Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4029d9-cfc0-4228-ac9e-482948ba8fd4/1/eozJBFc4SAl8crdmcdZ00Mo3SFo.mft
File:                     eozJBFc4SAl8crdmcdZ00Mo3SFo.mft (raw, json)
Hash identifier:          AbYh8UeAE0XVlF+JJkrlAnAgIs2IBqwdNwCAGtiXROo=
Subject key identifier:   A4:71:0C:A4:FC:E4:FC:0C:70:7B:2E:F1:E1:98:4D:11:45:D7:40:2C
Authority key identifier: 7A:8C:C9:04:57:38:48:09:7C:72:B7:66:71:D6:74:D0:CA:37:48:5A
Certificate issuer:       /CN=7a8cc904573848097c72b76671d674d0ca37485a
Certificate serial:       0185193B153F65A34DC3B92CF7BBCBBB0BCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eozJBFc4SAl8crdmcdZ00Mo3SFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4029d9-cfc0-4228-ac9e-482948ba8fd4/1/eozJBFc4SAl8crdmcdZ00Mo3SFo.mft
Manifest number:          0BC8
Signing time:             Fri 16 Dec 2022 04:39:40 +0000
Manifest this update:     Fri 16 Dec 2022 04:39:40 +0000
Manifest next update:     Sat 17 Dec 2022 04:39:40 +0000
Files and hashes:         1: eozJBFc4SAl8crdmcdZ00Mo3SFo.crl (hash: YhHGGzrI+2Ich6CFl0NVeEel95iQdtAQrC5BIa6L8sc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:19:3b:15:3f:65:a3:4d:c3:b9:2c:f7:bb:cb:bb:0b:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a8cc904573848097c72b76671d674d0ca37485a
        Validity
            Not Before: Dec 16 04:39:40 2022 GMT
            Not After : Dec 17 04:39:40 2022 GMT
        Subject: CN=a4710ca4fce4fc0c707b2ef1e1984d1145d7402c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:2f:26:ad:50:03:60:3a:12:b1:8e:0b:6f:
                    37:be:17:b0:66:25:a1:48:b0:ca:37:24:bf:de:61:
                    78:aa:b2:cb:dd:56:78:f5:da:de:af:e2:8a:1e:7f:
                    b5:f5:96:46:19:61:43:9c:3c:e8:66:1c:db:45:1c:
                    39:5d:f5:9f:09:e4:b5:15:e7:e7:42:61:29:1a:cf:
                    34:a0:03:df:f0:25:54:22:00:02:6c:2a:e2:c3:b9:
                    7b:fc:ea:e8:fa:31:c7:5a:97:85:95:c5:ba:2f:c7:
                    c1:5e:44:13:33:4d:89:21:63:ae:2b:8d:02:43:f6:
                    8b:84:2e:36:75:17:6a:4b:0f:2c:10:d7:bf:1c:72:
                    9f:9c:ad:28:23:60:de:c2:c8:4e:3a:4a:5b:5c:f9:
                    86:c6:de:d1:38:e1:9e:ad:18:c3:2a:1b:c4:10:d2:
                    22:c3:4d:f3:0a:b4:d9:96:b9:43:22:87:d4:98:7b:
                    ef:8d:d4:89:09:4e:78:f6:e0:00:a6:a8:39:92:16:
                    7f:d5:64:19:2a:36:cf:d4:9e:81:9d:87:30:a2:99:
                    c0:b9:a3:1a:56:9d:45:e6:a8:37:35:16:e4:f5:55:
                    10:d7:a9:ec:77:7b:84:8c:fe:bf:11:5d:54:9d:a4:
                    5a:5c:e2:ef:8b:40:5c:a8:a8:c1:97:e8:19:65:73:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:71:0C:A4:FC:E4:FC:0C:70:7B:2E:F1:E1:98:4D:11:45:D7:40:2C
            X509v3 Authority Key Identifier:
                keyid:7A:8C:C9:04:57:38:48:09:7C:72:B7:66:71:D6:74:D0:CA:37:48:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eozJBFc4SAl8crdmcdZ00Mo3SFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4029d9-cfc0-4228-ac9e-482948ba8fd4/1/eozJBFc4SAl8crdmcdZ00Mo3SFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4029d9-cfc0-4228-ac9e-482948ba8fd4/1/eozJBFc4SAl8crdmcdZ00Mo3SFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:5e:20:bf:ae:e6:0c:3d:7e:48:cd:23:0b:c0:1c:c2:d1:3d:
         ef:91:e7:1f:e8:1e:af:2b:8f:ca:20:20:85:d5:63:7f:04:fd:
         53:1f:13:f9:38:54:2c:30:d9:3d:4d:30:d6:d3:25:00:04:69:
         9e:e2:87:59:7a:18:64:2b:f2:e5:1c:c6:6b:7d:ee:a9:fe:c9:
         82:6d:c5:b9:a2:43:76:a2:56:24:65:d0:62:a4:da:5f:7e:ee:
         2f:71:6f:0c:9f:3a:4b:a6:b4:ed:f1:7c:00:e2:01:db:1d:05:
         5b:ff:31:ba:c0:b8:2c:dc:eb:6b:84:61:f8:ff:86:be:29:b5:
         a8:a8:5f:f4:cd:49:3c:bf:e6:0a:c7:53:0a:79:30:2b:b3:4a:
         ff:f0:cd:a3:09:e2:8c:0a:c1:65:0b:8a:11:b3:98:0d:67:0f:
         e2:28:bd:51:bf:3c:a2:6e:a6:c4:0a:7a:39:30:8d:70:33:47:
         6c:46:1e:b4:5e:76:f4:7a:73:5a:3e:9f:5b:f3:1e:2d:64:9e:
         b3:dd:c6:a2:fa:f7:1b:b0:f7:18:50:1c:29:1c:77:d2:0a:8e:
         57:95:e8:85:f5:10:38:a3:99:c2:56:14:19:3f:83:32:32:88:
         eb:b0:0c:85:a1:4f:4b:77:23:32:0e:e8:a5:51:f9:e7:7c:eb:
         10:0d:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:53 2025 by rpki-client