Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          CYf1hk/eHDxy0Asg3eitl/MU9jh0tOC+JmAApRH6vOk=
Subject key identifier:   19:34:5E:39:B0:6C:CA:87:7C:2E:89:39:F9:24:F5:A4:61:3B:D7:F6
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       0194BD17AB4BF986021E8591D8605B1187C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0AA7
Signing time:             Fri 31 Jan 2025 16:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:32 +0000
Files and hashes:         1: B6alie6EioBSI4GRuYA153USJyU.crl (hash: veJIhsd5gMi/NJpJSzKK6vCpqx4NTCH+1AENmBinxXk=)
                          2: HKdVcnfVobsdIXBp0QDt_Z0qTCg.roa (hash: HCRvOv3w8ga9OyNraAL7FomJBvkDq6oZ4SO2+hazIX0=)
                          3: QgKNV9zio7_KJKqkxNylTPo9ito.roa (hash: C7Gy0Q0jr3eJ97+uiWRJMvv+ZlpliYQOaljtVeZHGJ0=)
                          4: bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa (hash: Q+f3a2oxT0KKWV1uGYhiJcbNDy66Hv8e1IwzRSkuGAQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ab:4b:f9:86:02:1e:85:91:d8:60:5b:11:87:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Jan 31 16:00:32 2025 GMT
            Not After : Feb  1 16:00:32 2025 GMT
        Subject: CN=19345e39b06cca877c2e8939f924f5a4613bd7f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0e:28:49:6d:17:6a:5b:7b:b2:d8:eb:a2:ee:
                    9b:87:17:b3:4a:1b:8e:00:37:95:4f:8c:2b:8d:08:
                    51:6e:24:62:b0:ef:7c:13:7b:f4:08:b3:f3:18:6f:
                    cf:79:33:78:90:cf:e4:a6:39:7e:f3:37:ed:d8:34:
                    96:57:fc:bd:13:88:d4:b1:35:24:df:f9:20:b8:81:
                    b3:d2:26:f7:99:fd:3f:ba:48:0e:d5:70:91:25:02:
                    6b:dd:18:d0:fe:0f:82:74:b9:d2:a4:b8:92:3d:39:
                    46:2c:65:64:ec:a2:08:6b:6b:09:46:1d:c2:48:fa:
                    a4:ce:8e:49:f5:99:73:b2:69:20:15:5e:78:14:d7:
                    f0:c9:3f:f4:0d:5a:19:5e:c8:86:c9:aa:7d:aa:ff:
                    88:bc:8c:26:98:25:fd:a8:b2:f2:1b:9c:d7:9a:b3:
                    19:a5:17:20:44:94:1e:f9:b1:f4:5e:2e:08:bd:2e:
                    7c:10:cd:c0:27:47:f2:c0:84:4c:1e:e5:20:5d:6c:
                    e4:9f:ca:1b:da:62:0e:05:ac:5f:79:6c:7b:3a:8f:
                    58:fd:40:7d:91:9e:03:f4:c7:e7:a8:da:70:c5:0c:
                    1b:79:03:9c:ca:63:49:6b:39:e5:55:e4:dd:84:dc:
                    3c:17:45:4b:0d:8e:85:d4:e8:44:b4:c8:00:d2:46:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:34:5E:39:B0:6C:CA:87:7C:2E:89:39:F9:24:F5:A4:61:3B:D7:F6
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5a:b3:34:0d:69:e6:3b:82:70:11:97:a3:55:cf:07:ad:59:
         24:85:15:aa:ba:bd:3f:96:17:10:29:92:87:43:25:4e:1e:1a:
         3d:54:a2:f4:8c:77:7b:91:b1:c7:53:d2:6e:c8:c0:f3:aa:cf:
         38:91:3a:48:27:38:43:d9:cf:2e:dc:2b:31:3e:05:d0:62:9e:
         4a:59:a1:b1:82:d3:7b:f4:11:e4:5a:c0:b9:a3:8c:b7:3f:0b:
         a2:da:6c:46:d6:ba:f3:6c:25:71:fb:b5:67:03:d4:3f:19:24:
         88:b8:42:73:aa:a0:8c:40:46:3f:e1:c9:f0:23:6a:09:40:a6:
         36:25:6a:12:d9:e0:28:90:97:55:d9:e5:33:31:77:82:74:b3:
         a2:c5:64:b4:01:09:34:96:5f:b7:be:66:52:f3:06:43:c4:c0:
         77:69:cf:7d:ac:15:b6:e1:84:15:7a:f9:86:9b:1c:13:60:3a:
         6e:17:cb:76:54:0e:9a:33:af:f4:99:f0:73:ae:45:c5:4c:22:
         48:3f:1f:68:1d:5b:47:56:f7:b9:34:59:03:d0:da:0c:84:21:
         2a:43:a0:5e:23:23:02:cc:aa:5d:b7:58:2a:6a:f3:7f:a7:65:
         8b:4a:89:77:9a:b5:63:03:54:24:49:ad:c4:be:d5:65:1c:fe:
         83:91:73:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:42 2025 by rpki-client