Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
File:                     MC0R6FJhV0AHazKBuK_w-sXKLzM.mft (raw, json)
Hash identifier:          Gsir3YIYn28/Wvhr1Nr355xzhZqGvu3FZH6lBD/EkD8=
Subject key identifier:   CE:17:F2:FF:BA:1B:F9:D6:23:C9:C5:63:DD:C6:4C:6C:F7:F6:A7:84
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Certificate issuer:       /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial:       0194BC3C8E8A39E613245937ED36B5112135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
Manifest number:          0F3F
Signing time:             Fri 31 Jan 2025 12:01:12 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:12 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:12 +0000
Files and hashes:         1: AV_h3jqDqBv8GTowG5NZT83IRVM.roa (hash: 7I92tp7yKWv9nRYHQ0pF0g4dedaK+rFfmKLNQHVUe28=)
                          2: MC0R6FJhV0AHazKBuK_w-sXKLzM.crl (hash: Z62eId1VEa8DpV/KnSK6AOYkMxluR5H8dFZx2N0b+jE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:8e:8a:39:e6:13:24:59:37:ed:36:b5:11:21:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
        Validity
            Not Before: Jan 31 12:01:12 2025 GMT
            Not After : Feb  1 12:01:12 2025 GMT
        Subject: CN=ce17f2ffba1bf9d623c9c563ddc64c6cf7f6a784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:10:93:dc:98:8c:85:75:e9:7d:36:ba:48:
                    8b:b7:2e:96:6d:84:13:3a:7d:b0:54:f6:1b:83:1e:
                    d3:f5:db:f6:9e:fd:8a:13:e2:bb:53:11:68:aa:dc:
                    fc:f9:61:b7:9c:eb:48:7a:8b:f4:b7:1d:b6:a7:0a:
                    ee:1f:91:05:64:7d:3f:1c:fa:1b:f6:63:21:cf:44:
                    ef:44:78:fb:da:6b:d1:ea:5c:b3:1d:24:60:18:bc:
                    ed:5d:37:ed:a7:7a:60:59:89:7c:e0:87:8d:64:73:
                    39:ae:1b:76:d0:4a:4d:dd:fd:e6:81:8f:b3:93:84:
                    72:ef:17:7c:d1:f0:3b:80:10:04:56:41:21:54:1e:
                    9f:fc:36:db:9b:d1:06:b3:d8:b7:10:29:69:1c:46:
                    c6:e7:1e:da:ae:06:7f:a3:ee:0d:7c:e7:d8:da:50:
                    25:c6:23:73:9f:f2:96:ed:cc:c5:13:d6:72:4a:e7:
                    ec:0a:d6:44:1c:be:34:24:0d:e5:02:e7:02:62:ad:
                    1d:42:ad:ce:b4:c3:96:c6:20:b9:eb:59:3d:a3:ca:
                    47:35:03:ee:55:4b:f6:1e:0f:84:12:c5:cb:00:03:
                    42:de:42:2d:72:36:c2:ea:e8:9d:1a:3b:c0:8c:cd:
                    6b:72:7a:5a:d9:a7:e4:3c:bc:6a:0d:53:4e:f1:01:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:17:F2:FF:BA:1B:F9:D6:23:C9:C5:63:DD:C6:4C:6C:F7:F6:A7:84
            X509v3 Authority Key Identifier:
                keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:68:de:59:67:14:9f:f7:43:65:7e:c8:53:d1:dc:e2:5f:
         11:e3:91:bf:77:73:0d:91:f9:11:5b:e9:7e:cf:db:8b:2c:43:
         68:53:f8:ae:b2:d8:47:a3:eb:51:0b:2e:50:8f:94:d6:8d:14:
         c0:71:42:c8:a8:d8:d1:f6:e2:06:6e:70:a1:39:56:75:f9:56:
         ba:ae:a3:e8:4e:73:27:c5:56:92:ee:26:4d:4b:a4:26:6c:15:
         bb:44:12:13:fe:6c:42:f0:06:a3:03:61:29:bb:0c:72:67:a1:
         33:c4:1b:44:30:da:77:bc:98:22:35:44:45:e2:11:84:a1:06:
         fc:c7:93:06:73:42:66:0c:3b:12:48:c3:c4:b6:99:e6:de:76:
         2e:d4:66:fe:dc:ad:e4:f6:81:e3:49:19:17:6a:5d:1c:aa:68:
         c5:53:41:ad:0c:be:16:5f:68:de:ba:55:39:ee:06:c1:ab:a3:
         6e:47:8d:8b:3f:57:f1:ea:00:af:d7:51:8c:10:9c:46:88:0b:
         ff:bd:41:67:79:42:5b:c6:82:27:ff:e0:e7:f5:0f:c4:98:f8:
         93:2b:c5:a1:f5:3b:41:66:9c:8f:e0:37:a5:bf:1c:50:74:06:
         a4:31:fe:89:c1:7f:b7:4d:a6:1b:44:a9:f3:f2:c4:b8:3a:e4:
         ea:25:f1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:38 2025 by rpki-client