Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File:                     fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier:          uszWhDBOlOcI//I2/SfOd9C+Spl83SijcfEeY0hpgQ8=
Subject key identifier:   32:84:C8:8B:91:96:E9:15:68:23:C1:86:74:60:D7:51:53:75:49:61
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer:       /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial:       0194BC3BCB6523E7229041176657647EFD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number:          0850
Signing time:             Fri 31 Jan 2025 12:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:22 +0000
Files and hashes:         1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=)
                          2: VL6tIDAwh1592bQEXFtNufXMtM0.roa (hash: ymvxtnOEwY3IPkqPxYopnUWehdDLDk7SHBAfVLjkM2A=)
                          3: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: ywhy0O9Si6jKEL8xlGj2hWKNM5EItvHG+UzdlBaeZP8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:cb:65:23:e7:22:90:41:17:66:57:64:7e:fd:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
        Validity
            Not Before: Jan 31 12:00:22 2025 GMT
            Not After : Feb  1 12:00:22 2025 GMT
        Subject: CN=3284c88b9196e9156823c1867460d75153754961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:33:1f:15:5d:94:08:57:da:d6:1d:a2:8a:ac:
                    4a:09:03:95:14:b9:1c:34:9b:84:4d:df:6c:db:1c:
                    19:ff:c9:16:07:50:eb:b1:72:7a:e5:ce:c1:79:e2:
                    96:0b:9a:4c:a1:82:39:e3:fb:11:cc:e7:1c:4e:cc:
                    1f:7b:75:27:15:22:f5:b8:a0:1d:b0:55:f3:45:26:
                    69:16:b5:81:44:6d:85:c0:fe:7f:50:48:c2:e3:f5:
                    80:98:5a:ec:7b:68:03:97:61:92:67:ae:af:04:af:
                    21:30:e9:7b:83:49:90:27:06:dc:a7:1a:87:da:53:
                    15:51:20:97:ba:43:ec:cc:89:75:41:f9:53:24:22:
                    43:1e:53:14:3d:1f:f0:ed:0f:af:76:ff:b8:6c:00:
                    8d:dc:fe:05:7a:01:d9:08:45:28:45:cf:a8:e6:9a:
                    ec:6f:72:f9:c5:7b:f7:a9:80:cc:28:cd:6e:4e:1d:
                    a3:1e:5d:e5:66:7f:19:96:31:4a:6e:ea:2c:a0:d0:
                    7b:1d:3d:43:a5:ea:99:e0:f4:63:6a:40:a5:ef:25:
                    56:2c:1e:8c:8c:2d:fe:37:cd:f4:8b:8b:f7:44:7c:
                    e7:23:d5:a3:44:88:c4:8b:b6:7f:f4:9c:fb:37:d5:
                    97:83:5b:b5:93:72:fe:4b:15:2f:a8:95:36:05:89:
                    9e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:84:C8:8B:91:96:E9:15:68:23:C1:86:74:60:D7:51:53:75:49:61
            X509v3 Authority Key Identifier:
                keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:14:f0:a1:37:81:6b:e9:b0:00:af:05:26:0e:01:5d:57:0e:
         31:aa:5d:0c:8d:9f:62:d6:4b:67:63:99:d7:27:49:87:3d:4e:
         91:89:fc:d2:a9:2c:ee:1b:cf:99:83:27:85:46:a3:8a:5b:7a:
         d6:f4:a9:b0:31:72:35:19:bf:d4:b3:fc:40:32:19:a4:8d:17:
         1f:c6:1a:52:d9:ae:ec:c8:36:f0:29:dd:1a:a8:38:2a:a9:ef:
         9c:ee:04:c9:1a:19:bf:7a:b5:4a:2d:df:6b:3f:ed:e4:90:7e:
         b3:fd:44:3e:1a:ef:4b:ce:e5:6f:0f:c8:b9:53:73:ec:e1:65:
         fa:d6:45:fa:3c:99:bc:ee:0f:45:13:26:ef:85:09:4f:f5:e3:
         29:1a:49:2c:ca:e6:ee:6f:3e:44:78:ea:bd:e8:53:e3:de:56:
         ad:c9:07:fa:bb:a9:f4:e0:21:a3:ff:8a:f3:3d:2c:40:c1:ed:
         9a:63:24:90:16:bc:b4:f5:7c:e5:89:43:11:1f:3b:53:ce:c7:
         e0:bc:cc:96:c9:97:d3:ad:e0:fe:ef:8d:70:64:c5:d7:3c:4d:
         dc:0b:3f:f0:b2:27:82:e5:b3:3d:1a:f4:c2:b6:0f:5c:fe:6f:
         34:a6:80:52:ac:25:20:9c:59:d8:37:0d:b9:e3:fd:a9:70:bf:
         fd:7d:97:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8tlI+cikEEXZldkfv2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3
ODRmODMwHhcNMjUwMTMxMTIwMDIyWhcNMjUwMjAxMTIwMDIyWjAzMTEwLwYDVQQD
EygzMjg0Yzg4YjkxOTZlOTE1NjgyM2MxODY3NDYwZDc1MTUzNzU0OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMfFV2UCFfa1h2iiqxKCQOVFLkc
NJuETd9s2xwZ/8kWB1DrsXJ65c7BeeKWC5pMoYI54/sRzOccTswfe3UnFSL1uKAd
sFXzRSZpFrWBRG2FwP5/UEjC4/WAmFrse2gDl2GSZ66vBK8hMOl7g0mQJwbcpxqH
2lMVUSCXukPszIl1QflTJCJDHlMUPR/w7Q+vdv+4bACN3P4FegHZCEUoRc+o5prs
b3L5xXv3qYDMKM1uTh2jHl3lZn8ZljFKbuosoNB7HT1DpeqZ4PRjakCl7yVWLB6M
jC3+N830i4v3RHznI9WjRIjEi7Z/9Jz7N9WXg1u1k3L+SxUvqJU2BYmekQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKEyIuRlukVaCPBhnRg11FTdUlhMB8GA1UdIwQY
MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt
MmYyMzAwYjZlM2Q5LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5
LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRTwoTeB
a+mwAK8FJg4BXVcOMapdDI2fYtZLZ2OZ1ydJhz1OkYn80qks7hvPmYMnhUajilt6
1vSpsDFyNRm/1LP8QDIZpI0XH8YaUtmu7Mg28CndGqg4KqnvnO4EyRoZv3q1Si3f
az/t5JB+s/1EPhrvS87lbw/IuVNz7OFl+tZF+jyZvO4PRRMm74UJT/XjKRpJLMrm
7m8+RHjqvehT495WrckH+rup9OAho/+K8z0sQMHtmmMkkBa8tPV85YlDER87U87H
4LzMlsmX063g/u+NcGTF1zxN3As/8LInguWzPRr0wrYPXP5vNKaAUqwlIJxZ2DcN
ueP9qXC//X2XXA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:12 2025 by rpki-client