Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
File:                     jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft (raw, json)
Hash identifier:          OWzzHRG/SMw83OAU2SWDrIMLF+GlsG0f/2Vth1jmC4M=
Subject key identifier:   CB:D5:D9:79:70:B1:3F:47:45:96:12:D4:A9:2C:04:AC:E2:0A:22:16
Authority key identifier: 8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED
Certificate issuer:       /CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
Certificate serial:       0194BBCEC0B2AD575D5915E8004113FB3808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft
Manifest number:          010D
Signing time:             Fri 31 Jan 2025 10:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:16 +0000
Files and hashes:         1: Eja8uROuzIbK3iaci49r3-WhTxE.roa (hash: ZAVnNyA2dIyWXYHRVd60vJEBGOSH2/TqvMkOURX86Bo=)
                          2: jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl (hash: xJkwTnrzY6bHJntB7KAVeKwz4Hk1YcBzQTe4WK3CGcw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c0:b2:ad:57:5d:59:15:e8:00:41:13:fb:38:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef7c09c1a3f73ebe61740ab65e589f91655bded
        Validity
            Not Before: Jan 31 10:01:16 2025 GMT
            Not After : Feb  1 10:01:16 2025 GMT
        Subject: CN=cbd5d97970b13f47459612d4a92c04ace20a2216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:a6:9b:3c:2d:8c:7f:55:42:a5:1e:90:e9:
                    28:a3:50:57:e6:10:0e:01:2e:2c:ac:70:14:43:ba:
                    9b:0e:a5:ef:c5:ac:bf:3b:68:e4:1c:7c:4f:e3:13:
                    5a:2a:9e:57:30:e4:a8:75:82:05:7c:37:7c:3e:2e:
                    3b:2e:1a:dc:80:fb:bf:f0:40:a4:2f:5b:0d:20:b9:
                    65:30:1f:fd:01:63:01:6a:d7:1d:f7:78:00:55:7b:
                    97:e3:86:dc:41:ce:b2:c5:ef:59:1f:98:8c:62:81:
                    dc:b3:f9:a5:05:ad:90:75:12:5a:27:01:f3:c4:f8:
                    f3:3f:45:5d:fc:f7:a2:fc:7a:bd:81:d8:c8:9e:84:
                    bc:10:7c:15:4e:ff:e0:34:8f:15:f1:97:86:bd:25:
                    a4:fb:f3:fe:45:2a:dc:3f:37:8c:e8:c1:48:db:f0:
                    87:d6:41:ed:86:dc:09:2e:1b:f6:03:8a:03:9b:95:
                    4c:c5:bf:ea:09:4a:a9:27:e1:da:75:19:73:8e:de:
                    c5:24:57:b6:85:ea:07:f4:f5:9d:c4:05:7b:54:1b:
                    9d:3b:02:04:58:d0:2d:43:8d:90:5f:91:d7:8d:a5:
                    a7:13:82:d8:8f:33:0c:41:aa:1a:58:72:f7:4e:3b:
                    84:73:c0:15:25:5e:74:59:7a:7b:cf:e2:f3:b2:64:
                    6f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D5:D9:79:70:B1:3F:47:45:96:12:D4:A9:2C:04:AC:E2:0A:22:16
            X509v3 Authority Key Identifier:
                keyid:8E:F7:C0:9C:1A:3F:73:EB:E6:17:40:AB:65:E5:89:F9:16:55:BD:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvfAnBo_c-vmF0CrZeWJ-RZVve0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/8c6d88-52c3-47e6-8009-f62be9e8a671/1/jvfAnBo_c-vmF0CrZeWJ-RZVve0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0c:23:f2:ce:65:7c:81:56:7c:14:2d:e6:bd:c2:52:4f:06:
         21:47:47:c0:6b:59:77:d6:e3:09:bb:e5:c7:ed:52:66:eb:2e:
         3c:57:d8:fd:84:13:48:00:35:32:14:92:f1:27:2a:24:2b:3a:
         44:ac:97:a1:0b:d7:7a:fa:e1:8b:97:44:71:0c:8e:8a:80:5c:
         ee:75:c1:be:3e:38:3e:da:b3:a0:79:ab:2e:83:08:08:4a:0b:
         88:49:15:e0:2e:b6:76:9f:36:45:f7:2b:0e:a1:e0:f0:47:9e:
         47:44:9f:97:19:50:1d:dd:ca:ab:7d:45:62:0e:4e:66:5f:5a:
         52:24:f3:97:91:40:3f:26:82:f3:77:6b:75:e6:47:72:55:9a:
         67:c4:c4:ed:4c:71:0f:e9:ce:15:70:74:d8:a4:68:fc:18:67:
         2d:5a:1a:20:e3:71:9f:c6:af:d8:ee:ee:a6:ea:5c:80:60:19:
         8e:dd:cb:ef:6e:7c:ac:06:6f:b8:a7:ec:01:22:aa:dc:ab:0a:
         f6:59:e1:0b:9c:90:94:c4:1d:d9:01:b1:0d:83:af:ef:31:58:
         9b:cb:92:4c:c3:3a:be:51:f9:df:d0:e9:bd:18:d5:58:04:b9:
         1b:0b:2c:47:eb:5a:1e:84:9a:bb:3a:21:25:3f:73:07:ee:a3:
         d5:51:c7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:43 2025 by rpki-client