Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/bEmLG_yVW8ZXtsw35AQsASh8kos.mft
File:                     bEmLG_yVW8ZXtsw35AQsASh8kos.mft (raw, json)
Hash identifier:          LrqNY01HN6iACgCuKWAuwy+dSApmLY7Xu9DzOQ7oAik=
Subject key identifier:   67:7D:83:A0:6D:39:8A:69:7C:F9:B8:0A:9E:FB:28:FE:7D:4C:76:19
Authority key identifier: 6C:49:8B:1B:FC:95:5B:C6:57:B6:CC:37:E4:04:2C:01:28:7C:92:8B
Certificate issuer:       /CN=6c498b1bfc955bc657b6cc37e4042c01287c928b
Certificate serial:       01887B4F83ECA1AC0525F1B9428C3E208F42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEmLG_yVW8ZXtsw35AQsASh8kos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/bEmLG_yVW8ZXtsw35AQsASh8kos.mft
Manifest number:          05B3
Signing time:             Fri 02 Jun 2023 08:53:08 +0000
Manifest this update:     Fri 02 Jun 2023 08:53:08 +0000
Manifest next update:     Sat 03 Jun 2023 08:53:08 +0000
Files and hashes:         1: bEmLG_yVW8ZXtsw35AQsASh8kos.crl (hash: 9bvkjQjCVwE+tb1xz8jJgSXCmmyRXjkTGzkvKuMRiiA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7b:4f:83:ec:a1:ac:05:25:f1:b9:42:8c:3e:20:8f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c498b1bfc955bc657b6cc37e4042c01287c928b
        Validity
            Not Before: Jun  2 08:53:08 2023 GMT
            Not After : Jun  3 08:53:08 2023 GMT
        Subject: CN=677d83a06d398a697cf9b80a9efb28fe7d4c7619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:54:cd:24:fd:08:ec:e1:7c:eb:71:2b:bb:
                    6d:3f:e2:e6:16:73:5d:29:13:89:47:b6:1f:14:99:
                    1e:61:b0:ac:f6:53:8c:59:45:5b:0e:6f:de:45:53:
                    d9:5c:0d:9a:38:2b:cf:dc:3c:f1:68:3d:90:94:47:
                    c3:53:e1:3b:62:89:d3:b6:e6:c5:ac:53:b5:64:96:
                    a7:be:b7:4a:52:82:6d:73:44:f5:d9:c7:83:17:f8:
                    3c:4d:24:c6:78:9f:5c:f7:59:68:7b:a5:84:dc:1c:
                    dc:b5:c4:c2:87:94:dd:94:35:b5:78:d8:bb:86:c0:
                    34:97:9c:2a:a9:1d:cf:8b:aa:5c:53:5f:0c:4c:ac:
                    f5:bd:d7:83:cf:0e:7e:6c:3b:f4:41:bc:60:52:35:
                    e6:21:11:d7:0d:82:05:de:77:d0:1c:e1:9c:d3:65:
                    8f:ba:99:26:60:a1:4f:86:db:03:68:68:e3:53:6a:
                    b4:f9:9a:4a:50:61:8a:b9:dd:82:71:d3:c2:c8:71:
                    66:fd:c5:a2:86:74:62:36:77:5a:c9:ce:40:6f:3f:
                    03:9e:13:e8:dd:6a:94:07:1b:01:85:ae:e3:04:08:
                    b0:54:8a:0c:57:5e:63:78:82:42:97:fe:64:79:46:
                    60:9b:be:01:11:80:0d:a3:b1:24:26:94:54:66:bb:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7D:83:A0:6D:39:8A:69:7C:F9:B8:0A:9E:FB:28:FE:7D:4C:76:19
            X509v3 Authority Key Identifier:
                keyid:6C:49:8B:1B:FC:95:5B:C6:57:B6:CC:37:E4:04:2C:01:28:7C:92:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEmLG_yVW8ZXtsw35AQsASh8kos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/bEmLG_yVW8ZXtsw35AQsASh8kos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/aa551d-a023-49c5-967f-6439a8783884/1/bEmLG_yVW8ZXtsw35AQsASh8kos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fe:a0:d6:d2:96:ef:58:39:77:25:34:05:93:8a:c0:3d:6f:
         8e:b0:d8:e2:71:87:dc:78:2b:48:27:54:6c:f6:3a:59:76:73:
         d6:00:c2:04:32:80:03:47:e6:8b:48:a5:30:20:31:9f:e7:42:
         63:2a:18:4a:a5:da:28:80:e4:43:d1:db:97:c1:76:64:4b:c3:
         7a:58:8e:69:27:32:eb:44:ce:c5:3f:7a:70:ca:a7:72:de:20:
         08:e9:ba:a7:36:4f:04:41:17:da:07:69:20:12:3a:cf:bd:b0:
         dd:c1:13:dd:4a:92:99:14:17:e9:be:f4:bd:af:87:a0:67:2d:
         20:ca:62:da:17:3c:86:cd:03:5c:f9:7e:63:5b:ab:1d:a9:a4:
         a3:2d:9e:9d:43:62:b4:14:6f:d1:b7:0c:8c:b6:18:03:74:bc:
         29:6c:b3:51:be:d3:8b:f7:64:ce:b7:19:f4:e1:22:54:35:26:
         c5:0c:9e:b9:9b:22:6c:19:b0:a9:ef:40:f2:2d:4c:09:ea:eb:
         c4:fe:88:c1:f3:8d:25:48:08:6e:bc:06:1e:ba:4b:2b:70:6f:
         5a:76:d7:7e:f2:d7:c0:be:64:36:90:1e:06:f8:12:13:04:3f:
         1d:50:98:14:ef:31:02:77:3b:5a:98:f7:89:8d:b0:b6:e9:a2:
         4d:5d:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:21:34 2025 by rpki-client