Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
File:                     aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json)
Hash identifier:          cJ08ehx7kN0jeOPuEl5IUjvwOhKFiVqAjRBllKdJYtE=
Subject key identifier:   53:CC:AA:D6:98:2C:51:BE:76:CD:22:DC:08:E3:19:48:F0:EF:D1:F7
Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71
Certificate issuer:       /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
Certificate serial:       0194BCE0C632E6F888B1164FC9335630A9BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft
Manifest number:          02E8
Signing time:             Fri 31 Jan 2025 15:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:34 +0000
Files and hashes:         1: _JvLFko-VE6xKiGlbuB2muI8saM.roa (hash: HfNiYuKiOBxtsDuKseMg0vsItOa/ALnz5nrDh9CeinE=)
                          2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: Kk+faFH6byEcXiyWJZpIvHIajGloVesklGcSIWps7DI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:c6:32:e6:f8:88:b1:16:4f:c9:33:56:30:a9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71
        Validity
            Not Before: Jan 31 15:00:34 2025 GMT
            Not After : Feb  1 15:00:34 2025 GMT
        Subject: CN=53ccaad6982c51be76cd22dc08e31948f0efd1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:3c:cd:b8:7e:db:f7:a7:47:83:6e:ce:36:
                    b8:6c:de:fb:78:0c:c2:76:2e:84:11:a8:54:15:01:
                    6d:41:ee:e5:4c:90:f2:9e:18:74:99:2a:5a:e5:e0:
                    44:a1:5c:8b:6f:dc:84:13:68:fc:e1:27:9e:e1:87:
                    aa:f4:d6:3f:b7:8a:98:2e:1f:c5:56:ec:c0:f5:e0:
                    62:0a:f9:56:f2:f7:ad:46:c0:c2:6f:f2:4e:8e:d7:
                    69:a2:ae:65:74:c8:a3:41:6c:f4:c4:b7:e1:88:69:
                    39:a2:96:c3:ee:4c:28:7f:85:d4:b3:2d:2e:79:b9:
                    6b:de:a5:85:ba:ac:6e:c9:8e:78:3f:70:18:91:b7:
                    2b:a4:ae:e4:fb:06:f3:ce:07:ba:3a:d2:a5:a3:e9:
                    bd:c3:93:6f:ed:68:77:76:50:98:89:bb:34:84:b0:
                    ac:e8:9a:18:79:12:5e:27:80:e5:06:bb:c6:da:07:
                    72:a2:e8:af:40:5e:cc:d9:73:98:3b:59:86:47:23:
                    c8:d8:fa:04:23:f8:ca:c9:e1:43:9e:71:49:30:f3:
                    75:7d:a4:b1:c7:ae:15:c8:44:72:e9:bd:98:02:e9:
                    ba:0d:80:86:eb:7d:35:4f:b3:04:1a:33:5b:ae:30:
                    1b:10:79:f1:26:2c:51:a2:18:d7:bc:45:12:76:97:
                    02:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:AA:D6:98:2C:51:BE:76:CD:22:DC:08:E3:19:48:F0:EF:D1:F7
            X509v3 Authority Key Identifier:
                keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:35:3f:22:2f:1b:8a:0f:19:81:0d:12:f2:d6:20:5b:f1:22:
         f5:61:b8:51:7a:46:06:bc:8c:88:6d:a5:42:4f:63:19:f7:d2:
         06:71:19:a3:7c:29:47:4d:c4:fb:0f:10:7a:86:e3:57:4d:c4:
         53:9b:14:00:99:ad:53:c0:d9:02:b1:c6:69:fb:4d:88:01:b2:
         65:6a:e1:cd:42:2a:1e:70:3f:84:78:29:ec:d1:2b:9a:f0:1c:
         c6:04:3b:1c:fa:20:14:e8:9e:24:25:9d:db:3d:71:22:81:56:
         c3:8b:5c:a7:41:d9:dd:36:16:58:c2:79:7c:15:bc:f0:41:1e:
         8e:28:25:3d:32:9a:e3:8c:5f:53:6a:6b:ae:f9:d6:72:b9:57:
         3b:2a:fb:47:1e:0a:75:41:a1:ac:1f:49:0f:f6:8b:73:c4:7a:
         02:6b:7a:3f:eb:b8:2a:91:7e:4a:2b:a2:46:8b:e3:d2:d9:58:
         44:35:43:30:48:ec:4c:d7:8a:d1:4c:b0:3c:9a:a0:2b:f4:6d:
         b8:37:d0:1c:63:8a:63:f1:89:a8:5a:c2:e8:c0:f0:b5:35:9c:
         dc:ac:06:17:52:50:ee:91:ee:88:9c:f2:c4:77:73:42:80:15:
         a6:ed:25:2e:d3:f9:b2:a1:a6:ce:e5:3c:7a:c2:0f:61:fd:01:
         fb:1d:2a:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MYy5viIsRZPyTNWMKm+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh
ZTJjNzEwHhcNMjUwMTMxMTUwMDM0WhcNMjUwMjAxMTUwMDM0WjAzMTEwLwYDVQQD
Eyg1M2NjYWFkNjk4MmM1MWJlNzZjZDIyZGMwOGUzMTk0OGYwZWZkMWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ08zbh+2/enR4Nuzja4bN77eAzC
di6EEahUFQFtQe7lTJDynhh0mSpa5eBEoVyLb9yEE2j84See4Yeq9NY/t4qYLh/F
VuzA9eBiCvlW8vetRsDCb/JOjtdpoq5ldMijQWz0xLfhiGk5opbD7kwof4XUsy0u
eblr3qWFuqxuyY54P3AYkbcrpK7k+wbzzge6OtKlo+m9w5Nv7Wh3dlCYibs0hLCs
6JoYeRJeJ4DlBrvG2gdyouivQF7M2XOYO1mGRyPI2PoEI/jKyeFDnnFJMPN1faSx
x64VyERy6b2YAum6DYCG6301T7MEGjNbrjAbEHnxJixRohjXvEUSdpcCgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPMqtaYLFG+ds0i3AjjGUjw79H3MB8GA1UdIwQY
MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt
NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1
LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTU/Ii8b
ig8ZgQ0S8tYgW/Ei9WG4UXpGBryMiG2lQk9jGffSBnEZo3wpR03E+w8QeobjV03E
U5sUAJmtU8DZArHGaftNiAGyZWrhzUIqHnA/hHgp7NErmvAcxgQ7HPogFOieJCWd
2z1xIoFWw4tcp0HZ3TYWWMJ5fBW88EEejiglPTKa44xfU2prrvnWcrlXOyr7Rx4K
dUGhrB9JD/aLc8R6Amt6P+u4KpF+SiuiRovj0tlYRDVDMEjsTNeK0UywPJqgK/Rt
uDfQHGOKY/GJqFrC6MDwtTWc3KwGF1JQ7pHuiJzyxHdzQoAVpu0lLtP5sqGmzuU8
esIPYf0B+x0q9Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:09:13 2025 by rpki-client