Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9b2b3b-080d-400e-915e-297b91c84eb7/1/o-srIuXmKa9t0N5Akp6aueDsuNs.mft
File:                     o-srIuXmKa9t0N5Akp6aueDsuNs.mft (raw, json)
Hash identifier:          aQxrr7i0f7AIVA3CRVyvONGP9hN5bpwZXfg4ox2PELw=
Subject key identifier:   FD:64:61:D8:EE:33:F9:B5:12:67:3A:57:45:B7:63:79:67:A7:55:67
Authority key identifier: A3:EB:2B:22:E5:E6:29:AF:6D:D0:DE:40:92:9E:9A:B9:E0:EC:B8:DB
Certificate issuer:       /CN=a3eb2b22e5e629af6dd0de40929e9ab9e0ecb8db
Certificate serial:       0191994A283FE713251C2F3A56412D2DF805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-srIuXmKa9t0N5Akp6aueDsuNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9b2b3b-080d-400e-915e-297b91c84eb7/1/o-srIuXmKa9t0N5Akp6aueDsuNs.mft
Manifest number:          04
Signing time:             Wed 28 Aug 2024 14:00:59 +0000
Manifest this update:     Wed 28 Aug 2024 14:00:59 +0000
Manifest next update:     Thu 29 Aug 2024 14:00:59 +0000
Files and hashes:         1: o-srIuXmKa9t0N5Akp6aueDsuNs.crl (hash: pCwz6RC+vR8iRB0lQEzJ0bL8z3uaeMDlKS4BshSPkeQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:99:4a:28:3f:e7:13:25:1c:2f:3a:56:41:2d:2d:f8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3eb2b22e5e629af6dd0de40929e9ab9e0ecb8db
        Validity
            Not Before: Aug 28 14:00:59 2024 GMT
            Not After : Aug 29 14:00:59 2024 GMT
        Subject: CN=fd6461d8ee33f9b512673a5745b7637967a75567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:df:b9:d6:6c:e3:fc:40:22:2d:d2:e9:00:
                    16:2a:ab:25:0c:2d:81:fb:bf:77:ed:40:a0:23:c4:
                    8a:21:0f:0d:fd:4a:10:bd:0f:dd:da:84:a8:93:c2:
                    a6:ff:36:b2:9c:4c:1c:e3:82:53:0c:aa:05:60:25:
                    28:3f:95:72:5d:12:46:11:63:93:a1:80:9a:9b:4a:
                    bb:28:4a:c7:65:1d:8c:ef:d8:a3:07:4a:df:c9:06:
                    ec:25:2b:f8:4c:6c:12:29:78:2f:01:ce:bc:f8:44:
                    e2:ed:85:20:78:75:d8:bc:43:67:4f:de:15:57:06:
                    39:89:cb:e0:a7:56:da:29:de:2c:8b:58:22:9a:1a:
                    26:4c:d9:81:71:26:7d:fb:98:0c:d6:98:9b:eb:9c:
                    18:e1:f0:00:2b:ed:01:91:8f:a2:4d:b4:03:23:72:
                    37:0e:a1:fd:91:a3:9e:43:40:37:32:d9:cb:7c:3d:
                    24:7b:5f:90:55:d0:a8:96:cf:6a:dc:26:86:91:96:
                    d0:d4:f1:f1:92:1c:a2:17:31:86:95:03:95:5f:88:
                    7c:a7:7a:78:af:bd:87:9b:93:ed:51:61:b2:5c:e2:
                    ca:e7:cc:f6:01:9a:bd:dd:5a:43:50:f1:6f:b1:40:
                    96:e0:cc:98:d5:c4:08:b8:fc:7c:70:7c:78:24:92:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:64:61:D8:EE:33:F9:B5:12:67:3A:57:45:B7:63:79:67:A7:55:67
            X509v3 Authority Key Identifier:
                keyid:A3:EB:2B:22:E5:E6:29:AF:6D:D0:DE:40:92:9E:9A:B9:E0:EC:B8:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-srIuXmKa9t0N5Akp6aueDsuNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9b2b3b-080d-400e-915e-297b91c84eb7/1/o-srIuXmKa9t0N5Akp6aueDsuNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9b2b3b-080d-400e-915e-297b91c84eb7/1/o-srIuXmKa9t0N5Akp6aueDsuNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d8:46:a6:86:d9:53:33:18:aa:6b:c0:b4:7c:a7:80:29:37:
         49:68:9f:65:08:ae:7f:45:73:ae:99:bc:46:b9:f8:f3:66:4e:
         22:34:b9:a4:8f:44:90:1b:ce:90:74:ff:55:4f:ba:f7:3e:74:
         0f:c5:ca:09:4c:0e:0a:71:60:01:62:4b:ef:f9:9d:c8:4a:40:
         55:9c:4a:93:48:92:2e:e4:c6:3f:71:7a:34:b9:74:04:4c:21:
         84:6c:34:57:80:f4:06:a5:73:42:29:a2:dd:60:46:d1:0a:f5:
         29:7a:d6:c8:2e:2d:42:18:f2:57:64:18:94:9a:23:67:92:ec:
         a9:47:97:04:cc:b2:67:ff:26:2c:a4:a3:5e:68:2a:12:a2:f6:
         57:91:d9:64:2d:62:ff:a5:17:70:b8:7c:22:f6:89:a5:4c:de:
         16:3b:8b:d1:e3:87:9f:d3:fb:7a:26:cc:91:fe:8b:86:93:84:
         a4:7b:55:42:28:01:30:4b:7a:c2:a6:58:fe:72:27:0d:1f:55:
         37:44:49:91:69:31:c7:a1:df:32:af:3d:df:f7:d4:22:e9:43:
         16:fe:5a:ea:ab:a2:00:d4:1a:31:47:a8:77:8e:d3:66:24:b1:
         03:79:d9:74:e3:6b:9d:a5:ea:d3:5c:de:7a:c5:d7:d3:29:94:
         03:7a:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:14:01 2025 by rpki-client