Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File:                     vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier:          f/Jz0vbgQJF6sWYPO2lcepcIJAQSnsqJc27yhEbDfCA=
Subject key identifier:   0C:F4:CA:55:DB:0F:FA:68:A2:38:B8:2B:D6:45:D7:4D:D6:7A:8E:98
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer:       /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial:       0194BD1789CF325E4568A4E7C65BB07B4CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
                          2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: lAlolSEXL8dIQnjLGX9n9hv5YpN3fkdv7uIu5taTgwA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:89:cf:32:5e:45:68:a4:e7:c6:5b:b0:7b:4c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=0cf4ca55db0ffa68a238b82bd645d74dd67a8e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:b3:24:97:28:c6:89:dd:33:be:26:4b:20:
                    17:00:e0:11:2e:ea:29:d2:91:78:1b:b1:ae:79:50:
                    80:e7:90:55:61:18:7e:bd:a8:2b:da:43:76:1e:56:
                    d5:47:bd:c2:37:a5:4e:70:8e:fd:c4:d0:94:3b:42:
                    33:61:7d:17:f4:dc:8c:88:df:45:18:ab:61:37:f1:
                    47:1e:a2:e9:86:61:1f:ec:5d:56:e3:ab:90:6e:88:
                    2a:91:71:d6:de:80:79:91:09:2e:d2:d4:f0:bb:e4:
                    db:2c:9d:00:86:34:60:4f:72:b6:0e:fa:85:78:a1:
                    aa:90:28:a9:cc:79:e1:47:70:5b:a3:de:9e:99:08:
                    5e:3d:1a:41:05:98:23:fa:27:70:2a:da:ba:29:09:
                    43:d2:41:1d:a5:94:17:b6:4a:6f:36:b3:a1:95:5b:
                    44:d6:c7:54:e0:ad:e6:53:2b:c4:c4:cd:60:c7:bb:
                    f8:77:a5:3d:0e:50:38:f5:cb:9f:df:df:c9:3f:62:
                    57:9b:ff:ea:b3:a5:7a:e3:e5:aa:a1:27:53:f7:7e:
                    7f:49:81:86:e6:97:51:a7:75:c2:cd:55:9b:0a:f0:
                    1a:8d:6f:00:65:54:47:1a:46:32:df:bd:77:0b:d3:
                    e0:73:6d:0c:dd:65:92:c4:54:ec:7e:88:00:58:e5:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F4:CA:55:DB:0F:FA:68:A2:38:B8:2B:D6:45:D7:4D:D6:7A:8E:98
            X509v3 Authority Key Identifier:
                keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3a:9b:e5:f7:c0:93:53:e6:72:ab:23:45:4b:ab:49:16:e4:
         e7:dc:03:19:31:7c:5a:be:9c:aa:0d:1a:a2:02:23:71:10:aa:
         94:64:0a:94:f2:e7:e0:d6:f4:52:1a:74:56:10:e3:1c:ff:59:
         ba:3f:da:3a:76:f8:b5:ae:02:bd:3b:4e:73:c2:0c:65:1d:d0:
         78:75:b8:07:52:03:47:95:21:6d:8c:ed:1a:9f:1b:47:bb:a1:
         52:ce:e8:10:7c:6e:29:5e:53:15:41:59:8d:a9:9b:f8:7b:21:
         e9:5f:ff:34:f0:3e:44:60:f0:a9:2b:0e:0a:71:f7:2c:0f:de:
         85:2b:6d:89:2f:84:6d:b6:db:0e:55:3e:1d:b6:6f:14:07:23:
         12:0f:4a:d9:fb:4c:8f:0a:24:3f:b5:51:ba:35:6a:cb:5d:95:
         81:09:27:84:ec:cc:a6:17:56:0c:87:1b:3c:5d:cd:39:fd:23:
         19:3a:0d:5e:61:aa:84:49:f0:88:47:d5:af:f1:b0:4a:ca:ad:
         22:f3:03:a7:86:1f:62:f4:3e:2a:c8:f5:0e:bb:15:4f:02:92:
         24:2b:21:1d:f5:d1:22:9b:ec:7a:4e:67:03:50:3a:b6:d0:4b:
         64:3d:97:20:cc:3e:11:30:b4:34:f9:32:bd:4d:ad:05:72:2a:
         4d:df:8e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:08:26 2025 by rpki-client