Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
File:                     v5nSPIJymoBJ51ZXdahkvDqigu8.mft (raw, json)
Hash identifier:          EdVWpI9IbPaxgJn9NTfi+kWQptycQtDfwgIcUJ9xvFc=
Subject key identifier:   51:96:4D:72:D4:73:2F:25:4C:33:CE:81:8A:74:69:58:5B:87:7E:28
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Certificate issuer:       /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial:       0194BC3C69D26DBC68A37AC9490B81BDFDED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
Manifest number:          04C1
Signing time:             Fri 31 Jan 2025 12:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:03 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:03 +0000
Files and hashes:         1: v5nSPIJymoBJ51ZXdahkvDqigu8.crl (hash: G7C4gHqdV9SzZasxnoLm19WM2K1HPKKyaP/aF8CUIm4=)
                          2: ybOueXNsSJri02mQKQibbKcroL4.roa (hash: rsUCG/CXGaoh8At3iU9kgYgz39f7x4KapImvavgysk0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:69:d2:6d:bc:68:a3:7a:c9:49:0b:81:bd:fd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
        Validity
            Not Before: Jan 31 12:01:03 2025 GMT
            Not After : Feb  1 12:01:03 2025 GMT
        Subject: CN=51964d72d4732f254c33ce818a7469585b877e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:bc:90:62:8f:1b:82:a5:47:08:ce:b4:97:
                    50:a6:29:64:3d:39:ff:51:c4:83:4f:41:09:9d:fa:
                    06:8d:6b:3a:65:c6:05:0f:da:b1:ea:dc:3c:ce:50:
                    aa:a4:fc:32:4b:c8:fa:76:94:83:37:af:01:a8:a2:
                    40:90:89:a1:a7:c4:49:ab:49:8b:b6:13:5a:bd:45:
                    f4:95:da:1c:dd:8c:3c:d6:38:e8:ea:c4:dc:63:04:
                    d8:69:a7:01:8b:86:41:2d:af:af:ee:e5:fd:36:91:
                    e0:4b:30:91:62:82:00:c0:a7:0f:16:8c:4d:ea:e6:
                    54:4e:7f:f6:d6:0b:ba:b1:04:8a:52:36:76:bf:d8:
                    6f:0e:22:a8:62:03:c5:99:a1:a4:64:cf:55:c3:5b:
                    a4:ef:40:77:f3:ab:02:c4:e1:71:ad:d0:c1:a9:e3:
                    f5:75:84:f2:50:3b:f7:7a:26:f9:1c:97:cd:c7:97:
                    c0:8e:ce:12:7c:17:73:ac:92:c8:b1:5d:83:5f:46:
                    fb:ef:10:37:d1:40:14:41:f9:5b:c7:44:26:d8:6d:
                    1a:d8:12:a2:8c:8b:1a:05:42:7d:8c:fa:eb:8d:62:
                    ba:6a:d6:c2:82:fd:0f:58:ca:9f:6f:c6:4d:5b:23:
                    c2:bf:12:49:e2:78:68:0a:99:6e:fe:fe:03:fd:07:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:96:4D:72:D4:73:2F:25:4C:33:CE:81:8A:74:69:58:5B:87:7E:28
            X509v3 Authority Key Identifier:
                keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:d5:a9:25:7a:e4:e5:2d:99:67:85:8d:85:a7:5a:0a:b4:
         ef:c0:54:33:e8:81:d1:23:b9:ad:fb:1c:d7:3d:a6:0c:3e:3e:
         ee:76:34:dd:9e:7c:eb:da:ef:a2:0a:31:d9:59:57:15:4e:63:
         23:90:1d:66:89:66:48:d9:6a:2a:d8:2d:2e:ca:73:9a:ad:75:
         06:bf:75:65:6a:7c:a9:bf:d4:1c:f4:58:f7:3c:68:e0:58:63:
         e6:92:de:a0:d3:0e:56:47:17:61:d9:e6:01:91:ce:dc:2a:fc:
         fb:8b:d1:71:07:21:cf:fb:f7:7b:68:47:c2:56:a0:b5:5c:00:
         cc:0d:3f:90:26:72:35:dd:65:be:27:7f:e2:ac:cf:c8:9a:77:
         85:f7:11:03:22:75:8b:57:21:1f:3f:cc:41:4a:00:e9:1c:42:
         4f:57:c4:22:f6:8b:b8:eb:08:b2:de:79:85:38:f6:59:9b:ef:
         d9:27:b7:95:fb:05:5b:32:bc:bb:95:a3:69:01:a7:24:8d:d1:
         d8:3a:c6:95:58:6d:c5:00:99:eb:0c:8f:d3:84:7c:50:95:0c:
         68:77:b2:25:96:f0:98:15:09:bc:fa:0d:b8:c4:91:91:21:98:
         f5:05:a8:9f:dc:d2:67:7e:5f:69:56:c7:a2:3e:c9:90:07:70:
         db:2a:1b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:35 2025 by rpki-client