Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/BasnuwhBfl6QrjtMu__71svwQLY.mft
File:                     BasnuwhBfl6QrjtMu__71svwQLY.mft (raw, json)
Hash identifier:          yOilDNbNiUudE21neD7qx5HzjkJMIl79gwFV8pWYVi4=
Subject key identifier:   F1:AA:82:4D:AD:87:E3:01:0E:A2:F3:71:15:3E:86:21:D8:40:65:C5
Authority key identifier: 05:AB:27:BB:08:41:7E:5E:90:AE:3B:4C:BB:FF:FB:D6:CB:F0:40:B6
Certificate issuer:       /CN=05ab27bb08417e5e90ae3b4cbbfffbd6cbf040b6
Certificate serial:       01938FD4015EFBA972E456A4F775201FABCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BasnuwhBfl6QrjtMu__71svwQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/BasnuwhBfl6QrjtMu__71svwQLY.mft
Manifest number:          1390
Signing time:             Wed 04 Dec 2024 04:00:56 +0000
Manifest this update:     Wed 04 Dec 2024 04:00:56 +0000
Manifest next update:     Thu 05 Dec 2024 04:00:56 +0000
Files and hashes:         1: BasnuwhBfl6QrjtMu__71svwQLY.crl (hash: vjbuv31chP4y07My1JJfuBanWV3UCkbbx7E1e+kSbn8=)
                          2: cq-t0QmlE96Hc9mEb2iPXLSxbK8.roa (hash: LXJ5hq3+mqR1VeE8MX4R7OD7d6yebriE36/Lr8GlHIQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:8f:d4:01:5e:fb:a9:72:e4:56:a4:f7:75:20:1f:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ab27bb08417e5e90ae3b4cbbfffbd6cbf040b6
        Validity
            Not Before: Dec  4 04:00:56 2024 GMT
            Not After : Dec  5 04:00:56 2024 GMT
        Subject: CN=f1aa824dad87e3010ea2f371153e8621d84065c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:66:c1:d7:8f:30:73:b9:17:a6:33:7b:7c:
                    6c:dc:8e:3e:76:28:93:62:66:73:cd:32:87:0d:56:
                    2b:bf:35:27:8b:f6:7d:94:08:f8:0a:31:c0:f2:8d:
                    59:df:f4:94:70:9b:e1:0e:82:e3:a6:a2:84:5e:cd:
                    65:d0:8b:ca:f9:75:ca:43:09:92:ef:9a:94:ab:93:
                    72:53:39:d3:13:6c:99:f8:30:ae:17:ec:f5:a9:18:
                    9c:7c:46:44:98:6c:5a:f3:1b:27:d9:06:81:a6:82:
                    56:23:dc:99:25:ab:57:cd:31:c0:dd:09:29:cb:05:
                    d6:78:6f:24:ae:6d:79:12:d3:7a:b3:72:fb:de:fe:
                    70:f3:fd:c2:d5:b0:88:27:19:2f:2d:5d:30:4e:44:
                    cd:89:3d:34:a9:8f:cd:17:e4:f1:22:3f:d3:22:91:
                    4c:4e:a4:02:71:0f:ea:c5:b5:af:63:f6:65:55:27:
                    eb:33:70:4f:db:b8:13:92:07:34:1d:75:47:55:ea:
                    69:4a:cd:be:cb:ac:e6:e5:a1:22:36:52:d4:a3:27:
                    bb:4a:2d:3f:9f:b6:40:19:3d:14:cc:df:f3:d8:d2:
                    af:bc:0f:66:6b:5b:1c:74:7a:41:bb:9a:bd:30:0c:
                    9b:f1:b2:e1:ec:81:42:52:ae:1f:e7:f5:f1:2a:7c:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AA:82:4D:AD:87:E3:01:0E:A2:F3:71:15:3E:86:21:D8:40:65:C5
            X509v3 Authority Key Identifier:
                keyid:05:AB:27:BB:08:41:7E:5E:90:AE:3B:4C:BB:FF:FB:D6:CB:F0:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BasnuwhBfl6QrjtMu__71svwQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/BasnuwhBfl6QrjtMu__71svwQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/57b7e1-8a91-4a00-a022-6d345ebc144e/1/BasnuwhBfl6QrjtMu__71svwQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2c:f9:5c:cf:6f:71:4b:87:6f:19:3b:44:0a:97:f7:7d:71:
         6d:4f:8b:83:50:61:f8:cb:3e:1b:08:8b:af:1b:02:4a:7d:c3:
         06:9f:b5:7d:37:dc:5b:f4:b8:bd:4d:83:48:5f:cc:e9:32:56:
         dd:c7:3b:e3:ad:83:93:2f:20:71:f3:de:09:1c:1c:fb:21:f4:
         2f:e1:fb:88:f1:74:83:f7:04:f9:8c:17:15:45:82:53:04:bd:
         6b:83:1e:1d:2d:f1:17:a9:94:48:e1:6a:d8:0f:45:10:0c:46:
         9a:89:50:cc:37:6c:9f:af:ba:20:63:6d:0b:df:17:7d:7d:85:
         5e:c0:54:16:4c:b2:17:59:1a:d9:40:db:11:fb:33:77:56:0c:
         01:1a:74:3b:61:62:09:7f:4e:b3:a5:fe:56:71:0f:db:62:b7:
         12:81:c7:4e:98:0e:7a:3c:d2:47:aa:ed:c1:ca:23:71:82:02:
         ab:13:c1:8f:59:8f:80:24:aa:c0:51:14:43:31:6b:1f:8e:dc:
         d3:10:b1:8f:09:a9:b7:d4:ff:34:0d:4a:3a:3d:ff:1f:8d:c2:
         a7:a0:e8:05:a0:b8:88:68:d0:8e:6a:92:c0:f7:ea:54:24:73:
         41:ef:a1:96:1d:29:8a:db:86:da:be:93:c9:b6:38:01:df:3b:
         c3:14:53:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:58 2025 by rpki-client