Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
File:                     cW2obFNsYhV0g7YzwYU2K6f30fI.mft (raw, json)
Hash identifier:          C8bqJAuMYUYUyGQWmdeufoiCEVt3KzjIdYWudkg278Q=
Subject key identifier:   CC:F7:FD:28:46:80:F4:34:12:17:F3:F8:FB:D1:AC:29:EA:0D:6A:D5
Authority key identifier: 71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2
Certificate issuer:       /CN=716da86c536c62157483b633c185362ba7f7d1f2
Certificate serial:       019148656A14D3612C7EC37771B62BA54C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft
Manifest number:          0650
Signing time:             Mon 12 Aug 2024 21:01:31 +0000
Manifest this update:     Mon 12 Aug 2024 21:01:31 +0000
Manifest next update:     Tue 13 Aug 2024 21:01:31 +0000
Files and hashes:         1: ZVYRbJJDnIOABqPsvgBAHqspQAc.roa (hash: Aq1yloicDjE/I9POAvmPmzTGnCe1EwgfH9FRhHqLVw4=)
                          2: cW2obFNsYhV0g7YzwYU2K6f30fI.crl (hash: GBN69k1NJqVWJ/Kf5u5uoxCI6PrCMMPlGPHzn0aWHYM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:48:65:6a:14:d3:61:2c:7e:c3:77:71:b6:2b:a5:4c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716da86c536c62157483b633c185362ba7f7d1f2
        Validity
            Not Before: Aug 12 21:01:31 2024 GMT
            Not After : Aug 13 21:01:31 2024 GMT
        Subject: CN=ccf7fd284680f4341217f3f8fbd1ac29ea0d6ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:b4:f6:dd:a2:88:7b:bf:47:48:8f:eb:01:
                    f0:5f:f6:18:e3:5e:7a:9e:bb:bd:00:05:8e:84:70:
                    ad:08:4d:d3:0f:ba:d7:eb:d0:83:70:c4:69:84:d1:
                    84:65:1f:4f:b3:d4:c4:5e:fe:4b:ef:01:98:ee:aa:
                    1e:13:e4:ab:eb:9f:7d:44:2e:53:cb:2e:77:f2:18:
                    73:da:39:79:b6:0e:27:27:57:d0:d7:b2:3c:4d:6c:
                    e5:19:01:56:ff:b5:c0:8f:2e:56:83:19:0f:5a:8e:
                    a8:d7:e1:bc:14:28:da:ac:04:d6:65:39:ec:67:9e:
                    b5:ee:64:a3:9f:ad:f3:54:e9:2f:e3:86:18:15:ad:
                    79:60:de:91:32:41:45:c4:7f:08:5d:f2:1f:c7:60:
                    c9:ef:4f:3d:fc:57:7d:ff:a9:be:e4:11:36:92:78:
                    07:f3:9c:ca:c5:bc:83:3b:8b:d0:6c:5b:ea:ad:3a:
                    28:54:64:2e:22:a3:fd:89:23:17:a4:27:97:79:f2:
                    77:95:39:9a:4d:2c:47:55:52:2a:08:bd:79:89:29:
                    fa:49:6d:30:60:bf:1f:ca:be:56:12:ec:fd:8a:58:
                    90:c5:72:2c:67:db:62:9c:dd:96:bd:84:bc:9c:2c:
                    4c:72:b1:ac:b5:ee:4e:01:35:cf:ff:b7:79:95:aa:
                    f0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F7:FD:28:46:80:F4:34:12:17:F3:F8:FB:D1:AC:29:EA:0D:6A:D5
            X509v3 Authority Key Identifier:
                keyid:71:6D:A8:6C:53:6C:62:15:74:83:B6:33:C1:85:36:2B:A7:F7:D1:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW2obFNsYhV0g7YzwYU2K6f30fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f6ddc-21b7-44d7-b984-73aea6eaca85/1/cW2obFNsYhV0g7YzwYU2K6f30fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:ba:36:bf:5d:e5:84:5e:9a:00:e8:ea:49:b7:cb:6c:ee:2d:
         8b:79:d7:93:50:2c:e7:54:41:dc:45:50:18:3b:81:a9:01:ac:
         61:64:e5:3b:ea:91:b4:33:7c:20:d3:25:0d:1c:7e:f2:49:d8:
         53:d5:54:a3:81:91:6e:c0:0f:bd:df:32:5f:a9:6a:49:a6:7e:
         05:8c:f7:70:85:82:03:9e:f6:e4:8b:b8:f6:23:34:bb:e8:dc:
         48:8b:a9:b0:9e:66:54:ba:7a:2f:04:b0:2d:6c:24:e9:be:09:
         4a:c1:1b:20:dd:70:83:d4:75:cf:3e:f8:f3:6c:87:71:0e:cb:
         77:a5:fd:26:be:35:0c:d0:f4:14:b5:08:78:f4:a7:26:fe:eb:
         2d:e8:70:dd:10:c1:47:48:03:92:2c:b9:3b:76:c5:fb:e8:43:
         b1:0b:29:15:40:1b:44:1a:de:e7:c6:da:1c:eb:2d:ec:be:4c:
         b9:46:f2:a7:76:d6:bd:66:88:5b:57:7c:95:a7:00:5e:59:19:
         06:6f:d2:cf:55:62:74:e0:4a:77:45:02:6c:03:34:13:eb:a9:
         e2:90:7d:d8:7b:fc:98:bd:4c:88:54:a2:82:69:a0:65:66:2c:
         b4:91:6e:20:86:b8:6f:57:db:ee:97:ba:2c:bc:e2:db:de:05:
         7b:5a:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:40 2025 by rpki-client