Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.mft
File:                     2YxSIs6RwSo1AgrP2qpSmAcYkKQ.mft (raw, json)
Hash identifier:          WyzBYaw75JT9oqUJMryQKeG4pheg96W/+in9GYBZlKs=
Subject key identifier:   74:15:7D:C4:8F:3D:5C:DC:E8:7C:5C:C5:60:0C:77:A4:E8:5C:95:E9
Authority key identifier: D9:8C:52:22:CE:91:C1:2A:35:02:0A:CF:DA:AA:52:98:07:18:90:A4
Certificate issuer:       /CN=d98c5222ce91c12a35020acfdaaa5298071890a4
Certificate serial:       0188751C175F57D95DFC5818A62368BC3143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.mft
Manifest number:          0D47
Signing time:             Thu 01 Jun 2023 03:59:15 +0000
Manifest this update:     Thu 01 Jun 2023 03:59:15 +0000
Manifest next update:     Fri 02 Jun 2023 03:59:15 +0000
Files and hashes:         1: 2YxSIs6RwSo1AgrP2qpSmAcYkKQ.crl (hash: UWBuVdrMJayp2uzM6P2lVxYOfdOfVvlS2UvXZamXwpw=)
                          2: GW50QPIRZM2rsBIzIP-0eeThtIQ.roa (hash: 3Rl9Ntko9fvsHXaaijn96OhUGMsaODjCfmpxvCy4qe8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:75:1c:17:5f:57:d9:5d:fc:58:18:a6:23:68:bc:31:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d98c5222ce91c12a35020acfdaaa5298071890a4
        Validity
            Not Before: Jun  1 03:59:15 2023 GMT
            Not After : Jun  2 03:59:15 2023 GMT
        Subject: CN=74157dc48f3d5cdce87c5cc5600c77a4e85c95e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:58:ed:3b:44:b8:4b:87:68:10:e6:52:f3:55:
                    ec:bb:2b:b5:e2:a5:e7:4f:00:6e:f3:0e:dd:3d:3c:
                    24:d4:8d:8a:ae:30:46:26:6e:72:14:c7:e2:25:4c:
                    c9:87:42:b4:3b:99:7b:aa:fe:db:a2:12:15:3f:fa:
                    78:f4:ec:b2:a9:d1:2e:12:5c:90:b6:73:25:34:01:
                    23:47:0d:ce:3d:a0:26:2b:f8:a5:9f:58:fe:1c:89:
                    5d:d0:41:b9:2d:9f:0c:64:6f:7a:79:5e:5a:fe:c2:
                    52:b4:58:73:8b:a3:0d:97:fd:10:50:8c:9c:21:47:
                    30:16:3b:5c:8a:01:d4:20:cf:4c:e0:a4:a6:d4:3d:
                    34:e7:b1:83:6e:5f:e0:27:59:a7:93:e0:bc:b9:f6:
                    e2:e8:e9:8d:d4:85:f7:3e:79:2d:47:6e:0a:12:f8:
                    c6:bf:01:db:42:cd:d5:91:bc:5b:63:33:e8:e2:3c:
                    97:ab:db:c7:13:eb:16:96:4e:f7:09:c5:4e:a7:59:
                    e5:a1:af:f8:b5:d2:d8:5f:02:b1:52:9b:8e:cb:2e:
                    72:44:d5:b3:5b:43:18:0a:6d:0a:5f:a2:cd:4a:5d:
                    79:96:17:3a:83:fd:df:6d:1d:51:c6:a0:20:cd:5a:
                    03:11:73:57:1c:70:cb:79:c1:71:8c:b8:9f:85:5a:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:15:7D:C4:8F:3D:5C:DC:E8:7C:5C:C5:60:0C:77:A4:E8:5C:95:E9
            X509v3 Authority Key Identifier:
                keyid:D9:8C:52:22:CE:91:C1:2A:35:02:0A:CF:DA:AA:52:98:07:18:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d5950a-efe0-4468-8d0e-03a5eacbfb18/1/2YxSIs6RwSo1AgrP2qpSmAcYkKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:f7:1a:00:6b:18:3b:1e:5c:cf:41:0b:01:64:29:94:a3:
         29:e6:37:f3:06:a1:26:82:ff:18:a2:ed:77:e6:fd:16:6e:b1:
         bd:e8:76:38:b1:56:30:27:ab:f2:4a:0a:16:5f:fa:3f:c5:6b:
         a7:5f:17:63:28:28:c3:da:a5:9e:09:08:98:85:e5:8d:43:88:
         8c:34:75:64:88:40:e1:0f:7e:1a:40:28:3a:dd:9e:39:63:5f:
         c2:31:b7:68:8c:bb:b4:86:9d:16:09:ab:8e:48:7f:c6:bb:57:
         5b:63:41:90:02:1b:84:8a:45:b8:07:3a:ec:37:a6:a9:c0:cf:
         25:13:cd:50:e0:4d:71:c5:db:6e:a4:dd:d6:d6:13:cb:47:56:
         c8:1a:d8:97:df:4f:a2:32:02:57:b9:06:33:45:76:f9:e5:28:
         14:67:2e:f5:9e:75:a5:a9:d2:8f:4d:35:be:c3:0c:da:72:d2:
         68:24:a6:66:9c:53:e3:76:53:84:04:41:3e:63:71:a8:03:17:
         bc:5d:da:39:16:57:ca:06:8e:87:26:f1:48:45:4d:1c:67:5b:
         89:35:ea:6e:72:fa:ac:c3:4f:2f:81:0d:9e:2a:28:b8:54:1f:
         bd:d6:4d:d7:5b:97:5c:4a:b2:5d:ef:1d:65:7c:9d:7a:09:d4:
         e0:5c:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:42 2025 by rpki-client