Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/Z1AJ71eA0aT05nfmK_o7R_6-kO8.mft
File:                     Z1AJ71eA0aT05nfmK_o7R_6-kO8.mft (raw, json)
Hash identifier:          cRvSCBZV/BAr/yw2mxA5YQQvmfMRewhs/06fc8ydyjU=
Subject key identifier:   7D:83:F3:26:48:3E:DD:A0:E2:1F:9B:58:31:46:E6:60:1D:BF:88:FC
Authority key identifier: 67:50:09:EF:57:80:D1:A4:F4:E6:77:E6:2B:FA:3B:47:FE:BE:90:EF
Certificate issuer:       /CN=675009ef5780d1a4f4e677e62bfa3b47febe90ef
Certificate serial:       01853800024D9599836A5DBC62EE93084855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z1AJ71eA0aT05nfmK_o7R_6-kO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/Z1AJ71eA0aT05nfmK_o7R_6-kO8.mft
Manifest number:          0BDC
Signing time:             Thu 22 Dec 2022 04:03:22 +0000
Manifest this update:     Thu 22 Dec 2022 04:03:22 +0000
Manifest next update:     Fri 23 Dec 2022 04:03:22 +0000
Files and hashes:         1: Z1AJ71eA0aT05nfmK_o7R_6-kO8.crl (hash: CrjEdF1KUE3FyZuHVhrdCvcJemTMSTOhUYjjExla/94=)
                          2: pKR-bKRNh6ZCrN15IQnIzxacQg0.roa (hash: RLLlnLg4pwkP8ARFHlYoXdga4Zteiunk2kJ/jd0Btq4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:38:00:02:4d:95:99:83:6a:5d:bc:62:ee:93:08:48:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=675009ef5780d1a4f4e677e62bfa3b47febe90ef
        Validity
            Not Before: Dec 22 04:03:22 2022 GMT
            Not After : Dec 23 04:03:22 2022 GMT
        Subject: CN=7d83f326483edda0e21f9b583146e6601dbf88fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:96:80:d7:2d:90:e9:51:e3:8b:00:5c:c7:87:
                    6f:0e:3a:2c:1f:f7:7d:32:a7:af:63:79:30:4f:60:
                    be:04:ae:fa:f0:cc:87:bc:8f:b8:ec:b8:41:97:57:
                    ea:45:cc:5e:74:50:e1:06:12:1f:70:cb:61:c8:6a:
                    4e:42:b5:16:3f:88:88:85:6b:71:ef:7a:04:f5:fb:
                    f3:7c:ca:fc:d3:a6:74:4d:f7:b8:c9:05:12:ac:46:
                    21:03:cb:a2:7e:8c:ca:1b:cd:f2:5c:3d:b4:36:0c:
                    03:b7:6c:41:b2:dd:5c:a0:ff:8c:1d:55:2f:53:e5:
                    a6:21:4d:d7:96:81:7a:65:ef:a1:93:0f:6b:cd:46:
                    6d:01:37:33:07:a8:66:56:b5:96:1b:62:9d:86:c3:
                    de:ea:a3:8a:21:71:6a:b8:dc:50:f1:39:30:cf:f5:
                    0a:29:ca:50:f1:f9:f5:9a:6a:e5:b3:87:4d:eb:3f:
                    08:6c:19:ff:0b:e6:b0:3e:e9:c0:e4:19:fd:7f:61:
                    e7:1a:21:15:a2:47:79:1d:ca:7e:ec:a5:16:de:a2:
                    1e:56:a4:78:58:83:af:bd:de:05:ac:7a:6c:c0:38:
                    13:cd:32:e7:9f:31:8c:db:d7:27:17:11:a1:cf:27:
                    6d:7b:24:ad:da:9c:5e:d5:8c:66:97:74:30:46:6d:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:83:F3:26:48:3E:DD:A0:E2:1F:9B:58:31:46:E6:60:1D:BF:88:FC
            X509v3 Authority Key Identifier:
                keyid:67:50:09:EF:57:80:D1:A4:F4:E6:77:E6:2B:FA:3B:47:FE:BE:90:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1AJ71eA0aT05nfmK_o7R_6-kO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/Z1AJ71eA0aT05nfmK_o7R_6-kO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/245ec8-20a5-4ffa-ab6b-7b5e9208c0e1/1/Z1AJ71eA0aT05nfmK_o7R_6-kO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:86:71:fe:b5:db:3e:f0:8a:df:5d:10:f2:42:a7:f2:83:c4:
         3e:e0:a5:db:e9:4f:6b:21:c6:b9:16:fe:87:a9:29:b8:c8:be:
         66:4a:f4:02:1f:5d:2a:f7:88:3d:67:b2:de:05:8e:aa:52:0a:
         a3:17:89:d1:91:4c:7c:a7:c5:14:cd:af:c4:a5:a6:61:ce:9f:
         87:6e:29:96:14:5e:2e:4f:46:7c:f9:f5:f0:2f:34:6d:ba:3a:
         f2:af:c3:9f:a7:70:64:86:de:ca:45:81:8c:44:c0:0b:2b:5d:
         70:ce:2e:06:85:fb:87:ca:a8:8e:f2:2f:c8:64:a9:26:a1:5d:
         29:2a:c7:50:23:b1:1b:92:2a:d7:33:92:0a:e1:ed:44:f0:27:
         36:e2:54:e6:a7:2e:3e:e4:5f:23:54:02:14:c2:65:e4:e3:09:
         96:bf:86:bb:e1:88:8a:f3:96:68:b3:41:e2:20:6b:0d:98:31:
         24:59:46:c3:76:fc:0f:0e:fa:65:f9:ee:a1:82:b7:a4:cf:69:
         8f:c9:c7:cd:9d:a0:2e:ca:06:7c:08:ba:1e:ee:a5:04:db:8c:
         3a:08:34:a6:ea:80:b0:be:fd:6d:62:28:e5:5e:e3:a1:b3:ee:
         24:80:a5:43:b1:75:de:f2:42:59:e8:6e:bb:b9:74:68:38:1a:
         57:bf:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:23 2025 by rpki-client