Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File:                     bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier:          25oTMxtaFoKlnZM6vMVM9NGIRemXaqSpvB9Mwz7jYeY=
Subject key identifier:   B6:23:74:53:B6:41:7F:CE:9C:B2:82:61:D8:59:E0:19:AF:32:08:02
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer:       /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial:       0194BC3BC1D269D16448199A7B0CB6338C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number:          116E
Signing time:             Fri 31 Jan 2025 12:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:20 +0000
Files and hashes:         1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
                          2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: veQpbKILI8Z35613UAPJhY14XighsL+kQJ2bsbDGMqg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c1:d2:69:d1:64:48:19:9a:7b:0c:b6:33:8c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
        Validity
            Not Before: Jan 31 12:00:20 2025 GMT
            Not After : Feb  1 12:00:20 2025 GMT
        Subject: CN=b6237453b6417fce9cb28261d859e019af320802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:43:eb:0b:ff:a0:df:be:3e:85:e0:98:3d:
                    2e:f6:ab:51:91:4e:2b:cc:c3:0c:a3:34:8f:9b:9a:
                    20:21:9c:28:a9:69:a1:5e:6a:77:e5:22:e9:f6:0b:
                    92:bf:79:1e:91:df:31:51:e2:12:6f:42:f9:da:c9:
                    8a:27:4a:8e:16:89:c5:5a:bf:d8:37:1b:92:3a:50:
                    6e:45:38:64:57:b4:e8:a3:da:0d:86:10:5f:3a:57:
                    0b:ac:b4:98:8c:9f:79:64:c6:74:19:f3:f7:48:e2:
                    ec:80:9d:92:8d:a1:bc:14:11:35:52:95:d5:13:17:
                    58:47:94:a1:41:cb:3e:cc:3f:f3:b9:10:1d:83:d7:
                    88:38:af:f5:7d:fb:3c:19:ed:ca:80:be:ae:40:f4:
                    0a:1d:1f:e5:59:3b:3d:50:fd:bc:8a:22:97:74:f9:
                    60:32:8b:9f:0f:be:5a:e6:8c:26:36:2f:10:63:df:
                    3b:98:8e:53:d6:00:5a:0b:79:d0:2a:96:92:fb:1f:
                    ca:99:53:14:a0:4f:38:12:c6:6e:f1:23:b3:b1:03:
                    cf:11:c2:5f:bb:76:dd:10:18:3f:fe:76:b4:e5:9d:
                    9c:ea:04:a3:59:e9:39:45:9d:a5:a2:80:d8:a5:c1:
                    fd:24:b1:64:0e:9e:e4:01:7f:22:74:f8:61:08:58:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:23:74:53:B6:41:7F:CE:9C:B2:82:61:D8:59:E0:19:AF:32:08:02
            X509v3 Authority Key Identifier:
                keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:41:d8:a4:e9:84:e8:98:90:2d:cf:58:bd:be:55:69:26:0b:
         8a:f4:72:aa:e9:bb:74:1c:c9:d5:5d:33:45:0e:61:c0:37:be:
         4d:41:9d:47:e0:c8:72:d6:9d:11:71:60:6e:e3:43:82:95:44:
         12:df:07:21:3e:57:e9:e8:ec:0c:11:9a:0e:66:0c:60:b9:00:
         6f:1d:e4:fc:7b:f7:0c:8e:44:f3:da:f7:2a:42:ab:13:26:3c:
         50:fb:d9:b4:1e:d2:89:7a:65:a0:4b:7c:95:28:19:56:19:c1:
         e0:50:76:b7:2b:ae:75:6b:5c:39:78:8e:82:e3:ea:8d:96:a0:
         b6:b1:00:59:84:3b:29:94:ff:e2:df:be:dd:19:2b:29:92:98:
         5a:1e:96:15:0c:5d:98:b2:3d:a0:ad:39:df:3d:b2:1a:64:8d:
         22:d2:b8:89:bb:c0:26:eb:40:e2:58:38:00:98:87:7d:7c:5e:
         9c:f4:bc:f7:a9:61:4e:ab:fc:08:58:70:50:96:08:57:ef:c3:
         e7:40:ed:d4:da:2b:45:9a:a4:0c:75:1b:1b:df:9b:66:6e:f7:
         11:3a:ce:b2:c8:98:bd:3d:6b:8a:d6:bd:76:02:60:19:3c:c4:
         17:f5:da:ff:8d:d6:b1:5a:e2:a6:c1:20:bc:ad:ce:4f:f0:60:
         55:6e:e2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:13 2025 by rpki-client