Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
File:                     d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft (raw, json)
Hash identifier:          YYMGbSl7dctwDx/lhTFMZCljNWKw5iknIQv67pdvjGc=
Subject key identifier:   5C:30:FA:A4:EC:25:69:91:E3:BA:03:82:0E:08:56:C1:C8:17:4E:E5
Authority key identifier: 77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78
Certificate issuer:       /CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
Certificate serial:       0194BCAA03C0DF62663A13E3833DFD827616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft
Manifest number:          0BCA
Signing time:             Fri 31 Jan 2025 14:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:46 +0000
Files and hashes:         1: d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl (hash: +tOx2NaLGsJSRr7u+/InCBdXAhWC2FO1NYpgbZcok4Y=)
                          2: hNGctvUgxsV9VRFcAR330Ay19l8.roa (hash: zQTWmn2EIkYMs7iDpMx3kmmkHaS8RfsfTxjAwAVdFG4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:03:c0:df:62:66:3a:13:e3:83:3d:fd:82:76:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7dd25ca5fb1dc913c2ffb916fa22fb8610b78
        Validity
            Not Before: Jan 31 14:00:46 2025 GMT
            Not After : Feb  1 14:00:46 2025 GMT
        Subject: CN=5c30faa4ec256991e3ba03820e0856c1c8174ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:da:db:93:f6:4f:ba:fc:4f:b8:95:a5:ad:
                    a0:3a:2a:7d:e9:c0:eb:0c:d3:c0:b2:33:da:35:3a:
                    0b:0a:4a:b7:74:69:27:1e:36:16:bb:f2:57:e4:38:
                    5c:50:99:c6:a7:a0:8b:7b:18:58:ba:2b:eb:06:db:
                    b8:1e:a1:02:3c:c3:af:08:6d:95:b5:5b:41:c7:7f:
                    02:7f:ba:82:3c:dc:4b:d9:38:60:b5:dd:85:22:1d:
                    b4:44:e2:82:10:90:80:a4:43:41:2f:c8:42:a2:e9:
                    bc:07:18:fb:d8:e3:fb:35:ef:2d:49:cb:e6:96:ee:
                    70:0e:39:ef:a5:8a:0b:71:8f:c2:f0:18:f9:ec:f0:
                    02:76:ca:00:a9:f9:85:fc:86:25:e6:db:15:09:ba:
                    d3:bc:14:b4:54:4b:2d:2a:9b:8e:25:65:0b:fe:63:
                    71:5d:5f:7e:85:16:86:4f:ee:89:c4:14:62:2b:3a:
                    3a:c9:14:ff:4b:62:de:13:ab:e8:d7:4b:20:d4:bf:
                    37:46:57:6a:ee:ca:6f:5d:d8:74:63:28:ee:0d:1b:
                    c4:7b:d2:d6:95:22:9f:42:d6:76:47:1a:5d:3f:6f:
                    bf:aa:c2:2b:e6:89:6e:b4:48:fc:0d:b9:d3:9a:1f:
                    99:6c:25:27:a1:11:c9:6c:d6:b3:8a:45:4b:5d:19:
                    18:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:30:FA:A4:EC:25:69:91:E3:BA:03:82:0E:08:56:C1:C8:17:4E:E5
            X509v3 Authority Key Identifier:
                keyid:77:C7:DD:25:CA:5F:B1:DC:91:3C:2F:FB:91:6F:A2:2F:B8:61:0B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8fdJcpfsdyRPC_7kW-iL7hhC3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/493ab8-54c4-42f5-b4af-ddb35b1abad5/1/d8fdJcpfsdyRPC_7kW-iL7hhC3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:30:f8:28:6d:68:a7:0c:20:78:34:01:05:59:56:1b:6c:3c:
         f8:3f:2d:ee:67:53:a9:aa:d5:ff:e1:5f:1f:52:fb:8a:e6:ee:
         74:ed:4c:0d:e9:c8:b9:bd:42:f1:c6:18:f8:3c:c8:7e:b8:1c:
         7f:3f:9b:60:fa:36:de:e8:8d:ef:8a:f7:ad:9e:4c:0c:5f:96:
         b4:67:c6:27:a4:67:1f:b6:34:ff:31:f4:e4:a3:54:0a:94:5b:
         02:03:bd:00:76:4e:63:1b:1b:2a:59:6f:9c:a6:d5:5c:b3:50:
         3a:8d:ac:5f:2b:4d:ab:c4:02:a9:09:7f:e9:54:2b:1d:2e:5f:
         24:93:61:3d:5c:e2:98:68:03:d3:c2:58:ec:96:1b:86:f9:61:
         52:b1:93:63:4a:28:53:d7:cc:3c:5d:49:ef:82:47:37:fe:c5:
         51:17:b6:cf:d7:b2:a6:24:ce:81:56:13:9a:73:d5:a3:8a:e3:
         08:92:3e:df:d5:80:00:94:fb:b9:2d:27:46:ba:2a:b1:3c:2c:
         4f:23:00:fb:15:05:56:56:de:56:a9:fe:4c:8a:28:66:ab:42:
         30:18:d3:3d:4b:8e:3d:5f:c7:2c:d5:12:ad:78:f4:73:aa:37:
         1b:0c:d2:2b:3f:d9:ef:ab:92:8f:53:9a:4b:89:81:1c:e4:92:
         08:c5:27:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:39 2025 by rpki-client