Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/aBHUSM-8bpWCgIoXxyxjk_2rqUg.mft
File:                     aBHUSM-8bpWCgIoXxyxjk_2rqUg.mft (raw, json)
Hash identifier:          3ecRCfH71CbbZYKFPwpBQNqVcoDas5CNFJ9ii/GLTN8=
Subject key identifier:   AD:E9:B3:38:66:29:E4:FB:74:8E:E4:B6:2D:57:EF:51:03:FC:68:19
Authority key identifier: 68:11:D4:48:CF:BC:6E:95:82:80:8A:17:C7:2C:63:93:FD:AB:A9:48
Certificate issuer:       /CN=6811d448cfbc6e9582808a17c72c6393fdaba948
Certificate serial:       01851B206FAAA5D678EDE141F31E2B51F085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBHUSM-8bpWCgIoXxyxjk_2rqUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/aBHUSM-8bpWCgIoXxyxjk_2rqUg.mft
Manifest number:          FA
Signing time:             Fri 16 Dec 2022 13:29:48 +0000
Manifest this update:     Fri 16 Dec 2022 13:29:48 +0000
Manifest next update:     Sat 17 Dec 2022 13:29:48 +0000
Files and hashes:         1: Y-kaEDT0kPi9V3Tb7zUqrKGx3Pg.roa (hash: G/9+bVy6EtgCyOO8WKrz91dH8ZQhsdmcc0yZ9/Ute7I=)
                          2: aBHUSM-8bpWCgIoXxyxjk_2rqUg.crl (hash: 7AthCuOSu9XqTz/qfAjFdhjuDmO56s3VhzksHwYN/xM=)
                          3: abBgrE3cG5TSwy7tslQuaq4suak.roa (hash: ROg/PtHqx8VPe0wCEzh6KN1X/PLiCYsL8daVn5kSi3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:1b:20:6f:aa:a5:d6:78:ed:e1:41:f3:1e:2b:51:f0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6811d448cfbc6e9582808a17c72c6393fdaba948
        Validity
            Not Before: Dec 16 13:29:48 2022 GMT
            Not After : Dec 17 13:29:48 2022 GMT
        Subject: CN=ade9b3386629e4fb748ee4b62d57ef5103fc6819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:c7:3d:2a:77:1c:c8:63:d2:16:0a:5c:41:
                    05:05:3a:a1:69:63:4f:46:6e:a6:8f:5f:ed:a4:e4:
                    c2:5a:c0:02:37:97:22:6f:2e:9d:89:bb:3b:fd:a2:
                    28:58:7c:f9:47:93:1e:12:af:d1:66:ea:a0:74:08:
                    9c:0b:eb:3a:c3:11:87:76:d2:ae:ce:5a:60:5f:5f:
                    c1:e3:36:43:9f:e1:b9:e1:cd:5e:f0:69:42:38:d1:
                    60:c7:c9:dc:7f:e6:1b:35:e2:56:51:71:45:d7:4b:
                    b1:2d:42:39:a0:57:a6:f0:66:84:d7:b0:cc:36:c9:
                    90:21:4c:c8:bb:ed:38:ee:5b:6c:65:a0:8e:d8:e7:
                    f6:ba:67:2a:23:29:7d:4f:79:ee:a5:d3:1b:3f:5c:
                    7f:62:41:e6:9d:9d:7b:cd:be:1c:cf:d0:1b:05:83:
                    68:10:2b:e6:4a:02:4c:18:ee:1f:47:34:e0:f6:28:
                    07:d8:33:ae:e1:d2:86:37:d4:f3:fb:b0:01:a0:a1:
                    a9:ea:1e:16:19:e0:ec:dc:c7:f0:d7:56:ba:0d:cc:
                    7b:be:62:ec:07:4f:34:44:20:73:c2:ed:13:0e:a8:
                    47:ce:39:ad:fa:bb:a3:ab:44:ae:74:1d:28:4c:42:
                    ef:ab:6b:68:c4:58:ea:2c:f1:b2:7f:d3:d4:95:ac:
                    b1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E9:B3:38:66:29:E4:FB:74:8E:E4:B6:2D:57:EF:51:03:FC:68:19
            X509v3 Authority Key Identifier:
                keyid:68:11:D4:48:CF:BC:6E:95:82:80:8A:17:C7:2C:63:93:FD:AB:A9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHUSM-8bpWCgIoXxyxjk_2rqUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/aBHUSM-8bpWCgIoXxyxjk_2rqUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8b3afe-2d57-4268-81a6-2806f9481a4e/1/aBHUSM-8bpWCgIoXxyxjk_2rqUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:5a:93:e9:23:ff:d4:74:15:df:ea:83:b2:31:6d:4a:6f:
         ef:61:3e:12:b1:e1:5c:c1:e7:f0:59:e7:58:eb:e8:54:32:e9:
         03:ab:88:87:f2:a6:73:d3:df:f8:de:80:78:02:24:40:97:10:
         14:d6:98:c0:b0:b5:6f:f1:2c:6d:4d:a3:70:2d:b2:5f:d3:0b:
         c6:9b:8c:27:c7:1e:7c:8e:6f:11:4e:f9:bb:9f:c0:f3:08:cd:
         06:00:31:58:11:0b:42:77:3c:e8:37:78:c2:15:c4:b6:47:6f:
         2b:7d:6e:f3:bb:90:ab:8a:62:a6:bf:7f:69:5f:1a:98:cd:a8:
         be:57:aa:ef:84:8f:4f:a4:8b:9a:4f:ad:37:3d:58:5b:81:ae:
         fc:a6:ce:52:9b:15:eb:ab:01:c4:24:d4:c4:1f:b3:62:66:cd:
         ea:07:d8:22:95:68:bb:14:30:96:1f:f5:17:8e:9b:ca:95:2d:
         7f:35:de:b8:2d:c9:25:03:4d:01:1a:47:9f:1d:37:50:01:1a:
         ba:f5:0f:28:e9:f1:36:c2:9b:8a:b5:9f:0c:f6:48:bc:13:f5:
         1e:c5:7e:65:3b:e1:aa:a1:02:a1:45:37:b6:57:b7:4b:5e:ae:
         b9:19:ee:e9:3b:c0:b1:91:00:db:03:71:a1:36:bb:d6:6c:a5:
         67:92:37:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:31:10 2025 by rpki-client