Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft
File:                     pE99h8-pJ96E0QSzJshqu8Yt0vw.mft (raw, json)
Hash identifier:          D08CN8xHBrJqNc4cLKq/lm0Z41fpUhduQ+kJ4YYJn+4=
Subject key identifier:   15:7C:8C:CB:C5:5B:F3:1F:99:31:7E:EA:91:F3:9C:50:70:F3:3D:66
Authority key identifier: A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC
Certificate issuer:       /CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
Certificate serial:       018C82CE71154F31240BC86C811938D0F012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft
Manifest number:          0A11
Signing time:             Tue 19 Dec 2023 16:00:16 +0000
Manifest this update:     Tue 19 Dec 2023 16:00:16 +0000
Manifest next update:     Wed 20 Dec 2023 16:00:16 +0000
Files and hashes:         1: 50rRL9X8tFzrH9Pao7-gkFnU8c8.roa (hash: jO7lN5WZlnXcEhBFXOcAQklZV4ejAicZmZD3QpiSxwQ=)
                          2: pE99h8-pJ96E0QSzJshqu8Yt0vw.crl (hash: 0i12IfCVuSosgoMKc2XH9tsPWmsgOcIax4oxs1vdtZg=)
                          3: uhOsJcaa9z1ZP3iq-lBjS40-vcw.roa (hash: dMXBsPomj7w1tPqSRN9cB5AQ2cx9smpsAtx8l9opfsM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:82:ce:71:15:4f:31:24:0b:c8:6c:81:19:38:d0:f0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44f7d87cfa927de84d104b326c86abbc62dd2fc
        Validity
            Not Before: Dec 19 16:00:16 2023 GMT
            Not After : Dec 20 16:00:16 2023 GMT
        Subject: CN=157c8ccbc55bf31f99317eea91f39c5070f33d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3b:1a:ee:80:6b:e3:40:c2:6e:b2:09:1d:99:
                    0b:fc:29:3b:79:1c:36:23:24:bc:e1:06:8e:21:a9:
                    a6:5a:01:5a:09:ca:bc:23:d5:f8:af:46:15:f1:72:
                    86:d4:a5:c2:7a:7e:94:35:94:04:a7:e1:44:f1:7d:
                    ba:4e:e4:f4:e7:bb:44:66:83:0f:e8:47:d5:15:36:
                    40:c8:ce:9d:35:3c:2d:94:e9:a7:0f:75:40:c0:61:
                    1a:34:2b:d1:7e:45:0f:2f:7e:18:88:c8:e2:a3:87:
                    89:3a:0d:06:df:24:18:62:e9:13:9a:fc:f1:6f:4c:
                    9c:fd:ab:62:68:ac:58:6a:2f:3f:ec:7e:b2:79:97:
                    fb:28:4f:dc:be:e1:85:a0:1d:c2:04:66:28:a4:2c:
                    9f:fb:59:16:16:cb:a3:88:09:13:cc:59:12:ce:9b:
                    b9:30:aa:67:64:25:c4:a5:ee:e6:a0:d9:db:06:8f:
                    70:d2:c5:43:31:f2:ee:0b:77:7e:f3:83:6f:13:09:
                    ab:83:76:58:49:71:9a:ee:92:c8:c7:04:8b:6c:8c:
                    00:bb:58:0e:c0:9b:57:57:f6:fc:05:e0:68:67:b8:
                    0d:d3:45:79:7e:c7:f3:c5:c4:c2:a5:a4:59:fb:e5:
                    1e:4d:67:6d:9d:e0:6e:e7:0b:a1:50:22:2f:56:e9:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:8C:CB:C5:5B:F3:1F:99:31:7E:EA:91:F3:9C:50:70:F3:3D:66
            X509v3 Authority Key Identifier:
                keyid:A4:4F:7D:87:CF:A9:27:DE:84:D1:04:B3:26:C8:6A:BB:C6:2D:D2:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pE99h8-pJ96E0QSzJshqu8Yt0vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0142ef-3d67-4dcf-8049-48cdc3639c32/1/pE99h8-pJ96E0QSzJshqu8Yt0vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:05:6b:d5:c4:0d:88:f9:5a:92:f1:72:8b:03:cb:bd:a9:
         5d:9c:62:88:18:c6:38:fb:b2:10:76:59:4e:ab:06:38:d1:78:
         80:e4:64:67:c1:bf:0e:c3:5c:5e:6d:64:f1:de:95:b9:85:34:
         a2:67:e3:ce:c2:65:72:94:b9:3a:3c:a1:55:ee:58:5a:7d:03:
         33:81:fa:86:11:00:17:06:44:f0:8a:35:da:79:68:00:4e:75:
         f5:f2:ee:16:15:bc:d9:5a:7d:7e:58:12:f3:59:56:9e:8c:1a:
         c6:5a:b0:b0:1f:e5:d2:94:6f:61:18:b9:61:5d:ed:dc:7a:e8:
         45:c0:4f:9f:a0:1c:c3:cd:1b:fd:3d:08:2a:60:2f:a9:29:47:
         cc:96:f9:f4:02:11:dc:92:d8:0c:e0:2e:30:b7:70:5b:6c:69:
         0e:ce:bf:93:9e:58:b8:96:59:1c:5f:d4:2e:60:a4:8c:8f:57:
         de:bc:15:85:a8:0f:71:99:b5:db:32:63:2d:b1:2c:e0:6d:03:
         d7:18:65:f5:89:f7:ae:8b:c1:05:f7:07:68:2f:8b:87:33:a6:
         0e:f2:9a:f6:36:f0:93:52:0b:ec:9e:d0:a6:83:55:d7:50:e0:
         0b:dd:26:fb:f0:f1:0f:49:63:39:9c:57:f5:5e:82:85:d4:9d:
         87:e9:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:58:36 2025 by rpki-client