Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
File:                     VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft (raw, json)
Hash identifier:          ODG8hx+G2fPUMJIJXy2aoeKgD7Cz0WfLJTCA2SdI2qA=
Subject key identifier:   E0:29:25:46:9F:E9:F2:A2:DB:35:DA:10:9F:47:1B:33:29:E4:2B:F2
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Certificate issuer:       /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial:       0194BBCE5B4BB65FBFCCECBBB015EF2C912F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 10:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:50 +0000
Files and hashes:         1: 3FxSbQNJYQgzhy1DLels_XrO1cU.roa (hash: UQB7F2ZYH+kcV/qXkBrQTc0Ry4hoRMUXYEZvpQAfsoM=)
                          2: A7fNepQEE5hriEH1MxVs7I9LEVc.roa (hash: bDqpKiV3wQKeG7s6LzFFi0Idj9cti+sB7X+a5H5psVQ=)
                          3: RCzpYu2NXv9IhVJof3I0g4oUP6Y.roa (hash: ZlYAjV5mwmp0CDH9cOOcXTeCf66IbQigcgB22yHMGgo=)
                          4: VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl (hash: BjcI6vlYXvu394EHbTwVCkOtGEic6FcCOJJVg3BN7wo=)
                          5: blGi3GYyv_U9inYqiK-N0m923Z0.roa (hash: Z89HHYOxFhBtIBu3aG0Up37f1r6W0/XcvKOpTLGjbD0=)
                          6: ubRmnJz_S2C6nk7pAMO3lsADuL8.roa (hash: coOwoKpqCk+u4O9lNGnwA4pS3Z4weSS8oqVFJQmf0lA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:5b:4b:b6:5f:bf:cc:ec:bb:b0:15:ef:2c:91:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
        Validity
            Not Before: Jan 31 10:00:50 2025 GMT
            Not After : Feb  1 10:00:50 2025 GMT
        Subject: CN=e02925469fe9f2a2db35da109f471b3329e42bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b5:aa:4b:12:06:8e:b1:32:22:9d:ce:db:37:
                    a6:35:20:4d:b3:c5:e0:96:97:2e:99:0d:21:66:67:
                    a3:58:9d:10:ef:d4:f2:4e:06:c0:4d:b6:20:80:64:
                    30:00:0f:3a:d9:56:99:e9:eb:f9:eb:28:c2:6b:b0:
                    b0:db:fe:39:0d:c3:e3:b3:49:ca:20:f1:fb:72:9b:
                    78:48:a4:56:6e:ee:79:7b:fd:36:78:69:05:7a:42:
                    7d:a4:a6:1a:38:4e:6f:91:2b:ad:ad:5a:5e:1c:d3:
                    1a:f3:aa:8a:08:fd:3f:8e:f6:0f:74:2b:82:ee:c1:
                    f2:72:5d:a1:d8:87:e2:fb:1e:03:09:5e:94:f0:b3:
                    5f:ea:95:88:bc:1b:49:21:27:52:19:0c:2c:d1:f5:
                    d2:99:57:65:5f:f8:e9:e5:e5:74:de:d4:1e:4d:bc:
                    0e:ce:b3:43:c4:2a:d0:0b:d2:14:67:02:61:b8:3c:
                    0a:2e:47:12:b0:7b:8f:61:e6:da:f9:9f:d0:f5:a6:
                    aa:3a:31:4b:f2:ae:26:97:ab:bd:da:8f:00:c0:4c:
                    3d:89:a1:34:b0:4c:9d:d5:b7:8c:2e:6a:95:0f:bc:
                    ff:86:00:bb:d9:54:5b:ea:31:8a:36:85:30:6b:35:
                    38:4d:f9:54:3a:a9:3c:3b:44:ac:65:8f:22:10:a8:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:29:25:46:9F:E9:F2:A2:DB:35:DA:10:9F:47:1B:33:29:E4:2B:F2
            X509v3 Authority Key Identifier:
                keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b5:6e:0c:c4:5c:b9:36:b0:19:7c:9f:a1:47:f9:d6:f1:81:
         be:d5:53:ab:e7:02:58:44:bd:37:ec:fa:b7:68:92:9c:48:4b:
         ed:63:72:25:8f:dc:b4:a8:c3:e3:e7:24:dc:60:68:f5:dd:a4:
         db:0c:83:e4:47:f0:b2:b2:41:47:2b:95:86:70:2e:e7:ed:81:
         2e:08:5b:ec:01:32:44:78:dc:33:da:12:54:cc:c0:a1:63:ec:
         c5:84:31:af:37:b8:56:c7:8e:af:d8:58:59:cb:94:45:05:ad:
         87:0c:b3:b4:5a:79:4c:e7:d9:8a:c3:87:c0:be:36:08:33:13:
         39:b8:cd:63:b0:20:66:52:17:97:37:18:0d:e5:c7:9d:b6:55:
         c8:c1:21:87:17:48:e2:8d:23:af:1d:96:7d:3b:82:99:5e:13:
         c4:31:1d:11:b7:3b:2b:23:64:16:b2:48:09:74:eb:10:f8:a8:
         d1:f6:ce:2d:89:f0:da:df:99:e2:77:fb:4d:98:fa:f3:d4:4c:
         42:26:de:21:51:0c:13:71:bd:92:54:d9:14:06:fb:03:4a:e0:
         32:be:ec:df:c4:00:39:19:65:0b:e4:ce:fa:b6:9f:9a:d6:72:
         53:a2:b4:80:32:c5:2d:17:9d:61:70:cf:88:c0:d4:95:7d:94:
         c3:15:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:33 2025 by rpki-client