Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File:                     vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier:          bRCvuX8FkV+yo9IFwGdbl4Zwn525IQDZ+zT3KiLdzwk=
Subject key identifier:   46:36:C3:47:6B:86:BB:7C:67:C2:53:D0:50:32:77:6B:56:1D:64:F1
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer:       /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial:       0194BC3BF807BB2C81FBED1CBDA4922055D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number:          0982
Signing time:             Fri 31 Jan 2025 12:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:34 +0000
Files and hashes:         1: gySZz205phomZv7uwZ9DDc75Itk.roa (hash: eO5SMh+ywbk5mzLS6dSPU+KeItuyQY93yBUL4wk+YdY=)
                          2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: fbomcMzvtBgMRR7fJmyaTYVr6uyHPXPS45JXK6CsMLg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f8:07:bb:2c:81:fb:ed:1c:bd:a4:92:20:55:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
        Validity
            Not Before: Jan 31 12:00:34 2025 GMT
            Not After : Feb  1 12:00:34 2025 GMT
        Subject: CN=4636c3476b86bb7c67c253d05032776b561d64f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5e:9d:de:f8:0c:af:b8:f0:de:a4:7c:47:1b:
                    7d:e1:aa:c4:c3:10:c9:09:f1:59:3f:c0:28:5e:81:
                    43:94:18:06:5b:22:ce:76:db:04:8d:c0:3e:10:95:
                    7d:4b:76:c2:55:06:69:e4:a1:c6:2d:ac:21:a3:85:
                    3b:c3:ff:d6:3a:88:64:53:6a:00:22:40:c6:5d:47:
                    ee:2d:83:f4:75:ee:8f:97:bd:ab:f1:28:8f:97:e3:
                    53:36:61:57:98:6a:e7:90:4b:22:b1:d8:1a:df:0f:
                    0e:fe:73:5e:7d:eb:e5:5a:91:00:b0:12:10:58:ab:
                    79:c9:d2:4e:54:05:4e:2a:4f:12:ff:c8:08:50:18:
                    5b:20:81:2f:80:97:bb:fe:45:d8:b3:75:62:bb:1e:
                    0c:aa:3a:07:64:70:36:77:4a:12:86:71:90:5c:d0:
                    b0:ce:1e:07:0d:2d:f8:72:f4:14:6c:94:6d:44:d9:
                    a4:16:c0:e0:2a:b4:1f:b6:be:1f:1e:11:9e:f5:f1:
                    f0:1a:fd:45:18:71:fb:d3:e7:82:f6:2d:b9:99:ea:
                    33:9b:7b:34:56:18:57:86:26:0d:ba:fe:e8:19:63:
                    ce:d4:2a:e8:6b:a0:ab:41:d1:d6:75:c0:a3:16:43:
                    27:e9:46:20:4b:8e:16:85:bf:e2:2e:c2:d7:cf:b1:
                    b1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:36:C3:47:6B:86:BB:7C:67:C2:53:D0:50:32:77:6B:56:1D:64:F1
            X509v3 Authority Key Identifier:
                keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:1a:4d:b0:f1:9d:f2:ef:b8:c1:d6:91:fe:79:35:94:96:
         a9:33:aa:4d:67:b0:51:f9:e2:0d:0f:cb:b8:9f:0b:8d:92:13:
         53:5d:ed:7f:7c:97:97:ce:3c:42:df:63:07:2b:dc:9e:ad:73:
         fa:dd:56:a6:15:b0:b6:54:08:6e:49:0e:5f:40:11:68:78:0c:
         e5:f1:58:c1:75:8e:3c:32:d0:28:3c:ff:c0:80:3c:1a:8b:82:
         a0:b5:0f:a0:f6:4d:85:96:65:9b:ba:0f:44:2b:36:89:2b:b6:
         48:cf:1e:a1:78:d0:75:d4:fc:9e:df:d8:5a:7c:af:84:7d:80:
         79:69:53:73:19:3f:79:6a:d1:f5:32:a1:dc:2d:13:5f:cf:f2:
         60:13:41:8a:df:14:d9:4e:54:14:6f:7b:03:98:e8:df:d1:b3:
         3c:c8:62:1e:1c:01:0a:44:a5:5c:01:56:dd:16:1f:97:3c:e1:
         6e:0a:69:7c:97:08:19:94:e1:9d:aa:8d:56:5b:57:a1:8a:aa:
         89:63:17:e7:ab:06:14:77:72:48:75:4d:83:ed:4c:16:1d:2b:
         5e:7a:30:c2:5c:1a:d8:42:3c:ec:a1:84:3e:65:5b:c1:fe:d2:
         82:f4:39:6f:98:ea:76:60:9f:08:f5:5e:a3:fa:18:38:45:b8:
         7a:51:72:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:16 2025 by rpki-client