Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
File:                     gV_CISVyYlbWo189oo91E90xwf4.mft (raw, json)
Hash identifier:          /QKDSFtDTu699ofdJg8e3Y4SOdt/21t8ZCWJ6yOgXx4=
Subject key identifier:   42:1F:BE:05:33:BA:54:55:29:15:43:59:03:DF:A6:13:18:8E:F2:EF
Authority key identifier: 81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE
Certificate issuer:       /CN=815fc22125726256d6a35f3da28f7513dd31c1fe
Certificate serial:       0194BCA97A82F01910393C676F24502E5040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft
Manifest number:          13BB
Signing time:             Fri 31 Jan 2025 14:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:11 +0000
Files and hashes:         1: aBrEW06-xKv77MgMEwK2_lYbz-I.roa (hash: RP6KdM7YV2WY/3+umq6rKSdZ3FIW7gCCmbirjcfrx/0=)
                          2: gV_CISVyYlbWo189oo91E90xwf4.crl (hash: WjCA5mQDnhtdmNIGp2DThF2CNx4LHsTD2CMvmFN4lpQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:7a:82:f0:19:10:39:3c:67:6f:24:50:2e:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=815fc22125726256d6a35f3da28f7513dd31c1fe
        Validity
            Not Before: Jan 31 14:00:11 2025 GMT
            Not After : Feb  1 14:00:11 2025 GMT
        Subject: CN=421fbe0533ba54552915435903dfa613188ef2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1c:69:0f:c8:90:bd:1c:8c:df:a7:a2:ac:7c:
                    3f:c5:e2:da:29:6e:f0:1d:d6:61:3c:df:51:d8:e8:
                    52:20:bd:d4:47:12:5d:a0:90:0c:82:a9:49:61:ea:
                    8f:f9:ef:d3:68:9e:fb:5d:c3:bc:b4:02:03:02:25:
                    8d:1b:59:b0:bf:d7:82:b8:98:35:18:fe:97:69:ec:
                    2d:6c:c3:f6:ad:38:75:69:7a:02:af:82:47:bf:16:
                    20:4b:dc:6d:91:07:1f:20:8f:06:79:f3:ea:4e:2f:
                    f9:01:e6:65:3a:e5:b4:1d:19:b3:e3:36:32:8b:86:
                    42:8e:92:f1:5e:ab:91:8d:14:0c:d5:5c:c6:67:b9:
                    33:c7:88:9b:76:86:0b:f8:da:d4:a1:b6:44:d1:e0:
                    96:89:7a:e2:2d:0d:2e:4e:33:a3:2a:fb:12:16:72:
                    25:35:37:9c:c2:c3:4e:78:3c:c4:f0:c1:57:af:f6:
                    59:9c:68:e1:66:86:e4:16:7d:9c:e9:46:3b:42:31:
                    34:ad:d2:79:9d:95:82:77:42:58:65:5c:39:92:99:
                    40:96:f4:d9:c7:96:ce:58:f9:63:f7:00:98:65:03:
                    60:2e:d7:a5:cb:f0:1c:4e:76:4d:5c:28:35:97:72:
                    bb:2e:30:92:bb:d9:48:70:38:c6:b8:fe:c4:79:26:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:BE:05:33:BA:54:55:29:15:43:59:03:DF:A6:13:18:8E:F2:EF
            X509v3 Authority Key Identifier:
                keyid:81:5F:C2:21:25:72:62:56:D6:A3:5F:3D:A2:8F:75:13:DD:31:C1:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gV_CISVyYlbWo189oo91E90xwf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b3c8a6-e32e-4700-b5ed-6a994e5ec472/1/gV_CISVyYlbWo189oo91E90xwf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:c2:8f:32:5b:e6:ef:7e:2e:4c:ff:59:d7:87:fa:0e:40:
         84:c8:a9:66:da:93:bd:94:ce:42:07:6c:99:6f:74:95:10:2b:
         fc:84:6f:41:23:b5:fd:85:c7:67:96:13:17:af:86:05:00:1d:
         d5:4f:22:c4:bd:39:cb:79:6b:8a:9f:73:e4:f2:86:a0:f0:18:
         ed:45:95:0d:15:bf:05:0a:22:f3:ba:32:c6:75:a5:0b:8a:24:
         ce:47:f1:8c:6f:c1:7a:ba:d3:05:18:08:43:7f:34:4b:9c:1c:
         a6:4b:1b:ae:61:52:d1:a5:b9:a5:11:89:f4:53:46:b7:1a:33:
         42:ba:53:d1:3c:e8:98:ae:45:70:0e:e3:79:0e:38:27:49:52:
         c3:69:c5:ac:72:21:67:17:97:95:e0:56:9c:5c:87:b1:3d:c0:
         9a:fb:90:84:5d:30:46:aa:14:18:01:be:97:3c:05:db:c7:b5:
         cc:f9:2f:69:bf:31:e3:24:f8:6d:e2:e5:63:f9:2e:75:28:08:
         30:a0:87:12:e1:7d:50:8b:2a:88:ed:e3:56:d8:d8:c9:46:13:
         64:7b:1c:69:b8:89:c5:44:8c:6d:27:75:9e:78:bc:84:8a:27:
         64:f3:79:ca:f8:65:f7:59:f4:ca:05:fc:ad:1d:ae:2b:5e:eb:
         5a:fb:a5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:51 2025 by rpki-client