Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File:                     vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier:          Vyk7ejzQvhWY6wdJ6fyPQOiE3QkUc7SypGKJWS6DB7Q=
Subject key identifier:   0C:CB:9B:34:93:34:23:72:3B:2A:C9:A3:37:A4:13:E2:28:FA:C4:81
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer:       /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial:       0194BC3C6186766406204F264E475FDB5E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number:          024F
Signing time:             Fri 31 Jan 2025 12:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:01 +0000
Files and hashes:         1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
                          2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: EWd+aVcPCd1ZR5QETBrF/5TZnBg0PS2vTUbLdkd+9DE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:61:86:76:64:06:20:4f:26:4e:47:5f:db:5e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
        Validity
            Not Before: Jan 31 12:01:01 2025 GMT
            Not After : Feb  1 12:01:01 2025 GMT
        Subject: CN=0ccb9b34933423723b2ac9a337a413e228fac481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:35:74:3c:09:8b:ff:ff:c1:34:68:60:2e:e2:
                    d7:46:87:15:09:74:90:61:b5:76:2b:d2:64:2f:02:
                    60:39:1b:ec:19:75:8d:31:8a:3d:5e:65:70:b0:81:
                    56:36:27:d7:d2:cd:aa:b0:d2:61:34:67:2c:94:86:
                    36:49:45:f7:a9:bf:c6:c9:5e:11:2e:f0:9f:ab:9f:
                    c0:44:8f:57:00:b3:91:f2:95:d9:ff:0f:46:68:f6:
                    9f:58:5f:6c:71:3f:e4:dd:a1:62:74:78:1b:f9:75:
                    9f:2a:94:54:01:aa:41:56:7b:6f:48:3c:65:8e:99:
                    cf:ee:1a:f2:86:7e:96:fa:99:ef:5a:95:29:54:bb:
                    24:8d:f8:40:b8:c5:5a:ae:4e:58:ef:89:b9:fb:cb:
                    df:91:df:b1:37:e9:84:85:88:55:99:b3:95:f0:85:
                    34:03:77:88:59:6e:7f:b7:28:62:ae:30:c5:c4:b0:
                    b5:e6:93:89:56:37:b1:4e:f6:60:67:d6:c5:65:23:
                    2d:5b:47:43:e7:f1:1f:41:37:31:5d:a9:85:67:d7:
                    70:c1:50:8e:80:6d:c1:6b:f1:11:67:74:16:f4:a7:
                    e6:ed:42:27:23:79:5f:6d:a7:01:21:fe:50:35:b3:
                    ac:78:33:49:93:e6:be:6b:ba:2d:76:ab:7c:ed:b4:
                    5a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CB:9B:34:93:34:23:72:3B:2A:C9:A3:37:A4:13:E2:28:FA:C4:81
            X509v3 Authority Key Identifier:
                keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6f:bf:93:29:9e:84:51:6b:bc:00:58:cb:b1:34:ff:88:b7:
         28:0b:09:b5:2d:09:81:40:81:b5:1a:ac:d4:de:07:71:4f:c8:
         91:38:c2:ff:49:95:81:c2:06:72:36:49:f3:3a:b8:df:71:f7:
         8e:01:c6:f6:1e:56:75:c3:49:75:c8:91:45:3c:83:e0:61:5b:
         25:83:60:a8:a0:ab:88:50:63:aa:2f:ad:bb:b2:1b:0b:fb:c4:
         9f:c9:ea:fb:52:ca:0b:b8:2f:05:a8:8a:f5:42:42:0a:cb:5e:
         0b:ab:e9:6b:83:d7:cf:76:62:32:cc:20:14:8f:82:2e:75:6c:
         68:22:3e:03:51:75:96:49:71:b9:fc:58:87:9f:96:0c:cd:d8:
         e5:a1:5c:46:03:04:e0:ef:6c:95:58:ce:39:2c:5f:76:b1:9c:
         7b:bf:f9:d4:d2:bd:eb:71:d7:82:43:e6:d0:dc:ad:98:9b:22:
         ee:39:ea:b4:99:44:4e:d6:28:b8:f4:07:2e:67:89:15:fb:63:
         84:41:95:5d:a2:ab:14:a0:08:a5:00:26:4f:c1:c4:89:a2:72:
         9d:ca:d2:28:7d:9a:f3:0c:23:9a:28:13:4a:2b:b0:62:67:54:
         89:af:44:43:de:e2:eb:dc:97:c8:67:0a:53:6c:e9:ee:d1:a9:
         a9:17:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:01 2025 by rpki-client