Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft
File:                     GzjKPrK6f_JBL15_je8-tRVg0a0.mft (raw, json)
Hash identifier:          lq5+F1Rqpgkl1USreAcFn5Q8XUrMa5NiNSqeyM0m+Rs=
Subject key identifier:   0A:02:42:83:86:B5:33:7F:5C:75:F4:64:FE:30:9C:C7:57:0B:AB:5E
Authority key identifier: 1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD
Certificate issuer:       /CN=1b38ca3eb2ba7ff2412f5e7f8def3eb51560d1ad
Certificate serial:       0185E1F349DAC9AA6C17466A8429711D881F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GzjKPrK6f_JBL15_je8-tRVg0a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft
Manifest number:          0C3B
Signing time:             Tue 24 Jan 2023 04:04:55 +0000
Manifest this update:     Tue 24 Jan 2023 04:04:55 +0000
Manifest next update:     Wed 25 Jan 2023 04:04:55 +0000
Files and hashes:         1: GzjKPrK6f_JBL15_je8-tRVg0a0.crl (hash: KnN3MC2Mlhy7auq2bkUv7fNqVNNBxYmw5juA51A80o8=)
                          2: HMrcNcc0YLFn7qtcB3T2gXkDw7Q.roa (hash: Jg8aPD2KgLQYLvBloThoOJ3Wb99E3hnF2a64wjS7ctQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e1:f3:49:da:c9:aa:6c:17:46:6a:84:29:71:1d:88:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b38ca3eb2ba7ff2412f5e7f8def3eb51560d1ad
        Validity
            Not Before: Jan 24 04:04:55 2023 GMT
            Not After : Jan 25 04:04:55 2023 GMT
        Subject: CN=0a02428386b5337f5c75f464fe309cc7570bab5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1b:66:fc:0d:1b:4d:80:dd:d0:fe:15:2e:cb:
                    78:eb:ea:01:40:43:aa:af:f8:52:ac:d7:4d:62:82:
                    a0:9f:88:88:c0:04:57:0c:1c:34:e3:7e:bb:80:95:
                    b4:0a:69:2d:cc:e5:6c:17:d2:04:85:43:c7:bf:12:
                    b4:3c:31:6f:2b:21:4f:7c:2b:f1:ee:5b:90:39:94:
                    52:6b:09:22:5c:b0:ee:33:60:b8:da:50:b8:7c:eb:
                    a5:c7:8c:d9:61:50:64:54:f4:cd:f0:ec:67:a7:2e:
                    e6:cc:1b:4b:02:48:2f:9c:c0:ee:8b:c6:59:a4:b2:
                    83:37:32:d4:47:ef:83:09:b3:35:cb:ac:5f:1b:d2:
                    4d:b7:21:56:fe:c5:4f:e7:15:01:23:9e:40:92:fa:
                    3d:9b:5f:fe:5e:0f:4b:fe:77:4e:e0:38:96:de:de:
                    e8:dd:ac:47:ea:f4:16:36:7c:f2:ec:8f:87:7f:fc:
                    d1:62:a1:f3:cf:ae:bf:01:a4:6d:3d:3f:5d:52:a4:
                    0d:e6:09:bc:85:32:c7:4f:4b:1a:0a:e4:8f:38:c1:
                    77:ad:d8:31:7b:5e:11:9e:f5:87:fc:6d:d1:f5:23:
                    6e:9e:1a:06:a4:7e:21:c0:ce:b7:6c:26:9a:ad:5b:
                    2d:a5:99:b5:c0:e1:7e:fe:7c:74:65:38:11:42:fa:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:02:42:83:86:B5:33:7F:5C:75:F4:64:FE:30:9C:C7:57:0B:AB:5E
            X509v3 Authority Key Identifier:
                keyid:1B:38:CA:3E:B2:BA:7F:F2:41:2F:5E:7F:8D:EF:3E:B5:15:60:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzjKPrK6f_JBL15_je8-tRVg0a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a17fb5-3a11-4d9e-9cd0-9f2041706f8f/1/GzjKPrK6f_JBL15_je8-tRVg0a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:c1:c1:4f:59:8e:c6:96:bf:bc:91:0c:cd:7f:8c:00:22:a6:
         2b:09:b6:6b:b9:75:be:4d:ec:9e:a4:36:4e:3f:aa:6b:ef:09:
         47:4e:07:a8:20:71:78:7a:f9:6a:2d:68:ad:ca:2c:b7:aa:2b:
         79:1f:60:8a:06:54:2a:40:fc:49:c6:11:b5:7f:95:a2:0f:7b:
         58:22:0d:00:5c:56:0e:ee:27:58:9e:4f:02:15:28:ad:12:d5:
         88:cd:69:7e:70:11:cf:12:07:2d:63:9d:95:0a:9d:f4:be:37:
         de:51:0e:41:83:b8:d2:d1:18:af:2f:74:ee:54:eb:1d:b5:5b:
         5a:aa:76:13:00:c1:bd:26:9d:14:a0:10:aa:0b:25:4d:36:16:
         eb:0c:6c:2a:a3:44:7c:e1:b0:92:f9:c2:1e:f9:6a:dc:51:f4:
         a7:d1:a4:b9:4d:7b:ce:97:64:6d:b6:7d:9f:bf:9b:19:53:1d:
         ca:26:42:8c:36:53:e1:a9:c5:d5:08:72:0e:83:55:18:cf:e7:
         a5:f5:34:77:dd:1d:8c:f0:ff:81:8b:3b:33:40:38:94:12:0f:
         cf:30:71:0f:4a:55:cc:d6:23:19:54:3c:23:c1:64:b3:49:98:
         4c:6e:d4:a8:58:dd:7e:50:36:cc:66:80:5e:77:65:2a:8f:5e:
         55:da:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:36 2025 by rpki-client