Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dd3595-2023-4b8e-92e3-033ec0980d72/1/f5DXGXzG6dZB8Q9kNYVrGmL6WwA.mft
File:                     f5DXGXzG6dZB8Q9kNYVrGmL6WwA.mft (raw, json)
Hash identifier:          Fu5DTzzfSiO7mAA0VFUtIFA073OejYON5vexPUS85+g=
Subject key identifier:   CF:29:32:03:34:90:64:4F:4A:D7:12:E9:55:93:B2:4A:6E:5D:4E:E1
Authority key identifier: 7F:90:D7:19:7C:C6:E9:D6:41:F1:0F:64:35:85:6B:1A:62:FA:5B:00
Certificate issuer:       /CN=7f90d7197cc6e9d641f10f6435856b1a62fa5b00
Certificate serial:       0185386DF6EAC5E07B2DC17C6320673A9CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5DXGXzG6dZB8Q9kNYVrGmL6WwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/dd3595-2023-4b8e-92e3-033ec0980d72/1/f5DXGXzG6dZB8Q9kNYVrGmL6WwA.mft
Manifest number:          0BDB
Signing time:             Thu 22 Dec 2022 06:03:28 +0000
Manifest this update:     Thu 22 Dec 2022 06:03:28 +0000
Manifest next update:     Fri 23 Dec 2022 06:03:28 +0000
Files and hashes:         1: VLXQerLSRsAhwAvFbCkJtlk10ho.roa (hash: mVXSNss743vRKc7C+BFM/ILmX+7Rd2smlddqP2TUv74=)
                          2: f5DXGXzG6dZB8Q9kNYVrGmL6WwA.crl (hash: IqvY8GNGxPlmT2KWFfPfq6gn2WToCjBdw9zonCFuT/U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:38:6d:f6:ea:c5:e0:7b:2d:c1:7c:63:20:67:3a:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f90d7197cc6e9d641f10f6435856b1a62fa5b00
        Validity
            Not Before: Dec 22 06:03:28 2022 GMT
            Not After : Dec 23 06:03:28 2022 GMT
        Subject: CN=cf2932033490644f4ad712e95593b24a6e5d4ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:b2:fd:71:b0:2e:64:99:bd:94:f9:10:1d:
                    c0:d9:45:b7:62:42:a3:00:cd:cc:07:08:39:16:85:
                    5d:63:00:1e:9a:6f:6d:6d:72:07:ba:2a:5c:4f:4f:
                    12:dd:4b:46:46:1c:3e:7f:bd:a0:2e:4c:64:32:45:
                    6f:45:f7:d3:98:6b:a4:14:8b:a2:d2:7c:e1:90:a1:
                    c3:70:c3:2a:4b:19:f0:a3:5b:d7:59:df:c0:4b:dc:
                    b3:25:e4:07:40:75:37:a5:0e:ff:0f:33:65:51:cb:
                    c1:c9:76:ac:b3:f5:45:62:14:6c:e8:e7:3e:e1:c0:
                    94:21:88:d2:20:75:66:72:65:e8:c7:01:f9:94:48:
                    dc:88:4c:4b:2a:55:d0:9b:92:e4:1c:9a:c0:b7:df:
                    d8:66:a9:12:92:09:d6:2b:42:23:03:ba:f1:c0:d4:
                    12:02:f3:52:e4:64:59:43:74:83:40:21:0b:8f:eb:
                    50:02:14:e1:b0:10:84:e7:bb:23:11:96:76:b1:66:
                    47:ca:9b:10:b6:bd:f0:1e:af:20:91:f0:af:93:23:
                    2a:c7:6f:65:61:00:7a:3f:5b:5d:c8:ee:02:36:34:
                    49:d1:aa:7c:72:8d:37:e0:45:9f:59:23:01:34:60:
                    65:bc:5b:2c:de:96:1b:70:bd:28:25:ba:88:95:c0:
                    e8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:29:32:03:34:90:64:4F:4A:D7:12:E9:55:93:B2:4A:6E:5D:4E:E1
            X509v3 Authority Key Identifier:
                keyid:7F:90:D7:19:7C:C6:E9:D6:41:F1:0F:64:35:85:6B:1A:62:FA:5B:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5DXGXzG6dZB8Q9kNYVrGmL6WwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dd3595-2023-4b8e-92e3-033ec0980d72/1/f5DXGXzG6dZB8Q9kNYVrGmL6WwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dd3595-2023-4b8e-92e3-033ec0980d72/1/f5DXGXzG6dZB8Q9kNYVrGmL6WwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:93:9c:f7:fc:4e:8d:af:7b:a9:63:df:c1:2f:74:87:f3:5f:
         b0:16:60:14:35:4e:bb:6f:62:14:d1:a0:a3:d2:9b:c4:6a:63:
         14:55:f7:f8:55:bb:a8:0e:ce:46:71:33:a8:2c:47:96:3c:82:
         9a:82:3e:70:b1:e1:84:3c:31:e3:ea:c5:0b:98:66:8d:ff:89:
         ba:06:4d:6a:93:a5:7f:a8:ff:92:c4:19:30:53:17:85:18:8a:
         34:fb:ea:60:0c:1b:f4:72:a6:67:d7:b1:a6:c9:2f:d5:2b:27:
         74:d9:20:5c:ef:a2:16:e6:e2:e1:d4:4c:f7:52:8e:8e:03:96:
         69:72:e0:ce:d9:6c:6f:44:e8:02:89:f1:03:bf:5d:eb:82:05:
         e8:a4:ff:d7:27:76:be:f6:b4:0f:11:9e:82:8e:c5:bc:e4:88:
         21:8a:c8:f4:fc:58:fa:f1:4c:71:d1:08:2c:49:a5:2b:04:d4:
         85:6c:1d:62:76:e2:a6:e9:9f:69:cf:3f:36:57:24:55:74:0d:
         21:6f:fc:fb:c5:e9:bc:2e:5e:a3:28:77:c5:71:e4:09:e9:aa:
         d4:fe:33:19:68:41:d5:5d:c4:32:aa:01:a7:49:b1:a7:02:a8:
         b6:1f:72:61:cb:2b:ae:1f:2b:c3:13:7f:12:15:25:d2:c5:a2:
         0d:41:eb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:07:38 2025 by rpki-client