Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File:                     bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier:          31HwQqIDEwBJEkRjK6cSmrvxXzTO26q8oStRMUg/pGk=
Subject key identifier:   6D:3F:76:3F:4E:17:E1:87:63:F9:DD:FE:E2:99:E4:2D:68:63:BC:A8
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer:       /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial:       0194BD4EC522A33A7E47C7E74C71EDC90835
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number:          0E80
Signing time:             Fri 31 Jan 2025 17:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:43 +0000
Files and hashes:         1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=)
                          2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: UGK3OQPJGFloDoYkR1NTMg+haWwZLJpdE53puDf2RAU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:c5:22:a3:3a:7e:47:c7:e7:4c:71:ed:c9:08:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
        Validity
            Not Before: Jan 31 17:00:43 2025 GMT
            Not After : Feb  1 17:00:43 2025 GMT
        Subject: CN=6d3f763f4e17e18763f9ddfee299e42d6863bca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:71:7e:25:ac:14:63:42:e7:f2:9a:77:18:
                    04:4d:72:2d:c5:1a:fa:cb:48:5c:34:d3:39:43:c4:
                    dd:36:aa:d9:81:76:e5:1e:a1:42:f7:e9:60:4e:73:
                    88:7e:ca:95:40:4b:1b:7e:af:0d:f4:2e:0c:06:1a:
                    3b:03:ef:8a:5c:25:59:b4:63:2c:65:b2:81:4d:22:
                    04:c3:d7:df:db:43:13:a2:4a:76:f0:0d:82:f7:d8:
                    7b:5b:82:be:b4:73:f7:fe:1e:88:0e:38:c9:d8:3c:
                    63:fa:77:b6:3a:18:ec:33:64:ba:e2:71:ce:de:35:
                    52:8a:c1:6a:13:19:07:89:67:ad:e5:c5:ca:bd:9e:
                    d8:33:a4:b5:bd:5b:d7:53:fb:19:6c:c1:53:c5:98:
                    20:da:6e:b7:0c:df:94:30:a7:34:9f:93:b0:f6:f8:
                    09:06:d6:64:50:bb:94:f5:1f:81:d4:bc:e3:99:94:
                    c7:64:c1:ef:25:3b:d6:e9:13:7a:9e:67:33:80:79:
                    74:25:80:2f:25:da:cd:fc:d3:3d:f6:41:6f:a7:3e:
                    db:96:42:3b:78:ac:be:fe:7a:11:88:a8:5f:72:04:
                    b8:b6:81:2f:87:21:68:ac:30:be:f6:f7:2f:32:52:
                    ba:0a:3c:15:2b:ca:ba:af:e0:94:b0:a2:33:68:11:
                    80:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3F:76:3F:4E:17:E1:87:63:F9:DD:FE:E2:99:E4:2D:68:63:BC:A8
            X509v3 Authority Key Identifier:
                keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:48:38:13:2e:91:be:45:78:76:af:1a:11:1b:07:2c:e4:ab:
         0d:ce:29:47:63:d1:c1:75:86:f2:0d:9f:60:e9:d5:57:72:f5:
         50:17:8e:9a:5c:82:3d:17:f3:83:57:90:76:d0:88:eb:a3:84:
         a4:9a:49:e1:a3:11:a2:70:49:e2:20:ae:1a:b9:74:a4:71:59:
         7d:c4:3b:ef:7b:d8:3b:d6:2f:94:16:e0:f1:29:e0:61:4c:cc:
         32:45:b1:e2:73:a3:a1:81:32:0e:a2:9f:35:2b:e0:a8:8b:cd:
         e4:63:97:f9:50:3e:44:21:32:6b:2d:37:b2:4c:34:5f:30:92:
         b4:1a:de:31:86:69:e2:dc:fa:de:5f:b4:cb:c0:81:2b:76:f3:
         15:a4:45:17:e2:3c:c8:ca:0a:67:ce:12:be:7f:40:9c:4f:5b:
         2c:8d:e0:2a:4e:7e:77:65:f2:1e:35:5a:05:e5:8b:0d:69:aa:
         e7:1f:6a:0d:ff:b9:e6:75:80:f3:c2:cd:1f:39:60:02:03:05:
         9a:1d:f7:f4:ff:c4:d9:d2:8d:d2:1f:0c:1f:51:69:0b:fb:03:
         54:6a:2e:5c:06:35:36:d6:e9:d9:7b:67:7d:f7:ec:a7:a7:46:
         ba:e0:27:e6:66:c2:f0:f2:e4:89:af:6b:62:7d:a4:73:37:5e:
         9b:b2:61:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:38 2025 by rpki-client