Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0c03a7-4bc5-4a46-8f02-d3dd0938f927/1/oZo5w0n5uFp9JVBfWkEDcVxapaw.mft
File:                     oZo5w0n5uFp9JVBfWkEDcVxapaw.mft (raw, json)
Hash identifier:          MZ4eCHWiqRgvuvIWpbAQU1qEpFSrpSqu0IkYXYV7XvU=
Subject key identifier:   7C:8A:3B:D5:62:0F:C6:C4:80:CA:06:8F:58:D5:08:2B:6E:22:B6:4C
Authority key identifier: A1:9A:39:C3:49:F9:B8:5A:7D:25:50:5F:5A:41:03:71:5C:5A:A5:AC
Certificate issuer:       /CN=a19a39c349f9b85a7d25505f5a4103715c5aa5ac
Certificate serial:       018A206DA0824C1D35EAA2C255037C01DB4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oZo5w0n5uFp9JVBfWkEDcVxapaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/0c03a7-4bc5-4a46-8f02-d3dd0938f927/1/oZo5w0n5uFp9JVBfWkEDcVxapaw.mft
Manifest number:          062B
Signing time:             Wed 23 Aug 2023 03:26:09 +0000
Manifest this update:     Wed 23 Aug 2023 03:26:09 +0000
Manifest next update:     Thu 24 Aug 2023 03:26:09 +0000
Files and hashes:         1: AeTFu5TnMK3r-u4JVl68-YS3g-E.roa (hash: ooucI8fJ6asit/VsqnyqkbQn+jBXcjyCnRCA9YYpzAM=)
                          2: oZo5w0n5uFp9JVBfWkEDcVxapaw.crl (hash: 8s6R2oiz8gglrIayXhkGPactyjW3owXr4k4eMGQ1GWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:20:6d:a0:82:4c:1d:35:ea:a2:c2:55:03:7c:01:db:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a19a39c349f9b85a7d25505f5a4103715c5aa5ac
        Validity
            Not Before: Aug 23 03:26:09 2023 GMT
            Not After : Aug 24 03:26:09 2023 GMT
        Subject: CN=7c8a3bd5620fc6c480ca068f58d5082b6e22b64c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:59:13:f3:6f:f1:1e:04:74:bb:97:a9:e5:
                    f3:ac:66:64:36:03:4e:5b:96:d4:66:12:c3:15:d2:
                    06:d3:47:a8:8a:12:8c:4e:d1:2f:ee:e7:61:df:2b:
                    27:74:50:a1:22:fd:03:e1:d6:ee:f5:6e:d1:29:bc:
                    97:9e:15:e3:17:27:dd:14:f5:e3:02:5d:5c:62:dc:
                    b7:df:6e:17:65:ec:a8:ab:26:50:4e:75:36:cc:44:
                    a1:c9:d3:b0:05:60:e3:11:44:4c:92:57:3d:57:ad:
                    55:8c:7c:f1:34:a7:b0:47:98:62:a5:f8:21:82:d5:
                    ab:1d:39:fc:95:ca:be:02:59:02:34:bc:ac:a2:36:
                    5a:b5:7c:24:c1:fb:f5:5b:dc:5a:da:5c:5f:c3:0a:
                    39:cc:20:d0:4a:e0:3c:fe:6a:34:7c:ad:16:71:2d:
                    f4:5b:69:e4:1d:15:39:8a:6e:9a:3e:d3:dd:a6:2a:
                    39:7c:3c:63:4a:f0:66:b7:26:fc:1e:74:fe:b4:2e:
                    51:ad:25:70:24:90:23:92:4a:61:44:be:c2:8a:77:
                    7d:51:7f:86:4f:39:2e:d3:7c:ad:a9:58:f2:d7:0e:
                    67:bf:29:74:84:7f:6e:cc:f2:9a:ad:ec:4d:0a:15:
                    41:98:4e:4b:dd:8e:e8:b4:d3:06:4a:78:0d:a2:b5:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8A:3B:D5:62:0F:C6:C4:80:CA:06:8F:58:D5:08:2B:6E:22:B6:4C
            X509v3 Authority Key Identifier:
                keyid:A1:9A:39:C3:49:F9:B8:5A:7D:25:50:5F:5A:41:03:71:5C:5A:A5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZo5w0n5uFp9JVBfWkEDcVxapaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0c03a7-4bc5-4a46-8f02-d3dd0938f927/1/oZo5w0n5uFp9JVBfWkEDcVxapaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0c03a7-4bc5-4a46-8f02-d3dd0938f927/1/oZo5w0n5uFp9JVBfWkEDcVxapaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e7:49:7a:24:61:9f:bb:88:62:11:f4:59:1d:d5:8b:58:0a:
         d2:97:53:84:35:eb:33:35:f5:04:6e:21:45:a9:f7:9b:0d:8f:
         09:04:4f:8b:b0:49:da:18:8f:00:cc:80:65:41:ec:69:e3:74:
         d1:99:41:ac:92:d8:96:1e:2e:d1:34:4f:17:94:12:d1:f7:de:
         bb:49:7b:de:51:30:7c:2b:f4:e0:4d:35:7b:00:51:d3:8d:ec:
         a8:65:6a:aa:1d:5e:2b:ea:52:b8:b9:77:f3:7d:c8:ec:b7:94:
         3c:e1:19:36:30:ec:1a:f2:6b:31:50:55:21:07:31:df:41:41:
         e0:e8:18:0f:72:22:34:07:62:ec:ca:05:10:b4:73:a9:75:c6:
         9b:9c:35:5f:8b:ea:bd:a6:e5:a7:f2:60:44:0a:4d:21:af:5a:
         ad:0c:ec:a7:28:f9:41:96:96:8d:c3:2d:bc:4f:d9:df:2b:18:
         c3:63:2b:05:6e:33:68:c3:26:75:6e:9b:b4:69:4e:89:8c:a8:
         84:06:4f:02:fb:c0:07:0f:45:dc:3f:25:44:3e:d9:28:5b:ae:
         06:91:aa:93:f3:65:79:9a:d5:8c:93:15:14:db:53:7a:a6:f4:
         f8:79:08:6f:ba:7c:17:9a:10:20:8c:52:b5:d5:e2:f0:25:ba:
         74:fa:f1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:34 2025 by rpki-client