Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File:                     BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier:          eXkSGVuZCJvODVAGwX/md4dKlkafPyq2rMz7JC7eo/0=
Subject key identifier:   7A:EA:69:4C:1C:CE:B5:FF:EB:6A:7E:BF:3B:99:3D:C7:39:6C:B8:61
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer:       /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial:       0194BBCEA40403C107C1FC2154CB9CDD5FB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number:          1426
Signing time:             Fri 31 Jan 2025 10:01:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:09 +0000
Files and hashes:         1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: V2x0ggHQEB91Q5BcYOp2nHLTXE3DXE6BVqJKV+lOayE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a4:04:03:c1:07:c1:fc:21:54:cb:9c:dd:5f:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
        Validity
            Not Before: Jan 31 10:01:09 2025 GMT
            Not After : Feb  1 10:01:09 2025 GMT
        Subject: CN=7aea694c1cceb5ffeb6a7ebf3b993dc7396cb861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:3f:4c:3d:94:f8:56:a6:6b:aa:ef:a0:eb:
                    68:bc:e6:ff:2b:d0:14:37:75:4f:e9:86:dc:ae:06:
                    b6:79:bb:a7:91:5e:3c:e7:24:ff:ad:af:dd:61:82:
                    c9:11:b6:dc:0e:7d:8c:a1:1a:59:5f:ad:f6:a1:8b:
                    ef:8e:4e:d4:ef:c6:8f:d7:e0:78:9b:aa:32:3d:de:
                    48:8b:8a:be:a7:dd:bc:f0:0d:72:9b:e3:59:97:32:
                    88:77:46:9a:6a:a6:6e:59:c2:07:67:98:42:ea:57:
                    a5:c9:06:e5:4a:53:1c:bf:41:21:d2:a1:a3:28:70:
                    28:ae:99:2a:cd:aa:06:9a:81:4b:ed:8f:02:43:d7:
                    0f:e2:39:bf:c7:6b:e5:0f:28:ac:9e:ed:91:a0:43:
                    0e:44:7c:54:e4:69:ef:1d:4c:37:48:c1:5f:15:77:
                    0a:ec:39:27:ef:e0:ca:d1:31:27:83:24:91:f9:92:
                    fd:6a:f4:92:1d:4d:b7:c0:39:07:71:19:3c:62:6f:
                    df:a2:c9:99:50:0c:50:93:4c:f8:7b:9f:0a:84:35:
                    2f:8b:a8:7c:dc:fe:40:7d:b2:ed:bf:ce:f4:02:22:
                    e1:d4:46:b3:70:72:83:e1:2b:ae:4c:82:0d:f6:02:
                    80:72:1e:14:b5:8e:ee:7b:e4:94:d0:bf:5e:1e:7e:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EA:69:4C:1C:CE:B5:FF:EB:6A:7E:BF:3B:99:3D:C7:39:6C:B8:61
            X509v3 Authority Key Identifier:
                keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b3:91:e6:69:2a:a5:cb:ca:6c:f9:16:93:4e:54:c5:4c:2d:
         6c:a3:01:ab:66:e9:c8:2d:81:db:e1:e8:9c:84:ff:fb:84:f4:
         12:5b:2b:01:8a:7d:80:10:62:f9:31:23:09:ae:6a:44:47:a9:
         d4:af:4f:d6:84:d3:fa:71:09:68:6e:74:9c:24:ee:21:c0:d8:
         a5:38:7a:bf:ce:fe:a6:05:3c:e5:b8:f7:85:fb:0e:ac:88:56:
         bd:4f:7e:eb:11:e9:fe:b6:63:62:0e:9b:66:cf:84:95:68:e6:
         8e:01:0d:b1:f9:da:55:3e:c6:58:65:4d:aa:f5:e3:9e:0a:fc:
         6d:06:cd:67:fb:89:6f:a3:38:70:7f:f6:e8:d8:e0:b1:3e:e6:
         89:63:3b:e9:4d:92:7e:ff:dd:56:9c:f4:3c:04:ac:6f:e0:b3:
         34:f8:2e:23:c9:09:f2:b8:fe:d7:c5:8e:db:cc:d8:96:24:d2:
         43:f2:c9:17:66:59:64:a3:da:7e:fd:8b:1c:27:2e:d2:dc:9f:
         fe:eb:e9:60:00:dc:25:d8:54:85:3e:b7:17:6a:e0:c7:b5:7d:
         b0:fe:e7:26:0c:7b:8f:65:d9:4a:cc:7b:76:b8:df:10:2f:16:
         10:f6:6f:23:b4:78:96:27:9f:bd:b3:5e:d5:df:61:04:b3:8b:
         4a:11:75:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:08:19 2025 by rpki-client