Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft
File:                     vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft (raw, json)
Hash identifier:          5Azn+9uhdMuk6vlooaEmw5kwVYqpwlFH2wHa/eSl2OQ=
Subject key identifier:   3B:08:0B:DC:F8:D7:41:89:6F:BC:E1:20:EC:7A:BF:59:46:EB:22:11
Authority key identifier: BD:4B:D8:91:3A:6E:7F:14:8C:C3:40:60:6C:BD:4E:85:FF:A9:F1:A5
Certificate issuer:       /CN=bd4bd8913a6e7f148cc340606cbd4e85ffa9f1a5
Certificate serial:       019514DAA25A5C754AED691F495D810A596E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUvYkTpufxSMw0BgbL1Ohf-p8aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft
Manifest number:          0F
Signing time:             Mon 17 Feb 2025 17:00:27 +0000
Manifest this update:     Mon 17 Feb 2025 17:00:27 +0000
Manifest next update:     Tue 18 Feb 2025 17:00:27 +0000
Files and hashes:         1: vUvYkTpufxSMw0BgbL1Ohf-p8aU.crl (hash: 0XJgBAkiqfkpgqLnSZvsZ8cnzjD+rqHiHlt4bvv2txo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:14:da:a2:5a:5c:75:4a:ed:69:1f:49:5d:81:0a:59:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd4bd8913a6e7f148cc340606cbd4e85ffa9f1a5
        Validity
            Not Before: Feb 17 17:00:27 2025 GMT
            Not After : Feb 18 17:00:27 2025 GMT
        Subject: CN=3b080bdcf8d741896fbce120ec7abf5946eb2211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:50:2d:76:ab:48:85:c6:dd:db:fa:a3:4b:
                    f1:48:ce:f0:a0:e2:15:a6:f8:f4:cf:ab:bd:f3:55:
                    c5:97:58:0c:50:45:78:41:bd:93:0a:cf:d4:8b:a3:
                    1d:df:f5:da:1b:95:47:8a:fe:7e:ee:1f:8b:89:83:
                    78:35:71:1c:79:22:4c:e2:b4:aa:d3:52:4f:f7:6a:
                    f8:5e:9a:b0:55:99:6a:e3:86:4e:47:eb:ef:04:71:
                    a7:70:78:98:e4:6b:e3:f3:c6:66:88:a1:da:f3:7f:
                    d7:c8:55:a6:19:43:42:06:85:05:9a:8b:6e:e1:64:
                    62:f6:0b:3a:4b:9e:eb:1f:bc:6a:00:18:7b:d2:d2:
                    e4:73:10:b3:46:90:f6:12:b5:73:2c:0a:b8:eb:7e:
                    1a:54:f6:b1:a7:bf:c9:03:31:f6:0c:b2:cb:ce:75:
                    0b:72:53:83:78:26:eb:c2:a6:94:66:2a:45:76:59:
                    12:2e:99:96:30:14:99:33:33:d5:9e:f2:be:45:a9:
                    17:03:d8:17:35:ba:45:5d:ce:b5:ca:e0:c5:a9:0c:
                    7d:1e:60:36:89:4d:cd:1d:cc:20:06:0e:b6:14:d6:
                    29:d2:44:06:81:43:8d:c4:31:8e:8c:37:4c:6e:0d:
                    67:e5:c5:72:21:fb:f0:f5:98:db:1a:45:60:9d:60:
                    f6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:08:0B:DC:F8:D7:41:89:6F:BC:E1:20:EC:7A:BF:59:46:EB:22:11
            X509v3 Authority Key Identifier:
                keyid:BD:4B:D8:91:3A:6E:7F:14:8C:C3:40:60:6C:BD:4E:85:FF:A9:F1:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUvYkTpufxSMw0BgbL1Ohf-p8aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/8db532-096c-4ed6-8fce-658583d3f55a/1/vUvYkTpufxSMw0BgbL1Ohf-p8aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f0:2d:90:38:15:f1:4d:6b:a5:45:4d:64:bf:b7:22:70:9e:
         f9:eb:fa:20:ae:5b:ae:94:04:23:e5:41:b5:9b:91:3a:09:f6:
         cb:8c:a7:4f:5d:3a:8b:df:ba:f4:33:90:28:15:d3:f7:2b:37:
         88:3f:ef:5b:20:90:c7:71:7f:71:b0:20:57:80:32:3a:47:18:
         80:a8:aa:34:d7:bd:a8:2a:1b:26:90:55:18:1a:9b:ff:1c:d9:
         ba:5e:8c:6f:1a:b7:ce:83:1c:91:f5:4e:01:27:b4:ef:c1:b3:
         a4:73:0a:9a:b9:be:7e:76:33:21:a9:a6:da:c8:ab:6b:ac:bc:
         32:64:e2:b8:0b:ed:48:96:ea:b3:8a:a4:9a:1f:32:4b:53:c4:
         fc:e9:b4:20:a2:17:7d:2a:43:99:16:c1:fa:cc:41:3f:e0:5f:
         24:0e:f4:2b:b0:7b:19:8c:e4:d2:20:57:07:98:31:24:44:50:
         1d:e1:97:e6:54:0f:54:3f:d8:85:5a:3c:6b:8c:a7:53:9f:88:
         40:48:51:7d:4b:98:aa:c1:a4:24:2c:48:47:9d:90:e5:79:ab:
         56:97:af:f2:8c:76:29:94:3e:1b:b6:2e:7a:74:c4:e7:4e:66:
         6a:52:bd:a8:2c:87:0d:f6:54:ce:38:e4:d2:cf:e7:0c:81:da:
         30:b1:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:07:03 2025 by rpki-client