep 2022 03:07:44 +0000
Manifest next update:     Fri 09 Sep 2022 03:07:44 +0000
Files and hashes:         1: I_1nemvX0pBi3LijGe8TNl74zUc.roa (hash: lFTrTck+S3hC03h+gl5Vv9OVs9X3bz9lt7Wt3ak929E=)
                          2: K8BNFLXjcIvgDvipI94hwBCOwZk.roa (hash: atqJ0DCCgfaWDZTT5TMG0i0Ij+QIw4+a4O/IiQW7x/g=)
                          3: juc6DUPuGdAsXkf3KPffbziy2jU.crl (hash: 98CEmkFzZ65tER7LpH7kn0MwDsKRq0U2/XRwjw2zzK0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:1b:11:57:1b:a4:35:78:72:7d:cf:79:0d:4a:b9:84:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee73a0d43ee19d02c5e47f728f7df6f38b2da35
        Validity
            Not Before: Sep  8 03:07:44 2022 GMT
            Not After : Sep  9 03:07:44 2022 GMT
        Subject: CN=0015d4236d722765103491025746156c021f25ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:a0:01:cd:34:c0:a4:b0:9f:24:ed:c3:53:
                    37:fb:00:44:06:c8:e1:b9:f2:4a:e2:d4:75:9e:04:
                    fc:8b:5b:ab:6a:f7:1c:a9:f6:da:38:7c:6c:f2:a5:
                    58:12:b2:4f:a6:1c:79:f5:66:cd:85:21:f9:61:00:
                    cf:70:2a:51:d4:d0:c9:a2:b5:25:1e:90:fe:fd:fa:
                    d5:42:25:2e:b8:6d:e5:d7:ba:fc:6c:1a:6b:e3:69:
                    9b:ce:5c:92:7e:6f:0b:e3:a4:a3:63:c7:23:31:64:
                    55:29:7c:fc:20:59:a7:ab:90:f5:84:4e:dc:52:33:
                    ce:39:8c:0f:0d:f0:f1:dd:22:ce:f3:30:cb:4b:6b:
                    ab:c6:1a:0f:4c:a4:84:d2:8b:75:af:61:ce:fa:d0:
                    0f:2a:6f:16:b4:1f:5c:e6:29:39:bf:99:98:55:bd:
                    96:a5:cc:98:66:95:de:e6:47:5e:30:55:dc:39:38:
                    6a:d3:2b:7c:4f:a5:18:88:25:4d:d4:07:76:12:b4:
                    65:cc:2a:5c:23:52:03:0a:a8:86:ff:95:b0:7e:ff:
                    06:a0:6f:6a:d6:d8:dc:84:ae:7a:b5:ab:19:a1:c5:
                    64:d2:87:1a:15:dc:ba:f5:d1:10:ba:01:1a:6b:39:
                    4d:34:92:26:d5:4b:e6:ba:87:2c:df:25:70:bc:c7:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:15:D4:23:6D:72:27:65:10:34:91:02:57:46:15:6C:02:1F:25:EE
            X509v3 Authority Key Identifier:
                keyid:8E:E7:3A:0D:43:EE:19:D0:2C:5E:47:F7:28:F7:DF:6F:38:B2:DA:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/juc6DUPuGdAsXkf3KPffbziy2jU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fb58b0-7e24-4333-b859-823c654f05d1/1/juc6DUPuGdAsXkf3KPffbziy2jU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d8:3e:3d:88:bf:29:b4:66:b3:9c:ad:7a:e0:3e:f2:2c:f2:
         30:98:9f:f5:a1:01:b2:54:f4:85:ca:61:be:d8:49:4f:df:44:
         75:9d:37:08:4a:11:f6:7a:f5:b5:52:aa:c2:5a:dc:dd:e7:97:
         9f:63:83:f5:93:aa:06:3b:cd:be:ae:a8:ee:a5:55:c9:5d:97:
         d0:10:a3:ea:00:df:8c:1d:57:4c:52:4a:e2:4f:47:06:e0:6c:
         03:81:e8:45:b9:e7:37:18:91:c9:2f:5d:2a:9d:f2:9d:78:e0:
         69:70:1c:86:fa:c0:f5:fd:68:41:bc:d8:c4:27:15:fd:89:f8:
         47:a0:f4:ca:26:16:ff:60:b3:04:32:ba:21:ab:f2:21:d1:a0:
         8d:a3:fe:4c:db:58:14:38:bb:88:31:35:99:25:2b:3b:d8:12:
         84:19:8b:8b:08:c5:22:83:2c:f7:c1:bc:39:1a:3c:cc:9c:ef:
         c0:e5:75:e8:9d:11:03:d7:f6:3f:6c:0c:c0:bb:8d:45:b1:b0:
         eb:d9:47:51:1d:e4:18:fd:65:5e:2f:fa:1a:1f:fd:69:30:70:
         70:9c:c4:d4:ca:64:f2:12:5b:56:3f:b1:83:b9:6b:b4:ac:33:
         cb:59:f3:b9:08:75:ad:5b:6e:e4:f5:8b:87:16:79:7a:53:59:
         08:f6:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:21 2025 by rpki-client