Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/pP-dwLZvJ5rQXKL06kM5gczg8G0.mft
File:                     pP-dwLZvJ5rQXKL06kM5gczg8G0.mft (raw, json)
Hash identifier:          Abs0pdPELJ1qTdGzUCsID81fRheVl+B9h26EWUG/ehI=
Subject key identifier:   0B:4E:E4:E8:A1:EA:1B:D3:6D:66:81:53:13:87:D1:FF:86:70:AA:A7
Authority key identifier: A4:FF:9D:C0:B6:6F:27:9A:D0:5C:A2:F4:EA:43:39:81:CC:E0:F0:6D
Certificate issuer:       /CN=a4ff9dc0b66f279ad05ca2f4ea433981cce0f06d
Certificate serial:       018A49524A3405F3ABA4AB67892FFB353F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pP-dwLZvJ5rQXKL06kM5gczg8G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/pP-dwLZvJ5rQXKL06kM5gczg8G0.mft
Manifest number:          087E
Signing time:             Thu 31 Aug 2023 02:00:44 +0000
Manifest this update:     Thu 31 Aug 2023 02:00:44 +0000
Manifest next update:     Fri 01 Sep 2023 02:00:44 +0000
Files and hashes:         1: SWQmo8UlrgTt1wh5wnr-w5sXKWs.roa (hash: 0VmVJOt3tOUoLh60liErcZ0lPk/NKXs8aUU4q0gdzUI=)
                          2: pP-dwLZvJ5rQXKL06kM5gczg8G0.crl (hash: ersZbaQ7klyZ4DFJm72uI5i7P9pRZ/fCQH28kKXyo8M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:49:52:4a:34:05:f3:ab:a4:ab:67:89:2f:fb:35:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4ff9dc0b66f279ad05ca2f4ea433981cce0f06d
        Validity
            Not Before: Aug 31 02:00:44 2023 GMT
            Not After : Sep  1 02:00:44 2023 GMT
        Subject: CN=0b4ee4e8a1ea1bd36d6681531387d1ff8670aaa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4e:49:98:2b:35:cf:04:32:76:01:f2:73:15:
                    9e:a1:76:c5:96:bc:2d:2f:a5:64:98:18:71:c3:eb:
                    5a:cf:87:c4:06:bb:49:4d:fb:af:c4:74:db:bb:46:
                    3c:28:f6:77:1a:96:8e:c3:17:1e:bb:ec:85:3d:52:
                    71:02:c5:77:4f:b0:43:bd:47:73:90:5a:55:35:da:
                    d2:c1:b6:d0:29:bf:f8:7e:c9:ec:62:c0:71:7c:dd:
                    f6:3f:d0:ee:38:ca:5e:d7:74:1f:d9:24:17:22:ec:
                    2c:fc:f5:42:9c:d2:17:9c:0b:2f:71:e5:18:27:0a:
                    5e:f3:ad:a1:44:5f:d4:47:6f:2c:85:3d:55:05:7b:
                    2f:54:b0:f5:ba:96:8c:6c:f9:44:b1:2c:86:99:3e:
                    6d:b1:18:ee:47:11:39:84:2f:e9:5a:9c:bc:ac:43:
                    b6:20:c5:3b:7f:ec:04:fd:27:93:8b:8b:1c:ec:42:
                    4e:58:98:2f:73:d5:76:40:68:3e:e9:39:91:f5:a6:
                    df:59:39:a6:38:73:86:0e:b5:5e:a1:e1:29:45:9e:
                    99:c9:8d:7e:01:24:ad:46:7d:6b:0f:46:b8:f5:48:
                    58:ff:75:72:70:94:a2:5e:36:a6:c2:ba:97:6a:0c:
                    6d:1c:9c:aa:52:12:8b:4e:35:93:9e:0e:2a:85:5c:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4E:E4:E8:A1:EA:1B:D3:6D:66:81:53:13:87:D1:FF:86:70:AA:A7
            X509v3 Authority Key Identifier:
                keyid:A4:FF:9D:C0:B6:6F:27:9A:D0:5C:A2:F4:EA:43:39:81:CC:E0:F0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP-dwLZvJ5rQXKL06kM5gczg8G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/pP-dwLZvJ5rQXKL06kM5gczg8G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/aa813e-a684-47ba-98ad-9b18237cdb94/1/pP-dwLZvJ5rQXKL06kM5gczg8G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a0:5b:d6:af:5c:21:c8:b7:52:96:05:cc:75:59:0f:8e:86:
         93:e7:8b:a3:06:c8:f2:06:34:db:e3:8e:e1:ea:1d:6b:a4:90:
         31:81:da:a0:f0:c2:b9:7e:4e:f3:af:a7:aa:00:b6:d9:fa:85:
         b5:38:96:a9:40:16:04:48:7f:a8:7a:ba:02:10:f4:d4:01:62:
         5b:51:be:1e:b9:42:f9:68:00:a4:0c:9f:cc:b2:3e:8b:18:cb:
         ed:3f:69:d6:8c:c4:f6:37:4d:f9:be:7e:dc:87:eb:e5:ca:84:
         eb:1b:1e:a5:b5:2d:27:d1:fb:1e:99:3d:9d:20:66:13:c0:3d:
         91:d9:5d:db:36:0a:4b:86:90:e9:09:fd:28:7d:fc:63:f9:71:
         e5:fa:48:71:0a:03:27:dd:36:23:00:f9:70:9f:22:87:f3:65:
         32:53:ee:d0:06:a1:6f:30:c1:a1:75:c0:16:cc:5a:96:81:ca:
         09:0f:c8:aa:e4:53:66:06:ef:51:08:63:d1:37:f2:05:b9:46:
         e4:a0:d9:1e:ce:d7:51:cb:c0:a3:73:b1:02:e5:9c:8f:6e:4c:
         64:8f:24:3d:a5:59:33:ee:9c:e7:bc:61:4a:95:5a:cf:26:85:
         3a:84:bb:6a:6a:31:ae:23:f8:25:4b:40:e2:bc:9a:b9:c4:6f:
         50:02:f5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:00:38 2025 by rpki-client