Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          rNyFNEZl1TnO+ff8wZE/txDTrgeTlNKMzVMPwC+5ZLY=
Subject key identifier:   18:EC:3C:EC:13:48:13:B0:62:F9:B2:92:A7:6D:80:D2:AE:17:3F:37
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       0194BD4E652B8432D0F44202BD635C1386EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          1271
Signing time:             Fri 31 Jan 2025 17:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:19 +0000
Files and hashes:         1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: LNoOTkKKYORanApTeEP+/q3wXJRHMWUJR3Ho9AdLpSk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:65:2b:84:32:d0:f4:42:02:bd:63:5c:13:86:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: Jan 31 17:00:19 2025 GMT
            Not After : Feb  1 17:00:19 2025 GMT
        Subject: CN=18ec3cec134813b062f9b292a76d80d2ae173f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:39:2c:5a:99:c6:55:96:3d:9f:22:71:c8:
                    33:ed:18:b7:06:9d:c5:ca:fa:42:ab:64:42:21:12:
                    e3:71:e3:fc:35:7a:62:fb:5c:4b:d6:96:53:91:f7:
                    d3:dc:cb:3e:17:51:16:8d:a5:9f:91:d5:61:c7:24:
                    a3:94:1b:e5:90:f1:54:e7:77:f4:5d:32:5c:4c:85:
                    2a:68:a0:9c:ad:dc:c2:4e:9e:90:26:32:69:e6:5f:
                    04:87:4c:22:3d:d8:ef:7e:99:79:66:46:7f:64:81:
                    41:4a:cf:de:e8:b1:f4:78:cf:55:d8:f6:2a:5b:7a:
                    1f:57:a5:63:87:04:69:cd:4f:55:08:64:4c:bd:50:
                    47:fe:f7:c0:4e:eb:54:ce:70:4a:77:ae:90:a2:96:
                    f5:0f:a8:b5:8c:73:fd:09:40:72:d4:85:6e:9b:d1:
                    a5:bc:b9:db:ef:15:cb:66:9e:a7:b9:93:4d:e3:09:
                    bf:a6:c8:95:fe:d2:2d:67:a6:f7:e6:fe:d5:be:7d:
                    c4:49:ee:96:d4:fa:d3:a0:c9:7d:08:75:42:b5:2c:
                    a1:d4:b9:52:8e:d3:51:65:b8:b4:82:a6:63:4f:fd:
                    0a:37:df:38:7e:e1:76:4a:9e:06:b1:a8:88:9e:f8:
                    3b:2e:39:58:01:a9:a5:b5:01:f3:ca:87:08:dd:f4:
                    49:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EC:3C:EC:13:48:13:B0:62:F9:B2:92:A7:6D:80:D2:AE:17:3F:37
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:26:a0:2d:d3:09:57:9c:40:d9:1d:f1:3a:86:59:e9:dd:f3:
         23:04:fe:41:7b:23:8a:d5:13:b8:e9:ce:b4:64:2d:90:8a:b5:
         77:0b:6c:8e:ac:6d:c4:f8:ea:0c:3a:a9:ad:0d:54:53:ec:5d:
         c1:ce:11:f9:1c:7e:27:18:42:f5:ae:f0:49:74:6d:36:ed:d3:
         a7:e8:70:23:4d:db:00:19:10:b5:52:22:56:8f:8d:83:c7:55:
         89:a0:c6:20:ac:f7:27:e7:bc:8e:0f:4a:bb:29:8a:de:04:bd:
         d4:87:dc:3f:d8:50:0a:3e:b3:66:9c:25:6d:37:2c:6e:58:a8:
         4d:77:39:ab:f6:47:61:24:f8:3a:96:cd:1c:eb:a3:95:55:6c:
         c1:81:d2:01:56:5b:3a:69:af:94:8a:1d:57:89:99:39:c5:7a:
         0c:35:d0:eb:a6:2a:56:62:30:c2:ec:58:8a:71:4e:aa:ba:98:
         f8:c6:da:7d:8c:ef:79:a6:dc:f6:fa:18:20:7e:e0:b6:0e:fa:
         9b:04:f4:ce:6f:f5:28:22:d2:3a:a3:da:0d:d3:00:2f:1f:8f:
         36:c4:02:4b:a2:6b:5b:f6:61:11:d0:d7:f3:03:49:3d:6f:d5:
         0c:58:91:8a:b2:c3:87:91:fb:10:52:1e:b9:de:ac:7f:cf:e6:
         6c:98:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:12 2025 by rpki-client