Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c19a15-4553-4dea-aca9-8a8eb4e67766/1/X2SmDmQfTqDXOdppBRk0wgge5CI.mft
File:                     X2SmDmQfTqDXOdppBRk0wgge5CI.mft (raw, json)
Hash identifier:          2DvytYv6LXlHd4nbKaH3i91TqlHE6Wk9O7Un45+eEy4=
Subject key identifier:   9F:2B:5B:B2:14:84:C5:5B:02:F1:6F:55:9D:4D:00:1E:22:25:B8:03
Authority key identifier: 5F:64:A6:0E:64:1F:4E:A0:D7:39:DA:69:05:19:34:C2:08:1E:E4:22
Certificate issuer:       /CN=5f64a60e641f4ea0d739da69051934c2081ee422
Certificate serial:       018CA9DCDFF9A21A44961D2F7454CB66351A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X2SmDmQfTqDXOdppBRk0wgge5CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/c19a15-4553-4dea-aca9-8a8eb4e67766/1/X2SmDmQfTqDXOdppBRk0wgge5CI.mft
Manifest number:          036D
Signing time:             Wed 27 Dec 2023 06:01:13 +0000
Manifest this update:     Wed 27 Dec 2023 06:01:13 +0000
Manifest next update:     Thu 28 Dec 2023 06:01:13 +0000
Files and hashes:         1: X2SmDmQfTqDXOdppBRk0wgge5CI.crl (hash: k0Lr/rM6AoLuCaJV/ak6eb8Ag24AIL7jDoe1XmuUMx4=)
                          2: XHdE-4-zZmweHAhy0FYW18fFCd4.roa (hash: f98Kc970zMrgKkMi+pwoPO6cMutOCHCYZnArFaizcAc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:dc:df:f9:a2:1a:44:96:1d:2f:74:54:cb:66:35:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f64a60e641f4ea0d739da69051934c2081ee422
        Validity
            Not Before: Dec 27 06:01:13 2023 GMT
            Not After : Dec 28 06:01:13 2023 GMT
        Subject: CN=9f2b5bb21484c55b02f16f559d4d001e2225b803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:79:33:bb:a7:40:2c:d7:6f:81:87:6b:3c:
                    e7:e9:cf:45:c8:03:66:69:dc:e5:31:b4:31:a6:4f:
                    6c:65:d4:19:1c:ce:ba:7e:d4:44:f6:53:e1:ae:e6:
                    ea:04:29:f7:c3:1d:28:fe:a0:00:65:02:40:7a:42:
                    8d:95:26:c0:6f:ff:db:14:d5:54:8c:90:08:b0:17:
                    07:13:2f:1e:61:31:f7:9b:cb:7c:e4:88:a2:2a:71:
                    b6:95:20:f8:f3:5b:f7:c9:b1:b4:f2:9d:73:bf:aa:
                    58:ce:ac:1f:85:45:87:fd:39:50:df:37:f5:6d:33:
                    fc:e0:1a:04:58:e8:9a:44:ad:d2:a2:d3:24:bc:72:
                    a5:02:9a:2a:91:e5:4e:75:a0:ae:54:af:dc:f1:2d:
                    3d:47:88:fb:5a:2b:ed:77:8f:b3:bf:89:39:ee:9d:
                    e3:33:cb:3e:c8:43:80:00:7d:86:31:13:f3:8a:9d:
                    29:45:08:02:e9:91:d3:07:b6:54:da:52:72:ed:17:
                    2b:ca:75:d8:ef:61:b8:82:72:96:a8:51:d7:27:d9:
                    de:33:c8:75:09:5a:69:32:7d:28:ab:5f:79:64:9c:
                    15:ee:0d:30:15:9d:c5:ab:35:ac:92:3b:33:3a:74:
                    67:32:9b:17:9d:33:3c:b4:35:62:07:6b:ad:68:30:
                    1f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2B:5B:B2:14:84:C5:5B:02:F1:6F:55:9D:4D:00:1E:22:25:B8:03
            X509v3 Authority Key Identifier:
                keyid:5F:64:A6:0E:64:1F:4E:A0:D7:39:DA:69:05:19:34:C2:08:1E:E4:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2SmDmQfTqDXOdppBRk0wgge5CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c19a15-4553-4dea-aca9-8a8eb4e67766/1/X2SmDmQfTqDXOdppBRk0wgge5CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c19a15-4553-4dea-aca9-8a8eb4e67766/1/X2SmDmQfTqDXOdppBRk0wgge5CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:36:d5:86:d9:fa:62:48:9c:19:61:3e:b0:43:1f:35:7a:5a:
         34:cd:d9:6f:56:24:9c:fe:98:98:f6:79:38:68:8e:88:58:04:
         06:09:e6:6a:b7:15:c4:c4:0a:a2:bd:9e:1e:d1:b8:41:2a:7c:
         f1:3b:ab:21:15:86:9b:1c:e1:65:bc:1e:62:6b:84:d0:57:60:
         34:69:75:d5:6a:ac:d3:95:27:e8:9e:8c:ca:0b:57:70:ce:60:
         b5:51:4b:47:4d:1e:78:3a:8e:c1:de:10:65:57:a2:07:f9:e3:
         9a:eb:70:58:b6:a4:b0:6e:9d:f6:df:47:99:c7:83:3e:43:71:
         7d:da:00:40:92:71:27:a1:63:9b:0d:fc:e2:0c:d2:26:52:c0:
         01:13:0d:a0:80:0d:ba:c6:b6:c1:62:ed:8f:17:33:c1:97:9b:
         c6:41:b6:d8:31:48:09:54:a3:db:29:fc:23:9b:78:9b:83:28:
         22:27:ba:61:12:91:64:f0:7b:07:6e:72:ca:b6:2e:23:57:78:
         62:c3:29:ce:f4:df:7c:1d:14:dd:7c:17:e8:6d:28:ac:07:58:
         78:61:0a:32:eb:b2:d3:5b:8a:d6:d0:bc:bb:92:0b:ef:93:f3:
         ef:87:0e:41:ab:08:1f:6f:29:7a:27:b0:d7:31:84:0a:42:cb:
         78:2a:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:47 2025 by rpki-client