Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File:                     b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier:          zLJmVYgdh0M+KcGVBXTKHiVdqrC4TFOTqMIMGmjL3us=
Subject key identifier:   5F:FA:46:9B:2E:D4:5A:AD:19:DC:12:76:31:1B:57:10:A7:FD:02:D8
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer:       /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial:       0195E158EEB1D9DBE8D84F439526CC018334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 10:00:56 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:56 +0000
Manifest next update:     Sun 30 Mar 2025 10:00:56 +0000
Files and hashes:         1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: ARYq/V//xp2YnxtdSNK2b6G+4R/nphavRXW6e6c3bdQ=)
                          2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:58:ee:b1:d9:db:e8:d8:4f:43:95:26:cc:01:83:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
        Validity
            Not Before: Mar 29 10:00:56 2025 GMT
            Not After : Mar 30 10:00:56 2025 GMT
        Subject: CN=5ffa469b2ed45aad19dc1276311b5710a7fd02d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:47:8b:b3:02:13:f7:2b:01:69:65:2e:9f:
                    4e:b1:7a:98:96:62:a9:89:c8:e6:08:4b:45:70:40:
                    aa:39:18:30:b5:df:e2:48:ea:bc:f9:ac:34:6c:37:
                    9b:11:dc:cc:12:57:00:c5:de:e5:e0:55:fe:ad:99:
                    81:c1:28:76:79:0a:6e:92:9b:11:07:ad:f3:eb:63:
                    ea:e1:3f:2a:e7:f0:85:9c:6e:f3:0d:9f:d4:52:9d:
                    56:79:70:32:3c:4b:56:4d:6a:e5:0b:63:c1:a3:7e:
                    a4:10:7f:ec:58:7d:8b:d8:70:22:4e:d6:21:ef:8a:
                    bf:4b:d4:a8:b7:98:77:9d:28:06:48:be:f5:01:06:
                    2f:36:36:84:f7:1a:ca:8e:56:4b:29:e5:2c:14:c5:
                    d0:32:2f:b2:cd:7a:7f:77:dd:0e:2a:0e:09:2a:ad:
                    b2:e5:d9:69:e8:2e:b0:ec:a3:3d:91:a8:fe:c7:b4:
                    b0:e4:e8:57:11:6e:cc:a4:24:4f:89:f2:a5:6b:97:
                    1b:e8:b9:f9:33:3e:61:51:18:2f:99:7c:66:6b:16:
                    57:9a:bd:25:4f:2a:de:32:3c:d8:d9:50:11:75:e3:
                    00:e3:4e:da:c8:88:3a:4e:a1:d4:14:eb:28:ee:4c:
                    80:fd:4d:f1:7b:ac:a9:0d:28:1d:b7:4b:61:ea:0d:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FA:46:9B:2E:D4:5A:AD:19:DC:12:76:31:1B:57:10:A7:FD:02:D8
            X509v3 Authority Key Identifier:
                keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:7b:60:30:45:ef:cd:2f:bb:ed:53:b2:ec:16:cc:49:4f:bc:
         fc:c5:34:6c:57:5b:32:a6:6f:e9:c7:4d:95:de:18:01:95:4b:
         15:a6:89:1b:d8:99:ed:67:a5:dc:62:c4:f4:7e:45:91:45:92:
         35:51:e2:12:70:43:8e:57:00:c2:70:16:1f:70:6c:36:05:ec:
         b2:98:7c:e5:a2:42:51:fa:4b:0f:4a:c5:7c:9d:6b:ae:81:ed:
         7e:76:d3:8d:12:5a:64:2d:0f:01:42:ba:1a:31:49:0c:19:00:
         90:aa:3a:77:eb:88:34:f0:4e:bf:15:05:8b:87:19:43:05:9d:
         29:b6:06:3c:bf:da:4f:4d:37:13:cc:a1:98:f7:e8:0a:b4:10:
         bd:ce:a1:2e:4f:0b:80:9e:f8:48:ca:08:2b:72:f5:ab:39:21:
         20:64:21:e6:b4:91:d7:c1:e1:87:d1:ba:80:12:0e:7f:2a:ce:
         60:a8:a0:87:42:db:a5:88:aa:8e:f1:22:1a:8b:e4:5a:37:31:
         bd:6c:98:2a:c3:71:0e:61:58:90:8c:5a:d0:ad:a8:27:e9:1b:
         d2:e3:33:97:1b:84:3f:07:60:70:00:a5:10:34:6e:9f:71:1e:
         e4:8f:2c:c2:f0:58:7e:db:86:0d:b0:c7:5e:ab:c9:2b:9f:f5:
         fa:54:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:06 2025 by rpki-client