Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
File:                     0rvJBVXW0NNDK6u5W2DN7upYD1g.mft (raw, json)
Hash identifier:          /HLMF4mAJIvgFcyHj4grKcnqt0c/x1VRFZN2otNpCVo=
Subject key identifier:   E6:96:B9:B7:35:CA:02:8B:62:8A:43:52:43:D0:32:F6:91:FF:44:A5
Authority key identifier: D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58
Certificate issuer:       /CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
Certificate serial:       0194BC3C45124C39FA386B126BC87EB23C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft
Manifest number:          12BF
Signing time:             Fri 31 Jan 2025 12:00:53 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:53 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:53 +0000
Files and hashes:         1: 0rvJBVXW0NNDK6u5W2DN7upYD1g.crl (hash: aniDvjpLAGpAgLy3Ue6B9NHyMh5hnkuDoqIdSppnVoo=)
                          2: mSUuaNY6UdkYm0lDvwtHqv3NvLU.roa (hash: omo8awS6hh3Xi+tQ6clfUM9W5KqXeL6pdkyIRs6JAvg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:45:12:4c:39:fa:38:6b:12:6b:c8:7e:b2:3c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2bbc90555d6d0d3432babb95b60cdeeea580f58
        Validity
            Not Before: Jan 31 12:00:53 2025 GMT
            Not After : Feb  1 12:00:53 2025 GMT
        Subject: CN=e696b9b735ca028b628a435243d032f691ff44a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cd:5f:ad:f4:0c:1f:31:1d:a4:ba:2d:70:15:
                    b4:4c:0d:1a:81:33:7a:e3:a6:1b:d5:76:17:5b:5f:
                    25:3e:aa:af:5f:a9:20:3b:dc:7e:84:6a:d8:ca:e0:
                    ad:41:39:ae:fb:5d:95:2f:80:dc:bf:6e:28:db:f4:
                    f4:4f:cc:65:b4:4d:85:d9:02:9d:e1:7a:98:22:4d:
                    d4:f2:89:0c:8e:08:0a:41:1d:61:7a:3a:11:d9:33:
                    33:7e:6d:44:20:18:2a:67:2d:88:b7:54:e2:7a:b1:
                    e4:f1:7f:6f:3e:25:69:96:03:68:d1:74:60:65:97:
                    1e:d4:1e:43:68:a0:c4:16:87:3e:47:eb:00:ea:f3:
                    4a:be:48:ff:ea:fc:6f:b6:1b:a2:d4:37:11:c2:2b:
                    a9:cb:89:5b:14:9e:86:ea:07:4b:19:cf:23:0f:2d:
                    20:6c:05:b5:4c:de:a0:97:41:64:33:18:49:9f:30:
                    d6:34:26:0f:5d:4c:8f:4c:06:83:ae:9d:14:07:c6:
                    ea:0d:7f:6a:22:0f:27:23:dc:34:3c:88:d9:b2:66:
                    eb:2e:cf:50:5c:87:bb:18:62:b4:23:81:29:63:6c:
                    cd:17:6d:ec:f8:ee:73:9a:74:86:6f:38:d7:33:bd:
                    76:5e:7c:c2:6f:dd:70:f3:ae:5d:91:b2:a1:db:e6:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:96:B9:B7:35:CA:02:8B:62:8A:43:52:43:D0:32:F6:91:FF:44:A5
            X509v3 Authority Key Identifier:
                keyid:D2:BB:C9:05:55:D6:D0:D3:43:2B:AB:B9:5B:60:CD:EE:EA:58:0F:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rvJBVXW0NNDK6u5W2DN7upYD1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6ffcd2-5bf1-41e2-86a8-7bc1e4f56c88/1/0rvJBVXW0NNDK6u5W2DN7upYD1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:05:75:da:ee:82:b2:36:f2:a7:29:aa:d2:2d:98:3f:7a:2f:
         b2:cc:41:e3:70:c3:49:aa:96:2b:71:41:f4:1f:b9:f4:be:d6:
         12:f6:66:f0:8b:e6:2b:9b:e6:cc:76:d7:43:21:3a:4e:24:8d:
         e8:7a:67:5f:06:10:ff:6b:fe:21:c6:3d:12:8b:0e:83:f4:65:
         6c:59:c9:7c:89:6a:25:fd:26:09:89:ef:6e:5e:04:e7:0e:07:
         31:a9:df:e1:e9:bf:79:b9:27:51:e7:38:12:24:38:10:de:09:
         fc:3b:d9:d9:ea:bc:4d:15:13:7d:d1:bf:54:b6:db:10:20:e1:
         73:35:d8:de:7a:5f:fc:de:6b:d4:fe:8d:5e:9b:ef:b4:be:b3:
         6c:1a:bf:fd:19:77:fd:30:80:aa:70:c7:a0:a5:f3:06:7f:19:
         ce:d0:0d:ad:b8:07:34:ff:a1:9e:7b:51:78:7a:bd:46:b0:2a:
         66:f2:df:30:6b:0e:95:40:55:63:06:82:47:27:81:20:35:3f:
         fb:f9:3f:55:c6:dc:80:0e:46:dd:bb:5f:6f:33:e0:e7:ab:87:
         f4:ba:29:d5:98:c8:f9:b6:11:d4:cf:1a:a7:13:90:e8:b1:5e:
         1e:eb:7a:c8:2d:0c:62:31:c1:f8:2f:47:b1:4c:e2:f6:7d:6a:
         fe:fc:fb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client