Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.mft
File:                     B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.mft (raw, json)
Hash identifier:          bxsyjnIwkG1FwQh0nwM49mp5W78oTjd815l4pSVxIuY=
Subject key identifier:   A4:22:03:CB:60:76:48:02:98:BC:EF:D7:29:61:76:B2:3C:3F:94:3D
Authority key identifier: 07:99:6B:3A:C2:01:E8:B9:B8:1F:C9:7A:16:0E:94:91:43:04:F9:9A
Certificate issuer:       /CN=07996b3ac201e8b9b81fc97a160e94914304f99a
Certificate serial:       01843C17CE042BCE615D512045CFE7F83610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.mft
Manifest number:          0116
Signing time:             Thu 03 Nov 2022 06:05:03 +0000
Manifest this update:     Thu 03 Nov 2022 06:05:03 +0000
Manifest next update:     Fri 04 Nov 2022 06:05:03 +0000
Files and hashes:         1: B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.crl (hash: cj4HaAUSHiDfo5Z20jBXWzJ+nAltKJKh3wO/slu4oXg=)
                          2: M1jMeZyYwHQnlvahQ6LhHZOpK7A.roa (hash: fqUp9VVQr+0m610jX81XMWTkRvboQpAmKVIFRC5MjNg=)
                          3: O6k1-BAqrQKL-v4RULaLyZj3Gn0.roa (hash: hHy/i3DL0I2jJTsLDc7bskvqNsg4UXApCL0M46isawQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:3c:17:ce:04:2b:ce:61:5d:51:20:45:cf:e7:f8:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07996b3ac201e8b9b81fc97a160e94914304f99a
        Validity
            Not Before: Nov  3 06:05:03 2022 GMT
            Not After : Nov  4 06:05:03 2022 GMT
        Subject: CN=a42203cb6076480298bcefd7296176b23c3f943d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4d:2f:76:25:f7:24:54:4b:97:d0:bb:ba:e6:
                    ac:c0:c7:ee:e8:22:14:58:20:dd:11:8d:d4:45:35:
                    2f:dd:60:97:2a:4d:07:d5:d3:3c:6d:d8:20:9f:d7:
                    8d:d3:4f:b0:16:b5:db:91:f6:56:3d:6f:f1:6f:12:
                    e0:91:e7:e3:84:cd:32:48:87:95:aa:99:91:ea:05:
                    69:85:3e:e6:c1:00:06:62:bf:78:55:12:23:fa:e0:
                    5d:08:40:4b:67:e7:75:c4:58:a2:4a:d5:c4:2f:b4:
                    b6:44:4b:2f:24:56:85:7c:7c:99:ef:a3:2e:67:fe:
                    5d:54:f0:4f:3c:10:19:d5:a9:6b:f6:a1:63:b5:ee:
                    3f:83:03:31:08:cb:6b:d2:ad:04:e4:ae:bd:a9:c8:
                    6c:d0:89:ef:cd:db:17:d2:fc:fb:af:5d:99:85:31:
                    8c:63:c8:d0:b3:88:e1:62:ae:dd:15:b5:f4:49:cf:
                    9f:3c:57:bd:10:b5:06:19:af:c1:8c:13:be:bc:22:
                    4b:9e:72:07:1a:66:35:e9:f2:b6:0e:4f:e6:2b:63:
                    87:de:40:30:11:d9:cf:e8:81:98:5f:69:20:d0:56:
                    ba:ec:79:8a:ef:49:7c:1a:34:4a:1c:85:9c:bf:1e:
                    0f:34:1f:c0:97:85:51:5f:63:eb:f5:8e:89:7d:c1:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:22:03:CB:60:76:48:02:98:BC:EF:D7:29:61:76:B2:3C:3F:94:3D
            X509v3 Authority Key Identifier:
                keyid:07:99:6B:3A:C2:01:E8:B9:B8:1F:C9:7A:16:0E:94:91:43:04:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1ffbb2-dc4e-4cf1-b336-4a1625bc4be0/1/B5lrOsIB6Lm4H8l6Fg6UkUME-Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fa:b8:14:aa:64:b8:38:c5:1d:de:32:26:fb:84:8b:c6:48:
         cc:1f:14:c8:a0:54:7f:5b:c1:fa:3e:b6:4c:71:4e:9a:cd:15:
         92:16:5c:4a:7d:02:bf:81:dc:38:d2:3f:93:88:9e:95:e2:12:
         c6:96:4b:11:c5:22:67:ab:3e:2d:ef:44:58:8e:a7:4c:56:38:
         5d:5b:8f:a9:40:1d:c4:e4:3f:c9:e1:15:22:39:91:e4:23:83:
         e5:f3:46:1c:da:f9:99:0b:18:c4:83:85:97:44:ae:fc:c2:4e:
         ff:3c:8c:ed:e5:b8:87:da:5e:6f:aa:75:07:bd:7e:e1:06:a9:
         3b:46:9e:39:e9:26:f2:4f:23:ec:7f:b1:6e:ec:cb:03:45:18:
         55:45:c5:4c:45:02:13:78:eb:68:16:e9:80:97:34:d9:ab:96:
         54:45:d3:c8:a1:be:0b:42:20:0a:ca:1a:0c:ef:a0:82:84:2f:
         8a:06:1c:eb:b8:5d:6e:da:96:98:24:a8:b6:99:ca:7b:28:6b:
         53:5d:4d:ba:0a:52:cc:e6:5e:d1:f2:5b:0f:be:26:d6:ad:32:
         45:13:90:cd:78:aa:a6:db:02:6d:d8:5c:ac:53:1d:b7:59:f9:
         76:27:f6:79:95:4d:7a:af:4d:c3:3d:f8:94:7e:a5:e8:15:d9:
         92:61:07:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:15 2025 by rpki-client