Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File:                     FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier:          x+7uZxl0SX+DrWKiSh4fZETUIUdYE/ygM4qIgNqtlxI=
Subject key identifier:   3F:57:90:17:8B:39:BF:7B:15:2A:37:76:D1:E4:90:3D:4C:A1:18:07
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer:       /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial:       0194BD1776F66D1607E22F2B903DDF9A6F86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number:          05F0
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
                          2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: s0fbjhjZIL0tJDDH1S0eYzbSuZZewSEwYACXn/keOz4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:76:f6:6d:16:07:e2:2f:2b:90:3d:df:9a:6f:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=3f5790178b39bf7b152a3776d1e4903d4ca11807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:16:94:dd:7e:e4:ca:78:3d:4c:5c:bd:d9:
                    d2:93:b5:bb:6b:ac:96:93:11:8b:5c:36:b8:05:33:
                    d2:bd:c0:95:94:ea:d6:3f:0c:6f:f6:0b:fd:f2:e6:
                    8b:c2:51:93:48:6b:2e:5f:e3:b2:98:07:23:f4:fa:
                    f1:c4:b0:d5:86:b7:1a:4f:c1:8c:bd:ee:81:fe:9a:
                    36:54:5e:1a:87:d0:18:36:40:bb:6c:65:5e:6d:e1:
                    f1:32:c6:4f:25:ec:49:29:60:39:31:ba:7e:b3:0f:
                    64:5a:ad:91:cf:20:c2:16:cd:82:3f:84:24:e0:c3:
                    e3:74:8e:b2:e3:43:5c:db:a0:9e:56:ac:72:42:5f:
                    8e:5c:88:04:28:26:d6:14:ee:31:07:8f:37:ce:21:
                    32:34:90:de:f9:98:73:9a:82:dd:c8:b9:82:99:e1:
                    6a:50:9c:fe:13:61:0f:2e:c2:28:ea:8d:2e:ed:2f:
                    d3:75:15:60:7f:32:9f:4a:08:d7:26:e8:24:5a:6d:
                    5b:04:c6:69:51:0c:e4:10:50:74:77:e3:20:1a:8e:
                    cc:8e:1a:a1:93:b5:de:05:a0:f5:30:42:39:88:93:
                    5b:e8:ff:60:eb:b0:09:a6:78:a5:87:2c:f1:6e:18:
                    3a:e2:bd:cc:51:bd:3b:5c:4a:0e:f8:aa:76:75:3f:
                    41:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:57:90:17:8B:39:BF:7B:15:2A:37:76:D1:E4:90:3D:4C:A1:18:07
            X509v3 Authority Key Identifier:
                keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:94:86:15:2b:97:a4:bf:57:68:01:5b:71:d1:c5:6e:61:29:
         27:52:cb:5f:60:1a:b8:6e:d8:f3:6c:1c:7f:e4:83:0e:30:2c:
         ea:04:6a:7e:b8:0d:9b:a2:68:1d:73:9f:4a:d1:ab:60:57:3a:
         ab:d2:a6:a8:5c:97:52:66:0e:aa:48:e5:65:df:1e:2d:03:30:
         17:67:ba:0b:8f:5b:5e:91:ea:b0:3c:b4:23:21:fa:c0:57:2a:
         e3:d8:53:73:ad:47:79:0f:0a:b6:ef:1e:90:1b:e3:fc:9c:ba:
         45:d4:7c:bc:08:05:2a:6d:31:33:3b:75:8a:b0:1e:26:5f:b2:
         f4:1f:45:61:29:68:8f:b0:38:e6:c6:d4:ce:71:7b:c4:9b:74:
         d1:cd:44:d2:d0:16:7c:df:1f:bc:8e:72:27:94:44:e8:f1:03:
         91:ea:dd:d1:16:56:8c:22:61:7d:f8:6d:02:3c:2d:3e:b5:69:
         51:f5:7e:dc:70:07:77:0d:f4:c0:cd:25:be:2b:14:cc:05:81:
         db:f3:0f:f8:b7:78:5f:7d:d4:19:f4:70:36:34:20:f7:e0:bb:
         9f:59:e4:2c:e3:8e:97:49:7c:de:91:39:3d:8a:00:40:b3:5c:
         d8:82:3c:25:0d:d4:4e:a6:ce:5b:43:6d:12:88:4b:79:e2:c2:
         60:91:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:58 2025 by rpki-client