Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
File:                     p2t7n3_WaUOSfGDc8SEt3AffBSM.mft (raw, json)
Hash identifier:          Qa7Fnlk/tep6yPc4TqKzomvvWJGxgoyFT+F4t8G5cEw=
Subject key identifier:   D1:B5:8D:B7:90:75:D4:32:72:EB:A7:E1:D0:5F:1C:0A:0A:6F:3A:B4
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Certificate issuer:       /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial:       01972E5F060FC7404DCCDACB0A2482F98976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft
Manifest number:          0DC3
Signing time:             Mon 02 Jun 2025 02:01:08 +0000
Manifest this update:     Mon 02 Jun 2025 02:01:08 +0000
Manifest next update:     Tue 03 Jun 2025 02:01:08 +0000
Files and hashes:         1: Da3O9NdT4lSei8Y7CvkDIaDpzJM.roa (hash: hrePu0JTxNPu0+eBuJ/EjFtZTApZ3mGXZCXxWWMuor0=)
                          2: p2t7n3_WaUOSfGDc8SEt3AffBSM.crl (hash: j6H4JjvZxIIBnNU7uR009ilsiEA6UDojZeqRS5hrVO4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:2e:5f:06:0f:c7:40:4d:cc:da:cb:0a:24:82:f9:89:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
        Validity
            Not Before: Jun  2 02:01:08 2025 GMT
            Not After : Jun  3 02:01:08 2025 GMT
        Subject: CN=d1b58db79075d43272eba7e1d05f1c0a0a6f3ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:7d:6f:18:84:81:f3:ee:ea:26:18:4a:1b:
                    d6:93:1d:e6:21:f7:1c:ec:2c:60:b0:47:d0:f6:92:
                    c5:75:44:57:a4:ff:13:30:06:39:ef:76:f0:4a:b1:
                    2e:7d:cd:c9:a9:e6:08:fd:77:56:47:87:77:52:91:
                    86:26:5e:b8:db:e8:bb:a9:ab:36:a4:77:83:d4:06:
                    6c:4a:3c:cb:37:92:cc:bb:6e:96:53:41:f5:4d:af:
                    6c:1f:e8:82:66:51:b8:63:a9:c8:d1:95:bd:1e:da:
                    6e:c0:97:4b:fc:84:82:36:80:a2:b4:53:c1:96:c8:
                    7d:0d:33:f8:74:39:0e:48:28:90:a9:4d:54:f0:a1:
                    32:5f:ac:15:9a:f0:74:1a:0d:34:f4:4d:fc:b2:41:
                    1a:3a:6d:bf:84:8d:8d:fc:70:70:d8:bd:3b:e6:59:
                    40:48:23:39:d5:a3:4b:24:ac:b0:da:c1:69:85:c7:
                    59:ac:e7:cd:03:92:99:85:69:44:a8:6d:a2:b9:5c:
                    23:d6:44:8c:01:ac:e4:8b:d2:49:35:7b:b6:95:01:
                    e1:9f:f0:26:6b:44:f3:17:56:95:aa:3a:76:54:62:
                    0d:4c:8c:cb:f5:cb:30:f1:db:8e:39:f7:7b:c8:94:
                    89:60:5c:2e:cf:42:e3:8b:e3:eb:ab:c9:bc:4b:71:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:8D:B7:90:75:D4:32:72:EB:A7:E1:D0:5F:1C:0A:0A:6F:3A:B4
            X509v3 Authority Key Identifier:
                keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:07:be:14:b4:15:ef:7b:1a:6a:03:43:4b:c6:30:46:d4:c0:
         14:ef:9c:ae:b8:a2:f0:50:bd:d2:46:2c:d3:59:31:35:90:c0:
         25:d9:fc:8d:0b:10:9c:16:b9:ab:27:65:bd:49:ce:c3:3c:32:
         e0:38:b4:f1:96:cd:57:07:09:a0:16:d9:c5:fc:74:5a:2f:5c:
         70:a6:7d:01:e1:37:66:b2:69:c2:b7:21:20:5b:1a:a9:01:01:
         da:68:f5:73:90:90:85:e1:a5:e4:47:86:99:42:69:8b:e1:75:
         ec:2f:6c:b5:23:69:3d:fa:3a:1d:99:4e:71:62:06:87:0c:de:
         3f:bd:0f:e9:69:dd:fe:a6:1a:47:5d:bc:03:aa:f5:7f:99:7b:
         d6:f6:16:b3:0f:00:9c:26:7a:a4:9a:6f:8f:f6:29:ba:94:a4:
         33:27:e1:98:a0:63:aa:ee:10:71:e0:a1:2d:49:9c:8d:dd:6f:
         c7:82:33:14:53:29:f1:e8:e9:7f:53:9d:a1:15:90:45:c7:f7:
         bd:e1:b6:0a:e4:fc:2d:88:c9:50:28:1a:15:c7:b0:bc:a8:05:
         8b:19:0f:70:18:16:98:e9:e9:99:4a:25:54:dc:74:97:3b:62:
         52:b2:d7:7c:17:4f:43:61:ed:17:3e:57:3f:10:4e:36:32:ad:
         2b:5f:26:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:39:32 2025 by rpki-client