Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
File:                     bb3coKsuvouFKafJzh3W6OpVXD0.mft (raw, json)
Hash identifier:          pzcTPTLi2lLvp2dYinOPDN/yE+VYwIAsQ7HT+gnxEJY=
Subject key identifier:   CC:5F:7E:40:01:6D:73:D5:D0:A9:33:2B:D4:C8:40:3D:F3:7B:01:A6
Authority key identifier: 6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D
Certificate issuer:       /CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
Certificate serial:       0194BBCE8B3CBD267433BD9E89D32B081D83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft
Manifest number:          0FC1
Signing time:             Fri 31 Jan 2025 10:01:02 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:02 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:02 +0000
Files and hashes:         1: 3CFsdbO_NdkVNQKrJjhbIF4SBso.roa (hash: R9TEphKFrn4GbHRX9svL6mjGOOWCjifpYgOEm5Ktk3o=)
                          2: bb3coKsuvouFKafJzh3W6OpVXD0.crl (hash: F6shtl2X+Bzv5EXH1YFeKHxEWMsusllKQfQPAMMLAZI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:8b:3c:bd:26:74:33:bd:9e:89:d3:2b:08:1d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbddca0ab2ebe8b8529a7c9ce1dd6e8ea555c3d
        Validity
            Not Before: Jan 31 10:01:02 2025 GMT
            Not After : Feb  1 10:01:02 2025 GMT
        Subject: CN=cc5f7e40016d73d5d0a9332bd4c8403df37b01a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:81:a0:33:66:44:b0:ac:96:de:54:74:dd:00:
                    87:0d:a8:8e:88:68:f0:66:54:ba:da:ca:73:75:c1:
                    b7:38:99:42:18:77:3c:3d:7f:b8:37:af:26:47:47:
                    79:11:0f:8a:e0:f2:70:19:2c:fa:c0:ef:fc:f2:52:
                    74:ee:a7:98:05:1f:8d:fe:63:89:cc:16:a9:46:fa:
                    37:05:37:c7:7a:22:73:ee:6c:80:6e:f1:9f:0d:a5:
                    b9:e8:7f:25:38:ef:1c:3d:fd:47:4c:46:a0:43:d7:
                    4f:c8:84:6f:26:32:ef:59:86:1b:61:b0:14:5e:70:
                    6f:89:0e:4a:16:55:11:17:fc:65:f9:28:b0:62:19:
                    27:e7:92:7c:3f:af:2c:aa:60:3f:cf:e8:b6:a3:fd:
                    f2:08:0d:84:44:4e:9a:e9:e5:33:a2:5f:de:2b:bb:
                    39:39:6b:18:52:f6:ba:2a:e2:d5:ce:7b:75:e6:94:
                    4f:fc:f6:10:85:a2:9a:24:72:14:1f:ae:ca:eb:4f:
                    35:b6:ad:17:19:11:90:74:16:f5:94:da:9f:f7:6b:
                    1b:52:ed:df:2e:67:ed:51:1e:c1:fb:96:f7:99:a5:
                    94:84:00:e6:c3:d7:2c:08:f8:73:a4:35:fb:41:3d:
                    b6:18:44:f7:0a:67:10:6b:3e:6c:05:b7:a9:7f:c7:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:7E:40:01:6D:73:D5:D0:A9:33:2B:D4:C8:40:3D:F3:7B:01:A6
            X509v3 Authority Key Identifier:
                keyid:6D:BD:DC:A0:AB:2E:BE:8B:85:29:A7:C9:CE:1D:D6:E8:EA:55:5C:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb3coKsuvouFKafJzh3W6OpVXD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73e78e-45cf-45f0-82bf-39fd3ca76cd6/1/bb3coKsuvouFKafJzh3W6OpVXD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:8b:2c:e4:4f:fe:3d:6c:44:1f:9d:61:be:58:47:ee:a2:
         ab:85:f6:4c:fd:e1:73:70:6c:1d:78:ff:26:47:4f:85:aa:92:
         d0:bc:d0:65:61:3a:fa:5f:f0:9c:dc:04:83:f7:64:37:da:5d:
         56:65:47:81:6b:c1:d1:b7:66:78:1d:43:f2:b5:04:24:5f:d0:
         69:3d:dd:48:22:fb:43:a6:ae:01:f1:5b:68:dc:c2:45:2f:38:
         e8:db:e3:54:69:21:9b:da:d7:91:59:77:19:1b:e7:34:ed:0c:
         d7:a7:c9:4b:47:f6:0e:cc:06:ab:25:ca:de:05:06:23:35:cc:
         cb:c6:31:56:bf:e9:be:fa:9d:78:4c:b0:31:51:13:f2:38:13:
         fd:e8:c2:4c:7b:c8:56:b8:be:9f:a2:6d:4a:41:98:f4:1e:fb:
         d9:dc:c8:f1:e9:de:b0:4e:aa:19:ae:fa:d8:1c:fb:b6:b4:7f:
         e1:56:50:97:ba:08:81:0c:bc:07:a8:f3:25:90:6f:58:88:87:
         3a:13:c7:98:ba:7c:81:19:0d:6e:9c:d5:a9:f8:c3:ba:98:3f:
         9d:43:2d:94:43:11:a8:1c:e5:b8:89:1e:a0:7d:14:05:ba:46:
         d2:c6:a6:f0:41:9b:54:72:36:45:6f:72:ed:67:da:54:94:a4:
         53:86:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:26 2025 by rpki-client