Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.mft
File:                     BJfNjthvyDRt2TySBPdrw7kqTP4.mft (raw, json)
Hash identifier:          2pxc3tjc1TslBrM7vSrZpaHAqPikA1+OD6+S8ArlQ1s=
Subject key identifier:   1F:B2:82:DE:9C:B7:06:4C:E9:D4:7D:55:E0:FF:38:C0:C2:A7:D4:2D
Authority key identifier: 04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE
Certificate issuer:       /CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
Certificate serial:       0183FA9F2199B7FD67469C8D6A7A8575AE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.mft
Manifest number:          0B2C
Signing time:             Fri 21 Oct 2022 12:57:56 +0000
Manifest this update:     Fri 21 Oct 2022 12:57:56 +0000
Manifest next update:     Sat 22 Oct 2022 12:57:56 +0000
Files and hashes:         1: BJfNjthvyDRt2TySBPdrw7kqTP4.crl (hash: RkYW1qQnOBdkp4lFYNYps+o8dy4H3LYNN/R5QZ7Vnxg=)
                          2: djhHll0hiiYmwSOdxIPEGAl_m98.roa (hash: 6r63URFExpLdSS2qRb3lr44AHeNDyXHHOdb1H9xm0hE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:fa:9f:21:99:b7:fd:67:46:9c:8d:6a:7a:85:75:ae:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0497cd8ed86fc8346dd93c9204f76bc3b92a4cfe
        Validity
            Not Before: Oct 21 12:57:56 2022 GMT
            Not After : Oct 22 12:57:56 2022 GMT
        Subject: CN=1fb282de9cb7064ce9d47d55e0ff38c0c2a7d42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ad:95:ba:4c:8f:8f:b6:00:c1:03:20:aa:b7:
                    44:d8:cf:bb:c5:dd:78:0f:05:43:65:85:24:76:01:
                    b8:92:f5:20:d6:e6:74:d7:53:61:a5:fd:ef:a0:2a:
                    d4:f9:af:61:36:26:3d:58:c3:69:78:9f:51:c5:0a:
                    68:e9:ea:74:83:05:c8:8f:4b:1b:69:55:29:90:17:
                    28:c9:cb:f9:d9:cb:6c:6f:35:49:83:43:9d:00:8c:
                    76:07:07:eb:bc:dc:eb:d9:09:cb:87:60:77:c9:19:
                    72:b9:a1:ec:ba:ca:d1:31:c1:c4:71:d4:85:7f:56:
                    ae:ae:bd:fb:3f:11:06:c8:3b:eb:b3:1a:75:2b:ce:
                    72:9f:51:ca:be:f9:94:66:04:b5:27:09:fc:34:aa:
                    2a:99:be:6f:7a:2a:b6:1d:7a:18:3d:6e:d7:90:6f:
                    8f:6e:9b:19:32:3f:87:1a:1c:95:a2:c4:98:15:e7:
                    1d:3d:97:c6:77:02:bd:51:0d:a4:3b:a2:9e:7e:59:
                    99:94:74:6a:e8:7e:2a:77:ba:38:b3:53:24:d8:1a:
                    47:4b:f3:4c:85:0c:fa:55:44:bc:80:a4:45:0b:0f:
                    4f:b1:e2:a4:70:0e:cb:0d:d3:07:b1:7a:2a:ac:d1:
                    e6:4c:11:09:e2:a4:5b:eb:66:22:3e:1d:49:d2:22:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B2:82:DE:9C:B7:06:4C:E9:D4:7D:55:E0:FF:38:C0:C2:A7:D4:2D
            X509v3 Authority Key Identifier:
                keyid:04:97:CD:8E:D8:6F:C8:34:6D:D9:3C:92:04:F7:6B:C3:B9:2A:4C:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJfNjthvyDRt2TySBPdrw7kqTP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/cb7e34-46a3-4e82-9318-3c66266dc3b0/1/BJfNjthvyDRt2TySBPdrw7kqTP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c5:2a:23:7b:b4:cd:41:91:af:4e:20:75:e1:b9:8c:58:7b:
         5d:83:cc:be:b6:24:b2:54:f1:0f:76:c8:9d:65:f5:5c:c3:ab:
         f8:64:15:3a:29:72:33:8c:d9:a4:d4:cb:77:59:bd:f6:76:c8:
         79:a4:0b:01:df:d8:35:ce:c3:3e:0c:e4:73:95:c2:23:b6:c8:
         b0:26:39:a0:0b:e5:78:c3:ff:e5:18:60:1b:0c:22:18:c4:37:
         04:f8:e6:90:1a:f3:21:6e:e7:0f:5a:0f:3b:37:eb:11:58:2e:
         43:ac:c3:36:46:91:2c:d9:e9:67:73:ac:7d:6b:ed:7b:c3:4b:
         02:49:ca:1c:62:4c:ef:b7:a4:4f:03:80:d9:1d:6b:6b:94:d9:
         85:9d:36:1a:3d:38:79:c3:ae:55:89:44:2b:99:c7:eb:cd:54:
         d1:47:44:57:c2:45:26:62:1b:c1:6d:17:9e:bb:16:ff:83:24:
         95:9c:a3:10:14:de:75:cb:2d:0b:57:1a:1a:a2:72:84:3c:dd:
         ac:6a:bc:ad:07:89:85:39:bd:84:32:a1:27:6b:5d:dc:a7:1c:
         47:5d:22:dc:ab:7e:94:06:1c:f5:b4:81:93:f5:9c:25:f9:7d:
         15:01:e7:9c:80:a6:cc:f8:be:a6:43:fc:93:0e:c5:0e:1f:84:
         ad:c1:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:49 2025 by rpki-client