Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
File:                     hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft (raw, json)
Hash identifier:          nUTLSkHRUbOZ0eKz2OiaZEZTm9jrLDS6PcX3iQI7+0g=
Subject key identifier:   03:82:42:9D:CF:0B:2C:0E:70:8A:06:FB:B8:33:7D:89:15:81:85:E1
Authority key identifier: 85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA
Certificate issuer:       /CN=85927a93283d62ce672efa1f9bef57a2356118aa
Certificate serial:       0193E19509C8152B163F053BCE52F1162694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft
Manifest number:          13B8
Signing time:             Fri 20 Dec 2024 01:01:01 +0000
Manifest this update:     Fri 20 Dec 2024 01:01:01 +0000
Manifest next update:     Sat 21 Dec 2024 01:01:01 +0000
Files and hashes:         1: hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl (hash: k0u5Ls2SPUkJ4+6asN9YWrInsI1aYUQEymhLCvsAXVE=)
                          2: xPsAEBUG9u8H5dpTDFetAp6IDP0.roa (hash: NrdGD4gWvSIPpkUkbU3+/XaUQk242Hs0KP5K2mIokbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e1:95:09:c8:15:2b:16:3f:05:3b:ce:52:f1:16:26:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85927a93283d62ce672efa1f9bef57a2356118aa
        Validity
            Not Before: Dec 20 01:01:01 2024 GMT
            Not After : Dec 21 01:01:01 2024 GMT
        Subject: CN=0382429dcf0b2c0e708a06fbb8337d89158185e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:78:88:49:6e:7e:dd:af:6c:0e:d8:59:bf:
                    c1:9b:af:8a:c9:c7:d5:7f:01:e0:72:20:da:ba:3a:
                    d8:8d:3e:ca:15:18:9f:86:e5:56:59:a3:1e:55:18:
                    80:e8:6a:02:51:1d:07:63:85:0e:78:f3:e8:7d:29:
                    bf:bd:59:7e:15:70:52:b7:b9:d1:ac:5f:c3:e0:5a:
                    fa:17:0d:f9:a4:13:40:6f:db:91:02:ae:ff:1c:0a:
                    c9:4a:41:55:63:7d:35:8c:f4:2c:14:a4:b7:ca:3d:
                    14:33:20:d3:3b:af:88:fa:5a:3d:46:29:42:4b:7b:
                    71:6a:49:03:4c:e4:11:e9:83:22:24:09:d5:3b:e2:
                    45:b8:6b:04:29:0e:69:13:dd:53:50:1e:ba:f9:6a:
                    43:a2:42:82:1e:bf:9f:7f:33:95:3e:21:a1:9b:9f:
                    87:1c:dd:f1:dc:a6:57:73:19:7d:3c:8c:6f:33:38:
                    a7:e8:09:a4:63:26:8d:3e:86:21:c9:b6:56:fa:df:
                    8b:ec:73:5a:ee:5d:8d:ea:54:26:23:0d:4d:c0:a0:
                    59:73:e4:ab:1b:62:aa:7a:f5:66:ae:91:d4:78:eb:
                    c8:71:7c:a2:ed:96:72:6d:ab:18:a8:a8:35:86:23:
                    9e:7c:36:a4:96:1b:87:b8:7d:38:f0:7f:31:85:71:
                    8b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:82:42:9D:CF:0B:2C:0E:70:8A:06:FB:B8:33:7D:89:15:81:85:E1
            X509v3 Authority Key Identifier:
                keyid:85:92:7A:93:28:3D:62:CE:67:2E:FA:1F:9B:EF:57:A2:35:61:18:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZJ6kyg9Ys5nLvofm-9XojVhGKo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/65f609-33ef-4ca9-82a6-79ad49918694/1/hZJ6kyg9Ys5nLvofm-9XojVhGKo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:02:66:b5:f3:39:c1:25:b2:31:21:88:1e:52:8d:dd:1d:38:
         9e:0f:8f:6f:4f:17:7b:eb:05:8e:73:c6:1f:7c:f3:ee:43:8a:
         5f:98:fe:4b:73:21:c5:17:af:53:3d:57:55:54:0b:df:24:99:
         60:ce:ed:4d:ee:d5:51:19:9a:14:ed:da:9a:f4:aa:97:13:28:
         84:34:bd:19:ba:74:36:70:2f:50:86:a6:fc:61:da:82:81:07:
         57:53:3d:21:1d:ff:0d:c5:2c:f5:f8:fa:47:cc:04:b3:12:19:
         61:72:00:e9:bf:c4:20:7b:47:60:97:c0:49:7f:31:6b:a0:d3:
         34:1d:46:cf:ad:18:6a:ec:e9:66:c7:9d:68:32:cc:f9:e0:56:
         c1:e2:f6:10:f1:10:28:80:49:f7:83:83:f5:0f:0b:4b:4d:35:
         82:48:d4:2b:9b:5c:43:22:fb:a2:ef:40:2b:b5:f6:f9:6e:24:
         71:c2:42:55:9b:bf:7b:0b:4e:3f:13:7f:aa:f6:81:e6:f6:6b:
         96:38:f0:21:69:8b:7e:2e:ac:e8:9f:6b:c8:cf:54:a2:26:dc:
         21:fb:3f:4f:39:19:36:7b:97:a8:70:5f:5b:d5:c6:34:19:7f:
         80:1b:1a:38:31:90:bb:4d:4b:29:58:73:e3:bf:5e:ad:22:a8:
         06:24:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:25:15 2025 by rpki-client