Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/eDX3bTd6M4fx8PxPR72I3JCqafs.mft
File:                     eDX3bTd6M4fx8PxPR72I3JCqafs.mft (raw, json)
Hash identifier:          jvxGPPloc49iSkBmtNDzRLPXqb7gUkMPrOJjMqOHL5I=
Subject key identifier:   7F:1F:61:54:AF:E4:9E:E2:75:B9:E0:C7:74:89:37:90:36:DF:77:94
Authority key identifier: 78:35:F7:6D:37:7A:33:87:F1:F0:FC:4F:47:BD:88:DC:90:AA:69:FB
Certificate issuer:       /CN=7835f76d377a3387f1f0fc4f47bd88dc90aa69fb
Certificate serial:       018D6A565BBAFE48103A219FFBD3A55C3D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDX3bTd6M4fx8PxPR72I3JCqafs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/eDX3bTd6M4fx8PxPR72I3JCqafs.mft
Manifest number:          084D
Signing time:             Fri 02 Feb 2024 15:01:00 +0000
Manifest this update:     Fri 02 Feb 2024 15:01:00 +0000
Manifest next update:     Sat 03 Feb 2024 15:01:00 +0000
Files and hashes:         1: 1k-M5Hc4cubNo0FvW-MKAYbv00k.roa (hash: mWSE0HoDm6fRSOfitRjL4D9tEfPglVMJP2yITUmQ0xs=)
                          2: eDX3bTd6M4fx8PxPR72I3JCqafs.crl (hash: VGH1wjOoMUptKGHTuenXjzMeJtnD1aP9gSBhGn0kKgk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:6a:56:5b:ba:fe:48:10:3a:21:9f:fb:d3:a5:5c:3d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7835f76d377a3387f1f0fc4f47bd88dc90aa69fb
        Validity
            Not Before: Feb  2 15:01:00 2024 GMT
            Not After : Feb  3 15:01:00 2024 GMT
        Subject: CN=7f1f6154afe49ee275b9e0c77489379036df7794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:dd:38:83:70:c2:84:4a:bc:11:5a:0d:b5:
                    ba:85:7c:a4:0f:8e:86:75:87:d9:ac:95:6b:a6:65:
                    20:24:2c:01:5a:9d:2f:02:21:c3:5c:bc:24:eb:ea:
                    48:27:c9:52:dd:11:b1:87:8e:f1:61:49:a4:fd:ae:
                    01:ce:4a:e0:a8:eb:d9:80:32:05:4f:dd:3c:fd:ac:
                    a3:c6:69:fc:58:e1:ee:17:58:62:a2:a0:08:71:8d:
                    05:6c:55:6b:ee:b3:78:31:31:28:ec:44:5c:c3:db:
                    75:9e:ae:ce:dd:1c:4c:d3:2d:9d:f5:a5:47:86:59:
                    ae:a6:82:93:a9:d4:d0:31:71:e0:3c:d1:84:9a:89:
                    9b:63:a1:d9:13:0a:44:93:fa:d6:4a:be:bf:93:35:
                    9d:3e:41:2d:eb:77:13:a9:42:00:73:cc:60:e2:4e:
                    27:b6:40:69:36:14:8d:81:6e:ed:2d:15:67:31:44:
                    49:e3:d3:23:f8:7a:a2:34:b8:62:4b:41:75:ce:fe:
                    00:4b:60:31:fd:5e:52:80:2d:24:5f:c0:9b:43:2b:
                    75:d0:31:bd:10:b7:ab:37:41:d6:2d:5d:45:1d:2f:
                    ac:bf:32:c3:44:e8:3c:4e:5e:8f:84:ff:cc:f8:8f:
                    9d:b5:b6:b9:75:bf:a4:93:0b:0b:fa:12:11:0d:65:
                    77:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1F:61:54:AF:E4:9E:E2:75:B9:E0:C7:74:89:37:90:36:DF:77:94
            X509v3 Authority Key Identifier:
                keyid:78:35:F7:6D:37:7A:33:87:F1:F0:FC:4F:47:BD:88:DC:90:AA:69:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDX3bTd6M4fx8PxPR72I3JCqafs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/eDX3bTd6M4fx8PxPR72I3JCqafs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/206bc6-f377-44b9-b53a-65ec722e7a92/1/eDX3bTd6M4fx8PxPR72I3JCqafs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:02:aa:f5:4d:23:92:f2:96:06:da:28:d4:56:2d:e7:ff:b5:
         8d:f7:90:d0:81:df:91:92:6f:ca:b7:4d:6b:31:ed:2f:83:be:
         d2:8d:e7:c2:d3:f2:9a:ff:66:44:02:0b:6e:78:e3:b9:ca:94:
         6a:bd:15:27:4c:be:77:a3:00:1e:ff:c4:0a:86:00:fa:d8:5a:
         90:f4:5b:b0:dd:aa:8c:4a:60:1c:76:cc:8c:de:c8:41:23:d6:
         2c:78:4a:40:7f:7a:43:9e:60:37:52:5e:51:9f:38:78:9d:19:
         6c:04:f6:3a:65:ad:e4:55:db:b9:03:8a:a1:fa:c1:6f:cf:30:
         4e:63:1a:b8:6a:0e:bd:ff:67:2a:ce:dc:ef:83:ac:b6:99:e6:
         dc:a6:46:26:fc:67:9b:6c:f6:94:64:1e:e4:ad:4c:46:7a:71:
         dd:4b:13:92:6f:ed:4f:68:ee:38:32:65:cf:d7:c7:a0:26:62:
         58:f7:a3:d7:45:b7:99:2c:7a:dd:bb:8c:59:7f:28:9b:e9:2d:
         86:d4:98:e4:f6:81:f5:ca:fd:4c:88:20:ed:f1:aa:9d:50:ca:
         c4:b7:94:e2:95:18:37:5a:ab:37:73:ac:5c:1f:f2:a5:b2:b4:
         4b:f3:ef:46:3f:77:97:f6:d8:0b:75:8d:b1:3e:27:20:35:36:
         9e:05:66:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:28 2025 by rpki-client