Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
File:                     BjYJAf_k8jwYxFtUSrh1nbVSkss.mft (raw, json)
Hash identifier:          gtG0d5MBbSIx+Pc3AWCo0JPZH1YwPo8HpT2UP9qnAqg=
Subject key identifier:   B3:DA:6E:60:EC:03:70:D3:A3:A1:CA:6D:0C:F0:A8:C6:C1:D2:D4:F7
Authority key identifier: 06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB
Certificate issuer:       /CN=06360901ffe4f23c18c45b544ab8759db55292cb
Certificate serial:       018B8F43151CD005FE317A81C4DE27D0D78C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjYJAf_k8jwYxFtUSrh1nbVSkss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft
Manifest number:          0876
Signing time:             Thu 02 Nov 2023 09:00:20 +0000
Manifest this update:     Thu 02 Nov 2023 09:00:20 +0000
Manifest next update:     Fri 03 Nov 2023 09:00:20 +0000
Files and hashes:         1: 28UldnFsmAafUI8I4dWBUzZX9S4.roa (hash: FNFeofRb0EhHNxQES6o+h9KrzLPy2kZ2DJpQ8GR/Xbw=)
                          2: BjYJAf_k8jwYxFtUSrh1nbVSkss.crl (hash: qYJEbhE+HD1+Kg5rekqPO1eVmDCrBDqLfinc1+xmPcg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:43:15:1c:d0:05:fe:31:7a:81:c4:de:27:d0:d7:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06360901ffe4f23c18c45b544ab8759db55292cb
        Validity
            Not Before: Nov  2 09:00:20 2023 GMT
            Not After : Nov  3 09:00:20 2023 GMT
        Subject: CN=b3da6e60ec0370d3a3a1ca6d0cf0a8c6c1d2d4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:09:98:c1:11:7b:80:85:8b:a8:f6:a8:a4:
                    07:65:b6:c8:e4:68:ec:49:ca:21:cf:3a:e5:d0:fa:
                    eb:7a:38:70:36:cf:cc:f8:c6:9c:7f:3e:46:15:f3:
                    15:94:d4:bb:71:09:3d:05:0f:fd:5f:92:b3:91:7f:
                    b7:62:c2:5f:19:7a:d6:e6:4a:ec:a4:ce:57:a1:2a:
                    a5:dc:75:98:83:28:86:32:63:a3:97:c6:e8:2e:f9:
                    1d:64:57:1d:c9:f5:5b:ce:57:6d:b5:84:a8:99:db:
                    10:50:84:fa:1f:5a:05:03:4d:2c:cf:3d:09:fe:29:
                    d3:bb:30:ff:0f:88:c7:26:ff:14:dc:5d:19:6b:4c:
                    02:85:8a:ab:56:02:b0:2c:c1:3f:b7:21:75:3c:1b:
                    92:e2:d2:4b:c0:6f:4c:84:41:b0:03:70:84:4e:d2:
                    3f:76:8e:f4:f9:ce:66:c5:13:3c:b3:84:43:c5:63:
                    4e:50:bb:3c:c4:f9:01:93:90:94:46:fc:ea:f8:bd:
                    d2:bb:3f:15:cf:33:83:28:ab:7f:a1:19:59:20:a0:
                    77:ba:2f:94:7a:05:67:2b:ab:32:9e:62:2c:8e:25:
                    40:f4:0b:42:36:40:31:12:22:36:6e:3b:cd:d5:fc:
                    60:21:6a:e7:9a:05:89:b8:be:35:95:af:fc:00:fd:
                    2c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:6E:60:EC:03:70:D3:A3:A1:CA:6D:0C:F0:A8:C6:C1:D2:D4:F7
            X509v3 Authority Key Identifier:
                keyid:06:36:09:01:FF:E4:F2:3C:18:C4:5B:54:4A:B8:75:9D:B5:52:92:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjYJAf_k8jwYxFtUSrh1nbVSkss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/12b60c-e647-4375-9869-d6e1e2af0b3c/1/BjYJAf_k8jwYxFtUSrh1nbVSkss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e2:b4:0c:72:e3:c0:07:5d:25:79:8f:e6:c1:42:65:41:2d:
         3f:cf:c2:c2:0c:38:0b:6b:e2:28:94:ee:03:05:52:90:16:1d:
         dd:36:25:77:a8:21:1d:14:fc:74:e2:be:04:a5:52:71:0b:be:
         0b:8d:4e:9c:97:4b:7c:fe:97:48:58:74:6d:b4:74:c7:16:20:
         cd:ab:b4:c7:f8:b2:64:e8:82:99:42:dc:fa:e3:d5:28:7d:86:
         df:06:ea:bc:17:4b:9f:a2:52:e7:80:6b:dc:e5:59:0b:18:fa:
         9e:92:c0:b7:57:b4:5b:af:2f:43:03:e9:93:58:59:b8:e1:a1:
         71:5f:d2:ef:61:e1:a4:6d:5e:f1:da:6e:d2:ea:82:1b:cd:e5:
         08:ad:e1:c1:e1:23:23:77:36:4e:22:da:8b:9e:99:da:a2:25:
         9b:b3:99:5d:4b:0c:43:fa:93:e6:9c:92:74:86:72:78:19:51:
         2c:f1:7e:e6:51:fe:70:94:73:9f:1a:c2:89:9a:78:c8:87:1c:
         5a:99:21:66:fb:c4:85:c4:ee:1e:65:96:d5:9d:ff:c7:b0:62:
         ae:73:af:1d:f1:6d:73:8d:49:c0:71:1c:c7:87:3d:7a:02:c0:
         45:e5:a4:b4:38:09:bd:9b:fb:ca:6f:0b:c7:a5:89:37:71:3f:
         3d:75:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:01 2025 by rpki-client