Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
File:                     A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft (raw, json)
Hash identifier:          7uObuVDg7RpXMAmdP01+bzJdF5o2Vb4DKkMthH5xs3o=
Subject key identifier:   34:23:EA:06:32:01:45:45:5C:16:FB:FD:02:0A:13:04:71:66:88:20
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Certificate issuer:       /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial:       0195DFD8D5BC59AA8D586A38A79A5C261C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
Manifest number:          10CE
Signing time:             Sat 29 Mar 2025 03:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:24 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:24 +0000
Files and hashes:         1: A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl (hash: wc0AUFNSZWUNi7+Qty5+FxrV7QD5OHE44theQ+BLy8g=)
                          2: woal0JSD05J3-HE_srcu4HZklsQ.roa (hash: K5meebvZSg84nTxN3gUNn0hvuS4tbvBQ0f3EUj0mZV8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:d5:bc:59:aa:8d:58:6a:38:a7:9a:5c:26:1c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
        Validity
            Not Before: Mar 29 03:01:24 2025 GMT
            Not After : Mar 30 03:01:24 2025 GMT
        Subject: CN=3423ea06320145455c16fbfd020a130471668820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c1:4f:7e:99:8d:75:0a:5d:ff:6c:71:4b:af:
                    44:b5:31:e9:97:3e:53:9f:3a:9a:e7:c2:a3:41:6e:
                    ce:75:20:94:cf:6a:a0:81:fe:05:83:f2:4a:d3:8d:
                    32:9d:bc:a2:dc:ee:7c:c8:5a:3d:fa:b9:35:29:40:
                    7c:7f:28:ed:b6:ad:98:14:e2:de:93:df:58:c7:53:
                    a1:36:70:ec:a5:62:31:37:ec:d8:2e:c2:92:86:e8:
                    6a:59:e1:60:48:22:65:41:0a:2d:f0:c6:5b:1f:6d:
                    bf:ef:6f:cd:3e:e5:69:e3:dc:33:fe:a6:c0:a6:ff:
                    9d:03:13:49:70:ce:a6:f9:aa:76:2b:40:4f:2f:e1:
                    22:e5:97:e6:43:c4:bf:8d:03:9e:46:3b:65:58:64:
                    48:fe:06:49:df:78:82:53:82:dc:6d:8c:ac:ec:fa:
                    f0:90:78:cf:e5:a3:8b:ad:0b:b1:3b:2b:7d:c7:22:
                    2d:62:aa:06:2f:5c:38:93:09:0d:4c:71:a0:a6:1a:
                    56:c0:39:b7:18:6c:11:13:b1:70:f3:f4:5e:6c:f2:
                    94:e0:bd:ab:d7:00:ae:f0:2e:f3:09:5e:d9:85:8e:
                    89:d7:4d:ee:ab:45:60:09:43:35:2f:a0:0b:9f:18:
                    ed:00:2f:57:35:f8:3d:78:50:14:cb:10:74:4c:b5:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:23:EA:06:32:01:45:45:5C:16:FB:FD:02:0A:13:04:71:66:88:20
            X509v3 Authority Key Identifier:
                keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:c1:76:d9:1d:0b:4d:69:ad:e6:35:d3:49:18:af:27:b9:4c:
         85:97:8b:4d:0e:46:d3:9b:d3:a1:2a:e1:6a:e9:d2:1a:15:a3:
         92:e2:27:f1:38:2f:00:3a:74:d6:d4:3a:13:b6:dc:da:48:b4:
         5c:75:c5:d3:4d:0c:59:70:ea:33:08:7f:8f:d5:b3:2c:a6:4a:
         08:b9:97:fd:66:f3:24:9e:53:68:32:4b:0e:f5:2f:69:e0:98:
         07:73:3b:d4:08:a2:16:a0:f5:65:a3:62:86:6f:01:75:12:6c:
         5c:2b:5f:b2:a5:c4:81:3e:cd:53:14:a4:f1:1c:0f:7c:75:f0:
         8e:18:14:2a:93:07:0d:84:70:b2:e7:d0:03:74:1a:83:2f:16:
         d2:60:6f:39:d5:21:13:f7:45:9f:97:0e:71:e2:c0:d4:dc:51:
         fb:30:6f:be:8b:6a:b2:78:9a:03:f9:82:b8:5f:96:af:be:85:
         f6:36:7a:eb:96:9e:c6:ae:b5:15:7c:1b:7b:2b:0b:22:f6:38:
         7f:02:6c:03:81:ce:ac:29:0f:cb:23:75:dd:c5:db:89:90:bc:
         d9:ea:f4:33:b0:41:00:18:7f:2d:7c:f4:d6:78:d3:f0:c1:8f:
         4a:a8:19:53:d5:68:f3:ad:ad:f8:ab:2d:05:87:12:01:d4:e2:
         22:e5:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:48:19 2025 by rpki-client