Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
File:                     vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft (raw, json)
Hash identifier:          K3YQJ60WO/9BHLbGNn/BbCoXxZMKnBeLBdKJoBqnnMk=
Subject key identifier:   16:2E:8D:CC:63:D9:25:4B:E3:02:5B:59:4B:AB:F0:C1:71:25:A5:34
Authority key identifier: BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A
Certificate issuer:       /CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
Certificate serial:       0194BD4E5BCC922DB543285B3CD87C9FB4AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 17:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:16 +0000
Files and hashes:         1: Ri56NVXWUQxOwe5kNmjRuN3ToFY.roa (hash: hHbE1YyHNSokMPr6cGdLs8yJ8XQBnuzocmNz/kOlPb0=)
                          2: vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl (hash: qTDPj1H1rw6l/JM8kkoXE0Aan/Sx6DdSKbvbc7kIX+0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:5b:cc:92:2d:b5:43:28:5b:3c:d8:7c:9f:b4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa363346c12f83c60d7b5cfdefecd3e7ff0e2a
        Validity
            Not Before: Jan 31 17:00:16 2025 GMT
            Not After : Feb  1 17:00:16 2025 GMT
        Subject: CN=162e8dcc63d9254be3025b594babf0c17125a534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:e4:f6:a9:9e:b1:8f:92:5c:37:e4:57:d0:
                    84:f5:8c:bc:5a:51:8e:42:dd:74:99:d0:a4:af:c4:
                    02:90:ff:d8:34:f1:e0:ca:c0:30:1c:15:81:36:4c:
                    7c:e1:5c:3b:8a:8d:9c:bd:86:7b:d9:02:a1:08:11:
                    f4:12:67:d9:45:f4:b3:50:b4:87:d0:33:e0:50:8a:
                    56:74:ae:18:0d:5a:45:6d:ae:a1:6f:9b:fc:f6:7a:
                    ca:d7:69:22:88:d7:c0:a7:fa:8e:96:cd:84:76:ed:
                    c4:5e:4d:42:f2:69:4a:e5:0e:a9:02:52:a5:2c:37:
                    15:59:be:30:ee:6f:e8:12:86:9f:11:44:e8:1a:d6:
                    f5:3d:dc:af:1a:3d:88:25:f7:22:8b:e2:a4:9e:5f:
                    d4:f2:50:10:31:79:eb:de:ff:89:9b:7b:8e:57:47:
                    41:2e:d4:ba:7d:78:8b:a8:ec:78:44:0f:98:75:bd:
                    e3:2e:0a:43:7b:f8:19:96:54:97:75:35:fb:a4:a8:
                    47:81:30:2b:1d:a3:a0:8b:9f:53:d2:f7:1f:12:ab:
                    01:f7:ae:9c:8d:0a:21:ab:1f:2b:06:a0:2a:03:7f:
                    cf:86:2a:e4:7a:c4:c2:f1:20:ef:20:41:b0:64:98:
                    53:03:30:2d:6d:08:06:c1:79:5c:57:f0:bc:cb:e3:
                    06:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2E:8D:CC:63:D9:25:4B:E3:02:5B:59:4B:AB:F0:C1:71:25:A5:34
            X509v3 Authority Key Identifier:
                keyid:BD:FA:36:33:46:C1:2F:83:C6:0D:7B:5C:FD:EF:EC:D3:E7:FF:0E:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo2M0bBL4PGDXtc_e_s0-f_Dio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ddf06e-db8b-4589-a656-1716146644e6/1/vfo2M0bBL4PGDXtc_e_s0-f_Dio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:5f:3d:d7:ff:4d:4c:9f:67:aa:33:e6:56:28:fd:a2:7f:
         40:de:1b:57:3f:27:5f:0b:ed:3e:ac:01:f0:f6:72:d3:d3:85:
         bf:be:89:08:f1:a7:95:c8:ee:df:cc:76:a9:94:29:7d:fd:d2:
         03:c6:8a:a2:ac:c5:f1:6d:2c:bf:f7:d8:67:8a:cb:0a:3b:97:
         46:13:d7:69:e0:de:3c:94:f7:cd:b6:7b:4d:4c:d1:bb:31:47:
         09:e5:cf:95:c7:4a:1b:2c:19:d7:cc:7b:d8:01:62:a7:83:a7:
         f0:e7:c7:c4:0a:a6:79:6d:b7:b6:73:6f:5b:d2:80:07:dc:d1:
         85:3a:c7:67:cf:97:9d:d1:50:a5:45:6b:69:88:1c:a1:4b:f8:
         08:77:67:a6:62:91:29:25:34:af:e2:dd:f0:97:f2:89:29:3e:
         63:30:2e:ff:c3:2a:98:37:2d:98:55:79:fb:db:4f:fc:c1:4e:
         33:73:96:fd:b7:fa:c8:8a:1f:57:57:95:92:8f:9b:d9:d4:cc:
         7e:5a:81:5f:24:58:a1:f3:41:51:62:62:13:af:39:bd:b5:c5:
         ef:02:f9:0e:9e:5e:bd:59:28:a2:d0:5e:df:63:9e:f3:0b:67:
         38:16:a7:a0:85:bc:0e:03:3b:94:3a:fb:5e:b1:ee:e4:77:a1:
         23:40:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:11 2025 by rpki-client