Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
File:                     v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft (raw, json)
Hash identifier:          zIDOwTWeXtPLkq+XGCEJndwXApkZjS/t4E833sGYlxQ=
Subject key identifier:   52:00:41:91:FA:85:04:94:DE:7E:B4:90:96:27:9E:54:57:5A:CD:52
Authority key identifier: BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E
Certificate issuer:       /CN=bfee531155607146304dc65dd576fbee9f0d6e4e
Certificate serial:       0194BC04F72E0834CB813FCBCB77A908B91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft
Manifest number:          024C
Signing time:             Fri 31 Jan 2025 11:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:29 +0000
Files and hashes:         1: v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl (hash: 2QCRMOWqI2Kkk8Yu8tCiseKj/XGfEyqcoLeo1RIuRkw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f7:2e:08:34:cb:81:3f:cb:cb:77:a9:08:b9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfee531155607146304dc65dd576fbee9f0d6e4e
        Validity
            Not Before: Jan 31 11:00:29 2025 GMT
            Not After : Feb  1 11:00:29 2025 GMT
        Subject: CN=52004191fa850494de7eb49096279e54575acd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:b8:04:f1:98:25:3f:78:f5:d5:69:64:d2:
                    9c:11:52:8c:74:64:1c:50:10:76:4c:5c:0b:0b:63:
                    27:9a:5c:74:c3:5d:45:52:af:9d:a7:b0:0b:61:7e:
                    1d:3d:ce:4c:5d:48:0f:71:51:77:1b:04:ae:b6:00:
                    72:73:ae:e9:49:dd:af:89:3a:4c:be:f3:96:3f:a1:
                    37:e8:07:8b:5d:0a:39:08:34:d6:bb:52:4a:f8:45:
                    c6:4b:36:81:56:75:52:83:5e:3c:f9:81:19:d4:1a:
                    97:ec:fe:31:65:2a:f0:09:85:c1:ca:03:8f:71:21:
                    38:d3:26:2a:4f:9b:f2:e1:01:07:44:d4:52:54:0e:
                    a6:b7:6c:87:6b:47:a0:1f:4c:9e:0b:f9:6f:89:16:
                    14:95:a2:8e:e7:e8:40:2d:dd:b7:bc:10:2e:64:f8:
                    e0:e2:38:0f:aa:ad:b1:88:16:b1:32:fd:16:ca:db:
                    57:c1:de:7a:13:24:dc:c9:10:27:7d:71:76:33:9c:
                    4a:8d:fb:bf:90:46:67:9b:3a:44:1b:28:79:e5:38:
                    ea:23:ae:cf:7c:8d:b2:6f:00:f9:b1:2d:1b:82:9b:
                    34:c9:bc:91:5d:2e:36:cd:84:9d:89:f3:17:28:0d:
                    89:71:f3:fc:7a:43:bb:3e:d3:69:ab:21:52:9a:21:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:00:41:91:FA:85:04:94:DE:7E:B4:90:96:27:9E:54:57:5A:CD:52
            X509v3 Authority Key Identifier:
                keyid:BF:EE:53:11:55:60:71:46:30:4D:C6:5D:D5:76:FB:EE:9F:0D:6E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3ec64b-d3a1-4331-9252-d4f83380a9c5/1/v-5TEVVgcUYwTcZd1Xb77p8Nbk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:42:78:1c:23:65:0f:bb:a6:70:97:d2:cb:4d:c6:5d:da:66:
         e4:82:5b:03:2f:a6:76:e2:23:34:2a:c9:98:b8:45:92:e3:90:
         1c:a7:67:f8:b1:10:85:4e:b0:31:f0:9b:32:e3:a3:37:f5:dc:
         c3:48:2c:15:86:23:aa:e6:b5:50:0f:f8:11:fe:17:6f:6e:91:
         80:ae:3e:6e:ac:b0:9a:ae:4e:74:d6:ef:0c:cd:96:c3:89:7d:
         64:14:de:32:6e:6a:40:73:b5:d8:83:8e:47:9b:ba:52:5f:42:
         36:64:80:d3:89:6a:84:bd:35:d4:9d:06:1e:ec:c7:76:b9:ac:
         68:04:0c:4e:76:02:e2:94:97:ae:a4:66:ef:85:46:84:84:14:
         96:52:14:bf:2a:7f:5b:59:db:37:66:0a:09:df:15:b9:7e:b0:
         75:f4:61:5f:6b:87:ed:72:fc:57:30:a5:36:d4:e5:93:98:87:
         49:fc:cb:8d:5d:af:85:10:44:c2:53:da:e2:c3:53:10:d2:be:
         1b:a8:8a:99:ba:16:68:7c:f6:7f:a5:75:5a:37:11:b4:8d:f6:
         d3:db:20:7f:d4:da:09:8c:0b:65:f1:6f:eb:79:a1:46:5e:57:
         a9:77:31:0e:36:b9:7a:8a:73:41:a6:68:4e:5f:b7:fa:c9:a3:
         35:09:df:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:49:29 2025 by rpki-client