Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File:                     vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier:          61FAyNuJ5VFQ3j5ZLmDEPG8xuqHWaNfEvff2DsFjC4U=
Subject key identifier:   90:DE:7C:7A:AA:64:51:1A:7E:5A:BC:11:D5:55:4E:6C:95:86:11:CF
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer:       /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial:       0194BD17C54FC75D89AD5577A30C0BC170F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number:          1281
Signing time:             Fri 31 Jan 2025 16:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:39 +0000
Files and hashes:         1: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: SoERBweMH3KyBl+Cs0SjI52rlFWDtIoFUX5bkoaSXbM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:c5:4f:c7:5d:89:ad:55:77:a3:0c:0b:c1:70:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
        Validity
            Not Before: Jan 31 16:00:39 2025 GMT
            Not After : Feb  1 16:00:39 2025 GMT
        Subject: CN=90de7c7aaa64511a7e5abc11d5554e6c958611cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:38:82:ad:c4:d3:8a:82:6d:41:0f:f7:20:83:
                    e4:79:82:c3:eb:b6:25:41:d0:fb:74:5c:40:3e:58:
                    b1:e5:80:75:91:1d:18:c7:d6:20:7c:e1:11:48:a3:
                    b6:f1:cc:29:24:7d:fb:30:93:f8:29:be:f1:67:81:
                    37:fd:1d:33:f1:a9:42:78:f5:fd:f0:76:1e:ea:14:
                    97:ea:6a:43:41:91:1c:9a:7b:c5:e6:ef:23:65:1f:
                    dd:30:27:e0:ef:9f:dc:a8:c5:b4:d0:a0:99:6a:b3:
                    ea:cf:69:76:38:23:27:6b:30:e2:37:d7:d0:ab:d4:
                    94:4a:e4:87:3c:6c:0a:12:cd:f3:0c:ae:2a:58:a3:
                    f7:ab:c1:18:38:df:2c:e5:72:7a:54:77:6e:c5:d9:
                    8d:a3:bf:79:fe:1c:43:bd:ac:36:d5:c6:fe:60:d6:
                    1b:a5:4b:02:da:62:48:90:fc:ae:48:81:da:87:67:
                    f8:69:68:0b:7a:ab:23:d8:da:9d:1e:73:e7:10:9b:
                    9c:e7:15:90:5d:bb:bb:8b:6f:63:8f:84:cf:c5:93:
                    df:53:b6:4b:b3:24:d6:02:fd:47:d0:95:70:a8:64:
                    49:68:f8:63:74:01:dc:e9:35:c2:56:e4:0a:97:bb:
                    82:3e:7f:84:c6:c5:b0:82:61:da:09:93:56:e1:c2:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:7C:7A:AA:64:51:1A:7E:5A:BC:11:D5:55:4E:6C:95:86:11:CF
            X509v3 Authority Key Identifier:
                keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:2a:87:30:2d:ed:3c:64:41:4e:33:5b:2e:0e:99:c5:ac:c8:
         d0:c8:75:75:dd:32:95:95:de:4e:5a:26:09:19:9d:31:77:af:
         c9:2e:c4:0b:6b:66:75:4f:69:ea:c0:f4:fc:6c:57:13:91:26:
         f6:b6:a4:f3:5e:62:aa:14:03:9c:59:ca:87:d5:19:91:0e:4b:
         ea:e6:d8:8c:62:ea:12:46:92:a5:3f:51:1b:5d:f7:0b:a0:2a:
         e3:ec:41:16:6c:03:62:d9:5b:36:78:a8:e5:9f:11:f1:85:97:
         68:5a:39:bf:01:46:11:c4:fa:b6:10:9c:68:68:53:51:a7:d9:
         2d:2f:68:b1:4d:45:21:a2:65:c8:44:63:cc:3b:95:a2:76:66:
         cc:b9:4a:8b:c4:b5:fe:96:b4:c4:59:22:a7:f2:58:1c:16:fe:
         9e:32:b6:b1:15:0d:dd:2e:80:d1:24:72:76:3e:69:e5:e7:fa:
         30:44:c8:67:60:9e:e1:e0:95:ef:5f:8b:c0:35:d1:81:8e:98:
         06:94:57:f8:bd:f9:de:be:96:89:e0:57:a5:23:7a:f2:04:02:
         18:1a:cd:8c:d9:bf:3c:97:66:c4:de:fe:71:8e:c8:47:1b:9a:
         3d:87:cf:b9:0a:4c:20:82:7c:b3:c0:95:9d:72:11:31:64:8b:
         5a:c7:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:12 2025 by rpki-client