Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft
File:                     KryuX9N1NzGwDp4lH81jzB-upWc.mft (raw, json)
Hash identifier:          p7J2LiTZjgeiQt7cgjDTqqYYUg+GycRFM8G5WyK7tJw=
Subject key identifier:   C4:6B:C0:EA:65:0C:2D:3B:E9:BB:8E:DE:55:84:01:FA:56:3D:D0:23
Authority key identifier: 2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67
Certificate issuer:       /CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
Certificate serial:       018A8D281A32B5190765B00AF805045173EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft
Manifest number:          0970
Signing time:             Wed 13 Sep 2023 06:08:50 +0000
Manifest this update:     Wed 13 Sep 2023 06:08:50 +0000
Manifest next update:     Thu 14 Sep 2023 06:08:50 +0000
Files and hashes:         1: KryuX9N1NzGwDp4lH81jzB-upWc.crl (hash: cxDsJXYk7CCMMiYDshywtdPzWRQ3Qi9yjUhquEmf7hY=)
                          2: Npn4shUKhljFYZbkZcQxOZ0wddA.roa (hash: OSSVkY00Tig7essvCOpr/l+Z22/RR8dPJZPanSpmi5A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:8d:28:1a:32:b5:19:07:65:b0:0a:f8:05:04:51:73:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2abcae5fd3753731b00e9e251fcd63cc1faea567
        Validity
            Not Before: Sep 13 06:08:50 2023 GMT
            Not After : Sep 14 06:08:50 2023 GMT
        Subject: CN=c46bc0ea650c2d3be9bb8ede558401fa563dd023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:8c:7d:55:7c:55:b4:74:ed:ed:92:4f:50:
                    e5:1c:0d:d0:df:f4:3c:ed:da:09:a2:c0:6c:a3:7b:
                    d8:68:1b:7a:f1:0e:b0:8f:3f:fa:bb:29:40:e1:14:
                    a7:e5:df:a2:e9:d1:80:46:be:47:c5:5b:6e:fd:02:
                    b2:3e:6e:2e:51:44:fc:04:46:b7:a0:9f:e2:09:16:
                    5c:61:64:72:01:ef:50:2f:a8:58:55:38:49:ea:ed:
                    b8:f8:27:7d:c4:d9:7d:4c:81:d9:43:47:22:07:cb:
                    8d:5c:be:a8:16:b2:9a:c8:be:ad:7e:14:6c:20:9c:
                    2a:75:fe:f0:79:d1:32:ac:03:66:87:3b:c3:f5:92:
                    58:ae:85:96:12:50:74:de:23:72:a7:7d:f0:56:35:
                    76:b7:4e:72:50:a2:a0:d4:dd:9b:9b:ca:f2:31:80:
                    3e:c7:76:c6:89:f2:8e:76:8e:bf:84:ae:6d:fe:76:
                    3e:18:0a:19:e7:21:ff:ba:2d:83:64:71:02:c6:09:
                    c1:c5:f4:b6:ec:01:67:12:a0:9d:4d:ef:a1:00:40:
                    a3:d7:ee:dd:81:a4:39:d6:3d:b9:15:94:78:81:8f:
                    1c:b0:7b:90:2b:db:9d:76:40:c6:46:a0:52:95:a1:
                    0f:61:10:d6:68:59:de:a4:ce:84:20:ff:1d:be:24:
                    df:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6B:C0:EA:65:0C:2D:3B:E9:BB:8E:DE:55:84:01:FA:56:3D:D0:23
            X509v3 Authority Key Identifier:
                keyid:2A:BC:AE:5F:D3:75:37:31:B0:0E:9E:25:1F:CD:63:CC:1F:AE:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KryuX9N1NzGwDp4lH81jzB-upWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/c5e019-7176-4c79-b450-95f2bcc5aaa0/1/KryuX9N1NzGwDp4lH81jzB-upWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:52:08:7c:23:69:62:06:98:69:0c:c9:f0:39:73:84:b1:
         bc:42:99:b3:dc:70:45:00:0e:1b:9a:d6:74:8a:f1:f3:d5:ad:
         9f:5e:7c:70:7f:e3:96:34:60:96:70:44:b4:db:a7:f1:80:ad:
         eb:da:85:7f:31:50:76:64:23:97:1d:f6:45:56:a0:25:ec:35:
         ba:27:00:a9:86:2c:3e:2e:68:2d:e3:95:8b:d4:13:fd:83:71:
         dc:2c:43:7c:8b:3e:a5:04:a3:fc:ab:50:89:31:00:61:4a:0d:
         1d:ee:86:8e:a3:9f:b9:14:9e:cc:72:3f:04:ed:94:db:c0:5f:
         07:57:04:aa:22:70:64:84:b6:8c:16:34:f9:a7:af:90:b1:e9:
         a6:94:c9:a1:95:76:75:c1:bc:dc:3c:35:c9:1a:d1:7c:b6:8e:
         33:f1:85:d7:f7:e0:de:09:cc:d9:52:e6:4c:41:d6:dc:d7:27:
         6f:c5:7d:66:e0:6b:a9:bc:83:d0:1d:1f:85:5d:3b:9d:1e:86:
         e8:ae:9b:9a:93:a6:c1:30:89:ae:ee:95:38:ee:22:ac:c1:a7:
         19:e7:59:52:f2:ec:7c:eb:d3:2f:5b:5c:5a:46:9a:7a:ca:11:
         d4:7d:58:43:f3:92:3d:86:15:96:3e:a2:03:af:16:a4:28:ad:
         ea:89:6b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:36 2025 by rpki-client