Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.mft
File:                     kjqgAVrBgMI2_6IR2WlnQobQc-k.mft (raw, json)
Hash identifier:          1IkwetAijLAXcy+F6ZmnXQbbFfqwKdwM84KjNwcC0Fw=
Subject key identifier:   0A:3D:0B:BF:11:20:5F:C5:57:7E:4B:66:53:B1:D0:34:2B:7C:9A:31
Authority key identifier: 92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9
Certificate issuer:       /CN=923aa0015ac180c236ffa211d969674286d073e9
Certificate serial:       0230E8EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.mft
Manifest number:          02CA
Signing time:             Fri 27 May 2022 10:55:27 +0000
Manifest this update:     Fri 27 May 2022 10:55:27 +0000
Manifest next update:     Sat 28 May 2022 10:55:27 +0000
Files and hashes:         1: h49IfGxvDhK6hXaVrULxJPUhsNM.roa (hash: +3pbGSJ+XaOPu7UNpyTEL0RuV4GGBlv9eQ0Dlo7DeXw=)
                          2: kjqgAVrBgMI2_6IR2WlnQobQc-k.crl (hash: sZgWWOdPDS8sGcpFLqXX8FX27BdnWQVnhnSmUo8e7kA=)
                          3: wT4zNR6qZ-ETHyaM8FgXusZQ7AA.roa (hash: +f1v9kaXJ5LLEDqxq86GAmqUtvk7qadJq7M0jL7gmaA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36759787 (0x230e8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923aa0015ac180c236ffa211d969674286d073e9
        Validity
            Not Before: May 27 10:55:27 2022 GMT
            Not After : May 28 10:55:27 2022 GMT
        Subject: CN=0a3d0bbf11205fc5577e4b6653b1d0342b7c9a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6a:ea:fd:4a:ab:0e:64:01:d6:a0:4c:c0:cb:
                    2e:a8:4b:19:1b:8e:d1:04:9f:77:d1:91:ec:7a:67:
                    45:00:ad:da:61:95:4e:73:30:c0:29:61:17:74:ee:
                    19:2e:30:2d:21:f6:82:92:f1:dd:da:c6:08:8a:89:
                    29:ff:54:eb:00:9d:fa:1c:09:b9:f2:7e:f6:74:04:
                    21:d3:cf:62:2e:57:e6:7e:89:ef:25:f4:b4:b9:c5:
                    f0:16:52:04:ec:96:ac:de:fc:f7:55:28:9e:25:f0:
                    6e:83:2e:4b:c7:1f:da:fa:ca:9d:6b:0a:3a:68:38:
                    1d:52:52:62:b7:49:91:de:e8:c6:6b:4b:2b:ac:87:
                    65:85:85:46:23:77:f2:91:9e:cd:8f:a6:b7:2a:89:
                    fd:08:70:d3:96:66:1e:62:05:ad:0b:10:06:04:a4:
                    6d:49:76:bc:8d:d9:44:17:88:c6:30:e6:2c:1c:78:
                    99:88:84:c5:f0:41:d0:a3:51:4c:f5:0c:50:8b:5f:
                    e2:54:6b:97:a9:f6:7d:c4:05:5b:33:54:1c:ec:60:
                    86:6b:92:de:96:22:23:fc:5d:98:1d:a5:a2:95:18:
                    13:0a:e4:d1:17:60:7c:84:7b:a5:e4:f3:83:f7:e7:
                    7c:32:66:fd:af:c5:a7:1d:3a:b7:12:6b:1b:d3:f3:
                    eb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3D:0B:BF:11:20:5F:C5:57:7E:4B:66:53:B1:D0:34:2B:7C:9A:31
            X509v3 Authority Key Identifier:
                keyid:92:3A:A0:01:5A:C1:80:C2:36:FF:A2:11:D9:69:67:42:86:D0:73:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjqgAVrBgMI2_6IR2WlnQobQc-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/026ecc-36f9-490f-8934-85f548d74db9/1/kjqgAVrBgMI2_6IR2WlnQobQc-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:f0:22:2a:0f:44:dc:7c:bc:58:00:19:51:02:41:27:2f:
         1b:36:eb:38:54:2f:19:fc:80:35:00:51:53:83:0b:ec:be:31:
         81:85:7b:1a:e3:ff:e8:70:55:e9:b9:01:eb:44:20:0e:2e:7b:
         ff:b8:32:06:49:44:b6:24:cb:7d:84:23:1f:c7:ed:b0:f7:5d:
         3e:d4:88:c0:53:29:4f:0f:78:78:6d:23:58:eb:3a:46:ab:c2:
         b5:54:c2:4b:ca:c0:01:cd:1f:d3:9b:d3:e4:c9:31:3d:cd:b6:
         3c:26:2d:f6:48:d8:5d:a4:e7:d4:30:62:14:6f:13:43:2c:29:
         a4:e3:54:28:e3:b8:51:16:73:9b:d6:b4:b5:31:8e:c3:06:6f:
         b6:98:8a:68:ea:1a:34:c4:da:4d:28:2d:ba:e7:39:a4:c3:33:
         83:b4:e0:fb:e9:ff:d5:c9:4b:15:bf:ab:2d:01:1e:45:bb:c2:
         ae:ce:5c:93:03:00:66:2f:bd:39:73:cc:74:74:9a:10:b4:f3:
         d4:cc:93:81:65:06:a3:ae:7b:41:ac:76:db:fd:06:cb:b9:06:
         4a:03:41:2e:04:94:34:29:72:97:e0:07:be:ba:4b:cd:80:41:
         44:e7:d3:1f:83:0f:9d:ea:1e:75:50:13:aa:ad:7c:20:74:09:
         46:c6:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:06 2025 by rpki-client