Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
File:                     B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json)
Hash identifier:          3JLulTCyCwp9+1R6zO1d9s/dQc3y/QKOxktpF+LP3/Y=
Subject key identifier:   94:9D:AC:05:9E:4B:3E:E8:C0:24:28:44:5C:03:6F:2E:00:5B:96:F8
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Certificate issuer:       /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial:       0194BCA99B0094553E2B4AD3BB40EA7D5475
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 14:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:19 +0000
Files and hashes:         1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: 2jgKXKdEa9L4ySggsqNYp0Z1J8FYlsEfvAmhsIo3vxo=)
                          2: bWkzDjoyXp1j-qZqgWYsRC5CuDw.roa (hash: +Se3L4OH81c744mhhDr0vSFFcNI0VPir7WMuZ7dt6OY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:9b:00:94:55:3e:2b:4a:d3:bb:40:ea:7d:54:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
        Validity
            Not Before: Jan 31 14:00:19 2025 GMT
            Not After : Feb  1 14:00:19 2025 GMT
        Subject: CN=949dac059e4b3ee8c02428445c036f2e005b96f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:48:9d:fc:4d:aa:9d:2c:c9:0a:84:ed:39:
                    92:8d:db:25:0c:72:90:fe:77:2d:34:66:c9:47:d3:
                    fd:92:77:25:8e:04:2e:cd:29:14:93:fc:d7:f4:53:
                    14:e4:0a:c4:cb:0b:02:0e:5d:6c:ce:c3:13:50:a7:
                    5e:ca:4e:71:1a:b2:7a:c9:35:c7:71:f8:50:5c:e4:
                    3b:ca:b6:fc:8e:86:40:c5:a0:64:b9:44:67:6f:1d:
                    58:38:e9:b2:bd:02:29:d5:30:d9:a5:dc:2d:91:34:
                    ba:33:35:df:f5:b4:91:e5:3a:3e:cb:ac:69:42:51:
                    e7:06:73:4e:47:a6:5b:c5:ec:3f:ea:23:75:93:fd:
                    b2:e7:87:b3:ae:4f:ed:25:6b:d8:83:66:29:3a:b6:
                    99:89:c9:cc:7c:b7:b9:07:3e:9b:77:91:78:82:4d:
                    0c:b8:f5:2e:3a:7e:41:7d:13:ff:c5:fd:41:74:f7:
                    3f:d3:ac:f9:a5:61:45:c6:60:3f:5c:40:76:c0:e3:
                    2b:14:8a:ec:15:d0:49:bd:8c:39:49:a3:61:2c:f0:
                    2f:5c:46:72:13:b1:b1:a3:83:37:a8:a4:29:3f:aa:
                    5f:88:6b:50:2e:a0:31:7a:c0:fb:5a:a9:4c:bb:6c:
                    5e:4c:41:18:7f:2b:a9:60:0e:8e:31:bf:2d:b9:04:
                    3d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9D:AC:05:9E:4B:3E:E8:C0:24:28:44:5C:03:6F:2E:00:5B:96:F8
            X509v3 Authority Key Identifier:
                keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7c:90:d3:bf:45:76:8e:36:d9:7b:91:3c:1f:da:5f:76:b6:
         01:f4:ee:5d:1c:00:23:46:ad:07:78:25:bc:3f:f6:ae:91:f4:
         0e:ac:ca:b5:c6:96:5d:e3:01:4c:5b:fe:e0:83:30:6e:06:6e:
         89:db:f8:9a:e2:6a:41:7e:cb:78:52:d3:90:16:d5:48:d8:9c:
         58:55:ad:b7:f5:81:7f:74:2e:0f:41:0e:18:19:8a:6c:c4:0a:
         09:ae:fd:95:ea:87:6c:97:7c:02:3b:3b:3a:a0:f2:08:2a:3a:
         22:f6:40:93:cb:4d:eb:47:7e:49:70:80:5c:da:11:b6:c6:f2:
         2b:d1:7e:c6:65:c1:45:8f:b1:b2:60:27:33:e6:82:83:2e:80:
         6a:57:b8:36:6e:af:dd:9c:68:a2:6c:20:2c:cd:6c:97:a7:4a:
         57:8a:dc:da:a1:da:df:c2:5b:af:1b:1a:e0:da:33:ac:b5:b0:
         ef:c3:19:10:60:80:88:91:cc:48:f0:e5:42:16:e1:81:38:52:
         73:86:88:e4:90:c0:b8:e0:c6:f9:15:1b:3f:18:da:e9:5f:2a:
         5d:46:2e:b0:91:49:fa:43:e8:b6:a0:50:bd:62:ad:92:eb:0b:
         40:22:3f:b9:4d:cd:8d:78:53:8a:68:3d:ef:68:94:4f:e1:47:
         ce:da:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:41:53 2025 by rpki-client