Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
File:                     Rmv4di_kLwoT2n0hypbEMBUA68w.mft (raw, json)
Hash identifier:          YKdBbfIQDY0vbFdlUMXY6kmHY9H1d8Wfg08/Cpz95Ho=
Subject key identifier:   68:A5:12:5B:64:D2:F8:74:5E:6E:C4:05:D6:52:B7:CD:FA:BC:4F:C1
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       0194BC0527DB55D251A4ADC5A42F572686EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft
Manifest number:          04A5
Signing time:             Fri 31 Jan 2025 11:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:41 +0000
Files and hashes:         1: Rmv4di_kLwoT2n0hypbEMBUA68w.crl (hash: HSSlgSJibMMQ3JCUvYKPc4PUCmN97AkL/AoWQHLJC18=)
                          2: ys86q5jXiENW-WW7AK-nkVinoug.roa (hash: PK1sfbQN38TktvS2UC6cxV1eHaxPEymB6l0sa2UeYfk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:27:db:55:d2:51:a4:ad:c5:a4:2f:57:26:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Jan 31 11:00:41 2025 GMT
            Not After : Feb  1 11:00:41 2025 GMT
        Subject: CN=68a5125b64d2f8745e6ec405d652b7cdfabc4fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:5c:b2:66:d2:f3:0a:35:af:91:b9:d0:1a:
                    96:0b:2e:e4:a5:10:b9:b2:ba:44:7d:86:dd:59:bb:
                    14:a4:26:1e:18:ee:98:3a:24:43:52:26:9f:65:d8:
                    16:71:15:0e:6f:9f:1c:05:b4:e0:64:41:60:2a:d4:
                    81:7f:19:22:16:4b:52:99:06:75:7e:56:7d:29:57:
                    0d:57:1d:f7:b6:ba:48:17:4b:ee:bf:87:c3:02:42:
                    00:c7:dc:47:a3:cd:13:73:d9:1b:1d:7a:01:8c:3d:
                    66:25:61:87:e8:c0:b5:ef:42:9f:3a:bf:77:04:b7:
                    64:a8:1e:15:47:7b:22:5e:70:0d:11:f8:98:a9:31:
                    23:ae:db:e9:8c:d5:49:dd:4e:60:45:04:0a:9d:b0:
                    e0:6f:25:ba:eb:93:61:e2:95:61:e3:d6:81:5d:9f:
                    4f:a7:be:6e:00:92:a6:6c:8a:1e:93:24:1f:11:f5:
                    da:33:b2:30:1d:a2:9d:c6:a7:bd:4d:f3:da:2e:f4:
                    f0:94:47:f6:07:82:ad:99:92:d3:4e:36:b0:38:9e:
                    cf:e7:59:eb:be:64:d1:8e:60:bc:e2:04:96:3f:6e:
                    03:4c:d7:24:c7:cc:7b:81:1d:70:2c:cf:a9:d4:b8:
                    1b:cd:9c:3b:18:ff:5c:90:f4:d6:04:df:9b:bc:d5:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A5:12:5B:64:D2:F8:74:5E:6E:C4:05:D6:52:B7:CD:FA:BC:4F:C1
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:97:2f:9c:f7:bc:de:06:4b:d5:26:79:9d:4f:f4:33:e3:0f:
         36:92:f9:c3:b2:4b:c1:6f:e7:3a:45:c6:72:ba:a1:fc:05:36:
         8b:ad:8f:ab:44:e8:80:e5:4c:24:0b:da:0c:9a:63:8f:46:13:
         86:b0:4a:e2:a2:c5:b3:7a:7c:7b:1b:bc:5b:c4:b6:88:fb:a7:
         a6:08:e8:7f:47:3b:81:16:65:6c:67:db:5f:30:ed:f3:01:ed:
         f8:32:8f:6a:64:7c:60:7d:cd:16:ed:ba:b5:f5:ed:f6:2d:63:
         05:77:43:38:d3:35:10:f3:44:02:a2:fb:68:f2:61:37:22:21:
         7b:a4:ff:2e:0f:59:9c:17:43:3b:78:ed:99:b2:5a:6a:97:72:
         f3:1b:4f:48:1d:22:1f:b2:91:f7:df:99:35:03:cf:14:0a:af:
         2f:a4:17:78:5c:e1:f4:58:4c:90:5b:34:d3:13:36:5c:c1:00:
         9a:24:47:51:ca:fb:c3:bc:39:12:1f:7c:71:87:84:69:29:4f:
         e7:83:67:a4:4e:23:dc:63:97:98:a0:83:4a:9b:ff:63:8e:12:
         54:83:11:7b:ec:f5:9f:a8:49:b6:9b:c5:43:fe:ba:e0:7a:39:
         e9:ea:52:26:ea:2c:ff:b6:05:95:29:be:f1:0a:7e:19:f6:c4:
         21:61:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:42 2025 by rpki-client