Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
File:                     B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft (raw, json)
Hash identifier:          jzzBF6BipfL2QH1mMMRbbEQYPPpgc4i8QbqHfI7uKI4=
Subject key identifier:   30:C2:62:DD:1E:2A:46:FD:75:30:C3:CF:A1:F3:E0:9B:8C:F3:2E:9C
Authority key identifier: 07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66
Certificate issuer:       /CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
Certificate serial:       0194BBCE1C0D46BFB9CBB2DD635D0BC4D29D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft
Manifest number:          0B0D
Signing time:             Fri 31 Jan 2025 10:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:34 +0000
Files and hashes:         1: B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl (hash: wUmwGJ+g0EbK3zP38gNlJyfsbz5OeFwnUCIVbnpA7AE=)
                          2: iP-SKYMlS2lzoYdf9k-IY95BiIU.roa (hash: y3r4nf2YS5R0GgEpIX4QQg5XE7ABIRh22yt4DkGX/UA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:1c:0d:46:bf:b9:cb:b2:dd:63:5d:0b:c4:d2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d64daef339e6fdae644db1b20bbf54e67e5d66
        Validity
            Not Before: Jan 31 10:00:34 2025 GMT
            Not After : Feb  1 10:00:34 2025 GMT
        Subject: CN=30c262dd1e2a46fd7530c3cfa1f3e09b8cf32e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:81:40:4c:c4:4f:d5:d3:5d:f4:b3:80:b9:10:
                    fd:f5:07:50:4c:99:ae:43:c3:a1:ea:da:35:15:d0:
                    3e:00:15:da:08:03:ff:82:69:0d:92:04:7b:fa:af:
                    c9:c5:44:f5:0d:c1:00:66:db:6c:3e:57:da:77:24:
                    b9:be:b0:5c:f5:96:b5:6a:c7:b7:be:e6:54:39:6a:
                    e0:e1:7b:15:96:36:d9:2f:6d:d5:3d:7b:38:92:fe:
                    8b:bb:35:75:3e:cd:89:70:70:01:ac:d0:ba:01:21:
                    a9:f0:01:e2:b9:31:60:77:0d:c4:55:b9:c6:be:ea:
                    43:c9:5c:06:ff:d6:ce:8c:26:1c:1d:04:74:a9:72:
                    1d:12:ce:41:40:8a:09:9e:9d:24:1b:81:83:c1:f1:
                    e7:54:38:13:0f:6a:8c:ef:c1:83:01:ed:59:31:23:
                    ee:d8:09:6e:6f:9c:53:18:f2:fb:0b:ad:f8:1a:ff:
                    11:d8:e5:2b:a0:99:30:fa:9b:17:0a:60:77:4f:b6:
                    f7:09:0e:85:2c:d0:53:fc:9a:7e:17:e4:50:a1:94:
                    f6:22:dd:b0:9f:c8:a0:f7:d1:c3:c4:24:5a:9f:0f:
                    7c:11:c0:de:dc:0c:04:e2:be:8a:d3:64:6a:78:2f:
                    e0:a7:34:ba:f6:49:4c:57:04:f8:96:3f:ff:11:a9:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C2:62:DD:1E:2A:46:FD:75:30:C3:CF:A1:F3:E0:9B:8C:F3:2E:9C
            X509v3 Authority Key Identifier:
                keyid:07:D6:4D:AE:F3:39:E6:FD:AE:64:4D:B1:B2:0B:BF:54:E6:7E:5D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d7fd2c-95a9-4c09-9e47-827f9648c022/1/B9ZNrvM55v2uZE2xsgu_VOZ-XWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:7e:d5:87:d5:d2:17:44:d3:5d:e7:44:fe:e2:f2:25:fe:81:
         df:ce:e9:d5:b8:b9:83:92:3d:a2:fd:3b:3f:aa:68:e8:51:3e:
         7f:b2:50:3a:17:5e:98:55:61:0a:c8:96:a7:f9:a1:9c:aa:6e:
         36:cc:77:ef:d6:bf:8e:a6:75:da:ae:ef:3b:50:e6:f3:9e:79:
         18:62:e9:d0:4c:37:da:d9:69:93:0d:18:23:4b:dd:d9:81:77:
         0d:b2:1f:80:0b:d0:25:3a:ab:e7:64:02:24:43:78:93:2b:44:
         af:fd:03:c5:e0:b3:65:3f:e0:37:f7:b4:cc:89:24:95:1b:9b:
         25:bc:08:89:ba:49:da:79:5e:6f:fe:ad:ef:57:30:17:a8:ec:
         91:8a:82:43:87:24:93:9c:8d:48:40:46:4e:fe:fb:c7:1f:ad:
         12:e2:a6:e1:ea:30:22:f4:28:b1:ef:1f:9b:fd:a5:22:08:52:
         fb:75:4f:d9:96:fb:d8:99:0d:3c:8c:06:99:06:fb:bb:24:6e:
         1a:57:c2:b4:50:a2:86:86:39:a7:04:5b:b7:e0:aa:a5:05:9b:
         b4:1c:c9:fb:7a:e9:bb:6f:33:6c:b5:93:4f:09:62:53:a7:ce:
         be:99:d7:2b:7c:9c:ee:97:01:37:b6:eb:7a:92:26:57:53:6e:
         42:98:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:11 2025 by rpki-client