Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/idqtuYH36T2ksZrPQQefm74dZy4.mft
File:                     idqtuYH36T2ksZrPQQefm74dZy4.mft (raw, json)
Hash identifier:          DR+GEwlACb7uYtOJn+5rglh/eZf5AZoR/Cxc8NC4VC0=
Subject key identifier:   B5:3E:33:D2:07:63:F1:59:72:4F:7D:A5:AC:6B:01:4D:97:22:17:39
Authority key identifier: 89:DA:AD:B9:81:F7:E9:3D:A4:B1:9A:CF:41:07:9F:9B:BE:1D:67:2E
Certificate issuer:       /CN=89daadb981f7e93da4b19acf41079f9bbe1d672e
Certificate serial:       018D7C9361E5698A9D1FD7403CC409E31BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idqtuYH36T2ksZrPQQefm74dZy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/idqtuYH36T2ksZrPQQefm74dZy4.mft
Manifest number:          1069
Signing time:             Tue 06 Feb 2024 04:00:49 +0000
Manifest this update:     Tue 06 Feb 2024 04:00:49 +0000
Manifest next update:     Wed 07 Feb 2024 04:00:49 +0000
Files and hashes:         1: GrHFFmDjWmDUF-yyuqNVSaOx15g.roa (hash: oRHawK1KhX0UX7IOIygK/ah97umDga9bRE9hZCytoVU=)
                          2: idqtuYH36T2ksZrPQQefm74dZy4.crl (hash: MY0kqLhn4G6gyaNQ5eR6vcjIQIWm7lhgxZIm2VGUP5k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7c:93:61:e5:69:8a:9d:1f:d7:40:3c:c4:09:e3:1b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89daadb981f7e93da4b19acf41079f9bbe1d672e
        Validity
            Not Before: Feb  6 04:00:49 2024 GMT
            Not After : Feb  7 04:00:49 2024 GMT
        Subject: CN=b53e33d20763f159724f7da5ac6b014d97221739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:e0:18:52:0c:b3:0b:41:a0:50:f7:d3:f9:
                    45:d5:2f:07:cb:49:ff:18:6d:f4:0d:a7:26:7d:7d:
                    71:35:77:c7:ec:81:c2:4e:a9:ef:56:f7:4f:aa:0a:
                    96:ef:d4:23:c4:8c:33:9e:52:d2:6f:73:b7:d1:d6:
                    1e:27:c7:92:27:d5:79:04:16:6f:a0:28:6c:47:56:
                    ae:07:a8:57:75:5d:86:38:45:15:8d:04:9b:e1:14:
                    b8:60:f3:db:9a:bb:a3:27:e9:04:a0:79:58:38:fd:
                    a5:c2:f0:1e:41:48:be:d3:cc:d7:9e:b3:d0:80:30:
                    82:68:7a:c1:a0:08:90:c1:e2:b0:25:98:0b:70:b6:
                    84:18:39:36:de:10:ab:4b:23:e2:c0:4f:5c:1b:9b:
                    25:f0:31:32:3a:80:c1:ea:a9:be:68:5b:68:8b:e1:
                    a4:71:74:75:1a:2c:12:e4:43:15:6f:4b:44:75:ca:
                    5b:8f:3d:80:d4:62:a9:e2:dc:81:17:4b:e7:12:dd:
                    5b:da:b9:64:01:7c:a3:93:02:52:33:64:98:5f:71:
                    cd:82:5a:a9:65:a3:75:f6:ff:ed:8b:92:4f:a8:b2:
                    4f:9d:8a:73:51:6e:11:05:4b:40:69:02:16:db:cb:
                    f2:c7:11:fa:d5:83:72:fc:36:95:07:5f:ad:1b:58:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3E:33:D2:07:63:F1:59:72:4F:7D:A5:AC:6B:01:4D:97:22:17:39
            X509v3 Authority Key Identifier:
                keyid:89:DA:AD:B9:81:F7:E9:3D:A4:B1:9A:CF:41:07:9F:9B:BE:1D:67:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idqtuYH36T2ksZrPQQefm74dZy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/idqtuYH36T2ksZrPQQefm74dZy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/afba5b-8b9c-4cb4-8a2a-f14f3e3f340e/1/idqtuYH36T2ksZrPQQefm74dZy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1d:56:e3:1f:7c:44:34:0a:99:f7:52:1a:fb:fe:2b:62:b3:
         e8:43:82:bb:ff:df:18:21:04:ef:8b:76:96:80:a9:3f:a0:ac:
         c3:f8:15:4e:06:de:af:c3:0a:f4:e7:5a:de:cb:da:48:85:48:
         8a:2e:29:ad:1e:25:0f:84:cf:d9:ba:90:cb:6a:5c:3f:7c:55:
         6a:6e:5f:07:f7:f1:b2:47:5b:7c:30:78:5e:c2:2c:aa:98:c4:
         2c:d2:7c:c1:bd:fd:c0:62:bb:2f:41:5e:b6:a2:e2:a1:f8:c0:
         c3:0d:bf:90:ae:70:5d:02:d8:48:eb:21:88:de:1a:79:53:e4:
         0b:59:be:ed:5e:29:0b:46:39:7a:39:a2:0a:7a:f1:da:4b:0d:
         72:4a:30:55:36:bc:18:52:aa:bc:29:94:ec:38:48:f6:f8:6e:
         56:a8:62:ca:05:6f:61:c2:63:17:53:f3:8f:7b:fe:ff:16:3e:
         b2:30:1d:ad:9e:cc:f3:0f:f4:3a:84:92:2f:69:55:2a:cc:24:
         14:a7:97:7c:98:c0:56:5b:76:df:f4:29:af:cf:0f:f0:c2:22:
         2b:d6:b0:a3:64:20:ea:5f:b5:f4:d7:e3:f3:e9:e8:cf:d9:a6:
         c9:22:f9:0e:de:7a:c3:d8:39:ab:d8:43:e9:d8:35:ed:af:5b:
         79:ae:ab:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:24 2025 by rpki-client