Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          DXDOJaNE8QqD8whKayzih5b09hC8/mJ0DjZgtDteQr0=
Subject key identifier:   7F:A6:D1:98:A4:D2:80:7A:D6:C3:4F:16:96:34:27:1E:DD:3A:17:3C
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       0194BCA9E9E371C231485872ADF42307FA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 14:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:39 +0000
Files and hashes:         1: 6pAZoUeyJNKjbIkJ9bo52GGChiE.roa (hash: H9UE5mQZ+sgOHGu/NqWUAUZ7b5ITdi+7fpdJ+eVNZFg=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: 2hheJvpw00J/qgKVI2H7C6U77G3VEsM6sN9W/3fwhhY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e9:e3:71:c2:31:48:58:72:ad:f4:23:07:fa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Jan 31 14:00:39 2025 GMT
            Not After : Feb  1 14:00:39 2025 GMT
        Subject: CN=7fa6d198a4d2807ad6c34f169634271edd3a173c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a5:0e:1e:2f:38:c6:9e:0d:3a:a9:07:7e:6d:
                    bb:9c:98:3f:fe:ae:54:c3:0a:9b:b7:ce:99:af:88:
                    25:0e:b1:62:9b:08:39:a2:a5:0f:e3:99:3d:f4:8d:
                    77:89:86:66:c5:b7:2c:43:b0:e2:51:f4:f8:28:9a:
                    e2:c3:c6:81:4a:64:b8:2e:7f:ff:60:f5:76:24:66:
                    70:e8:a2:58:5a:9b:fa:bd:48:cc:c7:9b:ed:2d:88:
                    74:ec:25:60:66:49:6a:75:c8:ba:f5:a2:39:7b:6d:
                    79:37:eb:b9:70:b5:12:7e:85:d8:fc:85:7c:4d:21:
                    1f:5e:ed:71:b2:b3:1d:ac:c9:08:7c:f2:02:f0:62:
                    81:f8:a0:5d:ff:f0:8c:99:27:6f:d2:0c:99:21:6f:
                    f8:c6:ad:ec:2c:05:00:9c:ff:fc:e5:07:6b:48:c8:
                    f1:0a:25:6a:c5:ae:06:03:d2:c5:79:a0:86:2e:c7:
                    3f:45:c4:54:b8:d9:d2:51:34:37:73:44:4a:5c:99:
                    b2:eb:c2:5e:1c:ef:6d:1d:57:a0:98:7f:cd:76:f1:
                    fb:b3:b7:c2:fd:e3:28:a5:54:17:4a:f0:16:53:3d:
                    6a:a4:13:b6:5b:cd:9e:41:23:b2:1a:39:64:07:b4:
                    78:25:2c:c5:9d:f0:c6:1a:18:63:49:f3:41:ad:12:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A6:D1:98:A4:D2:80:7A:D6:C3:4F:16:96:34:27:1E:DD:3A:17:3C
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c2:4a:76:38:41:37:cb:11:cf:63:83:71:3e:6d:72:e3:dd:
         c3:6f:4f:ce:bf:c1:07:7d:46:de:58:58:61:cc:2b:53:83:6f:
         08:74:ad:bd:4b:1a:c2:5c:75:d6:0a:61:fb:e4:2c:88:9c:12:
         1b:e3:e7:a5:f5:44:2b:7a:40:b5:f3:5a:aa:50:1d:b0:29:31:
         8d:d1:73:8d:3e:ea:32:fa:dd:0d:af:35:b5:ae:41:a5:4d:7e:
         12:c1:78:a0:3a:ca:4b:51:43:81:79:7a:ce:ad:f5:04:5b:2b:
         ee:2e:09:1e:fb:0c:a9:89:a2:45:d0:95:d5:e4:9b:10:e4:51:
         2e:11:75:f2:e7:1a:a0:18:cb:25:a6:c3:6e:18:e2:19:69:14:
         0d:4c:8b:35:ac:a3:24:13:30:51:f7:02:92:e0:88:4e:0c:2a:
         80:ae:15:7f:62:a1:e1:cc:39:0f:15:8d:70:c0:58:29:b0:29:
         97:99:d6:88:32:1b:fb:6e:01:44:34:43:2d:b6:8d:fc:51:5f:
         77:0c:4f:ac:3b:df:29:9a:ae:69:d0:b8:f0:ea:c8:a3:d2:f2:
         85:23:75:68:de:52:66:6c:d9:d8:d4:67:70:60:b8:3b:c3:f8:
         e1:50:06:e3:55:3a:c0:25:7f:07:2b:69:76:dd:6c:cb:88:40:
         8c:34:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:35 2025 by rpki-client