Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          yfgDG37WrG+OR66ggPPCMn6QCFDVERnQxunSQlWlv58=
Subject key identifier:   0A:F7:E7:5B:80:CF:F3:67:0E:4F:B8:F7:12:D2:D4:B5:76:0B:53:1C
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       0194BC730C866E3AE67A402BE045515BDF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          08AA
Signing time:             Fri 31 Jan 2025 13:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:43 +0000
Files and hashes:         1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=)
                          2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: +xUTy9d6SXTlwed+Bd4Gf0c7R8L5DdZX39eSkDibfAA=)
                          4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=)
                          5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:0c:86:6e:3a:e6:7a:40:2b:e0:45:51:5b:df:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: Jan 31 13:00:43 2025 GMT
            Not After : Feb  1 13:00:43 2025 GMT
        Subject: CN=0af7e75b80cff3670e4fb8f712d2d4b5760b531c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b1:7b:90:de:ac:ce:33:9a:93:a4:26:d6:92:
                    e3:b5:91:79:7b:86:63:72:ff:c3:48:54:a5:0d:92:
                    e5:7f:ec:3f:e1:80:c3:f9:8b:26:a3:59:7f:11:49:
                    c8:d7:f8:ed:62:41:49:b1:33:2d:28:e5:00:8a:24:
                    17:d3:d1:96:93:2e:d8:78:61:71:97:61:1f:ee:3b:
                    71:4c:60:1e:f5:36:3d:23:6e:2e:e5:32:c7:33:29:
                    0f:33:8c:f5:00:9a:54:ad:38:de:18:d0:ae:fd:79:
                    95:66:72:a9:3c:53:9d:39:4e:ac:03:ab:d3:c7:7f:
                    52:10:c8:b3:c9:9c:b6:54:6a:2b:23:3e:35:b5:bc:
                    32:d8:3e:ad:36:5c:c1:65:53:2d:6a:c7:51:2b:d2:
                    60:23:35:f0:ba:c0:67:6c:d1:eb:80:b9:ce:f8:78:
                    24:cd:fb:fe:2b:7f:98:82:df:ec:44:75:7f:8c:aa:
                    ef:c3:86:ce:53:55:07:75:35:69:ee:35:09:44:9d:
                    1a:43:64:0a:a7:8e:2a:6d:12:fe:20:82:1c:4d:f4:
                    e6:83:77:5a:c3:6f:59:f4:66:63:fb:48:e2:ef:98:
                    d9:b6:a7:f1:9d:ff:75:cd:c9:dc:0e:f0:11:01:ad:
                    39:95:c8:5c:ec:92:09:31:f4:42:b1:53:ee:fe:05:
                    a1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F7:E7:5B:80:CF:F3:67:0E:4F:B8:F7:12:D2:D4:B5:76:0B:53:1C
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:12:8a:e0:35:ff:07:9d:d3:7c:1a:39:38:af:14:51:48:b5:
         d6:13:3f:b8:ce:6f:b9:c9:de:b6:f6:16:36:a5:4d:0f:32:58:
         92:0c:14:1c:a4:36:82:5c:2c:da:d5:cd:1f:07:38:b9:f5:d9:
         fe:da:4a:1b:59:70:79:f5:b7:be:a9:fa:b2:ac:23:64:85:0f:
         19:37:0a:04:da:2e:53:b2:72:09:e2:86:d2:9f:db:aa:08:63:
         99:ee:91:76:84:b1:0f:ba:0b:58:d2:37:1c:c6:56:94:ef:db:
         78:7d:81:f9:ff:b7:43:d8:92:cd:a7:c2:a1:72:0d:1a:45:2b:
         64:47:dd:f0:67:99:80:b3:3a:c5:d1:cd:60:85:57:2c:c9:27:
         96:24:74:f8:7b:a8:82:cd:5b:b7:68:f8:4b:9a:17:59:c1:05:
         be:c7:5e:3a:5b:cd:0e:4c:c3:0d:5d:17:54:68:71:ce:69:d6:
         d8:fa:5e:fc:a3:bb:8b:e2:51:b7:5e:40:de:a0:b3:e8:9d:13:
         75:73:9d:6d:81:dc:6b:c3:20:f7:9e:ea:93:cb:b4:bd:e3:c0:
         3d:71:93:fc:13:9b:31:ee:e7:d3:13:88:12:0a:1a:64:4b:8a:
         e5:f4:1b:a9:0d:93:3b:e4:88:36:68:0c:1d:a7:91:61:1e:79:
         5a:a0:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:53 2025 by rpki-client