Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/MP68jAau7TYBe73XBb31rbLnMK0.mft
File:                     MP68jAau7TYBe73XBb31rbLnMK0.mft (raw, json)
Hash identifier:          2qIvfAWaU43dEztyZ/bvgoP5LZ6LCUtkGXVJ81NRtpE=
Subject key identifier:   D5:83:AB:84:A1:53:E4:00:85:96:4B:B9:5B:D2:61:06:23:03:69:9D
Authority key identifier: 30:FE:BC:8C:06:AE:ED:36:01:7B:BD:D7:05:BD:F5:AD:B2:E7:30:AD
Certificate issuer:       /CN=30febc8c06aeed36017bbdd705bdf5adb2e730ad
Certificate serial:       018B6F81C73F52204C666CC10D7136749BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MP68jAau7TYBe73XBb31rbLnMK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/MP68jAau7TYBe73XBb31rbLnMK0.mft
Manifest number:          0243
Signing time:             Fri 27 Oct 2023 05:00:57 +0000
Manifest this update:     Fri 27 Oct 2023 05:00:57 +0000
Manifest next update:     Sat 28 Oct 2023 05:00:57 +0000
Files and hashes:         1: 1clt2kjp2e23pQi5uOgE7XqiepY.roa (hash: BqV553CvErrdbkGFPtH1/A1wx1DL/JhQOVGRP8P2TNE=)
                          2: MP68jAau7TYBe73XBb31rbLnMK0.crl (hash: 9AGCpS6W5IGPB76MxdS+LU0dCXT0jb+VSHrjxDGFCAM=)
                          3: t7CU51b2RmE2uqYyQns1yzrcL6I.roa (hash: dk8tIs9M8Yy4rSwaYFsMZr1ri0BIxuGoat3qPZwOfCw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6f:81:c7:3f:52:20:4c:66:6c:c1:0d:71:36:74:9b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30febc8c06aeed36017bbdd705bdf5adb2e730ad
        Validity
            Not Before: Oct 27 05:00:57 2023 GMT
            Not After : Oct 28 05:00:57 2023 GMT
        Subject: CN=d583ab84a153e40085964bb95bd261062303699d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:f3:19:54:8b:5b:0f:fa:83:98:1b:fa:bf:
                    b0:67:68:e9:7c:0b:93:fc:82:d5:26:94:3e:fc:88:
                    ac:66:14:64:c1:c7:f1:47:69:96:52:66:44:0f:ed:
                    27:ad:83:77:da:bf:80:5c:58:b4:f4:29:cf:8d:f6:
                    9a:3d:29:7a:01:c9:b3:ab:c3:c7:1c:8b:42:67:b9:
                    92:c4:21:ed:88:71:73:29:49:d6:6c:ad:ff:27:39:
                    97:8e:1d:02:21:59:ce:59:ee:1e:58:cd:68:3c:82:
                    bd:95:cb:36:f5:de:47:13:0f:6b:f6:ef:25:6c:55:
                    40:d3:03:bf:44:d3:86:10:67:48:44:8c:fc:e5:69:
                    93:5f:b7:8d:21:01:c5:7e:85:f1:25:08:03:d3:04:
                    f3:ec:0b:f8:b6:12:57:b1:76:c3:3c:8f:1e:07:86:
                    2b:08:11:4f:a1:6f:51:24:a7:bf:cf:e0:28:a2:ad:
                    ea:46:bf:f5:37:5f:ad:61:ef:e2:da:80:12:be:1b:
                    b0:a3:47:60:d3:2f:95:f7:db:2d:ec:be:86:7c:3b:
                    15:f4:8b:88:12:9c:76:9e:82:f3:fa:90:c6:1a:4f:
                    ce:61:e6:4d:f2:b7:ca:3f:57:54:20:15:02:a4:94:
                    be:b7:75:81:16:4b:45:21:af:5c:95:a4:3e:af:72:
                    e1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:83:AB:84:A1:53:E4:00:85:96:4B:B9:5B:D2:61:06:23:03:69:9D
            X509v3 Authority Key Identifier:
                keyid:30:FE:BC:8C:06:AE:ED:36:01:7B:BD:D7:05:BD:F5:AD:B2:E7:30:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MP68jAau7TYBe73XBb31rbLnMK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/MP68jAau7TYBe73XBb31rbLnMK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0f809b-1c8c-47cb-82fd-4d4f81b56b38/1/MP68jAau7TYBe73XBb31rbLnMK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d6:81:79:60:c1:56:85:1b:c9:bb:8f:de:bc:0e:0b:0f:ac:
         40:b2:42:bd:28:b7:8d:26:b8:c6:3d:6a:02:d6:45:ad:73:db:
         43:1f:de:a1:62:87:4e:5b:ee:b2:71:0d:a2:74:b2:0a:ee:4c:
         2c:51:99:c2:ea:95:25:fb:e3:46:1f:52:44:1e:64:50:c2:1c:
         e8:93:43:18:59:c6:ad:fd:54:b0:e2:58:08:b8:c4:f7:6c:35:
         73:4d:f2:45:78:5e:04:e9:f8:89:20:60:87:ab:c9:6b:06:5b:
         c2:b5:a1:08:ba:32:0a:79:27:e3:e5:b0:66:ac:ce:40:98:15:
         b0:d5:c0:ed:1d:8f:fa:84:2f:8c:73:b6:1a:25:c9:fe:da:71:
         7c:9f:0c:38:c6:6f:90:8b:eb:ce:21:cd:5c:de:40:29:6d:6e:
         91:fc:52:8b:82:e1:d8:98:fb:15:65:83:dd:25:37:7d:16:00:
         76:6a:1c:0a:05:34:e3:e7:0c:63:76:9b:d9:33:80:85:7c:0c:
         a3:de:00:74:17:fb:fb:68:34:98:73:92:f6:4c:67:e9:6f:9f:
         ac:4a:16:7b:c9:6d:0d:f6:ce:5e:d2:c9:77:45:73:a0:7c:08:
         86:6a:8a:eb:23:de:ac:37:07:18:ba:dc:28:70:fa:63:1a:f6:
         66:64:31:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:06:49 2025 by rpki-client