Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.mft
File:                     e3C9mO4hE43SQ2RA9Tz6EBYO4HM.mft (raw, json)
Hash identifier:          qv/tcqPZkOKptOkBWKqc6EbREUkbu/UGSQHFDf+RgWo=
Subject key identifier:   50:B2:1C:1A:BD:AE:B8:76:C2:E4:FC:85:79:83:17:D5:86:67:C9:3A
Authority key identifier: 7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73
Certificate issuer:       /CN=7b70bd98ee21138dd2436440f53cfa10160ee073
Certificate serial:       018AA7F38A5F47D548F993FF504AF7E20741
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.mft
Manifest number:          0865
Signing time:             Mon 18 Sep 2023 11:01:10 +0000
Manifest this update:     Mon 18 Sep 2023 11:01:10 +0000
Manifest next update:     Tue 19 Sep 2023 11:01:10 +0000
Files and hashes:         1: 7cV8_TKZwb0T4ROpJOeeQXBT9CY.roa (hash: Z9Y7gbafc/QJM7EL8JhsgU6MKZ67KIHyHcE8y8qHxN4=)
                          2: e3C9mO4hE43SQ2RA9Tz6EBYO4HM.crl (hash: MXB0E2GFOdQY+cmbwcI3jjiDdXxRIV2kksIUbf8EQtY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:a7:f3:8a:5f:47:d5:48:f9:93:ff:50:4a:f7:e2:07:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b70bd98ee21138dd2436440f53cfa10160ee073
        Validity
            Not Before: Sep 18 11:01:10 2023 GMT
            Not After : Sep 19 11:01:10 2023 GMT
        Subject: CN=50b21c1abdaeb876c2e4fc85798317d58667c93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c0:57:04:5e:b5:26:dd:14:29:bf:72:d3:ad:
                    6e:a3:0a:df:96:b8:a8:1f:7b:36:46:6d:8b:13:ba:
                    97:b2:52:08:de:b8:27:49:07:c8:69:b6:70:bb:8d:
                    f4:dc:0e:7d:48:c9:46:78:3e:63:4d:1b:b4:45:c4:
                    0a:ef:c6:8a:80:89:12:dc:b5:1c:17:1e:c9:0e:32:
                    bf:92:41:8e:51:e4:a3:51:80:74:5d:32:2a:fe:6a:
                    c3:bf:e8:73:f1:b5:76:46:a1:1c:c1:47:2a:4e:57:
                    86:ea:80:7f:c9:3b:43:8d:6e:3d:06:59:31:3b:80:
                    d1:3c:22:43:ab:f0:05:01:5e:ab:b1:75:1b:b0:28:
                    5d:8c:eb:8e:54:d1:12:dc:91:0e:fc:d1:03:93:b4:
                    be:a1:95:e1:8a:fd:5c:2c:8e:c4:e6:9e:21:03:d5:
                    d2:df:1b:61:0c:c5:1d:0c:6a:49:18:b1:8e:41:d2:
                    c4:75:c8:d4:74:a6:de:dd:b4:52:4f:d0:e6:c6:35:
                    98:6f:3d:00:22:55:9b:3b:af:17:d0:e8:25:2d:e7:
                    09:57:a5:12:56:7c:af:c3:60:50:71:1b:4b:ba:3c:
                    41:87:ac:e1:98:60:3e:c2:e8:2a:58:a9:c3:de:86:
                    a0:df:7e:54:cd:0c:a9:3c:bb:19:26:aa:09:08:40:
                    92:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B2:1C:1A:BD:AE:B8:76:C2:E4:FC:85:79:83:17:D5:86:67:C9:3A
            X509v3 Authority Key Identifier:
                keyid:7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:16:21:12:93:f5:c6:81:8d:51:d6:bb:2a:a8:3b:38:3c:a0:
         d7:41:1a:2e:db:33:60:d4:23:a2:28:23:2a:45:6f:e0:b0:b9:
         27:fd:dc:2e:10:24:c3:50:97:14:9f:6b:89:9e:b1:ed:91:a5:
         f2:b4:60:69:fb:67:84:ff:22:8f:bb:9e:a8:d5:4a:dd:ef:35:
         92:d0:b4:9f:d6:05:19:4a:7e:0c:40:83:ba:64:0c:b2:95:87:
         17:7e:0a:65:86:df:ad:4b:ef:c8:70:e2:5a:b2:f2:59:a6:40:
         dc:39:4f:d8:f0:a2:b4:5b:08:94:e6:23:90:a7:09:8b:fb:d2:
         02:cb:53:44:cc:9b:6c:9f:47:c0:f1:49:ad:73:4f:00:d0:b3:
         2f:08:24:bf:4c:a2:9d:94:7b:70:ef:6a:04:3b:15:79:fe:fa:
         d7:ba:2b:9e:fc:b8:1d:7d:18:e6:70:ed:05:ba:89:35:c0:a4:
         7d:00:67:8c:56:7c:28:b7:d8:2d:a4:be:02:eb:f2:61:32:66:
         41:3b:23:61:07:d2:89:11:8b:0e:d7:f0:30:b7:0a:1c:79:7a:
         f1:ce:7c:00:e2:b3:fd:2d:78:c5:c6:38:fe:02:0b:f7:48:4f:
         bb:c1:f1:c0:5f:45:87:58:db:b5:de:b9:2b:16:97:2c:7b:8d:
         1a:bd:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:04 2025 by rpki-client