Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
File:                     J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft (raw, json)
Hash identifier:          xAnLlX0OjS+3i7umDfp0SauzMZgQsUHhGVhpWbMB4MI=
Subject key identifier:   BF:F3:59:5A:AD:EA:EB:47:60:8E:C7:5F:F6:5D:80:BB:12:46:94:BA
Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
Certificate issuer:       /CN=27d7d0d37bf0494589472189e03c193057e373ab
Certificate serial:       0194BD17862E0AF2AEC0821387E5EC7292AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
Manifest number:          06E0
Signing time:             Fri 31 Jan 2025 16:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:22 +0000
Files and hashes:         1: APV-yd4iM5ft2_CZQSdpqn3Znl0.roa (hash: zO2jXcNxwkx67uSbTL8ewK9Q+yKE4kHcIhGP4291jJw=)
                          2: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl (hash: fq+N9lu5QxAFtQ6KjBkBeuN/9etVOzTEeoP4lDEJt2Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:86:2e:0a:f2:ae:c0:82:13:87:e5:ec:72:92:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab
        Validity
            Not Before: Jan 31 16:00:22 2025 GMT
            Not After : Feb  1 16:00:22 2025 GMT
        Subject: CN=bff3595aadeaeb47608ec75ff65d80bb124694ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:f3:44:6e:4c:2e:ca:73:3e:48:64:d7:51:
                    93:3b:1d:59:f8:5b:67:a6:29:30:5e:32:15:57:4d:
                    59:48:3a:98:3f:a0:1e:ba:41:10:c5:78:8f:68:f3:
                    3a:3c:15:f4:2d:66:be:fc:24:54:23:8b:91:6b:5b:
                    2e:02:ff:2a:96:81:29:b3:3b:21:f9:f9:4b:2d:83:
                    80:cf:fb:6f:4d:81:8d:c4:27:88:0f:6c:6d:ca:be:
                    27:39:4f:f0:48:8e:89:fb:3c:ae:21:79:60:76:c7:
                    9b:72:84:d9:01:b4:f1:01:a5:0a:94:d3:a1:71:b4:
                    08:f0:79:15:0e:29:eb:99:cc:fd:41:15:29:d5:98:
                    d1:48:ca:6e:b4:60:dc:a5:4d:0d:38:dc:0a:05:d1:
                    3e:15:dd:a1:8d:7d:c5:b4:82:6e:92:f6:34:02:bf:
                    d9:81:56:91:24:58:db:16:75:e0:c7:6c:ae:3e:db:
                    ea:3b:c6:95:70:b2:a0:56:17:39:d2:4f:9a:c2:0a:
                    2a:79:a8:0c:31:8e:cf:eb:4b:b6:99:fc:dc:79:ab:
                    5b:66:99:3d:f4:c0:54:c6:87:e0:e6:f2:11:36:80:
                    ab:21:72:02:60:24:f0:8b:3b:f6:87:9d:d2:53:16:
                    ef:93:f0:14:0b:8e:94:6f:93:9a:65:70:b3:18:2b:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F3:59:5A:AD:EA:EB:47:60:8E:C7:5F:F6:5D:80:BB:12:46:94:BA
            X509v3 Authority Key Identifier:
                keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e7:0e:a6:c9:57:6a:48:6c:e8:6c:eb:6a:96:75:d4:aa:fc:
         a9:f2:05:97:90:39:4c:1a:ff:dd:05:0d:71:38:3d:6f:63:10:
         04:cd:27:0e:cd:9f:7a:77:ba:34:47:3c:18:57:2b:ee:1b:66:
         72:39:94:f8:7c:a7:a4:57:66:8e:19:d7:52:56:b4:7e:0a:e1:
         53:85:7f:6b:f5:4a:5e:be:37:b3:7f:8e:c3:08:74:b6:b3:d1:
         cb:15:c7:15:98:9b:33:65:68:51:a9:c8:8e:56:a3:5d:43:15:
         e1:67:63:28:79:9f:e5:c0:6d:1c:8f:8d:d4:00:45:a4:cf:3b:
         d5:98:1a:d2:85:be:25:3d:6c:4f:e1:40:8a:63:c4:f2:76:01:
         e9:35:ec:18:f7:7b:fb:04:47:0a:35:40:ac:e3:ae:d3:6d:06:
         e5:40:5a:c7:c5:bf:9d:96:8e:66:63:7f:83:0a:0c:84:aa:25:
         ba:81:b2:0b:ed:31:ee:a2:de:45:7e:2a:f2:9d:bc:db:c6:90:
         91:71:7a:e1:75:b6:fd:ed:13:13:46:07:80:88:52:71:05:63:
         79:7a:f9:06:d6:46:07:3e:7e:c9:f3:f5:e7:83:b4:13:23:8a:
         1c:16:6b:8a:92:d6:f5:63:f3:58:17:ae:bb:7c:d5:54:a2:e1:
         d7:1c:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:51:53 2025 by rpki-client