Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.mft
File:                     vGnmkC1OHEEkb0oSG0pb3s-G44g.mft (raw, json)
Hash identifier:          WS5AJsMezyfRZhgGe6TWxoK5832thdbr3DdI0OoH8WE=
Subject key identifier:   3B:13:8A:C7:C3:74:33:03:51:69:14:A3:0C:0C:9D:0A:AD:AB:AC:65
Authority key identifier: BC:69:E6:90:2D:4E:1C:41:24:6F:4A:12:1B:4A:5B:DE:CF:86:E3:88
Certificate issuer:       /CN=bc69e6902d4e1c41246f4a121b4a5bdecf86e388
Certificate serial:       019230FFD01579F513D11830650CB9EA00A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGnmkC1OHEEkb0oSG0pb3s-G44g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.mft
Manifest number:          0AF7
Signing time:             Fri 27 Sep 2024 01:02:03 +0000
Manifest this update:     Fri 27 Sep 2024 01:02:03 +0000
Manifest next update:     Sat 28 Sep 2024 01:02:03 +0000
Files and hashes:         1: Q7Z_C-47mFmBzVPPKt9ndhGkngA.roa (hash: 5hjev1gTkriUrKnc1kjfdGceLbBmLUEmu+DPWLn6kqU=)
                          2: vGnmkC1OHEEkb0oSG0pb3s-G44g.crl (hash: hRUMukD0hNollnr7jflaldI+csvp5bKgED8Hs4kYKvE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:30:ff:d0:15:79:f5:13:d1:18:30:65:0c:b9:ea:00:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc69e6902d4e1c41246f4a121b4a5bdecf86e388
        Validity
            Not Before: Sep 27 01:02:03 2024 GMT
            Not After : Sep 28 01:02:03 2024 GMT
        Subject: CN=3b138ac7c3743303516914a30c0c9d0aadabac65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:41:65:56:89:2b:2f:e0:86:1a:fa:d5:50:ef:
                    27:4f:4d:9a:f7:b5:d4:f0:3a:62:d6:9b:06:89:f2:
                    0b:c8:96:2a:ab:c2:e5:50:ca:20:ae:b2:f9:34:0d:
                    f4:a6:d9:ec:d9:b0:7e:fa:1e:aa:2b:b0:59:eb:d7:
                    6f:b3:f3:3f:4f:2d:a0:45:65:71:c1:79:95:47:22:
                    e1:f1:55:c6:33:e1:d6:e0:22:ae:af:b7:f2:12:36:
                    0a:84:1f:13:a0:18:fe:3b:7e:4c:15:0f:1b:76:e5:
                    a3:2f:f6:1b:36:e5:6a:64:a1:c0:50:f1:ec:a3:24:
                    11:4a:dd:6d:a6:dd:d8:b4:4a:8f:d8:98:ee:f4:bd:
                    26:93:4c:f0:76:16:12:19:47:72:37:50:e4:0c:14:
                    c0:95:81:8f:38:73:60:88:ab:37:1e:4d:08:30:24:
                    9f:48:f5:bb:d7:94:75:9a:e6:a1:31:2c:a9:20:8b:
                    4c:a5:ee:9f:c2:79:aa:a5:5c:51:97:d6:de:54:b7:
                    c9:42:ca:04:3e:48:f4:b9:2e:18:4e:c2:79:3a:33:
                    55:82:ae:68:70:7b:bd:0f:5f:bc:ca:1a:44:66:d5:
                    10:4b:7a:22:66:31:b7:de:2f:3f:f4:69:2c:85:1f:
                    e8:8f:98:23:e9:14:80:a5:e9:3e:d0:f3:a2:7e:0a:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:8A:C7:C3:74:33:03:51:69:14:A3:0C:0C:9D:0A:AD:AB:AC:65
            X509v3 Authority Key Identifier:
                keyid:BC:69:E6:90:2D:4E:1C:41:24:6F:4A:12:1B:4A:5B:DE:CF:86:E3:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGnmkC1OHEEkb0oSG0pb3s-G44g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e05ab2-23b8-4af2-b488-d3d03797259d/1/vGnmkC1OHEEkb0oSG0pb3s-G44g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1b:5b:df:9e:7d:81:70:00:4d:1d:f7:ea:2a:52:75:02:3e:
         64:a9:1a:ef:d8:07:73:a2:e2:71:9c:5f:69:7b:f0:ef:5c:c9:
         78:0e:01:88:1a:da:ea:47:e5:38:fe:16:f8:22:e0:d9:b4:12:
         46:4d:e6:e2:29:81:a2:e2:84:2b:c0:f4:a5:23:7f:14:e0:05:
         0b:55:c5:15:88:ac:f2:78:f9:ba:70:ba:6b:83:58:53:03:b9:
         10:07:13:97:45:4f:64:71:30:c2:0a:8e:06:60:29:cb:43:54:
         fa:68:ff:3f:f9:4c:fd:97:86:75:93:5a:e2:7a:7e:c7:0f:15:
         a6:65:0f:ea:8c:7f:84:22:78:b3:13:dd:1b:61:d6:dd:95:2c:
         b8:f8:6e:5e:5e:87:82:2c:7b:f7:10:09:2e:5a:57:2e:bb:2e:
         f8:ba:68:d1:80:26:00:65:bf:f0:d9:35:79:57:2f:88:75:10:
         ff:a3:59:35:da:c4:6d:a6:6a:e2:59:42:05:86:93:0a:33:1a:
         03:60:1d:05:40:fb:bd:72:01:6b:6c:15:d5:52:f0:52:d7:a5:
         3f:7f:d7:ce:b0:9a:b3:b3:60:be:4b:f8:c1:f6:c1:d0:21:c6:
         3a:a6:1f:11:bb:1e:b0:22:8f:a4:9f:6b:da:7f:e9:13:99:6c:
         40:25:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:13:26 2025 by rpki-client