Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
File:                     DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json)
Hash identifier:          pezo1EHuJcY6U6bXBx7BBql7xKbdTptLV7iWh7ihOu0=
Subject key identifier:   5B:8C:02:58:2B:2C:8E:56:F2:F7:46:27:86:D9:DC:1A:B6:5C:F7:2B
Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27
Certificate issuer:       /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
Certificate serial:       0194BC3C0A7306871DB231C64C52D453327C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 12:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:38 +0000
Files and hashes:         1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: k3EDhq9t2uFD022IbqJ0m6xsnLyyVbOxkwJX33ewgw0=)
                          2: G0J3ZwqY7nqQ1F-r-kfCdSWuyO4.roa (hash: +njzM6YBvg7QKHzm9fDQxiSdZRBXgF7BQneYn5PkN18=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:0a:73:06:87:1d:b2:31:c6:4c:52:d4:53:32:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27
        Validity
            Not Before: Jan 31 12:00:38 2025 GMT
            Not After : Feb  1 12:00:38 2025 GMT
        Subject: CN=5b8c02582b2c8e56f2f7462786d9dc1ab65cf72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:4f:98:eb:77:09:83:c5:3a:e5:03:07:98:ce:
                    7c:e1:44:51:52:e4:29:eb:37:cc:1b:bb:7a:06:52:
                    ac:8e:7b:79:47:6c:e7:16:7c:d2:b5:0e:7c:33:2a:
                    37:b8:c0:3e:47:fe:d0:64:2b:ba:bd:96:0f:2a:a0:
                    44:56:d1:f1:06:e0:f5:b9:01:f2:69:29:6e:f2:a1:
                    b3:93:d2:64:95:96:32:3f:66:3c:46:29:a1:54:95:
                    3a:18:03:31:4d:39:53:28:b2:c4:2b:7b:35:0e:2b:
                    03:7a:8a:65:20:3f:cf:dc:98:80:2a:ff:f7:51:a7:
                    a8:61:38:fd:6d:0b:86:51:2e:82:9d:87:68:f3:20:
                    fb:98:42:ca:6a:3d:6b:bc:b2:c9:67:3d:aa:af:c1:
                    72:6b:b6:30:da:ee:37:e4:04:f9:31:ae:2e:4e:4a:
                    22:b1:4d:aa:78:6e:b1:60:75:0c:28:60:ad:18:70:
                    8a:02:06:ba:ce:3c:20:7a:e6:ac:5e:2f:ba:a1:8f:
                    e6:8f:2b:65:f7:0f:9f:9d:72:75:ad:c4:87:df:28:
                    c9:b0:80:6f:0f:57:f7:a3:92:90:0c:b4:ff:e2:70:
                    0c:22:75:2f:c4:6e:ef:bb:eb:0b:09:f3:6b:da:6e:
                    a4:8f:24:1e:85:01:52:e0:7f:87:ec:4b:f9:72:a6:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8C:02:58:2B:2C:8E:56:F2:F7:46:27:86:D9:DC:1A:B6:5C:F7:2B
            X509v3 Authority Key Identifier:
                keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:81:16:93:6a:7f:0c:2a:a8:6e:d9:8c:f6:ca:e8:2c:6c:4e:
         74:36:bc:51:cb:c6:db:8c:43:77:99:e6:36:13:37:28:91:bb:
         46:ae:0a:4a:00:ae:f2:72:3d:61:c1:c0:71:60:17:b1:f8:0c:
         14:c6:8c:ac:e0:69:6d:d8:84:ab:9d:5d:2a:07:52:92:db:96:
         32:92:88:96:02:a8:4b:c6:96:a0:f6:c9:3c:7f:b3:98:30:e9:
         d8:ec:11:4f:c3:e1:c3:99:52:99:e6:0c:ac:b6:92:d8:60:d1:
         98:4d:63:73:d6:a5:f8:c7:80:10:be:00:63:f1:49:51:df:2d:
         f0:14:ef:cb:dd:d1:c5:16:12:50:f0:b4:ea:ba:ce:56:57:95:
         d3:c7:53:91:c0:0e:15:e3:b3:0b:02:f9:11:94:54:08:36:e3:
         c0:e8:6e:ea:9f:20:3e:c2:fc:50:72:1f:b8:83:1d:ee:9b:07:
         c2:45:c7:2e:3c:37:04:ec:87:56:42:a2:61:1f:cc:15:5b:e5:
         bf:d0:bc:69:f2:2e:cd:80:e4:8f:ef:52:e3:dd:c3:8c:c8:52:
         94:75:36:3a:32:c1:b8:ee:d6:d9:76:61:35:cc:ee:cb:72:78:
         1e:bd:fe:9e:2d:07:ce:62:f0:e1:9c:28:ce:c6:54:22:12:1a:
         a2:0d:ef:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:28 2025 by rpki-client