Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
File:                     u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft (raw, json)
Hash identifier:          B6fHFJoxVHvGubl+D1eWgw6/DWfb65Lig1Dk2w3gCQw=
Subject key identifier:   05:DF:21:AE:B2:71:68:06:07:25:47:78:17:0F:3C:43:D5:25:B7:1B
Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D
Certificate issuer:       /CN=bbf3a257f99528c3a924d269d1af438185c2006d
Certificate serial:       0194BD4E749B6CA1877C4917A0316277DE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft
Manifest number:          91
Signing time:             Fri 31 Jan 2025 17:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:22 +0000
Files and hashes:         1: 8Ul6EUbN8nuEp2NFtsX4pXAa4zQ.roa (hash: u/XlwlTOr3fAGl4u3pexiEWOyuIeoTxqTTJ1V4qZ94U=)
                          2: U35k_6mHZDW7ja-KdEmuh0b9HC8.roa (hash: /YyzICWvOSy7AUnfxntu8KYaBOI2O+xiSNMqk4LtmgY=)
                          3: ipGUG_FnLVv5_qna9Q8OOQESFEo.roa (hash: bBouB+XiilYfz2SXBgYGlCjeKLkIpw0oZUoVzWF6Um0=)
                          4: u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl (hash: KrWGVIqdF7j3Hhhjy43y21v2xDbdigEVZYdrbGTgZe0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:74:9b:6c:a1:87:7c:49:17:a0:31:62:77:de:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d
        Validity
            Not Before: Jan 31 17:00:22 2025 GMT
            Not After : Feb  1 17:00:22 2025 GMT
        Subject: CN=05df21aeb271680607254778170f3c43d525b71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:dc:16:81:a1:0a:22:2a:6b:22:73:21:49:
                    32:82:17:7b:e3:2d:29:72:c5:31:22:61:f1:14:04:
                    61:2e:92:72:80:7e:3c:73:8c:13:9e:a6:5b:10:e5:
                    77:7b:b2:f3:c2:9d:54:92:c6:b0:c8:24:5f:63:3a:
                    36:90:69:3d:5a:e4:6a:bd:de:2c:05:89:00:f7:33:
                    2d:7e:8e:d7:4a:10:ee:1e:b0:f6:0b:35:3c:cc:15:
                    19:22:a8:eb:2a:d6:63:88:6e:5b:7a:aa:3d:b6:2d:
                    12:b9:d5:29:2c:7f:c7:93:93:45:e4:8d:f9:77:7a:
                    9b:7f:62:94:75:17:6c:96:51:f4:dc:bf:ea:09:3d:
                    5b:d2:e5:c4:db:1f:2d:41:7b:9e:8e:d1:bd:8d:06:
                    d0:09:46:ce:94:6c:84:6b:56:6a:8b:d9:13:1b:86:
                    bd:f1:81:1a:f2:4b:2e:a3:a5:84:6f:c1:93:de:b8:
                    cb:b4:66:be:a7:a2:c8:66:b5:44:87:23:89:8f:b0:
                    e5:07:39:85:dc:4b:b3:94:67:0e:5c:a1:ab:59:4d:
                    00:42:e8:34:1d:4c:57:5b:0c:30:d4:5d:fd:73:53:
                    0f:65:cf:90:1d:18:fb:3f:b7:0a:57:bd:77:e2:f6:
                    24:4d:db:e1:bb:2f:f1:87:04:59:c8:e6:11:2e:6b:
                    d8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DF:21:AE:B2:71:68:06:07:25:47:78:17:0F:3C:43:D5:25:B7:1B
            X509v3 Authority Key Identifier:
                keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:51:2b:99:14:91:19:97:00:e6:9d:41:a9:54:8a:e2:b7:
         7d:2b:e9:4b:c5:ff:8e:79:b1:e2:a4:90:10:78:7d:01:30:b4:
         0f:3d:c6:40:ec:8a:ca:66:e3:1c:b7:24:bd:5e:af:ea:e2:22:
         dd:5f:c0:e7:9e:fe:10:90:3c:1d:4a:7c:10:52:f2:a8:d9:cb:
         18:b2:da:6e:b1:85:d9:e6:f1:a8:35:ad:70:65:2f:4d:17:73:
         bf:34:1e:d2:7e:77:dd:f9:f1:de:25:a8:27:a0:89:2b:e0:17:
         3a:64:a7:e1:75:f6:b8:6d:d2:69:4c:1f:21:8a:d3:44:20:da:
         43:3f:f2:36:d0:c8:b6:79:c9:bf:09:2e:7c:b2:1e:b6:dd:21:
         9c:64:2e:3c:ed:e4:aa:38:55:aa:f9:3e:1f:4a:d8:e5:6a:00:
         97:5f:33:dc:ec:c6:90:d8:db:92:9e:dc:8d:bc:3a:f2:70:71:
         af:d7:b7:69:1a:bb:47:ba:c7:1b:9f:ed:6e:f3:ce:a5:25:63:
         f2:6f:99:34:b0:40:9d:90:9a:85:27:d7:98:7e:f5:69:e2:8c:
         82:4d:05:0f:42:d9:ec:b0:48:84:6a:e8:5f:37:4f:ab:74:8e:
         d1:ae:04:bd:61:f5:90:f1:5e:6b:f0:97:bd:15:4c:93:2f:03:
         de:a4:4d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:32 2025 by rpki-client