Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          0Pv0KsQQnt9ESg2chcvzrOWMu+bw6XgpEqiqTeAvdVg=
Subject key identifier:   69:D9:40:D3:15:3A:48:CB:11:A3:93:4E:0F:24:81:B2:B6:4A:12:2E
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       0194BD17D06AC139FD57E9987E7829561850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          0C3F
Signing time:             Fri 31 Jan 2025 16:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:41 +0000
Files and hashes:         1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
                          2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: Fs8yHB6qUX0VZRqfyn7af7q2xOz1wf5ehZ0YLXmFAAY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d0:6a:c1:39:fd:57:e9:98:7e:78:29:56:18:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Jan 31 16:00:41 2025 GMT
            Not After : Feb  1 16:00:41 2025 GMT
        Subject: CN=69d940d3153a48cb11a3934e0f2481b2b64a122e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:a7:10:0d:d5:f8:18:f9:cb:4a:9f:62:ae:
                    64:5c:33:7a:6e:95:0b:b2:0a:98:dc:15:7b:5a:e3:
                    c6:31:0c:a9:95:c6:4f:e6:8c:ef:2d:75:49:0c:15:
                    39:03:7d:bf:f1:77:4e:8e:71:9c:b5:62:98:01:e5:
                    75:b1:1d:ef:c2:0f:6d:6f:02:a4:37:06:4a:30:e6:
                    46:f2:e8:8a:f2:7b:9d:09:b2:27:da:63:82:48:7f:
                    f7:31:c8:cc:3b:fa:79:ff:e4:b4:e0:a6:96:3e:f0:
                    96:57:03:18:4b:3e:47:47:46:e1:c5:9a:a6:b1:b6:
                    79:84:a3:bc:ef:33:66:2a:a0:66:5d:f0:05:18:2a:
                    bb:8c:e6:d1:01:7a:1b:bb:ad:8e:38:65:6a:c3:fb:
                    1b:a5:1a:ec:cc:b4:09:47:03:e8:fc:f3:99:1d:ae:
                    47:41:bb:0a:4f:e9:7c:7d:b1:25:ca:52:b7:10:f0:
                    39:6b:7e:79:f3:a0:d8:3c:98:12:f0:0c:d2:70:04:
                    6c:db:b7:1b:96:0c:09:0e:fc:b1:59:4d:30:b2:46:
                    1e:7e:cb:b3:37:c3:5b:42:51:0a:29:af:ce:b8:38:
                    a9:dd:cd:67:53:04:ad:ee:9a:43:46:62:57:ab:95:
                    0a:55:cb:1e:0c:fb:6a:48:d1:a5:ac:76:91:a0:9b:
                    98:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:40:D3:15:3A:48:CB:11:A3:93:4E:0F:24:81:B2:B6:4A:12:2E
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:65:00:64:1f:bf:12:7f:56:8c:5c:bc:5c:49:32:e0:bf:78:
         26:f5:d1:1f:ac:c4:f0:05:f2:40:44:38:09:aa:95:58:b8:6e:
         a1:0b:32:33:ab:bf:4c:d3:7e:fc:c1:51:d2:64:e5:02:4a:92:
         7c:6e:47:c1:bd:9c:49:a4:7e:e5:ed:a3:4a:f4:9d:a7:b4:7d:
         b6:3a:67:f1:d6:aa:bd:cf:00:44:c0:07:ce:c4:ff:25:77:4e:
         e6:0a:51:51:44:71:2c:64:ab:ef:6b:c7:ea:de:d5:ff:a1:db:
         da:c9:e2:fc:1b:db:d0:74:f6:0f:6c:d2:08:47:e6:9c:5e:c4:
         97:db:ee:7e:7a:87:9e:5f:96:79:33:c8:13:11:6b:f8:54:4b:
         86:e6:b2:ac:fb:75:71:89:7a:eb:80:a4:2e:19:72:6f:b4:09:
         45:c0:9c:f5:0a:32:83:15:4e:98:09:a7:1f:35:8c:6e:af:d9:
         e1:ef:87:f1:de:05:bf:34:64:8a:b2:47:4a:a3:85:b4:e0:62:
         81:4f:c1:67:be:0c:44:1b:69:49:98:45:05:a8:5b:7f:42:f7:
         2c:6f:02:7b:cf:ee:29:aa:81:2e:81:cf:62:22:19:a5:da:b7:
         b2:44:88:02:13:0c:9d:e2:7a:4e:c4:fa:9b:0b:8a:c3:07:82:
         b3:d0:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:11 2025 by rpki-client