Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/asuIBOFr7C1oF9fkrGWufjxb-Dc.mft
File:                     asuIBOFr7C1oF9fkrGWufjxb-Dc.mft (raw, json)
Hash identifier:          w+12ap6x4FbSllJK4gpNc8evy9kD5BE7op1spTM7vTg=
Subject key identifier:   E3:A6:1E:A3:F5:22:3C:7F:8B:3D:30:E3:51:C1:99:56:6F:55:41:AA
Authority key identifier: 6A:CB:88:04:E1:6B:EC:2D:68:17:D7:E4:AC:65:AE:7E:3C:5B:F8:37
Certificate issuer:       /CN=6acb8804e16bec2d6817d7e4ac65ae7e3c5bf837
Certificate serial:       018AF90F1D70D6E6958588333B06EDFB4BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/asuIBOFr7C1oF9fkrGWufjxb-Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/asuIBOFr7C1oF9fkrGWufjxb-Dc.mft
Manifest number:          BF
Signing time:             Wed 04 Oct 2023 05:00:31 +0000
Manifest this update:     Wed 04 Oct 2023 05:00:31 +0000
Manifest next update:     Thu 05 Oct 2023 05:00:31 +0000
Files and hashes:         1: ZlzAQ-LevtcQ-tSKj1hNX1jBZu4.roa (hash: N1DcCeumEercXvKI8RTUeMFrDU+dSAFkX6QJz4zK7Sc=)
                          2: asuIBOFr7C1oF9fkrGWufjxb-Dc.crl (hash: DFiNDEVQA7I7q+p82JKTLZJjDzMfAowUqYnQnu31xLk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f9:0f:1d:70:d6:e6:95:85:88:33:3b:06:ed:fb:4b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6acb8804e16bec2d6817d7e4ac65ae7e3c5bf837
        Validity
            Not Before: Oct  4 05:00:31 2023 GMT
            Not After : Oct  5 05:00:31 2023 GMT
        Subject: CN=e3a61ea3f5223c7f8b3d30e351c199566f5541aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:33:f3:90:cd:28:48:df:58:6b:b3:74:6b:
                    7c:e1:e3:9c:0c:bf:45:97:3f:4b:45:a9:91:be:e5:
                    c7:70:58:88:4b:48:a5:30:db:2c:d1:7c:0d:d2:34:
                    3d:8f:7e:36:9b:54:07:5c:25:17:0a:d2:8d:2c:53:
                    55:8c:32:19:24:96:a4:25:6c:5c:db:56:03:b1:0a:
                    2e:91:a6:de:91:df:7d:2d:d2:cf:64:03:ef:1d:e9:
                    2b:92:8e:10:16:d3:c9:01:6b:db:20:11:d9:14:3f:
                    0b:7e:11:91:d0:01:1a:76:d4:1a:8c:17:71:b4:0f:
                    b5:96:1a:fc:b2:b7:62:41:cc:d3:31:74:47:76:02:
                    5e:cd:f4:97:69:82:ae:e8:0a:c2:8d:37:57:b5:e6:
                    0d:c0:9b:c6:e7:07:c0:d8:bd:27:e2:da:24:34:43:
                    03:66:56:9f:d4:16:e5:4a:82:8a:d1:23:95:69:0b:
                    73:99:5a:54:c3:2d:a2:98:10:94:b1:10:72:c4:e3:
                    7b:88:20:df:71:17:59:59:61:39:ad:bf:81:d3:3d:
                    67:2f:55:3f:4b:2b:9b:3f:46:0c:1a:bd:0b:b2:16:
                    e1:b7:af:c0:f2:2c:e3:68:fc:a3:60:87:ac:89:0c:
                    b2:54:b8:9d:79:ba:cf:b9:c4:78:4a:79:d2:b7:06:
                    9a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:1E:A3:F5:22:3C:7F:8B:3D:30:E3:51:C1:99:56:6F:55:41:AA
            X509v3 Authority Key Identifier:
                keyid:6A:CB:88:04:E1:6B:EC:2D:68:17:D7:E4:AC:65:AE:7E:3C:5B:F8:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asuIBOFr7C1oF9fkrGWufjxb-Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/asuIBOFr7C1oF9fkrGWufjxb-Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/80d39e-9faa-4763-870b-0801368aa58e/1/asuIBOFr7C1oF9fkrGWufjxb-Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:07:65:05:5b:99:d4:21:d1:68:54:1f:93:61:5e:25:ac:12:
         b5:fe:93:b1:9e:26:48:93:d7:38:57:4e:4d:5b:59:f3:a6:70:
         c1:38:c0:23:0e:07:4d:37:55:69:8d:33:35:45:76:de:88:22:
         b9:51:87:85:a7:70:28:55:ce:4b:34:05:c1:c9:c0:0a:3b:d4:
         3c:b1:9b:53:73:d9:66:e6:14:7b:34:c9:f3:40:e6:9d:fb:09:
         34:1c:94:4b:bb:03:f7:e4:50:69:bf:68:24:9f:10:1b:7f:e0:
         ae:c4:63:83:fe:b1:26:a3:51:fd:15:5d:ff:50:01:71:12:5e:
         3c:9a:d0:81:e0:3d:0e:b9:08:0d:f4:cb:2b:3f:4e:04:1c:c8:
         97:1f:c2:cf:17:c5:29:aa:7f:cb:81:d5:17:88:8c:94:46:65:
         f5:c6:b4:6c:13:4e:f5:c7:b6:ce:5d:2c:b0:b3:cb:4d:41:59:
         d8:7c:4b:77:1a:92:f5:6c:39:22:bd:8d:1b:94:6c:2c:d5:2d:
         f8:68:9e:10:47:b3:28:92:37:bd:29:ed:2e:b0:8f:cf:53:c8:
         1d:4e:87:de:44:63:82:b1:6a:b6:d8:e7:80:d6:48:11:2c:21:
         d5:62:f2:36:6f:84:3d:c3:94:b7:ea:12:79:e7:76:b0:ab:e0:
         58:b9:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:54:49 2025 by rpki-client