Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/fba28a-c5d5-462f-b882-f262aff55b7f/1/SG3_w7-fgYJ_-_hRAyKzP2GzjUc.mft
File:                     SG3_w7-fgYJ_-_hRAyKzP2GzjUc.mft (raw, json)
Hash identifier:          cvLBTBV1SgFD3AlS4MbLl+NQ6SI7RxH272YqMN4ll+Q=
Subject key identifier:   CB:A2:D6:59:E1:61:96:A8:37:24:B2:ED:F4:05:02:83:CF:84:81:3D
Authority key identifier: 48:6D:FF:C3:BF:9F:81:82:7F:FB:F8:51:03:22:B3:3F:61:B3:8D:47
Certificate issuer:       /CN=486dffc3bf9f81827ffbf8510322b33f61b38d47
Certificate serial:       01831210EFBD8DDC61CC4E59397D810946E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SG3_w7-fgYJ_-_hRAyKzP2GzjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/fba28a-c5d5-462f-b882-f262aff55b7f/1/SG3_w7-fgYJ_-_hRAyKzP2GzjUc.mft
Manifest number:          01
Signing time:             Tue 06 Sep 2022 09:10:43 +0000
Manifest this update:     Tue 06 Sep 2022 09:10:43 +0000
Manifest next update:     Wed 07 Sep 2022 09:10:43 +0000
Files and hashes:         1: SG3_w7-fgYJ_-_hRAyKzP2GzjUc.crl (hash: dqCPxVbaokqc4P9V/8v25Lb/Ac5pkqFJsm7k2fDaS50=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:12:10:ef:bd:8d:dc:61:cc:4e:59:39:7d:81:09:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486dffc3bf9f81827ffbf8510322b33f61b38d47
        Validity
            Not Before: Sep  6 09:10:43 2022 GMT
            Not After : Sep  7 09:10:43 2022 GMT
        Subject: CN=cba2d659e16196a83724b2edf4050283cf84813d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:ae:0a:9f:13:f3:49:fa:43:6a:d2:0b:31:
                    d2:8d:fc:dc:5b:e1:a2:72:aa:8e:f0:47:d1:a5:70:
                    60:80:5b:fd:e8:67:14:ec:18:0d:0d:a6:7b:a7:74:
                    1c:b5:f9:cf:a8:10:23:26:44:74:41:c2:23:69:87:
                    e0:32:b5:b1:42:fd:0b:b2:91:bc:e9:96:de:fd:92:
                    e9:f5:a1:1f:93:fa:f5:61:bc:7d:3d:20:16:81:d3:
                    c9:2a:65:01:89:5b:bd:22:6a:9f:b4:04:e0:56:c4:
                    5a:b5:5b:1b:6f:2e:06:ac:18:21:2c:eb:35:60:25:
                    87:4b:e7:3d:ac:51:e1:da:7b:9c:1a:5f:3f:7c:66:
                    48:e6:7e:a4:b2:eb:8c:f6:c4:60:ca:8e:db:84:ec:
                    c0:c5:49:ba:10:38:f6:67:20:19:d1:e4:bd:6f:07:
                    38:59:cf:c2:cd:d7:60:99:df:2a:04:95:d5:1a:8e:
                    a7:13:62:e2:1b:cf:67:12:d9:ea:d8:bf:f2:e9:3d:
                    22:23:83:f5:93:b4:61:bd:4f:dc:7e:ab:33:d9:de:
                    c9:d2:3e:e7:0c:a3:ad:56:9c:e0:a5:f6:64:ac:f7:
                    02:6c:38:e0:a5:e3:d5:f0:c5:0f:f7:ba:00:bc:ea:
                    73:fd:07:9e:54:15:5e:a9:56:e8:36:e2:a0:eb:44:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A2:D6:59:E1:61:96:A8:37:24:B2:ED:F4:05:02:83:CF:84:81:3D
            X509v3 Authority Key Identifier:
                keyid:48:6D:FF:C3:BF:9F:81:82:7F:FB:F8:51:03:22:B3:3F:61:B3:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SG3_w7-fgYJ_-_hRAyKzP2GzjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fba28a-c5d5-462f-b882-f262aff55b7f/1/SG3_w7-fgYJ_-_hRAyKzP2GzjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/fba28a-c5d5-462f-b882-f262aff55b7f/1/SG3_w7-fgYJ_-_hRAyKzP2GzjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:8d:98:73:41:75:a1:04:42:d0:dd:6b:0d:9c:e6:45:4f:
         59:9d:b9:dc:c0:12:ff:ba:73:f5:43:47:07:57:36:0d:20:1f:
         b4:89:a5:bb:07:66:ba:1e:07:e5:c1:fb:21:12:b2:a7:0e:40:
         09:64:f9:27:00:0b:52:d9:b4:42:f9:e3:42:f3:8f:f8:32:45:
         20:16:cc:71:43:29:99:d9:70:24:d8:a9:c9:99:ab:15:7a:ca:
         60:4f:86:7b:b7:f4:99:7c:66:40:12:0a:42:9a:2f:bb:37:b8:
         c2:58:e2:92:89:87:d1:47:d7:94:b2:8b:55:71:56:c8:bd:d6:
         80:a2:b4:7a:62:da:b6:26:63:f4:fb:0a:4f:59:f0:5e:26:04:
         b0:fe:d6:16:f3:cb:5c:6d:69:b2:40:c8:d5:61:7d:82:fd:7a:
         5f:d5:17:4e:8c:ea:37:0e:f9:50:9e:d0:10:01:68:5f:69:25:
         d7:59:2d:dc:48:c5:f5:ad:e9:bd:20:5b:f4:62:e2:e6:0b:b1:
         92:1c:d3:8b:01:68:44:3b:7e:0b:a7:4f:51:c7:d0:ea:cc:f6:
         3a:96:74:a4:3a:35:82:02:c6:62:b2:54:46:94:98:c1:95:3f:
         50:43:b3:da:c0:41:28:43:36:ee:3b:0a:85:ae:b5:2f:06:9e:
         66:9d:aa:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:57 2025 by rpki-client