Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.mft
File:                     mVMOFOjtj7x6tKk5nFri8Z7p-AM.mft (raw, json)
Hash identifier:          BUVwb4R21fjdLPOoYB9wZ7WBIu8Ke5cvHrv2Hhdf+zo=
Subject key identifier:   83:52:B3:39:5E:92:55:3A:FC:F8:95:4F:4F:68:A3:AC:1E:0D:56:7A
Authority key identifier: 99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
Certificate issuer:       /CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Certificate serial:       018BB95314985B0001E5004BBBB6C2D77AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.mft
Manifest number:          08E7
Signing time:             Fri 10 Nov 2023 13:01:51 +0000
Manifest this update:     Fri 10 Nov 2023 13:01:51 +0000
Manifest next update:     Sat 11 Nov 2023 13:01:51 +0000
Files and hashes:         1: cYlghU8AhFNryNhXyRqSuzr0ZZo.roa (hash: lT8BO2tzanFbN+0UGsNRZlnQK729C9kJ+c+Sm0spz7A=)
                          2: mVMOFOjtj7x6tKk5nFri8Z7p-AM.crl (hash: 4KgK2LA4spOJRi53YsHXdzqRKiDd5b6DmPxGyrz7SIg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:53:14:98:5b:00:01:e5:00:4b:bb:b6:c2:d7:7a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
        Validity
            Not Before: Nov 10 13:01:51 2023 GMT
            Not After : Nov 11 13:01:51 2023 GMT
        Subject: CN=8352b3395e92553afcf8954f4f68a3ac1e0d567a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:df:7e:f4:a2:07:44:a9:25:b8:80:cf:0a:
                    19:da:47:8f:a5:7b:87:5a:bd:fc:97:9c:0f:00:81:
                    71:88:30:46:b2:94:62:4e:99:58:f8:9d:23:7a:72:
                    e9:f3:46:55:95:1c:a0:f9:54:9d:8d:ad:93:c2:3d:
                    47:94:df:7d:5b:7d:fd:29:b7:15:81:5b:dc:f6:4b:
                    98:60:35:b8:5d:1f:2a:97:ef:80:6b:a8:65:2c:c5:
                    5b:cd:23:5f:c9:9b:4e:fe:78:86:fc:f8:c2:73:bd:
                    13:87:77:30:2a:d5:72:46:79:a7:9a:b5:e6:d1:2a:
                    80:ae:03:2c:ab:8b:a6:a3:28:d0:75:26:51:08:d7:
                    51:0a:b0:6c:c1:ab:d0:e4:aa:5d:8e:1b:ea:dc:87:
                    32:7b:16:ea:d7:e7:cc:8e:04:fa:57:9e:5a:66:d4:
                    1b:9e:4e:5b:83:30:5b:8c:f9:6f:9c:32:ca:73:14:
                    19:2e:fb:a9:d4:3b:e0:ba:9e:32:3e:ef:e3:de:41:
                    6f:46:bc:76:31:8d:79:02:e9:4e:ae:78:2c:03:60:
                    3f:de:b7:57:ed:2d:b5:3c:b9:3b:0c:80:2d:6f:ac:
                    9d:67:f5:fd:c8:27:e5:e5:fb:cb:b4:a2:a0:22:f6:
                    ca:d4:d5:fb:bd:19:52:51:1d:a9:ac:1a:cd:f8:8b:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:52:B3:39:5E:92:55:3A:FC:F8:95:4F:4F:68:A3:AC:1E:0D:56:7A
            X509v3 Authority Key Identifier:
                keyid:99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:39:00:d4:f2:48:98:0a:3d:ee:1e:ae:ff:93:21:06:e4:88:
         7a:b7:d4:56:e8:84:fc:8d:3a:39:84:25:58:3e:6a:04:83:55:
         d3:0e:e9:6e:da:34:3f:d5:9b:12:0f:f8:e9:dd:e6:41:a1:d1:
         d0:45:82:ac:c9:da:5f:65:f7:ad:70:3a:ba:13:b2:f9:f1:c1:
         69:0f:9e:d7:18:27:b3:5c:b3:a4:b0:26:fa:31:9c:f1:41:ac:
         83:4d:16:62:bd:ab:ce:c5:e0:e8:6d:b3:a0:8e:da:2a:88:55:
         9b:ca:44:da:b6:eb:3d:13:c8:ef:19:56:5b:fd:e5:ab:1b:8d:
         e7:89:e8:b0:5c:2b:8a:1e:df:93:3d:7c:0b:3f:4f:12:80:08:
         85:78:fd:3e:8e:b3:96:37:a7:9c:e2:63:c7:17:ce:30:94:5b:
         2c:d4:9b:1e:14:81:34:73:d4:58:03:c6:b1:31:a9:e5:fc:81:
         b7:b2:0c:b1:8d:a1:97:cc:86:b9:9f:55:dd:e3:d2:f9:4e:6a:
         f6:e8:c3:53:f3:20:55:f1:d5:b4:46:26:99:7a:39:ea:ea:70:
         69:19:21:b5:8b:c3:c9:7e:a6:d5:5b:90:46:e1:ed:17:bc:1b:
         07:4c:51:da:15:e7:59:88:66:65:05:5b:d5:2b:a4:c8:be:c3:
         37:d0:d8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:31:07 2025 by rpki-client