Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File:                     BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier:          b6vFcHhHltI0M28zzAklwECvZiKQtxxsG9kNNA7AVP8=
Subject key identifier:   60:0A:5A:96:4E:76:0C:14:F7:75:12:D3:2F:53:DC:73:6D:2C:96:0E
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer:       /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial:       0194BC72C78C485293EE5BD2058EEEE9942A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number:          0B11
Signing time:             Fri 31 Jan 2025 13:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:26 +0000
Files and hashes:         1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: eqPATWUr//czs+DU/c85ufi9z02ov4Cabm/7bp+ICT4=)
                          2: EhPdkmEcd5kZgSYia-f_ZpjHYY0.roa (hash: 3TfVzsPjB0vFUIoLoSrG9hGoNnzjzko9raGZf0VmPMQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:c7:8c:48:52:93:ee:5b:d2:05:8e:ee:e9:94:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
        Validity
            Not Before: Jan 31 13:00:26 2025 GMT
            Not After : Feb  1 13:00:26 2025 GMT
        Subject: CN=600a5a964e760c14f77512d32f53dc736d2c960e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:31:e0:42:76:42:d2:a9:76:41:98:03:e6:42:
                    c3:d4:8e:43:39:de:39:42:8e:f2:0a:c7:7c:37:07:
                    27:ae:26:06:21:bc:fe:5b:7d:34:3e:f4:f5:14:89:
                    82:d9:dc:b0:4d:dc:0e:60:5c:7f:c0:4c:18:b0:42:
                    34:20:fa:51:d0:a6:03:00:3b:33:0e:f3:25:f3:c2:
                    46:a2:a8:64:74:c6:0a:39:df:40:35:0f:af:0f:0e:
                    e4:e1:b2:bc:91:d8:66:7f:34:6b:93:59:43:07:97:
                    ae:53:00:90:d9:9e:81:39:90:16:6b:4a:56:73:f8:
                    17:40:dd:fd:f8:e5:fd:0e:31:2c:f5:9c:f4:44:09:
                    29:56:9f:0c:72:fd:4d:a6:68:91:49:74:f0:dd:35:
                    d5:dc:ac:3c:02:db:04:6b:00:c3:61:1c:4b:f8:e6:
                    2b:fd:b1:e2:96:64:c6:b4:e3:73:f8:40:ce:a2:43:
                    76:da:94:1c:b1:27:b9:32:f3:17:9d:73:fd:a1:24:
                    0a:81:34:08:ab:55:94:b8:29:8f:d3:9d:29:aa:e6:
                    74:9d:46:33:57:f6:27:74:13:12:c6:7d:4f:ca:9f:
                    b4:7f:6f:6b:b6:4e:a7:28:96:d9:f9:81:29:a7:5b:
                    74:06:d4:90:a3:68:10:b9:a3:1f:13:68:8b:c8:10:
                    ac:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:0A:5A:96:4E:76:0C:14:F7:75:12:D3:2F:53:DC:73:6D:2C:96:0E
            X509v3 Authority Key Identifier:
                keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:22:62:0f:52:a0:92:aa:8d:22:93:d8:3c:c7:c3:86:54:
         15:a6:b5:e3:1a:5d:d9:85:85:31:dd:5b:d3:e2:8e:a9:38:6d:
         06:3b:4c:ba:1d:07:fb:c1:3d:cd:22:69:86:47:92:1b:f9:be:
         13:c9:47:27:f8:50:16:51:12:82:35:c8:c1:93:ea:1e:9e:8c:
         01:4d:0f:0e:f6:cd:b4:8e:8e:1d:14:c5:ca:dd:69:c7:e1:59:
         72:89:45:50:3e:21:86:75:86:69:d3:bb:f5:77:bb:1a:f0:83:
         ad:c7:10:df:eb:49:22:4b:92:02:c2:dd:42:92:12:1a:32:d6:
         ee:c4:15:76:7e:4e:50:29:9f:f6:50:22:57:3b:b0:d4:1e:04:
         3b:24:07:04:b7:55:72:97:a2:14:29:15:71:c2:14:38:21:12:
         8e:71:ff:7e:ca:c5:fc:b5:fa:20:d0:2b:08:44:1d:5d:0e:79:
         f1:0f:93:05:2a:c0:85:01:fa:0d:84:54:37:b6:21:84:d4:21:
         5e:f0:33:5c:8c:43:37:00:b5:21:e0:c3:e4:ce:16:6c:34:bb:
         7b:21:b4:7c:06:8d:a8:c3:08:8b:98:a0:27:e0:d8:b7:50:0d:
         8e:26:3d:22:32:24:8d:d8:ac:31:e6:ad:43:26:fa:3d:4c:54:
         e1:ad:7a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:06 2025 by rpki-client