Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          zt54vzW5j59H9ipv3jBP0MKQS8Ab8MQ7h+lmbxZnNrw=
Subject key identifier:   73:A3:A8:E3:4A:4C:D5:07:B3:30:EB:C6:94:EB:38:91:A0:AB:E8:ED
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       0195E00F92B738BF2DD9155D4484DEC2123F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 04:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:11 +0000
Files and hashes:         1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: 8W5Y/NBne8Rwa82Kk5+p3ja1YtBUmcmmC169Bgj6YWA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:92:b7:38:bf:2d:d9:15:5d:44:84:de:c2:12:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Mar 29 04:01:11 2025 GMT
            Not After : Mar 30 04:01:11 2025 GMT
        Subject: CN=73a3a8e34a4cd507b330ebc694eb3891a0abe8ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:ef:e1:1e:f8:89:0b:a2:e9:ee:9c:aa:8f:
                    2a:1d:ec:45:71:f5:1d:10:bb:90:38:7a:98:86:fa:
                    93:84:01:1c:71:54:84:ca:64:16:45:dc:f7:0b:28:
                    f9:1a:2a:43:aa:fc:49:33:2f:7c:0f:76:40:83:92:
                    c9:67:89:dd:7e:c2:3d:14:22:db:6b:f7:23:10:95:
                    62:96:8c:bf:da:c8:fc:72:7d:a6:be:e4:79:bc:09:
                    8f:75:81:c8:c6:20:50:8b:5e:7f:d7:32:c1:d1:ec:
                    f0:d3:00:29:0a:f9:e0:d3:b3:12:32:40:a2:8d:78:
                    c0:d9:d2:3d:27:f8:13:7d:15:8d:24:5e:dc:a7:73:
                    b8:c6:87:41:28:8d:53:21:96:ce:2b:97:4b:36:ad:
                    ae:1a:93:0d:9e:5d:db:48:df:3d:c7:3d:1b:c4:0d:
                    a0:24:03:2b:bd:11:00:7c:76:24:9b:4c:f3:3c:7d:
                    43:08:92:04:cd:fe:ee:25:77:09:d3:dd:8f:7a:2f:
                    2c:87:c3:e3:67:08:60:6c:62:ee:bc:54:aa:85:e8:
                    1e:12:11:3f:11:4e:b5:33:3e:18:5a:10:a7:d4:fc:
                    fc:13:70:cc:82:4b:ab:22:3d:68:21:c7:a4:bf:bd:
                    3e:7b:90:9b:35:ef:a5:99:e2:68:d3:2d:8a:42:c4:
                    39:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A3:A8:E3:4A:4C:D5:07:B3:30:EB:C6:94:EB:38:91:A0:AB:E8:ED
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0d:28:ea:02:6c:90:77:11:6f:9e:9c:ee:e1:2a:2f:e5:d2:
         83:62:6f:80:fc:dd:ba:a6:d3:ab:e0:91:6a:f3:87:9e:28:c8:
         e7:50:ce:d2:9b:7e:54:e1:d3:fe:81:fa:dd:3f:82:32:8a:fa:
         f4:2e:58:5a:05:90:d9:e2:0a:3d:f6:52:33:b4:14:60:d7:c6:
         b8:3e:bd:00:a6:77:bd:2c:13:cc:c1:d3:80:d3:58:59:ef:24:
         1c:2f:86:77:be:90:d5:06:3d:b8:46:fb:10:f5:a7:72:0b:d5:
         4a:f6:f3:6b:a1:73:d5:a6:f6:78:e3:64:d7:0f:15:66:0c:88:
         97:39:6b:5b:34:13:e1:e3:dd:7c:9b:ac:8a:07:ef:8f:db:53:
         1e:a7:6d:51:15:e8:4e:df:e5:56:2b:d9:3f:81:ff:0f:de:1d:
         cb:48:83:96:02:20:be:de:bd:e2:a0:87:c4:d8:32:cd:55:d3:
         33:27:9e:47:e1:52:b7:5a:32:8d:45:9b:63:87:55:68:2c:63:
         db:99:18:ae:4f:3d:eb:54:10:79:82:9c:6f:25:1a:12:e4:52:
         0e:f6:b9:ce:fc:68:30:f2:cf:a9:ea:e1:fe:64:0b:55:6e:5d:
         3d:48:66:71:6e:d5:d6:75:ef:a7:91:0b:f6:1a:ba:ac:cd:94:
         65:4d:d0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:25 2025 by rpki-client