Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.mft
File:                     tx2LpAC35L9MSuG8MHYh7CNH5t4.mft (raw, json)
Hash identifier:          rtXSBYo1HmChckVmsxkJPz1D4GSvjCk+/t6EE3qvYdo=
Subject key identifier:   3E:C2:67:54:A0:D8:EA:7D:B4:6E:AF:E9:FB:F6:E3:00:44:44:29:38
Authority key identifier: B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE
Certificate issuer:       /CN=b71d8ba400b7e4bf4c4ae1bc307621ec2347e6de
Certificate serial:       018629EBD98BCC10E9B5311829456934D8C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tx2LpAC35L9MSuG8MHYh7CNH5t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.mft
Manifest number:          0C69
Signing time:             Tue 07 Feb 2023 03:29:27 +0000
Manifest this update:     Tue 07 Feb 2023 03:29:27 +0000
Manifest next update:     Wed 08 Feb 2023 03:29:27 +0000
Files and hashes:         1: E6ashEmWs_n1q01G5qRJCd93YHo.roa (hash: IdKr4VsaXXkCuefj/0oPFPzS/5/FTDcFjCalduCmMnA=)
                          2: tx2LpAC35L9MSuG8MHYh7CNH5t4.crl (hash: SPrHutu7+SO+uV8gGoBDA3KXSzRcFHrJL7gTN0JQLrE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:29:eb:d9:8b:cc:10:e9:b5:31:18:29:45:69:34:d8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b71d8ba400b7e4bf4c4ae1bc307621ec2347e6de
        Validity
            Not Before: Feb  7 03:29:27 2023 GMT
            Not After : Feb  8 03:29:27 2023 GMT
        Subject: CN=3ec26754a0d8ea7db46eafe9fbf6e30044442938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:b5:a3:87:40:bc:4b:cf:4d:dc:5c:f4:f8:
                    54:ef:0e:39:39:d1:36:ac:a2:68:f2:a8:bc:48:ba:
                    b5:8b:25:7e:cb:57:59:fe:dd:d3:0d:bd:58:d3:50:
                    4f:de:35:29:ac:78:e7:e3:50:fe:56:2d:4d:35:95:
                    88:ae:be:8d:13:b8:12:7b:a0:b8:d7:35:ba:fe:ed:
                    9d:1c:ae:8a:00:0f:05:8f:fb:66:27:d4:13:a6:9c:
                    dc:a7:fe:74:bb:84:a2:f9:f2:5c:43:1d:ca:8f:86:
                    2b:4d:21:ef:cd:62:2c:5c:db:3c:0c:02:ab:c9:7e:
                    c0:44:8a:9b:8d:11:d0:6e:fe:e6:cf:11:dc:80:df:
                    05:b5:71:3b:ce:69:8a:f9:eb:d0:f9:ce:ac:a4:19:
                    b6:ac:be:19:c2:02:18:3c:b9:87:a6:0e:4a:0c:78:
                    92:56:bd:6d:dc:34:e7:6a:8b:03:96:ea:c4:e7:09:
                    a3:58:e5:a0:e2:b5:1e:3c:f0:c6:93:f5:b3:b0:5e:
                    3f:f6:7b:85:df:37:09:5c:c3:6f:ad:b4:76:42:af:
                    82:5b:b0:71:06:53:6b:62:a6:ed:9c:f1:d0:fc:f7:
                    d2:06:0c:7a:6c:c2:7a:9c:12:9a:9a:c4:3b:e2:ba:
                    b4:31:ff:fe:d5:05:1a:1b:a9:97:33:cd:15:e6:be:
                    54:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C2:67:54:A0:D8:EA:7D:B4:6E:AF:E9:FB:F6:E3:00:44:44:29:38
            X509v3 Authority Key Identifier:
                keyid:B7:1D:8B:A4:00:B7:E4:BF:4C:4A:E1:BC:30:76:21:EC:23:47:E6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx2LpAC35L9MSuG8MHYh7CNH5t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5cc6e1-fe5f-4803-95f2-9f614074da2d/1/tx2LpAC35L9MSuG8MHYh7CNH5t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:91:8f:c7:44:df:fd:c2:73:25:02:77:1f:8b:96:d7:be:ba:
         a2:7c:21:0f:d7:7d:06:da:98:a9:4c:fc:05:d0:d4:d5:e0:4c:
         b2:0b:50:11:57:59:7e:2f:a7:62:06:12:a7:49:f8:e6:71:ca:
         b5:86:a9:ca:ee:de:90:86:d6:4b:5f:14:c7:84:51:d0:85:68:
         13:45:96:37:88:25:2a:8c:27:6a:dd:51:cf:d3:41:a8:0f:90:
         0c:56:ad:3d:7b:b8:90:9a:07:a9:cf:f6:8a:af:e6:5d:3a:39:
         fb:7d:4a:de:43:63:93:e8:64:f3:1d:ce:63:7f:2c:02:01:22:
         c4:a3:a8:6f:a7:6d:51:b8:8b:c5:65:c2:60:44:24:84:c6:b4:
         da:c1:5d:6c:4e:f9:0c:bf:97:35:bc:bd:6e:de:e7:4b:57:f8:
         67:ab:f7:84:4d:44:2e:cf:25:54:4a:a5:7c:4e:ed:e7:d0:c2:
         7d:9b:b2:df:ee:e5:18:e7:e0:25:ee:c5:a9:ae:02:8e:64:7d:
         a3:a3:dc:16:7b:ad:c6:37:ca:22:d0:b4:32:73:dc:9d:0e:1d:
         d3:91:70:b1:3e:8b:a3:a9:cc:10:81:6f:b9:8b:95:aa:3f:4b:
         a9:f7:cc:93:2c:2a:a3:e7:61:e3:4b:26:4b:19:7a:58:ea:f2:
         b5:73:cb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:56:22 2025 by rpki-client