Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.mft
File:                     bVyM744roqd9I-G7wNTxs94u9aA.mft (raw, json)
Hash identifier:          EqrzJ6Vwx2ihEsAH503Hl/bgCt9nJb+GDL0xklZmCp0=
Subject key identifier:   43:86:11:24:7E:99:F1:2F:49:ED:40:D6:CB:C6:38:8C:67:F0:6C:EB
Authority key identifier: 6D:5C:8C:EF:8E:2B:A2:A7:7D:23:E1:BB:C0:D4:F1:B3:DE:2E:F5:A0
Certificate issuer:       /CN=6d5c8cef8e2ba2a77d23e1bbc0d4f1b3de2ef5a0
Certificate serial:       0190250003146AFD4BA77FCFAC0678F92A03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVyM744roqd9I-G7wNTxs94u9aA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.mft
Manifest number:          02BB
Signing time:             Mon 17 Jun 2024 07:01:16 +0000
Manifest this update:     Mon 17 Jun 2024 07:01:16 +0000
Manifest next update:     Tue 18 Jun 2024 07:01:16 +0000
Files and hashes:         1: bVyM744roqd9I-G7wNTxs94u9aA.crl (hash: 7Ps4hnTe7aqpCTrdUwN5rPBM5azOZqqqbSkqEW+hSNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:25:00:03:14:6a:fd:4b:a7:7f:cf:ac:06:78:f9:2a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d5c8cef8e2ba2a77d23e1bbc0d4f1b3de2ef5a0
        Validity
            Not Before: Jun 17 07:01:16 2024 GMT
            Not After : Jun 18 07:01:16 2024 GMT
        Subject: CN=438611247e99f12f49ed40d6cbc6388c67f06ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:da:c7:35:16:fd:b4:eb:ba:90:52:17:df:b1:
                    7c:0e:3d:ef:ef:db:d3:30:8c:52:b0:4e:87:68:02:
                    78:49:20:b2:98:29:e8:50:b0:c9:8a:dd:4f:a3:08:
                    10:82:ca:c2:2e:fc:30:01:9c:f5:c8:8e:fb:a2:5d:
                    7b:c0:17:bd:57:67:21:a4:f9:71:8a:7a:fb:64:e5:
                    0e:cd:47:b8:b5:9e:c3:33:f7:05:25:80:80:e7:15:
                    83:b3:db:51:13:71:cb:9a:d8:80:f4:09:22:14:99:
                    87:91:cd:01:0a:ac:bb:db:50:8a:bc:b0:a0:f2:3b:
                    33:7b:3e:a5:6a:08:c4:34:b4:2b:61:38:4b:22:bc:
                    14:36:29:dc:ca:28:98:3a:79:a3:91:ee:9b:3d:e7:
                    a1:5e:15:37:e7:a7:a0:3e:ab:8e:d1:1c:9b:d2:d5:
                    57:cf:7b:3b:2d:01:8d:ef:93:57:82:2c:ac:2e:ff:
                    ae:11:3e:89:37:7a:ab:f5:78:bb:7e:cf:2a:cc:57:
                    69:0f:4a:ba:ea:93:89:81:23:69:23:93:98:7e:56:
                    4a:56:18:26:cf:30:ea:8b:83:29:a5:90:ed:d8:1c:
                    f6:c9:61:be:b8:00:d4:22:94:10:41:40:3e:8a:af:
                    58:74:39:b4:aa:d6:72:25:98:c2:75:d7:fc:66:67:
                    be:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:86:11:24:7E:99:F1:2F:49:ED:40:D6:CB:C6:38:8C:67:F0:6C:EB
            X509v3 Authority Key Identifier:
                keyid:6D:5C:8C:EF:8E:2B:A2:A7:7D:23:E1:BB:C0:D4:F1:B3:DE:2E:F5:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVyM744roqd9I-G7wNTxs94u9aA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f5b6cb-accd-40ba-a95a-986395acf512/1/bVyM744roqd9I-G7wNTxs94u9aA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:3c:d5:b2:4d:16:1e:54:ae:4f:f0:8e:b6:e9:b6:f7:1e:
         54:7e:0e:e2:a2:f8:10:12:0e:ae:4a:0e:24:2c:ec:aa:58:e2:
         54:21:7f:c2:4d:47:cc:80:57:14:35:02:72:3c:4f:67:12:27:
         4a:99:98:65:03:19:33:bb:ac:7d:49:fb:6e:d2:92:fd:a7:69:
         ae:76:4f:6b:11:4a:ff:61:0a:12:2e:f4:61:68:0a:7c:7a:a7:
         fb:32:99:df:70:3e:1f:77:cf:1c:1f:5f:03:1f:de:4d:73:ed:
         d2:52:fa:17:a9:37:b4:25:14:42:de:f8:30:ab:d8:b4:b9:09:
         8c:72:c8:6f:cb:d2:51:10:0e:00:96:3c:e4:1d:2e:69:f3:7c:
         9c:b7:9a:ae:e3:47:cc:88:ec:f3:cc:af:dc:b4:77:53:13:c1:
         a9:94:7f:57:ca:3e:69:e5:60:bd:3d:e6:d2:c9:64:9e:6c:14:
         6c:de:3f:8c:36:6c:34:21:c1:01:1c:87:13:24:65:ed:1c:87:
         73:82:64:50:a5:86:a3:9e:a5:af:ee:83:75:9d:42:38:0e:35:
         ba:5c:33:6c:1f:4b:ff:00:e0:5e:f8:c2:60:07:e8:d9:b2:74:
         e3:8d:11:7e:e5:68:42:e2:07:3a:1d:b9:c1:44:b0:ab:c7:85:
         6f:1a:0f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:20:17 2025 by rpki-client