Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
File:                     BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft (raw, json)
Hash identifier:          j25dHId3kKjW6dJVufDX3AIeqJISx8GxjQsaegfFSvc=
Subject key identifier:   D8:C7:F6:51:6D:60:95:FC:D0:BD:D0:F8:60:90:88:4A:0B:C4:3B:4E
Authority key identifier: 05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A
Certificate issuer:       /CN=0550b345d9ce66e312cc294912a2b4160dfe560a
Certificate serial:       0193B4171E1492B77B82DFD1A169FB9E8590
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft
Manifest number:          0828
Signing time:             Wed 11 Dec 2024 05:00:34 +0000
Manifest this update:     Wed 11 Dec 2024 05:00:34 +0000
Manifest next update:     Thu 12 Dec 2024 05:00:34 +0000
Files and hashes:         1: BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl (hash: dh/NYN4PO+iPFmghknYTWyt7xi0C45C9TFG3MQcd0+I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b4:17:1e:14:92:b7:7b:82:df:d1:a1:69:fb:9e:85:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0550b345d9ce66e312cc294912a2b4160dfe560a
        Validity
            Not Before: Dec 11 05:00:34 2024 GMT
            Not After : Dec 12 05:00:34 2024 GMT
        Subject: CN=d8c7f6516d6095fcd0bdd0f86090884a0bc43b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:97:77:1f:e5:47:48:d9:a6:dc:a7:62:04:e1:
                    29:22:34:5b:c3:1a:c3:cf:dc:9c:57:79:41:04:cc:
                    da:f5:8c:01:8b:96:20:71:c8:ef:54:b0:eb:84:da:
                    0a:c3:11:d9:7f:61:e4:85:ff:88:ea:91:9e:0d:84:
                    80:0e:3e:46:aa:99:cb:c8:82:26:43:85:e2:b4:9b:
                    c4:a5:4f:4e:0f:c5:f2:18:dd:38:58:ce:5b:a5:74:
                    34:60:55:4f:dd:00:b9:1f:29:43:8f:26:ce:55:66:
                    5b:f9:57:75:ce:91:f2:74:a7:55:d9:00:e4:d2:05:
                    d5:85:d7:ad:b3:b3:f7:16:5c:05:7b:5e:b5:4c:fd:
                    c0:4f:f8:5b:71:67:e3:01:ac:30:84:3e:23:74:94:
                    61:19:b7:f7:6f:f0:3c:5f:b5:ad:1e:92:2a:a8:9a:
                    96:a3:91:24:52:bf:6a:94:8b:75:38:7f:7d:fa:3f:
                    f0:c5:0d:35:ac:4d:ed:0c:5b:80:4e:be:46:90:f5:
                    92:4a:30:96:74:df:cc:a0:df:65:ec:75:db:14:97:
                    1c:4d:ac:f7:a3:0e:c6:96:5f:64:d6:1d:e1:9a:11:
                    29:95:39:7d:0c:19:04:54:9a:23:18:a3:aa:99:44:
                    8d:85:2d:2a:b8:70:fc:ac:6b:bc:1d:53:f0:40:9c:
                    ad:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C7:F6:51:6D:60:95:FC:D0:BD:D0:F8:60:90:88:4A:0B:C4:3B:4E
            X509v3 Authority Key Identifier:
                keyid:05:50:B3:45:D9:CE:66:E3:12:CC:29:49:12:A2:B4:16:0D:FE:56:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b245de-c700-4206-9ff7-6d8bd97a11a1/1/BVCzRdnOZuMSzClJEqK0Fg3-Vgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:02:7b:13:2f:15:3b:ba:3a:00:35:06:d1:12:5f:b0:5d:9c:
         10:07:ba:6c:37:29:1b:8c:79:bc:c9:3f:67:4a:54:48:5e:41:
         f8:aa:96:c2:1a:a7:69:81:3a:15:5e:08:59:50:f0:ee:91:ec:
         96:57:d8:b4:5e:14:06:66:3d:47:2e:19:3c:af:da:82:bf:56:
         90:48:76:c9:18:7f:f5:fe:00:ca:b5:98:73:ac:08:03:57:cf:
         60:e8:f2:67:da:f3:34:45:02:ff:a8:4d:52:af:73:18:ec:76:
         3b:aa:a9:97:b9:54:fe:e3:2c:f9:cb:0a:13:ed:65:06:70:81:
         4f:42:50:a0:85:7d:ae:db:88:f8:04:18:e5:4c:da:91:57:83:
         bc:98:9f:6c:9d:54:bc:dd:04:61:34:08:2c:8e:5d:c5:c5:53:
         ed:6f:38:14:5e:8b:b1:8c:62:06:41:09:5f:9f:68:1f:d5:af:
         0d:f1:70:70:19:c8:09:78:8a:c2:09:4d:fb:93:ef:3a:59:17:
         28:26:1b:90:0f:c1:25:8c:08:f2:60:a8:6b:cc:b2:b3:12:08:
         63:8d:ac:25:41:0d:fb:4e:ba:38:ac:3a:71:20:0c:8d:50:90:
         78:ae:5f:4c:20:f1:c3:8d:30:6c:f7:c7:9e:f8:9c:0e:a8:6a:
         01:69:10:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZO0Fx4Ukrd7gt/RoWn7noWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTBiMzQ1ZDljZTY2ZTMxMmNjMjk0OTEyYTJiNDE2MGRm
ZTU2MGEwHhcNMjQxMjExMDUwMDM0WhcNMjQxMjEyMDUwMDM0WjAzMTEwLwYDVQQD
EyhkOGM3ZjY1MTZkNjA5NWZjZDBiZGQwZjg2MDkwODg0YTBiYzQzYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5d3H+VHSNmm3KdiBOEpIjRbwxrD
z9ycV3lBBMza9YwBi5YgccjvVLDrhNoKwxHZf2Hkhf+I6pGeDYSADj5GqpnLyIIm
Q4XitJvEpU9OD8XyGN04WM5bpXQ0YFVP3QC5HylDjybOVWZb+Vd1zpHydKdV2QDk
0gXVhdets7P3FlwFe161TP3AT/hbcWfjAawwhD4jdJRhGbf3b/A8X7WtHpIqqJqW
o5EkUr9qlIt1OH99+j/wxQ01rE3tDFuATr5GkPWSSjCWdN/MoN9l7HXbFJccTaz3
ow7Gll9k1h3hmhEplTl9DBkEVJojGKOqmUSNhS0quHD8rGu8HVPwQJytywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNjH9lFtYJX80L3Q+GCQiEoLxDtOMB8GA1UdIwQY
MBaAFAVQs0XZzmbjEswpSRKitBYN/lYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZDelJkbk9adU1TekNsSkVxSzBGZzMtVmdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMjQ1ZGUtYzcwMC00MjA2LTlmZjct
NmQ4YmQ5N2ExMWExLzEvQlZDelJkbk9adU1TekNsSkVxSzBGZzMtVmdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMjQ1ZGUtYzcwMC00MjA2LTlmZjctNmQ4YmQ5N2ExMWEx
LzEvQlZDelJkbk9adU1TekNsSkVxSzBGZzMtVmdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAugJ7Ey8V
O7o6ADUG0RJfsF2cEAe6bDcpG4x5vMk/Z0pUSF5B+KqWwhqnaYE6FV4IWVDw7pHs
llfYtF4UBmY9Ry4ZPK/agr9WkEh2yRh/9f4AyrWYc6wIA1fPYOjyZ9rzNEUC/6hN
Uq9zGOx2O6qpl7lU/uMs+csKE+1lBnCBT0JQoIV9rtuI+AQY5UzakVeDvJifbJ1U
vN0EYTQILI5dxcVT7W84FF6LsYxiBkEJX59oH9WvDfFwcBnICXiKwglN+5PvOlkX
KCYbkA/BJYwI8mCoa8yysxIIY42sJUEN+066OKw6cSAMjVCQeK5fTCDxw40wbPfH
nvicDqhqAWkQLA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:01 2025 by rpki-client