Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
File:                     Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft (raw, json)
Hash identifier:          8jRaSQimW4GTKKUpT3aZdbHbeWRCZ3Onwm0gJiRwscw=
Subject key identifier:   AD:39:FD:56:1C:03:BD:89:F7:10:E4:62:7A:51:0E:CF:8F:9D:24:03
Authority key identifier: 31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED
Certificate issuer:       /CN=31fa64addcb0f86580c388912341cc47c39c4aed
Certificate serial:       0193B30B9AAEF7A01D8C3B56BEF548C35D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft
Manifest number:          0FBC
Signing time:             Wed 11 Dec 2024 00:08:22 +0000
Manifest this update:     Wed 11 Dec 2024 00:08:22 +0000
Manifest next update:     Thu 12 Dec 2024 00:08:22 +0000
Files and hashes:         1: Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl (hash: iYrHrtvfVo/NdxF4Joj7viW4uMxfQe5upL3y2XMKtBY=)
                          2: WMOOVbk7Uebp-iaKkKyYnBiO2pM.roa (hash: shY40U0YGGXazGAleAZcB0VSaW+qjHKVi//G/l3HNTg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b3:0b:9a:ae:f7:a0:1d:8c:3b:56:be:f5:48:c3:5d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31fa64addcb0f86580c388912341cc47c39c4aed
        Validity
            Not Before: Dec 11 00:08:22 2024 GMT
            Not After : Dec 12 00:08:22 2024 GMT
        Subject: CN=ad39fd561c03bd89f710e4627a510ecf8f9d2403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:71:46:2a:ea:37:7c:9d:09:ee:de:60:16:23:
                    d8:93:54:bd:2f:7d:7c:68:c1:98:ca:f4:d0:ba:5d:
                    02:2c:d9:a6:cb:09:0c:44:33:af:bc:71:ad:4a:79:
                    23:8d:fa:fa:0d:71:d5:ff:0b:e5:7b:14:a0:06:c9:
                    42:79:ec:0b:af:28:af:54:12:4f:2c:90:bd:44:d3:
                    16:cf:be:6e:e6:a6:91:13:b1:a4:0d:3c:67:d9:3c:
                    a2:b9:78:95:4b:b1:3c:85:d8:63:80:31:b8:6d:f3:
                    8a:27:7a:f4:5f:af:05:fd:67:e1:71:dc:b8:02:24:
                    03:13:43:5c:dc:33:c2:81:95:fa:32:4b:3d:89:14:
                    6b:5c:7f:b8:6f:34:b1:53:a4:c5:cf:5d:5e:26:04:
                    d9:42:91:0d:51:f9:c4:8d:51:41:ab:0f:c0:38:01:
                    4a:30:ae:8e:36:e9:36:42:a4:b8:64:b9:35:df:47:
                    ba:a3:4c:27:d5:50:71:cd:18:8c:0f:d6:35:e4:9c:
                    03:b2:9c:64:cd:e0:22:c4:d1:37:b9:14:3d:cf:55:
                    10:ba:75:c1:8a:21:9a:9b:a8:99:98:ae:11:84:f3:
                    eb:3f:69:ef:78:40:7f:9b:53:28:25:dc:84:02:74:
                    73:82:af:c5:93:c3:00:a6:40:73:26:36:ff:53:7f:
                    93:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:FD:56:1C:03:BD:89:F7:10:E4:62:7A:51:0E:CF:8F:9D:24:03
            X509v3 Authority Key Identifier:
                keyid:31:FA:64:AD:DC:B0:F8:65:80:C3:88:91:23:41:CC:47:C3:9C:4A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6afa3c-c069-4604-9df8-7b3f82ee2587/1/Mfpkrdyw-GWAw4iRI0HMR8OcSu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:72:2f:fd:d5:ba:bf:ad:2d:41:6a:67:04:d7:c0:36:1f:8a:
         12:42:dd:99:69:6d:04:b3:c1:1f:e7:8c:37:dc:97:cd:d6:06:
         2d:a2:27:60:6d:d6:37:45:18:41:45:09:76:6b:1d:1f:68:58:
         6f:d0:4b:97:02:f9:43:e1:3a:f9:1a:d7:c7:42:49:59:2f:04:
         15:52:ed:6d:a3:88:68:9f:96:c4:29:56:50:03:8b:e5:2e:f8:
         2b:f4:1d:7b:95:3b:64:79:d8:65:02:46:68:0c:ae:91:48:ba:
         d8:54:7c:bc:db:3b:ab:c4:f7:fb:a3:eb:ff:2a:21:3a:60:74:
         e8:95:35:be:66:9f:2d:e8:72:f3:37:25:be:ee:3b:2d:8a:77:
         e4:74:3f:cc:8b:24:43:1a:88:e6:74:df:c7:c9:e5:90:47:c1:
         ea:bb:e5:e3:00:94:7c:16:8d:a9:2e:ae:90:1a:fb:55:0d:27:
         fe:49:8d:5f:c8:d8:21:e8:e8:0b:43:7e:31:83:ac:5b:e1:d6:
         ac:a6:c2:65:83:0a:31:1e:8c:c9:57:46:b5:f8:e2:b6:56:26:
         8f:73:ee:b2:2f:a3:58:9c:de:c6:f3:25:8f:68:53:53:d6:99:
         4b:d5:51:5e:e3:d7:a0:13:67:95:b3:20:34:79:ae:6e:7c:08:
         fd:a7:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 15:26:09 2025 by rpki-client