Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File:                     VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier:          b3qGZhH0hzaKX+zsJS282h3XNM6gHdcTT1GVoRykzws=
Subject key identifier:   0C:16:DA:11:F0:51:93:C8:6F:EA:10:4F:63:9B:40:23:AC:3E:3C:F6
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer:       /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial:       0195E00F911EB764DA4B79D0EE3B7FFCC594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number:          14C9
Signing time:             Sat 29 Mar 2025 04:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:11 +0000
Files and hashes:         1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
                          2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
                          3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
                          4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
                          5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
                          6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: dj5GFtB2Zk1dkHgPKz6lffn4aeFwiH61Oh25OMQiC4U=)
                          7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
                          8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:91:1e:b7:64:da:4b:79:d0:ee:3b:7f:fc:c5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
        Validity
            Not Before: Mar 29 04:01:11 2025 GMT
            Not After : Mar 30 04:01:11 2025 GMT
        Subject: CN=0c16da11f05193c86fea104f639b4023ac3e3cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:8e:42:c3:27:16:2d:a5:76:64:51:5d:a5:
                    89:39:53:93:82:cc:8c:80:ce:eb:ad:2d:f8:60:cc:
                    02:c0:06:19:a7:e6:9f:d4:83:e2:fd:cb:fc:2a:fe:
                    12:3f:df:2e:a9:6c:df:57:11:ac:46:a5:a3:6e:27:
                    bc:b1:9b:33:f5:ed:21:2a:24:89:b0:4f:54:a7:08:
                    28:73:8c:e4:d0:b2:ea:bd:62:22:21:5b:93:f1:c5:
                    da:ca:a1:83:e5:2c:b5:23:c5:2a:19:c8:90:d1:d5:
                    67:9d:c2:40:b5:21:ae:70:3d:0d:9e:6d:01:65:82:
                    ec:b8:67:b3:f8:86:52:df:97:bd:4b:0f:4b:4a:7c:
                    b7:71:7f:ad:2d:13:8b:3d:bb:60:0f:e6:94:68:23:
                    f0:01:3a:b3:32:53:ec:4b:e0:82:bd:70:fa:dc:40:
                    ec:dd:c8:fd:c3:9a:7a:2f:ee:c0:f0:89:68:f2:96:
                    25:f5:ae:42:ca:e7:68:f1:6a:24:a3:cb:eb:ce:15:
                    84:fb:58:1d:15:46:2b:2c:40:03:0a:26:d4:e4:ab:
                    9b:02:fa:a4:b9:d7:36:9d:e2:f4:56:d1:9a:19:4f:
                    be:db:64:55:6d:96:65:8a:b9:0d:0a:66:f2:48:12:
                    72:5b:64:c7:94:bc:a4:a3:7d:e4:ba:51:e1:2c:63:
                    bd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:16:DA:11:F0:51:93:C8:6F:EA:10:4F:63:9B:40:23:AC:3E:3C:F6
            X509v3 Authority Key Identifier:
                keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:4a:6d:28:b4:83:10:ff:3e:6c:24:56:0d:15:5c:7d:bd:97:
         e7:60:ae:65:1b:da:ad:b3:d1:e8:4c:f7:0b:38:ac:30:15:20:
         c0:51:3c:33:9e:e5:6f:c3:d3:74:67:39:89:56:e3:80:aa:62:
         a4:7c:de:ff:79:54:e0:6c:a9:28:0c:c3:e1:23:15:6e:19:38:
         89:24:76:02:49:f2:1f:c6:39:7f:e9:ff:19:61:14:2a:31:10:
         ce:e1:a5:f3:a6:6f:b5:c7:d0:46:bc:f5:4e:69:2f:83:a6:bc:
         49:6e:f8:f3:3b:c9:28:14:02:0a:c1:89:07:b2:84:fb:db:05:
         97:e7:1a:42:06:19:c0:4b:ca:f8:53:78:ba:8a:06:c2:c9:3f:
         f2:8b:8b:27:3c:dc:05:d0:e9:de:40:54:43:8a:23:3c:16:aa:
         05:9a:e3:ea:85:c8:c3:59:d7:53:ac:0f:29:a4:95:26:d8:73:
         07:00:b9:56:a3:a0:0b:5b:3d:57:a6:09:07:5b:e6:72:d7:ec:
         40:02:32:3a:5f:43:83:ea:c6:ff:6f:cc:82:74:88:b8:7d:00:
         6a:40:8a:7b:f3:d7:a4:5d:7e:e3:fd:9a:0b:6e:93:d8:4d:22:
         8b:a7:6c:ea:e2:0f:08:2d:0b:c6:1c:00:c5:33:d2:7d:90:ce:
         28:08:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:33 2025 by rpki-client