Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/YW5uDCR3qZGgaNPwp9rPtA5AIDY.mft
File:                     YW5uDCR3qZGgaNPwp9rPtA5AIDY.mft (raw, json)
Hash identifier:          DGCD0Dj0GpoVeQila80HDQ41GyCJJEdbm4SRPkFr2+M=
Subject key identifier:   4B:33:C4:EF:05:2A:EB:43:1F:7D:B8:C2:C8:AB:87:F9:A2:D9:6A:E0
Authority key identifier: 61:6E:6E:0C:24:77:A9:91:A0:68:D3:F0:A7:DA:CF:B4:0E:40:20:36
Certificate issuer:       /CN=616e6e0c2477a991a068d3f0a7dacfb40e402036
Certificate serial:       018B83AD78DCE733F8A12A1C627448DFC2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YW5uDCR3qZGgaNPwp9rPtA5AIDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/YW5uDCR3qZGgaNPwp9rPtA5AIDY.mft
Manifest number:          08A2
Signing time:             Tue 31 Oct 2023 03:01:05 +0000
Manifest this update:     Tue 31 Oct 2023 03:01:05 +0000
Manifest next update:     Wed 01 Nov 2023 03:01:05 +0000
Files and hashes:         1: YW5uDCR3qZGgaNPwp9rPtA5AIDY.crl (hash: vhE2DxxYPQ/5sL7OqsSqs9yKfebbm86Lu35JLnzrRJg=)
                          2: zabqqvo5EtULs0BwVtys6P2BT3s.roa (hash: /pmBxXD5QuY7szHk7Gv3ldeTfm5dn15k2KMiTLxi7gw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:83:ad:78:dc:e7:33:f8:a1:2a:1c:62:74:48:df:c2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=616e6e0c2477a991a068d3f0a7dacfb40e402036
        Validity
            Not Before: Oct 31 03:01:05 2023 GMT
            Not After : Nov  1 03:01:05 2023 GMT
        Subject: CN=4b33c4ef052aeb431f7db8c2c8ab87f9a2d96ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:9b:17:8f:73:15:25:95:2e:c9:14:2e:8a:
                    3a:b7:b3:17:1a:54:dc:70:1e:e5:44:1b:a6:dc:ca:
                    15:ca:c3:df:bf:8f:5c:74:45:52:74:96:f5:e6:e8:
                    f6:8e:fb:4c:b8:94:74:fd:30:27:84:5f:5f:56:c5:
                    bb:c8:97:22:d8:1f:72:a7:9e:03:26:2d:ee:34:fb:
                    39:7d:dc:f0:d2:fc:d2:12:93:2f:db:40:0e:e2:88:
                    57:bd:16:36:23:ea:44:34:df:c6:3f:91:75:45:84:
                    03:d4:ce:e6:85:81:9d:ec:3d:41:8c:f5:e8:12:c3:
                    8d:bb:bf:ec:0d:e1:f2:c3:fd:19:5b:c5:f4:69:b2:
                    dc:21:ba:16:aa:b6:f0:cd:b4:1d:7e:8c:2e:4c:f8:
                    22:38:68:2b:d3:67:d2:7b:c0:42:86:29:16:f1:7f:
                    2f:7a:29:73:0b:6d:96:2b:34:7e:ce:6a:7e:93:f2:
                    fa:71:35:52:c4:d5:32:27:59:d1:af:2e:f7:0c:e2:
                    dd:e7:36:03:9d:6c:e7:f7:cc:df:ba:7d:eb:dd:62:
                    f1:af:dc:23:03:97:58:69:62:04:3e:c3:ea:10:3a:
                    d8:5d:ea:38:03:50:90:26:7b:30:f6:00:02:be:af:
                    32:d5:b2:37:4a:1f:d2:22:60:b0:02:2d:68:a1:c5:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:C4:EF:05:2A:EB:43:1F:7D:B8:C2:C8:AB:87:F9:A2:D9:6A:E0
            X509v3 Authority Key Identifier:
                keyid:61:6E:6E:0C:24:77:A9:91:A0:68:D3:F0:A7:DA:CF:B4:0E:40:20:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YW5uDCR3qZGgaNPwp9rPtA5AIDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/YW5uDCR3qZGgaNPwp9rPtA5AIDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/357457-2087-4993-9995-c42539dfe566/1/YW5uDCR3qZGgaNPwp9rPtA5AIDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:34:79:17:a7:e8:49:7d:0d:b1:b7:95:c9:37:ad:b8:9f:8f:
         ef:9f:cc:ae:29:be:8f:da:4f:cb:89:9d:77:c8:72:16:ef:64:
         e0:fa:0b:40:74:27:e1:6f:0d:56:cc:37:38:62:98:3d:f8:73:
         b9:fa:64:e5:fa:68:be:b7:aa:9a:9a:89:06:f6:0e:57:cf:09:
         45:02:6f:9a:0a:c3:1a:b6:d0:8b:b8:3e:3a:37:2c:54:d2:70:
         62:b7:3a:4f:00:dd:8d:2d:a9:ba:c0:87:85:c6:73:56:bc:53:
         38:46:1d:52:c4:43:51:93:5c:9e:ed:10:4d:01:be:8f:27:a1:
         78:50:60:30:03:54:65:fb:35:eb:ac:e5:00:44:a9:1d:34:04:
         07:34:ff:ba:98:98:11:90:9c:57:fa:dd:e0:fc:a7:4c:a8:92:
         db:34:3c:ee:2c:3d:3f:be:46:ca:cb:ab:1f:57:6c:4f:c9:e9:
         be:c9:ac:da:4c:94:5f:25:94:01:7a:3e:e4:98:ee:e6:26:e7:
         66:2b:0c:3c:a3:6d:f1:8d:12:da:d7:ca:03:45:4a:87:31:fc:
         28:dd:0a:ea:a2:67:9d:e2:91:ac:49:92:8d:b6:24:da:02:fa:
         6d:cb:99:55:43:b3:17:c0:a3:9e:0d:a2:6f:c8:37:b6:a3:ab:
         c4:e6:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:48:53 2025 by rpki-client