Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File:                     _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier:          O8OvJ3F4rO5TvKluS3a7o+sdJFFFB54J4jTrhWtiMZA=
Subject key identifier:   12:B4:34:B5:AB:C6:1E:9D:E4:7E:45:D8:53:E5:C1:AB:86:1E:77:CA
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer:       /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial:       0194BD4E857A3E99BE094A28CDBDCFE3B019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number:          0B00
Signing time:             Fri 31 Jan 2025 17:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:27 +0000
Files and hashes:         1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=)
                          2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: QbZuMEak5eLD7EANjkd97lJR9w5Rw58GrpDDmrqVQ7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:85:7a:3e:99:be:09:4a:28:cd:bd:cf:e3:b0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
        Validity
            Not Before: Jan 31 17:00:27 2025 GMT
            Not After : Feb  1 17:00:27 2025 GMT
        Subject: CN=12b434b5abc61e9de47e45d853e5c1ab861e77ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0d:0e:08:c1:e9:b9:95:75:32:53:90:05:e0:
                    63:4f:af:16:32:16:49:6d:c0:14:22:cf:35:8e:bf:
                    9a:2b:4a:3b:d3:24:2e:ae:46:7a:b5:48:cd:38:28:
                    e8:d6:57:be:fb:4e:9e:8f:0b:87:68:95:2c:9d:bb:
                    10:f0:d8:60:1f:89:db:a6:7e:23:82:e7:45:64:d0:
                    8a:52:25:94:5f:cb:f1:04:f5:7a:46:0a:cd:cd:11:
                    3f:d9:09:54:6c:75:66:c1:c6:34:66:f6:ea:9c:8f:
                    d6:66:d8:ab:28:eb:6d:a2:41:a8:16:20:80:54:50:
                    3f:93:6c:84:70:46:80:73:2a:f5:d3:bc:47:80:94:
                    81:96:07:22:1b:2a:35:da:bd:7c:b9:95:04:aa:8d:
                    d2:e5:2c:a3:19:0e:ab:a0:67:68:2d:b2:4c:c2:68:
                    e8:4f:bd:46:e6:59:27:ff:60:0a:05:0f:9b:5c:33:
                    43:48:ef:25:ca:2c:5d:97:c5:3a:46:5a:77:dd:53:
                    ac:3a:ae:57:04:e3:88:45:92:48:05:71:2f:d8:0f:
                    44:1a:53:1d:56:2b:9c:8f:19:86:27:a7:bf:40:7d:
                    e0:a6:a0:69:d2:9d:f0:ac:c8:69:aa:52:70:1b:e9:
                    47:20:d9:a0:35:07:9a:0a:c5:9b:34:7f:c7:9c:de:
                    60:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B4:34:B5:AB:C6:1E:9D:E4:7E:45:D8:53:E5:C1:AB:86:1E:77:CA
            X509v3 Authority Key Identifier:
                keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:75:25:05:9a:80:46:9a:76:32:a5:9d:97:ab:61:19:1f:a2:
         80:79:2b:bb:2e:a3:32:26:33:78:d7:40:80:1b:4c:e5:93:53:
         3a:18:9c:06:65:7f:42:e9:c1:ae:a0:7e:14:2e:bc:b6:35:5e:
         f3:41:91:08:b0:a7:8a:ac:3f:ad:49:11:af:97:4d:e8:a0:45:
         90:fb:a3:9a:76:95:a7:eb:66:16:9f:53:11:d5:e1:f9:f0:7e:
         9f:de:f7:c2:5e:0f:9f:95:fe:3f:da:b7:68:97:f1:43:63:ef:
         2a:e4:2c:b2:24:b2:88:3f:3c:ac:cc:c0:14:e8:30:4a:36:7b:
         02:84:c5:6b:76:8a:39:45:37:92:d5:5c:3d:b6:91:44:94:b2:
         f8:0d:93:27:0e:21:01:3e:52:2a:91:4d:b2:02:57:31:e6:d3:
         5b:9b:53:bf:af:f8:e5:d3:da:a1:75:be:c8:a3:92:2c:5e:e8:
         99:82:c6:ce:20:4d:81:79:58:8e:3c:24:95:14:68:db:b8:d2:
         35:80:b7:f0:e4:a9:b6:b9:89:3a:2f:3f:2d:da:92:0a:2d:6e:
         7b:be:78:23:dc:8c:2d:a0:54:7f:43:0e:dc:c0:37:19:87:66:
         e4:1a:51:82:78:df:34:cb:ac:a6:7a:94:7e:e9:7d:1d:22:35:
         c9:48:f0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:17 2025 by rpki-client