Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          9dESgPciav7INJJ3d2o8akuyxvRnF/zwN4Tmt84yPDs=
Subject key identifier:   93:A1:4B:51:98:7F:11:D1:74:64:A1:44:3F:E6:9D:CE:B2:7D:44:AA
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       0194BCE0DC69476F0AB71E14E2E21DDB806A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          0FC3
Signing time:             Fri 31 Jan 2025 15:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:40 +0000
Files and hashes:         1: REbpmX58oqeUZQ6O9h9Ej7Ziq0A.roa (hash: DwffhGWcmj3CapWvX5irvXpLi8JOrT+VtfUj215L5/g=)
                          2: mY0BBoyvYX1zorx6Y5fLdEd0tCk.roa (hash: 9FO5ETPVAJGxL50DKTbOEEcsQnQAs0IphL/Zj67O7Wg=)
                          3: s9a8ENLs5q1seNY6ASHD0pzkMco.roa (hash: kb8YLjZxqXQKy5ezUGhWndlkKF9j+8NuWi1FYUi/Mz4=)
                          4: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: J/DxzzFbvuguEBDB9Pm9gVz9CB3U2VuvMzmC6/pW04A=)
                          5: ytBPPn31Mvouzht94_-1MzPeRlc.roa (hash: g/RoKeMhShlj3ifkf1JZfkpGbYRq1G/ecz/JNNRxoKs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:dc:69:47:6f:0a:b7:1e:14:e2:e2:1d:db:80:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Jan 31 15:00:40 2025 GMT
            Not After : Feb  1 15:00:40 2025 GMT
        Subject: CN=93a14b51987f11d17464a1443fe69dceb27d44aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:97:80:0d:7e:44:e3:e1:ed:c0:3e:56:f5:
                    c6:c3:76:33:42:b9:23:8e:8c:88:75:a5:fb:8f:23:
                    74:64:d2:27:e6:0a:7b:cf:fa:70:20:e9:c1:41:f2:
                    5a:03:36:86:7f:36:9d:61:2c:bb:06:0c:ea:81:ef:
                    a3:fc:00:94:cb:4e:ba:89:f7:de:cf:0b:0d:99:43:
                    2c:50:e3:ec:e9:1e:8e:d6:b5:94:37:88:f4:91:c5:
                    70:4f:bf:0e:ff:bb:df:97:67:eb:fc:ad:8e:cb:7a:
                    67:51:ee:b3:dc:84:90:84:61:2f:7d:ce:4e:cf:eb:
                    ee:28:ca:9b:5f:c9:e4:43:58:cc:a3:66:ad:51:9e:
                    2d:f8:16:42:31:63:a0:f8:33:06:24:78:da:7d:be:
                    f1:b5:61:fd:d3:d0:50:e7:ed:79:0f:e3:1b:a7:25:
                    b3:f5:21:bb:a7:ce:cf:5b:d6:dc:dc:d8:2e:3f:48:
                    8a:1b:fc:84:db:0a:cf:8f:da:a9:b7:49:83:c6:a4:
                    2f:f4:80:e0:b6:60:5c:b1:bb:0b:96:c0:7d:95:a0:
                    84:f9:97:c3:68:4b:2d:8a:99:d4:e5:28:37:47:85:
                    89:44:e9:a2:2b:85:08:e5:ab:cc:7c:74:60:43:e5:
                    11:be:0f:cb:c5:f5:62:cb:f1:c1:3e:05:9b:fe:5e:
                    49:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A1:4B:51:98:7F:11:D1:74:64:A1:44:3F:E6:9D:CE:B2:7D:44:AA
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:e1:66:82:19:91:e4:40:ad:a1:8b:2d:f7:50:69:b3:2f:0b:
         40:77:5d:49:12:eb:49:2e:93:85:c7:04:59:e1:c0:7f:98:0e:
         03:5c:85:4d:6c:96:a4:11:11:f3:e8:fa:b5:a1:89:a3:7d:e9:
         f0:6e:6b:dd:71:68:11:0c:83:55:cc:7a:51:f1:80:e8:4e:b4:
         9c:f0:c4:5d:81:27:2f:8d:62:6e:74:f6:98:b5:fc:b5:ed:05:
         73:3e:5d:67:d9:f6:6f:25:5a:fc:69:7c:34:e7:f7:21:95:39:
         55:9d:2d:8d:35:a8:9f:56:93:57:b9:19:5c:74:3f:18:b8:24:
         75:3c:35:5e:9d:cf:e9:4a:4a:af:ca:dc:16:b5:b6:ae:f0:53:
         42:b3:79:0c:b2:b9:4f:b1:7b:e4:a5:cd:e1:c7:4a:00:95:0a:
         a6:4e:a2:72:ea:75:75:ad:0d:ff:a8:ee:1c:54:d8:9d:29:9a:
         ab:04:88:b1:31:44:d4:c3:21:52:64:ac:23:89:1c:0b:ad:f8:
         67:41:ed:19:be:1e:45:8e:bc:f6:a3:aa:16:0f:b6:09:aa:09:
         b3:9c:24:22:ae:5b:0a:3c:05:f6:d0:3a:8f:df:65:79:a7:47:
         e2:32:94:7f:e4:93:1f:75:b8:c4:f0:75:80:54:3c:11:b1:e3:
         b4:97:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----