Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/jL5r11iyS-uuLkpRpVRM-tftMUo.mft
File:                     jL5r11iyS-uuLkpRpVRM-tftMUo.mft (raw, json)
Hash identifier:          GxED1wFBaA9CBLirefcEm21Fp5+WhmBbl12iaETmHHg=
Subject key identifier:   BE:EF:47:02:D5:D5:14:C6:CE:1C:AF:DA:40:B7:79:8B:46:B8:1D:92
Authority key identifier: 8C:BE:6B:D7:58:B2:4B:EB:AE:2E:4A:51:A5:54:4C:FA:D7:ED:31:4A
Certificate issuer:       /CN=8cbe6bd758b24bebae2e4a51a5544cfad7ed314a
Certificate serial:       018C8FE5F7B2692B2C5F377E010EDF1C11A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jL5r11iyS-uuLkpRpVRM-tftMUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/jL5r11iyS-uuLkpRpVRM-tftMUo.mft
Manifest number:          0F7C
Signing time:             Fri 22 Dec 2023 05:01:02 +0000
Manifest this update:     Fri 22 Dec 2023 05:01:02 +0000
Manifest next update:     Sat 23 Dec 2023 05:01:02 +0000
Files and hashes:         1: ITBDHg-QRS0EDgqUlJBGXCU61_E.roa (hash: 3P3xTZvKOWsDgqWS+NLcdsD66uTJOVU+kfRP10IKlpg=)
                          2: jL5r11iyS-uuLkpRpVRM-tftMUo.crl (hash: z/PwPO08Am8Py1nvUgiGMHYNqubd8X3vh8pqWABDIX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8f:e5:f7:b2:69:2b:2c:5f:37:7e:01:0e:df:1c:11:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cbe6bd758b24bebae2e4a51a5544cfad7ed314a
        Validity
            Not Before: Dec 22 05:01:02 2023 GMT
            Not After : Dec 23 05:01:02 2023 GMT
        Subject: CN=beef4702d5d514c6ce1cafda40b7798b46b81d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:00:a2:87:76:0d:5c:95:fd:d0:5d:70:b8:e7:
                    c8:f2:a3:7b:36:9e:20:3b:37:b7:8c:ab:b7:8f:7a:
                    c5:c3:5b:59:f8:3d:e5:69:44:3e:76:ed:a0:a3:c3:
                    3c:82:49:ab:b2:92:63:0f:20:40:cf:da:f2:ed:dc:
                    53:14:34:6f:3b:5d:32:e3:6a:7a:38:e5:5b:80:d0:
                    42:61:ae:73:77:e6:fd:5f:f7:a4:bb:fb:95:41:4b:
                    37:1c:5e:3f:cc:7d:be:0d:a6:e8:36:45:a4:44:4c:
                    9a:9b:df:e7:70:12:bf:97:28:9a:f3:1f:86:f9:84:
                    a7:97:a4:45:d6:57:c8:c5:09:2c:79:73:96:52:22:
                    00:2f:34:23:cb:70:03:5d:b7:36:88:b8:12:c5:38:
                    51:be:1f:6e:52:64:0c:68:a2:82:e8:7c:aa:50:0e:
                    22:42:11:c7:94:a3:26:68:b9:4e:65:8d:e4:db:4e:
                    ae:7d:33:cd:aa:5c:c8:7f:5b:08:06:e4:2d:cc:6f:
                    d6:b7:b5:d8:ef:41:57:28:a3:51:3f:20:66:ce:e8:
                    73:87:4c:14:52:50:a8:4f:34:77:15:9a:fa:86:03:
                    31:68:68:48:bd:83:bf:9a:0a:19:49:ee:5e:e8:08:
                    d7:3a:c2:5b:b7:e7:e1:37:f3:d9:89:fc:ed:76:73:
                    8b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:47:02:D5:D5:14:C6:CE:1C:AF:DA:40:B7:79:8B:46:B8:1D:92
            X509v3 Authority Key Identifier:
                keyid:8C:BE:6B:D7:58:B2:4B:EB:AE:2E:4A:51:A5:54:4C:FA:D7:ED:31:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL5r11iyS-uuLkpRpVRM-tftMUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/jL5r11iyS-uuLkpRpVRM-tftMUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1dd1ab-06cc-45fa-8d24-0ce72a042912/1/jL5r11iyS-uuLkpRpVRM-tftMUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2e:d7:e4:5f:07:9d:8b:7f:96:23:a9:29:e0:73:fd:83:14:
         95:7e:86:65:16:dc:af:f1:4d:4e:a4:c4:a0:ff:51:97:8d:30:
         96:5d:a1:2b:40:47:97:39:de:a0:83:30:00:fd:5d:7c:c9:fd:
         cd:92:d6:dd:b6:83:b8:a4:49:97:9f:27:56:ab:fc:52:32:6d:
         f4:bc:d4:b1:ec:a1:9f:8d:c7:b7:78:b5:bc:ad:1e:36:a8:a8:
         70:c4:10:c7:4c:ad:bc:16:e6:3d:89:d5:ef:bf:82:00:01:f0:
         10:90:08:0a:62:18:db:f1:bd:50:61:2e:f6:6f:71:29:bf:93:
         d3:17:93:91:9b:62:7c:e7:9e:a2:23:2b:4b:cb:61:d2:16:b6:
         65:6d:b6:7d:ab:ff:6e:ea:a2:79:44:ad:c8:c9:37:f1:0d:6b:
         ca:f7:03:84:a7:ea:a3:2f:56:ea:62:b1:1a:f3:ff:09:ae:0d:
         d6:1a:5b:c9:41:16:25:20:3d:9e:53:98:8a:48:78:72:01:43:
         a2:c2:ea:38:d8:58:16:2c:e6:c2:51:91:27:97:e5:59:0e:c3:
         46:3b:40:2b:bc:1e:db:ff:0d:ed:f7:c6:21:38:0b:74:08:c1:
         ee:9f:32:73:18:ef:2a:cf:80:c7:21:8f:d4:7d:59:0c:1a:22:
         5a:c6:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:02 2025 by rpki-client