Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File:                     v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier:          Birx0nZqlrNonlICQD+IseZB1H03Ax8EeAVJt3hOga0=
Subject key identifier:   36:58:B0:AF:EB:78:9F:B3:14:A6:6E:08:30:2A:4C:EF:35:44:25:4B
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer:       /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial:       0194BD17689A52B01F106807B6FC38FEF14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number:          12
Signing time:             Fri 31 Jan 2025 16:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:15 +0000
Files and hashes:         1: jzM77P9xsYn5MAVakoO0HLR2EkI.roa (hash: h0SxsVCXMkdE1oBd8hWK7t+rP5KlnAbkMvVnkeRV7Cs=)
                          2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: 8zG6jXfwgeKxmqyfLYDv4qm0ifG4QRe245MTiAUx3DI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:68:9a:52:b0:1f:10:68:07:b6:fc:38:fe:f1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
        Validity
            Not Before: Jan 31 16:00:15 2025 GMT
            Not After : Feb  1 16:00:15 2025 GMT
        Subject: CN=3658b0afeb789fb314a66e08302a4cef3544254b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:1d:aa:66:be:01:14:f7:c9:e4:a7:d0:ea:
                    43:ac:1b:4a:e8:08:20:c6:b5:e1:e9:0c:4e:fc:a0:
                    3d:ff:70:69:df:d4:7c:03:3e:66:a3:24:6a:3a:ba:
                    15:eb:88:a1:89:f8:42:f7:16:da:a4:10:80:a6:97:
                    f0:fc:19:71:58:f6:44:53:44:eb:3e:c4:56:ac:6a:
                    44:05:bd:38:a9:81:42:c4:37:88:f2:55:87:e4:e5:
                    8f:df:0d:25:c8:25:c9:49:a8:3f:e4:b3:89:5d:73:
                    07:cf:3f:97:72:87:80:d9:f6:ad:43:11:d4:a8:92:
                    9f:6a:08:a3:82:18:e5:67:ca:b8:e5:49:fe:de:de:
                    96:1f:04:53:a0:3a:15:14:fe:db:d9:ec:15:42:43:
                    ac:e9:b8:f9:50:67:b9:b4:62:ae:7c:55:6d:c7:07:
                    9e:33:58:df:96:52:b0:5f:cd:1b:ff:dc:70:d4:6f:
                    f5:d1:49:6f:d2:e5:2f:c9:5d:72:f4:d4:c5:0a:e6:
                    ad:4e:f4:ca:e4:3d:be:2e:34:4f:64:ff:a8:d7:dc:
                    2f:e4:e9:10:0b:4e:36:c0:87:70:20:e7:36:9b:1c:
                    02:7e:f7:f9:38:d6:ec:1d:d7:5c:21:79:a2:9b:df:
                    aa:e0:b4:1b:24:2c:06:0a:11:43:7b:e9:1d:82:b4:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:58:B0:AF:EB:78:9F:B3:14:A6:6E:08:30:2A:4C:EF:35:44:25:4B
            X509v3 Authority Key Identifier:
                keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:df:17:4e:1e:0e:62:7c:13:9f:c0:bd:80:42:48:26:13:1b:
         20:86:18:a0:3d:9b:39:ac:b1:ed:24:51:f2:53:cb:48:fa:02:
         46:7f:50:c4:d1:63:7a:b5:30:f6:58:4c:4b:d8:df:26:85:1e:
         18:60:e6:12:c1:01:78:52:69:fe:2a:35:60:5d:d0:68:4e:12:
         88:39:5e:34:e2:b6:79:a7:44:61:ee:a3:59:48:d9:6c:d7:29:
         c3:c8:00:7d:ac:67:a5:f0:2c:5e:8e:ca:a4:04:bf:17:55:02:
         04:92:b2:c3:71:28:07:75:19:21:02:6f:20:25:4d:08:09:54:
         60:19:d9:54:ae:04:26:8d:c2:2d:71:47:d7:93:fa:d7:7e:6a:
         b9:a2:a3:92:53:f9:a2:dd:98:d1:85:65:9a:e1:4b:a3:ab:40:
         74:62:83:1f:2e:ea:92:9d:ba:87:44:86:2c:21:84:8d:a3:b7:
         12:d9:26:1f:99:db:4a:c7:f6:33:be:49:04:b2:aa:df:e2:6b:
         48:35:db:fc:76:c6:2c:2b:71:d2:ec:31:d0:cd:fe:30:69:7c:
         b1:9d:04:a0:e1:55:4d:5b:71:a9:38:29:05:05:3b:0b:02:6a:
         d1:e9:9d:1f:e1:db:ce:46:86:91:1f:81:55:3d:38:3d:64:35:
         72:2b:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:20 2025 by rpki-client