Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          i/kYWbxpEmdR7nPCmEQ19Ut4R8tE3CBa9baEQ0dAeCY=
Subject key identifier:   01:BA:63:B1:52:A6:1A:6A:2A:3F:70:8D:AF:DC:0C:AE:F7:D3:2D:3E
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       0194BD85867715CC167C88ABE5F30C4197F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          0F98
Signing time:             Fri 31 Jan 2025 18:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:31 +0000
Files and hashes:         1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: wUhCPXfs99Xqb5w3eOFUIUjrCSZZvMcbOiHtcKscJRI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:86:77:15:cc:16:7c:88:ab:e5:f3:0c:41:97:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Jan 31 18:00:31 2025 GMT
            Not After : Feb  1 18:00:31 2025 GMT
        Subject: CN=01ba63b152a61a6a2a3f708dafdc0caef7d32d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ca:79:c3:fa:43:6b:d3:72:a2:e2:4c:39:a2:
                    40:69:2f:ed:e7:eb:dc:65:5f:38:7f:10:00:a1:2e:
                    3e:14:a9:4e:fc:cf:3b:94:fa:b0:34:b9:08:6b:35:
                    1a:0f:55:66:4b:22:91:68:92:4b:0c:0c:59:a0:e7:
                    d3:57:cf:c5:ba:24:26:62:cf:e7:6f:2d:9f:35:99:
                    40:a5:9d:e2:37:61:6a:f3:84:f5:26:8b:ec:9e:bb:
                    4a:2a:29:c5:9f:f3:28:3d:e5:54:22:ab:1a:93:cc:
                    cb:d9:39:73:0b:62:da:f2:26:7f:1b:27:99:86:6c:
                    35:30:d2:1e:af:f4:2f:5f:57:94:e6:e7:82:67:cb:
                    aa:56:d3:e5:f3:e4:b2:09:97:61:44:56:cb:4d:09:
                    62:aa:63:ac:90:37:53:c3:01:73:2a:46:a6:e8:5e:
                    ef:be:e2:42:08:04:35:9b:dc:2e:27:2c:87:f7:22:
                    27:b6:86:8b:bf:a1:28:a4:52:d1:1f:e7:06:ff:18:
                    1e:68:30:02:3a:f9:32:89:4f:6f:48:27:ae:28:0d:
                    ef:4f:c0:d2:9f:69:3b:e1:32:ee:12:2a:23:4a:4a:
                    66:37:96:31:43:22:f2:8c:f5:54:0d:ae:59:7f:42:
                    d7:bf:d6:92:ef:d6:ea:8c:ab:a2:df:09:f3:e3:cf:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BA:63:B1:52:A6:1A:6A:2A:3F:70:8D:AF:DC:0C:AE:F7:D3:2D:3E
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:b9:fc:78:ad:92:4c:7f:b4:94:92:05:1b:56:03:ce:20:
         a3:56:0e:d0:cb:93:10:3c:dc:6f:e5:f8:df:f2:34:5c:eb:3d:
         e5:fb:b6:4b:33:46:18:bd:be:ed:f8:8e:0f:0d:17:b4:cc:24:
         ac:c9:de:b6:65:f5:6c:56:8c:bf:05:e9:f2:45:75:9d:8f:fb:
         7f:e1:85:0c:f7:cb:b7:cf:5b:0d:cc:73:8a:55:4b:0c:7c:da:
         c6:5e:59:b1:6c:49:1a:93:2a:56:5b:8d:05:de:0c:d8:9f:72:
         7b:5b:51:29:c9:a1:c3:91:1f:53:56:b0:51:2a:cf:1d:c3:e3:
         a8:74:d6:8f:74:06:b4:a4:65:e7:5a:e5:d6:b5:34:aa:80:58:
         59:3f:cb:54:1c:2b:16:07:44:5b:69:1c:c5:28:0f:2f:76:a5:
         e0:bf:7b:e4:02:ce:94:f2:6e:57:e3:67:1c:76:d2:94:09:eb:
         d9:95:c2:be:12:61:6c:21:2c:06:11:9e:ad:35:7c:1e:8b:0c:
         15:f3:51:f0:3e:98:a6:9b:9a:27:2a:0e:b6:f1:c4:58:ef:ef:
         76:71:20:9b:6c:37:3d:7b:26:28:78:ad:e4:ce:c1:a1:cf:cc:
         20:c5:38:75:1e:70:79:09:d6:0f:51:e0:04:29:4d:7d:cd:88:
         03:ab:10:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:11 2025 by rpki-client