Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File:                     bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier:          xec/K6PGRjazQASaYk/1+4cDzrTj3fsQGcnkb7UVLTA=
Subject key identifier:   9E:A4:F7:61:AD:4E:77:CE:22:39:06:B7:87:9F:87:00:26:43:1F:48
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer:       /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial:       0194BC7300710B672641D2B9DF4C96E8D251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number:          1209
Signing time:             Fri 31 Jan 2025 13:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:40 +0000
Files and hashes:         1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
                          2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: 5Qy9k6RB4jBDLQSEOBO6egecgE3LJve4PyhVUxLaQvA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:00:71:0b:67:26:41:d2:b9:df:4c:96:e8:d2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
        Validity
            Not Before: Jan 31 13:00:40 2025 GMT
            Not After : Feb  1 13:00:40 2025 GMT
        Subject: CN=9ea4f761ad4e77ce223906b7879f870026431f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:f1:70:7b:2c:a4:95:fe:a4:e6:64:c6:3d:
                    3d:8f:b8:ad:c2:4f:52:bc:c0:00:f0:11:ad:0b:69:
                    c9:aa:19:5e:8c:32:52:6e:02:e2:32:a5:a0:6f:2b:
                    10:d7:73:2a:23:ca:08:8c:9f:ed:db:e7:e9:bc:19:
                    aa:61:d7:74:ad:62:30:98:40:1b:1f:01:0e:32:52:
                    f6:2b:a4:d7:90:78:ce:4b:c9:48:9d:09:30:df:84:
                    d8:48:65:df:cf:0e:1c:f6:f0:36:e4:3a:d3:5b:c4:
                    cb:49:28:79:74:14:c4:9b:ef:9e:98:80:10:56:99:
                    1e:93:76:9d:b9:a0:a3:ca:8a:fa:f8:50:d2:16:24:
                    8e:e1:88:04:67:35:8b:5b:34:16:aa:92:39:57:1f:
                    63:f7:45:7c:fb:d4:32:22:bf:09:1d:e5:ad:45:4c:
                    55:db:88:3a:c8:4b:4e:23:0c:30:00:49:d2:53:da:
                    ef:75:44:16:e6:0f:e7:44:69:80:f0:ff:54:8a:cc:
                    dd:f8:0b:a4:e4:d2:e1:0b:79:e1:fa:04:c5:3c:e1:
                    f5:8d:ff:94:a5:b3:36:30:97:fd:22:11:aa:34:c6:
                    ae:55:4f:71:b3:32:74:88:e9:6a:f1:b6:c3:d6:fd:
                    c1:f5:10:6e:77:37:95:89:b1:29:73:f0:04:07:99:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A4:F7:61:AD:4E:77:CE:22:39:06:B7:87:9F:87:00:26:43:1F:48
            X509v3 Authority Key Identifier:
                keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:87:df:14:e9:9e:e2:90:a1:87:ea:d6:7c:89:fa:16:5e:4c:
         39:da:87:07:93:dd:17:48:e2:8d:5c:09:b6:21:ac:51:18:5a:
         b5:dc:b3:6e:09:d9:63:25:0a:0a:00:9d:1c:9a:46:98:6e:9e:
         b7:2d:d0:9d:2f:7b:a2:fb:aa:dc:4e:ba:1c:35:37:59:47:4a:
         58:ad:c3:60:6c:75:d9:bd:5d:a0:7e:d2:db:f2:41:fb:e5:1f:
         00:54:0b:7f:0d:60:ba:97:a8:c9:62:70:20:32:36:f9:52:86:
         66:a6:6c:13:a6:b9:c8:cb:ba:dc:83:5d:ff:0d:1f:d8:62:f3:
         2c:a1:84:9f:9f:4f:a9:36:3a:9b:f3:7f:36:9d:f9:0b:d8:5d:
         b0:5a:7b:dc:ac:9f:34:5d:df:00:7c:75:38:38:32:fa:a7:fa:
         16:3f:e5:8b:75:26:52:00:22:b6:c0:22:15:1d:9a:8e:de:24:
         93:45:8f:49:ad:ca:25:1f:91:fc:a1:be:e4:24:f4:38:68:6a:
         d1:03:0d:d3:fe:7a:f4:2a:d5:96:89:9d:96:d4:35:2c:36:bd:
         71:b1:85:cf:b1:89:e4:3c:be:1d:2b:ab:c1:a6:92:b9:18:19:
         ed:22:77:2c:2a:96:d7:9e:d1:08:03:91:56:a7:5b:39:57:1a:
         72:80:5a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:22:59 2025 by rpki-client