Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.mft
File:                     II-iuHM_UxgmetE77AeUNGJ3zyU.mft (raw, json)
Hash identifier:          iW2Br+ZHcEmadMvx9Ody9kPh7ZziukMdvTWa0BsyPHk=
Subject key identifier:   C9:2C:1F:52:9C:B8:5F:21:15:45:76:B3:44:C1:E0:D4:90:68:EA:4B
Authority key identifier: 20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25
Certificate issuer:       /CN=208fa2b8733f5318267ad13bec0794346277cf25
Certificate serial:       01933D36B7139C2394B8B7F544E1543FD27D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.mft
Manifest number:          07B5
Signing time:             Mon 18 Nov 2024 03:00:16 +0000
Manifest this update:     Mon 18 Nov 2024 03:00:16 +0000
Manifest next update:     Tue 19 Nov 2024 03:00:16 +0000
Files and hashes:         1: II-iuHM_UxgmetE77AeUNGJ3zyU.crl (hash: 5BB3Hp8k0AZa4iBXcuoOdwsUwYPpkv+tP8L5PkYlk+Y=)
                          2: SboTC6053q_rjR5E2aUDfheXNQY.roa (hash: vNkb/8tKafp4OK971bVQ7X12mwU8ruhCPz459nf8I84=)
                          3: beFYbzXJLJ2tOxVYVRVjI8V42mc.roa (hash: VaWVbo54kBVB1vLxDpIH+M5Byh6+KZpoILfErMtfRqY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:3d:36:b7:13:9c:23:94:b8:b7:f5:44:e1:54:3f:d2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208fa2b8733f5318267ad13bec0794346277cf25
        Validity
            Not Before: Nov 18 03:00:16 2024 GMT
            Not After : Nov 19 03:00:16 2024 GMT
        Subject: CN=c92c1f529cb85f21154576b344c1e0d49068ea4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d9:43:ad:e1:35:ac:ce:19:62:6b:5f:01:b6:
                    44:46:1f:67:33:44:e0:3e:80:69:4a:51:d1:c5:77:
                    f2:36:dc:69:a7:4d:3b:63:c7:f7:93:90:48:42:00:
                    94:93:f2:48:f4:cc:0a:03:96:1f:6b:7a:b7:92:5e:
                    06:98:4e:b1:f5:2d:e5:8b:44:17:a4:76:14:2f:67:
                    6f:25:66:d9:b2:97:2b:8d:94:d4:4d:df:19:27:8e:
                    a7:75:9a:d0:ab:56:4c:43:cc:ac:dd:e8:73:0d:a8:
                    42:06:a6:7f:ea:23:7e:1c:78:00:cf:36:1d:2b:e9:
                    91:65:d4:48:69:a5:10:1f:29:f0:58:e3:76:7f:8d:
                    96:c0:48:e9:d8:0f:eb:fd:f2:c7:36:26:bf:52:a5:
                    9b:6a:83:c2:24:7a:86:3d:4f:3c:8d:45:86:d5:62:
                    cb:46:01:39:46:cb:a8:14:67:c9:ec:e4:79:09:0d:
                    34:f9:aa:b6:03:03:39:40:06:fc:34:d8:f6:4b:61:
                    1d:27:60:af:1d:02:53:bd:93:b1:8d:69:18:ce:a4:
                    e6:af:3f:a4:f9:b3:9f:70:2d:70:89:22:ec:ba:b6:
                    66:7e:68:87:bc:6f:11:73:37:69:75:14:1b:b5:95:
                    82:4b:65:fa:35:8b:51:da:64:bf:71:63:c8:64:14:
                    4f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:1F:52:9C:B8:5F:21:15:45:76:B3:44:C1:E0:D4:90:68:EA:4B
            X509v3 Authority Key Identifier:
                keyid:20:8F:A2:B8:73:3F:53:18:26:7A:D1:3B:EC:07:94:34:62:77:CF:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-iuHM_UxgmetE77AeUNGJ3zyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/8d1e2b-319f-44ac-b969-e4a50f71da0c/1/II-iuHM_UxgmetE77AeUNGJ3zyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:cf:3c:60:27:a6:16:f4:2d:03:1b:df:68:8f:a3:ba:ec:
         3f:0f:7a:f1:b5:5d:2f:0b:c1:e4:4b:37:a7:b1:02:f3:1d:fc:
         5c:4a:72:1b:ec:ad:fc:13:ef:a8:a0:45:b8:35:48:53:12:3c:
         db:49:76:ff:d1:34:6d:21:c6:b2:11:15:85:22:ba:fe:f6:f7:
         ff:de:1f:70:a9:e4:21:5f:40:2c:ac:48:e6:f2:4e:52:37:4d:
         af:e9:1c:c8:55:7d:ea:fd:ba:27:17:c0:eb:5a:57:12:08:73:
         ab:c5:ed:c0:d1:43:48:f3:6c:97:5e:6d:af:8f:f6:f3:fa:f3:
         59:9d:29:92:82:7a:2a:f5:17:be:ed:c4:bd:f0:4b:98:7d:96:
         4e:4b:89:43:e6:ee:b2:2d:d3:e4:4c:4e:5b:57:99:0c:aa:ff:
         5a:aa:8a:6c:2f:b5:05:61:00:1d:8a:98:01:11:46:44:c3:c3:
         5e:55:a2:b0:f6:e7:56:34:6e:1a:1c:21:d7:80:d0:4a:9e:ae:
         49:30:bc:c8:31:71:f7:86:3b:97:ab:0a:08:62:41:52:40:2a:
         0b:cf:3b:7c:21:1c:65:33:0a:04:39:e8:f4:92:71:51:f4:51:
         62:1f:ad:35:a5:21:ca:77:cc:b2:dc:d3:d6:61:d9:87:3b:43:
         03:5e:66:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:32:13 2025 by rpki-client