Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File:                     vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier:          m6RsJ0HvfiTMZWJ7jjNaTdI63OQQ++G0Qi5gwVOHdtg=
Subject key identifier:   A0:80:58:7E:22:1F:45:2A:BD:1D:04:21:83:C3:B3:A2:21:95:46:CD
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer:       /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial:       0194BC049F73B43CF59B34C252EF0BBAC420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number:          071F
Signing time:             Fri 31 Jan 2025 11:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:06 +0000
Files and hashes:         1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
                          2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
                          3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: C3yUbYdq3KarRvN5W+KcPF64o32h5i9d13QO4AFxh3o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:9f:73:b4:3c:f5:9b:34:c2:52:ef:0b:ba:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
        Validity
            Not Before: Jan 31 11:00:06 2025 GMT
            Not After : Feb  1 11:00:06 2025 GMT
        Subject: CN=a080587e221f452abd1d042183c3b3a2219546cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:11:00:1d:e2:e5:7a:68:9e:51:12:81:79:
                    1a:a1:11:f7:5f:e0:b9:ad:fd:c4:f8:d8:78:dd:a3:
                    e1:07:96:23:37:33:4b:63:14:62:76:b9:08:a2:d1:
                    1b:e5:c5:46:92:aa:4c:5a:f1:28:2c:70:55:1d:57:
                    48:7d:dd:81:75:e9:8e:71:a7:55:17:03:56:e4:f5:
                    b5:3d:23:13:a5:6f:36:08:df:aa:bb:a4:7e:39:2f:
                    c5:b8:6f:e3:4e:fd:b7:d0:eb:42:b1:13:16:05:1d:
                    16:ff:29:32:b4:a9:6c:2a:08:4a:23:b3:f7:af:b8:
                    fe:5a:31:02:ec:f2:b0:78:43:bf:63:e5:30:61:fb:
                    fa:05:45:25:f0:ed:4e:a6:27:88:75:e8:fb:c0:48:
                    e2:7f:59:b9:1c:83:73:ec:bc:e0:7e:0b:43:17:cb:
                    78:46:dd:11:76:1d:14:d9:7b:08:da:0c:1c:70:5b:
                    97:fd:f5:1f:16:7d:95:c4:c0:ce:7e:ff:aa:4a:6d:
                    13:10:2b:26:f7:aa:34:f2:f0:f3:7a:02:a9:ee:46:
                    7f:23:cf:cb:9d:98:ab:c4:ac:51:fe:60:aa:af:8e:
                    7d:6c:ef:58:6c:d4:fc:af:aa:1f:87:70:7d:86:c1:
                    bd:f6:04:28:5d:e5:ce:82:0e:53:d0:1f:00:1f:14:
                    3f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:80:58:7E:22:1F:45:2A:BD:1D:04:21:83:C3:B3:A2:21:95:46:CD
            X509v3 Authority Key Identifier:
                keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:19:55:6a:80:65:5c:e5:ca:5b:6d:6f:bb:ff:e3:95:48:c1:
         6e:63:da:cd:3b:12:7d:3c:79:49:2b:94:81:72:2b:2f:04:cf:
         f3:61:1f:85:bd:a6:0d:87:c1:7c:6f:80:98:1e:04:56:21:7b:
         42:e2:3b:81:a1:ce:78:57:9a:fa:42:8d:1e:3b:b2:fb:fd:43:
         6a:ea:62:d7:22:b5:e3:50:30:7a:7f:b8:7d:a7:64:ca:ab:30:
         4b:5e:0c:c5:a2:f3:54:9f:5c:ab:24:6a:8d:1e:2e:31:02:14:
         e5:fa:d7:e7:d6:a1:bf:11:56:4b:d8:bd:51:f7:74:70:b7:15:
         8d:92:26:2e:a0:90:f2:11:55:0f:b7:53:70:46:5a:b3:f7:ef:
         97:5f:69:b1:d6:e9:a3:15:d6:f4:54:94:27:72:67:ff:8b:da:
         ed:64:c3:3f:4c:a6:e6:0c:5b:c0:8d:1b:c6:14:17:03:8d:2c:
         6b:72:96:6b:0f:a5:d6:7e:da:4d:fb:49:e3:d3:e5:c4:e7:5a:
         29:15:92:9a:89:be:35:c3:ab:65:94:2f:fd:3b:0f:e6:90:0f:
         7b:f2:d9:68:0a:99:8b:70:c0:c3:68:4f:72:23:68:39:d9:81:
         2e:24:a3:34:97:d3:a5:6b:ce:ee:11:db:11:85:47:bc:93:e9:
         b5:bd:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:16 2025 by rpki-client