Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/MoMVHoOGdXVGKSYEJb_86SnYqO0.mft
File:                     MoMVHoOGdXVGKSYEJb_86SnYqO0.mft (raw, json)
Hash identifier:          gLkmP0FRYgcswmBWyKjBhoZt0YSATwkrxIyhk7Bqfio=
Subject key identifier:   16:58:6A:87:9B:87:97:C8:F3:B9:61:45:45:E1:55:6B:C7:E5:90:C4
Authority key identifier: 32:83:15:1E:83:86:75:75:46:29:26:04:25:BF:FC:E9:29:D8:A8:ED
Certificate issuer:       /CN=3283151e838675754629260425bffce929d8a8ed
Certificate serial:       0195CB3F163E388AF86386A4B869327919EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MoMVHoOGdXVGKSYEJb_86SnYqO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/MoMVHoOGdXVGKSYEJb_86SnYqO0.mft
Manifest number:          14B6
Signing time:             Tue 25 Mar 2025 03:01:04 +0000
Manifest this update:     Tue 25 Mar 2025 03:01:04 +0000
Manifest next update:     Wed 26 Mar 2025 03:01:04 +0000
Files and hashes:         1: J_l_zy93qt1DSVPG0doUGTadnUI.roa (hash: UqMuJb7bTdBE+zNiQ2/WKCoFaOYhYpwDUPCGWXpNxgw=)
                          2: MoMVHoOGdXVGKSYEJb_86SnYqO0.crl (hash: RSD1NS14v2FES/Z2ciVo76NephtoIpRShCeAHkTLRsc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:cb:3f:16:3e:38:8a:f8:63:86:a4:b8:69:32:79:19:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3283151e838675754629260425bffce929d8a8ed
        Validity
            Not Before: Mar 25 03:01:04 2025 GMT
            Not After : Mar 26 03:01:04 2025 GMT
        Subject: CN=16586a879b8797c8f3b9614545e1556bc7e590c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:ab:49:9f:91:2b:00:a8:08:49:9d:5f:af:
                    18:0d:a8:b7:5c:50:f4:3d:d6:a3:a0:3c:9c:e3:23:
                    cd:ae:15:6b:7d:79:71:12:ad:d4:cd:6f:fb:35:37:
                    db:72:a8:52:b7:b1:c4:f9:78:7f:9f:d9:cf:95:1f:
                    4f:d9:35:3c:22:a4:31:ef:6e:8c:a3:ee:c7:31:61:
                    17:16:77:eb:8d:a0:97:e0:2a:f8:08:f3:71:b1:ba:
                    a0:fc:0e:6d:c2:9e:fd:e3:9e:9d:1a:cc:fc:3b:81:
                    ee:31:c3:a8:f5:a1:84:87:60:a2:10:1b:f1:b9:2b:
                    87:28:c3:84:35:b4:e8:ca:97:ab:ff:ac:33:05:08:
                    a4:57:c1:ae:45:9f:b3:33:9b:f2:8c:e8:02:fc:17:
                    61:4f:0a:32:43:ca:d1:a3:21:fa:27:a5:25:0d:a6:
                    97:e9:dc:b3:62:c6:0c:1c:ce:db:3f:bd:72:d4:44:
                    ef:f2:e4:8f:93:fe:7d:bd:00:ed:0c:f6:58:b4:c3:
                    1d:77:36:e9:0b:95:7a:60:34:73:65:89:6f:be:ce:
                    63:51:9d:93:da:4b:93:2d:1f:00:97:b3:c9:f4:a5:
                    38:b7:dd:e1:97:0a:d5:c4:48:10:a7:56:b7:4b:f9:
                    c5:b2:43:86:a0:43:6f:73:94:fc:6b:9f:f0:c8:41:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:58:6A:87:9B:87:97:C8:F3:B9:61:45:45:E1:55:6B:C7:E5:90:C4
            X509v3 Authority Key Identifier:
                keyid:32:83:15:1E:83:86:75:75:46:29:26:04:25:BF:FC:E9:29:D8:A8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MoMVHoOGdXVGKSYEJb_86SnYqO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/MoMVHoOGdXVGKSYEJb_86SnYqO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7df50a-2d87-4d09-b9ac-05821d4099b8/1/MoMVHoOGdXVGKSYEJb_86SnYqO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:f2:38:d3:32:c2:24:bc:98:1f:ba:01:93:c1:37:f0:1d:
         9e:01:43:73:fc:42:3e:80:30:b4:06:1c:51:77:6a:54:0f:dd:
         3d:1c:a2:3f:58:72:4b:5b:9b:16:ef:09:6b:7c:00:32:9b:ac:
         8a:fc:d5:23:57:93:21:56:3b:d5:b8:3e:d1:54:76:a8:a5:ff:
         f4:95:74:a1:35:a4:fd:bc:49:68:9c:d4:64:e3:d9:18:54:f0:
         6d:fc:d9:86:c9:67:c6:ba:0a:e3:5e:68:4d:dc:d9:4a:63:b1:
         4d:b9:38:1a:7a:91:06:4b:37:32:cd:e7:15:fe:9b:0d:f8:ff:
         f2:ee:6b:ac:d6:60:f7:d3:06:49:8e:bc:f7:c3:89:9d:94:5d:
         b9:a0:e4:1f:98:64:30:27:e0:25:78:34:82:02:cc:d1:f0:75:
         f8:df:34:76:ca:c2:a9:5a:95:67:d2:d5:90:5a:a8:97:f4:c6:
         c8:73:b5:2b:2b:95:a6:26:bc:26:02:a9:6c:2f:e6:5f:0f:99:
         f2:1d:d9:54:0d:5e:4a:a2:96:ba:12:ba:30:1f:78:e5:06:fa:
         54:25:ab:84:d9:ac:0c:9f:f0:d0:e1:b7:46:23:95:0b:2d:63:
         f9:95:8d:0f:be:2d:0b:7a:cf:e1:11:cc:7a:e8:c5:ef:ac:d5:
         81:7a:14:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:55:27 2025 by rpki-client