Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.mft
File:                     OxFYOsoegFn9MeJn6DAtDC_gCNY.mft (raw, json)
Hash identifier:          MoAC0s8zQQKapk0AZewOLPoTtqA/Cb5RDiRF8KRSCpw=
Subject key identifier:   C3:30:17:0A:AA:AA:F1:21:5F:47:A9:6D:5A:05:F3:3B:15:D1:12:58
Authority key identifier: 3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6
Certificate issuer:       /CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
Certificate serial:       018C3DB7CD6C40BE4BB76C0C3572D7160413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.mft
Manifest number:          08FD
Signing time:             Wed 06 Dec 2023 06:01:44 +0000
Manifest this update:     Wed 06 Dec 2023 06:01:44 +0000
Manifest next update:     Thu 07 Dec 2023 06:01:44 +0000
Files and hashes:         1: OxFYOsoegFn9MeJn6DAtDC_gCNY.crl (hash: UVcfisQw0lMjBwgWJHJZR2vykaCSimfzQdxwuLEk7zk=)
                          2: XepOhwSh90WL9FdpWT8Djqv_ecU.roa (hash: EK26BADtzmzpDmrNox5qzPPpvkPNVkJCpI5wzN4sIOc=)
                          3: e27W2WgEBrj-NgRoP51mgAC3hhY.roa (hash: Her+ixxXkYYtVaQRIQm1yApbJOr6mYbempk08xTrf60=)
                          4: ndW8EjXpJ0lfS2c4JPkLdXH-LYM.roa (hash: XydlZBjmcEwfzGM622J9b4nyREwCOq8bbxbkQQpo298=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3d:b7:cd:6c:40:be:4b:b7:6c:0c:35:72:d7:16:04:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b11583aca1e8059fd31e267e8302d0c2fe008d6
        Validity
            Not Before: Dec  6 06:01:44 2023 GMT
            Not After : Dec  7 06:01:44 2023 GMT
        Subject: CN=c330170aaaaaf1215f47a96d5a05f33b15d11258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e2:44:64:c4:f6:8e:69:d4:18:8a:1a:94:db:
                    03:35:9e:6e:63:f4:4a:9f:11:81:4b:ab:59:4b:e5:
                    16:3c:89:f7:4f:82:4b:59:cf:61:f6:7d:08:11:b2:
                    4d:55:ee:01:b3:2e:62:4e:f0:9d:7d:90:17:52:13:
                    48:3a:ac:1b:92:c6:46:d4:fe:91:2a:ce:77:28:d5:
                    c5:7d:ae:f0:10:64:b1:de:76:1b:c8:82:34:69:33:
                    2e:7e:29:76:58:14:24:75:45:52:8c:2f:76:37:b2:
                    90:35:c5:5f:f2:60:e5:ab:7e:c5:c1:84:e0:94:df:
                    2f:56:9c:b3:cc:1c:95:fe:d5:81:88:b7:e5:97:ea:
                    a5:d7:c4:d1:a1:39:c7:d5:bc:3c:16:7c:d2:d9:3f:
                    3c:4c:68:c1:f9:65:e6:5a:43:ad:09:55:f0:7d:34:
                    98:4f:09:40:49:9e:e4:7e:07:79:77:8b:f0:cc:cc:
                    02:92:bb:1d:17:39:62:6c:22:15:3e:68:0b:75:55:
                    4d:1b:87:8b:a0:5e:2c:a0:11:c0:25:c8:1c:af:37:
                    1e:9c:9e:91:a0:ac:d5:3e:4d:fb:a3:e4:4a:d7:dd:
                    fc:fc:99:15:1e:b5:7f:ea:6b:61:c8:e6:a8:6b:0f:
                    21:99:0d:5f:72:93:d3:83:f4:c5:25:15:7b:f9:67:
                    2d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:30:17:0A:AA:AA:F1:21:5F:47:A9:6D:5A:05:F3:3B:15:D1:12:58
            X509v3 Authority Key Identifier:
                keyid:3B:11:58:3A:CA:1E:80:59:FD:31:E2:67:E8:30:2D:0C:2F:E0:08:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxFYOsoegFn9MeJn6DAtDC_gCNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f3ebce-9608-4180-a891-dce0d0ae6703/1/OxFYOsoegFn9MeJn6DAtDC_gCNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:c5:45:91:66:1f:06:11:0d:9e:f7:73:fb:68:0d:69:f1:
         fc:74:9e:af:d4:11:e7:23:7e:ae:46:8e:59:da:d9:2a:ba:8d:
         03:96:94:ed:ab:a6:3f:78:cb:07:bc:bc:5b:68:27:3e:03:6f:
         b5:64:f8:cb:1e:2b:82:03:f0:1a:1c:9d:89:f2:f2:9c:50:98:
         69:6a:66:6b:93:39:aa:ac:4f:dc:62:08:d3:7e:b3:a9:1a:17:
         91:0b:ea:8d:24:38:83:6d:1b:8a:5b:40:62:af:7c:64:18:ce:
         48:21:fd:76:8c:98:66:89:41:c7:87:81:b1:aa:da:4b:de:11:
         cf:88:35:fa:91:ec:92:71:70:00:c4:f0:78:34:f4:49:7d:6a:
         19:21:3b:77:1f:54:1a:aa:52:f3:0f:36:a0:55:78:fe:8f:9d:
         e5:3f:90:f4:87:10:18:a0:fa:e7:da:38:e9:45:ec:06:b4:22:
         03:9d:71:42:96:e2:cd:a5:fe:a6:59:7b:c1:0b:63:72:96:49:
         7c:90:e3:ac:a1:9a:39:68:7c:70:a7:1f:4c:69:ab:c4:27:1c:
         88:70:04:d6:26:8b:7d:96:6f:87:e9:0f:87:fa:1f:38:03:d2:
         8e:7a:cc:5f:08:f5:1e:c2:02:84:bb:6a:20:cb:a1:2b:a8:18:
         a5:44:83:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:49:03 2025 by rpki-client