Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/5OF3DfjG6AP86zZMho4yRuTTN0I.mft
File:                     5OF3DfjG6AP86zZMho4yRuTTN0I.mft (raw, json)
Hash identifier:          pW+mImPiIZr0SzrHGrE2HQHL+PVJh7sLCtZmaCrgLgM=
Subject key identifier:   DE:7F:81:5B:2D:0C:A9:37:E6:9B:05:A2:DF:4E:48:A7:3F:98:7B:4C
Authority key identifier: E4:E1:77:0D:F8:C6:E8:03:FC:EB:36:4C:86:8E:32:46:E4:D3:37:42
Certificate issuer:       /CN=e4e1770df8c6e803fceb364c868e3246e4d33742
Certificate serial:       0195ADA3295A9FA65A09D545913D59134FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5OF3DfjG6AP86zZMho4yRuTTN0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/5OF3DfjG6AP86zZMho4yRuTTN0I.mft
Manifest number:          091E
Signing time:             Wed 19 Mar 2025 09:01:46 +0000
Manifest this update:     Wed 19 Mar 2025 09:01:46 +0000
Manifest next update:     Thu 20 Mar 2025 09:01:46 +0000
Files and hashes:         1: 5OF3DfjG6AP86zZMho4yRuTTN0I.crl (hash: SQW/ku9Q/ue6bW6mFgjOn21lIFJqOA5rF2lebHF+By8=)
                          2: bsPlgtSTewhtejJlHEC16VB8iFk.roa (hash: yN5B+JirZw1zjCURfHVJqNEYm6kfWTIMJJcnKlwz3k4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:ad:a3:29:5a:9f:a6:5a:09:d5:45:91:3d:59:13:4f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4e1770df8c6e803fceb364c868e3246e4d33742
        Validity
            Not Before: Mar 19 09:01:46 2025 GMT
            Not After : Mar 20 09:01:46 2025 GMT
        Subject: CN=de7f815b2d0ca937e69b05a2df4e48a73f987b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:73:88:80:05:21:73:fd:c8:fb:cf:6e:80:c9:
                    d4:90:bd:da:9c:19:a5:7e:88:bb:37:9f:55:4f:f0:
                    9f:23:5e:a1:e6:41:5b:09:8f:1f:20:04:84:13:75:
                    b7:f7:48:cb:11:6f:1e:66:e7:01:e3:1f:07:c6:2b:
                    95:bc:6a:b5:19:bd:9a:ec:b1:30:1b:66:32:d0:15:
                    b6:17:f5:20:8a:59:fc:b7:ce:73:50:46:fc:ce:fa:
                    3d:4b:37:5f:05:e7:b5:01:fe:69:a9:d6:25:d1:7b:
                    87:61:60:02:72:d7:be:4b:2a:51:fc:62:88:04:7d:
                    bd:ad:cb:9e:06:a5:04:7f:35:ed:0f:38:5d:21:97:
                    8e:59:e4:36:7a:a6:52:e3:de:38:aa:c6:ea:27:68:
                    88:92:82:ff:27:f6:ca:9d:fa:cc:65:c9:63:54:09:
                    40:69:b0:48:b3:51:42:71:5b:e8:8f:ab:9e:fb:a0:
                    3c:16:26:ca:eb:25:64:d8:ee:28:b0:88:05:7a:26:
                    34:cd:98:86:77:9a:4f:a4:6a:53:a2:ee:fe:80:75:
                    ca:13:c8:34:1f:20:83:d3:48:89:98:17:d2:e8:35:
                    e5:ea:cd:a5:df:8d:cc:83:72:3d:95:69:90:bf:90:
                    82:c4:ea:05:5a:2e:66:19:6a:17:c8:38:12:2e:90:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7F:81:5B:2D:0C:A9:37:E6:9B:05:A2:DF:4E:48:A7:3F:98:7B:4C
            X509v3 Authority Key Identifier:
                keyid:E4:E1:77:0D:F8:C6:E8:03:FC:EB:36:4C:86:8E:32:46:E4:D3:37:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF3DfjG6AP86zZMho4yRuTTN0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/5OF3DfjG6AP86zZMho4yRuTTN0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/5OF3DfjG6AP86zZMho4yRuTTN0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:24:aa:7f:e8:0a:c1:c0:7b:d2:8a:90:96:3a:be:6c:bd:30:
         4d:b2:d1:07:2f:66:03:22:49:9a:ff:98:53:8b:7d:d8:24:aa:
         ea:f8:4d:7a:84:6f:d8:83:e8:b1:c0:6d:14:90:b1:11:3d:13:
         4e:97:36:32:12:92:97:ca:7e:53:27:6a:48:aa:af:de:20:56:
         aa:48:7e:3a:8c:79:d7:4e:cb:7f:f4:f6:f6:16:aa:b2:a4:0d:
         15:2e:03:14:ec:18:ef:ae:99:7a:15:c8:88:05:c8:eb:4a:2b:
         6d:25:b1:2b:09:84:81:8f:b6:0e:14:6b:05:fb:15:d5:19:ca:
         d1:3b:09:45:71:8e:4d:72:9e:4a:73:08:69:4d:21:fe:5d:2b:
         3c:1f:06:c7:37:3f:3c:57:f4:d0:83:2f:13:af:be:c9:59:ea:
         25:be:ce:36:73:81:70:77:74:db:54:e1:01:4b:14:dd:42:09:
         64:02:71:3d:2d:4f:44:4f:4a:80:1b:85:1a:44:4b:09:a2:02:
         dd:4a:cc:1c:ee:47:b1:9e:94:2c:b1:21:f0:a4:96:00:dc:04:
         02:46:38:b8:6e:82:2b:94:f6:2e:28:da:39:94:8f:56:4e:86:
         07:66:36:96:a2:30:2d:8b:58:e5:d4:e2:58:6b:9c:2e:4c:1d:
         68:25:9b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:21:39 2025 by rpki-client