Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
File:                     dvLzQc-Yuei0bt04mkgGTHuub5o.mft (raw, json)
Hash identifier:          nffvRtgsMus1LA97qccsoebEb23+zfmOk3IxUzNAftw=
Subject key identifier:   0B:01:A0:C3:65:75:DE:61:B3:98:59:A4:BF:10:6F:F7:6C:6E:DD:B8
Authority key identifier: 76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A
Certificate issuer:       /CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
Certificate serial:       0194BBCDD267892329486AE576B12A4342CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft
Manifest number:          0C0D
Signing time:             Fri 31 Jan 2025 10:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:15 +0000
Files and hashes:         1: dvLzQc-Yuei0bt04mkgGTHuub5o.crl (hash: INdFOU4fC7XkwE/eQKPk2wZ15XQHBD0x+140446G1Ns=)
                          2: pLFGIGuwO6p3VXl7848DpqUCykE.roa (hash: cQnY5M6yFrvUehgYlIPw55V4Prm/y9EByLYSiv2JqLY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:d2:67:89:23:29:48:6a:e5:76:b1:2a:43:42:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f2f341cf98b9e8b46edd389a48064c7bae6f9a
        Validity
            Not Before: Jan 31 10:00:15 2025 GMT
            Not After : Feb  1 10:00:15 2025 GMT
        Subject: CN=0b01a0c36575de61b39859a4bf106ff76c6eddb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:76:da:1a:e5:58:6b:9f:91:f6:c2:7b:e3:11:
                    b4:c9:09:89:ac:88:85:31:62:e1:f2:df:08:47:4d:
                    76:46:17:ca:49:3c:52:41:03:d0:c5:b0:0e:9f:89:
                    80:00:f7:b7:2f:64:dd:f9:86:aa:b6:c1:b1:f2:c7:
                    7c:0c:46:35:05:1a:f1:13:b2:f9:6f:0d:e1:cf:ad:
                    02:36:3c:da:85:f4:dc:5e:d9:06:48:ae:93:5a:82:
                    61:8e:b7:46:39:46:4f:8c:16:ce:5e:0e:e3:89:47:
                    4e:0c:99:fd:04:05:43:8d:fc:c0:17:81:b8:87:e4:
                    07:ec:8b:f5:48:28:04:d1:17:de:f9:b7:86:be:1b:
                    3b:49:21:ab:46:ee:d3:d8:23:eb:a5:64:35:0c:38:
                    63:a4:eb:a5:a4:7a:bf:0a:90:03:9a:f7:ce:31:f4:
                    8a:f3:4e:54:51:01:7b:2a:a0:48:ae:29:65:b9:82:
                    30:be:18:09:c2:aa:96:f3:aa:0d:aa:9e:24:29:9d:
                    d9:c2:41:06:37:42:17:1e:31:d5:d8:68:64:79:d9:
                    6a:42:d1:f6:21:76:a2:43:21:54:83:23:cd:23:06:
                    d9:63:e1:84:73:11:a1:12:b8:db:d7:fc:1c:b5:b7:
                    a8:90:2f:7b:f1:46:b4:ef:06:9a:07:f6:cd:dc:68:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:A0:C3:65:75:DE:61:B3:98:59:A4:BF:10:6F:F7:6C:6E:DD:B8
            X509v3 Authority Key Identifier:
                keyid:76:F2:F3:41:CF:98:B9:E8:B4:6E:DD:38:9A:48:06:4C:7B:AE:6F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvLzQc-Yuei0bt04mkgGTHuub5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e334d-98b5-47b9-b4fd-29f71ee1791d/1/dvLzQc-Yuei0bt04mkgGTHuub5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:bc:53:0e:94:ef:2a:b1:f5:2f:f9:6a:4c:40:7c:13:87:
         8b:ba:a2:e8:a8:96:53:b7:34:5a:d7:b5:8d:ab:a4:01:8f:63:
         f7:3d:fb:ed:b2:f4:96:01:71:bf:11:28:70:22:68:cf:5d:4e:
         8a:cf:42:10:ba:06:43:2f:ea:2f:f8:b1:ef:8b:06:7e:27:51:
         b2:8f:31:44:dd:87:c0:8a:ed:20:19:1a:9e:18:1b:7f:59:0d:
         5c:eb:65:19:d9:36:d6:a4:b5:61:cc:b4:b1:57:65:d9:57:58:
         a5:6d:93:c9:a6:0c:3d:c8:8f:d3:36:8f:37:db:91:19:22:75:
         e5:b5:73:b8:62:56:47:de:5a:3c:7e:44:94:8f:fe:ae:b0:c0:
         50:81:9c:14:5b:ce:89:a9:17:28:43:af:06:6d:6e:4a:c2:6a:
         0d:dc:6e:c4:f5:b2:6d:5e:89:31:4e:cd:88:65:3f:96:ea:42:
         b1:aa:6a:cf:14:c4:b4:ed:a3:0a:d2:93:c9:b4:48:da:ab:73:
         7e:30:83:27:91:53:af:11:3f:b5:2d:f6:14:f1:50:7c:00:f4:
         1f:a9:fe:db:f7:f4:2f:5b:7c:7e:1a:f6:4d:f9:52:c5:fb:c7:
         15:6d:98:7f:0a:b0:fd:6f:f1:7c:57:86:98:24:9f:13:51:8e:
         99:c5:08:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:21 2025 by rpki-client