Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
File:                     12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft (raw, json)
Hash identifier:          6TM1GqY136D9O+7tw7FkD4yYBC8xCCmxzjqBguAE2Ug=
Subject key identifier:   0B:8F:43:AD:5A:38:3E:56:65:31:93:43:44:41:A8:3A:C1:93:04:B9
Authority key identifier: D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4
Certificate issuer:       /CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
Certificate serial:       0194BCA9F6D81FCDAA89E81E4B47F7BA5FBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft
Manifest number:          0127
Signing time:             Fri 31 Jan 2025 14:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:42 +0000
Files and hashes:         1: 12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl (hash: mYLxsj4EoDcoS54HsOo4cHjkJpldjuRsnivQblQXZm0=)
                          2: 3_lvOlC8Q73awEsCGt68pft-scE.roa (hash: kkfK8/3sSi/mI91PBNQyjxR7j14LRCGJu3KC5n63R3k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f6:d8:1f:cd:aa:89:e8:1e:4b:47:f7:ba:5f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7622be88a5ceaef8c330d7e96fff435e82053b4
        Validity
            Not Before: Jan 31 14:00:42 2025 GMT
            Not After : Feb  1 14:00:42 2025 GMT
        Subject: CN=0b8f43ad5a383e56653193434441a83ac19304b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:03:63:a0:54:c0:28:77:38:2e:c1:4f:ad:da:
                    c4:60:3e:87:7b:75:71:86:bb:ab:60:95:ab:bc:79:
                    84:c7:6d:41:5c:ad:49:ce:60:70:25:1b:82:3c:9a:
                    9b:bb:b5:72:6e:2b:53:61:5a:28:24:0d:cc:01:fe:
                    a3:0a:a4:f7:8e:6f:e7:44:4c:c2:5c:10:32:66:09:
                    ab:83:55:6e:fe:10:f7:55:5e:27:4d:b8:b6:f4:6c:
                    50:38:12:c9:e4:6d:23:b0:50:34:41:71:0e:86:18:
                    34:75:b2:1b:e6:18:66:e1:94:02:1f:bd:af:89:a3:
                    62:e9:ad:50:70:98:d7:93:53:4d:6b:1c:4f:fe:18:
                    95:f9:53:4a:e6:d8:6d:5a:44:23:e7:3f:d7:91:1e:
                    4a:f3:5a:80:b5:75:94:e0:9c:dd:3f:ae:a9:8e:40:
                    20:57:1c:b6:c8:24:fe:97:5b:4c:03:c5:33:c1:99:
                    d0:be:fd:81:2c:5b:22:49:53:ad:11:c1:58:ce:c9:
                    6a:ab:26:ef:0c:9e:82:f3:2e:2c:a0:c7:c9:a3:27:
                    05:fe:5e:ab:34:91:a4:9c:62:af:1b:55:1d:42:ee:
                    fe:59:56:ca:60:09:be:d0:f7:59:b1:e4:01:fd:5c:
                    fd:b3:25:ba:9d:9e:34:74:89:89:79:af:cd:f9:6d:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8F:43:AD:5A:38:3E:56:65:31:93:43:44:41:A8:3A:C1:93:04:B9
            X509v3 Authority Key Identifier:
                keyid:D7:62:2B:E8:8A:5C:EA:EF:8C:33:0D:7E:96:FF:F4:35:E8:20:53:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c0a971-d96f-43d4-a8bc-30625317430d/1/12Ir6Ipc6u-MMw1-lv_0NeggU7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:c7:75:44:df:f4:4c:94:10:70:cb:cd:b9:5d:69:ca:f3:
         cc:09:ef:ed:34:97:ce:a8:e5:6b:d0:9d:45:b7:64:4c:dd:75:
         73:be:15:51:66:f6:4c:d0:2e:a0:fe:35:d5:a1:52:97:a6:bc:
         57:b1:72:57:cf:0e:a2:db:c5:9e:29:ca:8c:f2:5d:fe:c6:ab:
         06:45:29:0a:d0:24:93:b0:f7:4a:2f:43:02:4a:8d:c8:08:0a:
         51:a5:93:14:fe:ef:76:85:c3:c0:40:db:01:73:c1:31:14:01:
         ff:2a:18:d4:4d:3c:e6:ab:37:02:fe:91:a4:3c:f2:01:e2:89:
         74:66:58:da:f6:86:db:21:7f:b1:57:7d:e2:47:66:fc:b8:54:
         05:b6:76:1e:af:d9:42:06:49:90:52:79:2d:05:8c:16:bb:0a:
         10:10:d8:b8:e1:18:4e:34:4c:a3:98:25:62:29:53:8d:93:7d:
         dc:1d:0b:94:83:46:ab:ca:84:47:8e:b1:cf:62:ba:af:a8:37:
         fc:a4:3b:f9:fa:2a:87:09:b1:5f:92:55:7c:46:24:75:bb:67:
         ed:78:45:4a:f1:27:4c:6e:6d:f2:89:5b:76:35:f0:35:3e:ba:
         a9:b5:ab:df:09:d0:5a:2d:39:51:7e:9f:53:71:90:90:4f:07:
         51:49:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:30 2025 by rpki-client