Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.mft
File:                     Sk2B0hXtUd_MPDvA5-e_FUNzrQU.mft (raw, json)
Hash identifier:          l/IYyob/hp0O6XL6HeULcKs4qeZTM/rAwnq/E077RuI=
Subject key identifier:   FB:64:71:5C:F6:DD:77:3D:6A:FC:F6:86:BD:61:3E:03:91:A9:E9:09
Authority key identifier: 4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05
Certificate issuer:       /CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
Certificate serial:       018B8488DCC815081E16F2E0B12C755F43D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.mft
Manifest number:          068C
Signing time:             Tue 31 Oct 2023 07:00:43 +0000
Manifest this update:     Tue 31 Oct 2023 07:00:43 +0000
Manifest next update:     Wed 01 Nov 2023 07:00:43 +0000
Files and hashes:         1: Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl (hash: /3IkkEezQFVZHpRlH59PdtGS2ZuEt25tC7rI36GWAEY=)
                          2: uEKvaIXE6AGu8XIqzOLVucgod9E.roa (hash: eGHnMW43+FqQfygdSig1xl4fc2l9XUhNJwcWoNmALVg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:84:88:dc:c8:15:08:1e:16:f2:e0:b1:2c:75:5f:43:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a4d81d215ed51dfcc3c3bc0e7e7bf154373ad05
        Validity
            Not Before: Oct 31 07:00:43 2023 GMT
            Not After : Nov  1 07:00:43 2023 GMT
        Subject: CN=fb64715cf6dd773d6afcf686bd613e0391a9e909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:5e:6e:4e:9f:5f:77:95:33:46:f0:ca:f8:
                    6b:aa:e4:f8:97:e2:5f:00:14:09:5c:99:96:1e:2e:
                    f9:d6:25:99:bd:be:1b:8a:c1:b3:90:54:7c:e4:15:
                    49:9d:a8:16:7b:f8:08:b3:b9:32:0c:b1:2b:e8:5d:
                    93:e9:56:c3:87:43:89:33:67:1b:86:d2:c9:05:ca:
                    88:8c:1d:f0:c0:a3:1e:1f:b8:10:12:9f:81:6d:2e:
                    d2:50:93:c9:d4:be:9a:13:45:c7:30:8d:1f:a1:7e:
                    c4:1d:a3:5c:6b:47:5f:59:98:e4:47:0c:9d:2b:fe:
                    f6:c2:69:9f:83:77:0f:82:13:41:9d:0c:af:73:58:
                    1d:87:b2:b6:0e:29:5d:af:38:9a:fb:f0:5f:c3:8a:
                    5a:2f:4d:80:59:03:24:bf:46:90:e9:37:2d:47:37:
                    8a:d7:db:c9:e5:b4:d3:bd:8a:fb:9e:a9:b7:27:7d:
                    55:04:64:15:06:a7:66:60:fb:a0:84:97:9f:01:e5:
                    ba:be:ce:55:20:7a:35:4a:fb:6c:bf:98:be:2a:fa:
                    d7:bf:b3:96:95:04:74:be:6a:b8:4c:f8:b7:05:22:
                    32:30:17:4d:41:ad:fb:2d:a2:17:c3:4e:a0:4e:3a:
                    00:09:a2:78:de:b9:b0:51:6b:26:44:e7:31:2a:02:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:64:71:5C:F6:DD:77:3D:6A:FC:F6:86:BD:61:3E:03:91:A9:E9:09
            X509v3 Authority Key Identifier:
                keyid:4A:4D:81:D2:15:ED:51:DF:CC:3C:3B:C0:E7:E7:BF:15:43:73:AD:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9759e3-7260-4e0e-9826-4a708d12952b/1/Sk2B0hXtUd_MPDvA5-e_FUNzrQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:50:f0:8a:fa:68:29:05:0e:be:c2:a9:70:4d:03:8e:e1:
         b0:5d:f3:a3:75:18:4a:ec:7c:37:94:fc:ab:4c:5e:57:f3:42:
         6a:e5:15:05:d7:73:d7:f8:b3:22:01:06:ed:b8:62:16:41:b6:
         e7:2a:c3:40:c1:90:fd:d4:b0:cd:d7:cd:1e:4e:a4:36:ed:8e:
         8d:c3:48:ee:b4:50:7b:b6:ee:93:ba:16:a8:c7:1d:2d:a8:73:
         25:70:d5:e4:5c:82:b4:23:6d:8c:db:a8:8f:b9:6b:6a:3a:f2:
         f1:32:91:74:73:f9:9c:50:0a:26:4a:3f:52:b2:ed:c3:f1:ea:
         21:40:e0:b9:26:dc:27:b6:f8:2d:43:6e:93:b2:7e:4b:f8:6c:
         4f:42:82:e0:1a:fd:86:cb:b4:ca:ee:55:e0:bb:4c:db:0f:20:
         be:d7:7f:86:b1:be:05:2b:c1:5e:85:f6:00:73:69:20:95:67:
         f3:cf:e6:c7:ad:f3:ac:da:ad:f4:47:fd:e3:c2:d9:c4:9a:88:
         09:d8:d6:55:60:6c:39:b7:a4:8f:08:d7:96:a0:8f:db:71:c0:
         02:ae:4d:ce:c6:6c:79:37:6e:99:54:b1:4d:84:4c:72:6c:26:
         b2:a6:e6:2a:5c:b2:d2:07:33:27:70:6e:ed:17:5e:2c:45:2d:
         c0:09:61:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:19 2025 by rpki-client