Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
File:                     scIIojstTYe-k_idUyvG9EkIgZs.mft (raw, json)
Hash identifier:          KV3ynzYO35dLeSEo7dJEZvy5Cx7xxvL6rq8U0bfFkyw=
Subject key identifier:   21:40:6F:AD:CA:B8:E0:8D:4D:0B:EB:4D:7F:C3:5A:CA:7A:FC:01:7C
Authority key identifier: B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B
Certificate issuer:       /CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
Certificate serial:       0194BCE078161817525BC0AE1A92BC5D52EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft
Manifest number:          088E
Signing time:             Fri 31 Jan 2025 15:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:14 +0000
Files and hashes:         1: St1eW7huW5NWmrTlCcZNOVav4YY.roa (hash: L1r59p9it1NHOb7n3iknNAhhpFyt7umgYxP2fwKVRnQ=)
                          2: scIIojstTYe-k_idUyvG9EkIgZs.crl (hash: t1aDLzXZaVjoB5E7zh2IQU9O4KgJGr/zbFlUv20CRI0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:78:16:18:17:52:5b:c0:ae:1a:92:bc:5d:52:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c208a23b2d4d87be93f89d532bc6f44908819b
        Validity
            Not Before: Jan 31 15:00:14 2025 GMT
            Not After : Feb  1 15:00:14 2025 GMT
        Subject: CN=21406fadcab8e08d4d0beb4d7fc35aca7afc017c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:25:4c:2c:ae:62:75:09:eb:33:bc:84:da:3b:
                    29:a0:e7:a7:a6:64:9b:3c:21:ca:d2:05:97:d7:f0:
                    7d:49:ae:52:1a:0a:e3:23:ad:43:73:26:7a:3e:05:
                    d1:eb:c9:5a:eb:03:53:87:8d:61:ff:b2:45:e2:21:
                    d8:71:20:27:38:7f:32:80:a8:c4:29:df:c6:36:ea:
                    e5:16:d6:49:7b:34:c4:7b:8e:0f:9a:87:b0:5b:33:
                    74:c8:dd:64:43:43:a6:8f:95:d7:33:a5:6f:b7:dd:
                    90:0c:c6:60:14:59:a9:b6:5f:31:67:69:9e:4c:46:
                    3f:8b:6c:02:2a:19:3e:29:7f:16:ce:f5:01:bd:f3:
                    f8:8b:72:e8:21:99:5e:6d:11:71:2f:43:a7:97:3d:
                    06:7e:02:2f:2d:75:5f:38:a6:77:97:00:55:9e:ae:
                    30:f5:f5:6d:01:3f:54:d2:57:01:0f:a6:5c:8f:98:
                    be:92:b9:c3:9e:6c:b1:a1:ac:e8:ea:b7:3f:81:6f:
                    ce:d8:1e:2c:61:bf:9f:85:a6:f4:1c:a9:0d:ad:69:
                    6a:01:c3:6c:08:5b:5b:71:dc:26:40:2f:c4:f6:73:
                    4b:3f:8a:f4:8a:de:9f:89:0d:8f:2d:94:3d:79:1b:
                    65:d9:46:f1:17:6f:44:ff:ef:8e:09:89:59:d9:36:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:40:6F:AD:CA:B8:E0:8D:4D:0B:EB:4D:7F:C3:5A:CA:7A:FC:01:7C
            X509v3 Authority Key Identifier:
                keyid:B1:C2:08:A2:3B:2D:4D:87:BE:93:F8:9D:53:2B:C6:F4:49:08:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/scIIojstTYe-k_idUyvG9EkIgZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a565fb-50bd-4bb6-875c-0e2bbd4337aa/1/scIIojstTYe-k_idUyvG9EkIgZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:2b:89:ed:c7:7d:88:6f:19:33:74:f2:2e:03:60:f9:36:
         18:a6:a5:0b:0d:67:ad:a9:f7:75:4d:29:ce:ff:57:53:9e:1c:
         be:24:3a:6f:16:65:f8:7b:e8:ff:a5:b7:f9:61:46:0c:bf:04:
         6b:9c:43:00:37:f7:8e:9c:86:f0:10:09:c3:57:94:49:26:95:
         1c:2d:44:e5:8c:5a:9f:c7:03:d7:97:15:56:b4:4f:23:02:fa:
         ad:28:28:5c:a9:16:bb:39:1b:65:76:de:c0:d5:c9:75:d2:31:
         02:99:4b:97:4a:39:c3:68:0a:3a:55:eb:79:6a:30:ae:8a:c2:
         4f:4d:b0:df:95:25:35:fe:16:c1:57:e4:7c:8e:5a:2e:f6:f8:
         30:07:34:0e:b1:b7:ce:94:3e:6c:04:0a:1c:8a:3d:e4:23:fc:
         4a:98:82:a4:55:bb:7b:a0:fa:10:d9:67:f8:26:52:95:db:ff:
         92:9b:d1:01:74:64:ef:33:ac:d6:3a:fe:a4:f2:8c:fc:95:f7:
         65:a5:e9:e4:df:82:65:0b:f0:54:49:64:c8:76:70:06:f1:6e:
         f6:4d:b2:ca:ad:82:20:61:b6:64:97:f7:55:00:92:41:3d:2f:
         6f:ce:c9:db:9b:eb:2a:3a:5d:ec:92:00:c0:05:68:2d:a4:0c:
         fb:72:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:23 2025 by rpki-client