Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File:                     KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier:          ZijJXsXDh8PN3y2J0Y6cIkP/DkiSLVKO8VhHuX+2qqs=
Subject key identifier:   78:7D:6F:45:8C:6A:34:E7:37:96:78:42:49:02:B8:3C:7F:53:13:30
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer:       /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial:       0194BD4E7964B3DE50E97C5B58789221260B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 17:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:24 +0000
Files and hashes:         1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: pVRrOSOKuHxkFh4GZct/Di63PNgsgq6x0M7KUKwHQGA=)
                          2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
                          3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:79:64:b3:de:50:e9:7c:5b:58:78:92:21:26:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
        Validity
            Not Before: Jan 31 17:00:24 2025 GMT
            Not After : Feb  1 17:00:24 2025 GMT
        Subject: CN=787d6f458c6a34e7379678424902b83c7f531330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:77:9c:55:8a:7e:ba:1d:22:6b:31:5e:c0:
                    d3:40:a5:f6:01:36:48:38:9b:2e:e0:3a:1c:83:f7:
                    19:3d:b4:4c:5c:92:dc:ca:15:b9:a4:90:77:cb:d6:
                    c4:f8:a6:ef:7c:17:d3:db:2f:13:84:3f:b4:7e:2e:
                    99:11:40:f4:86:66:b2:15:30:24:64:4a:90:87:61:
                    18:99:52:bf:81:bf:72:93:47:49:e2:ab:bc:d8:55:
                    7b:83:e9:f6:eb:37:84:7b:98:8f:c3:f0:b4:d6:2a:
                    29:f5:85:ff:09:f2:b6:50:88:ce:e8:59:61:8d:82:
                    c2:de:1d:6d:c6:22:7f:a2:9b:88:0d:5d:24:4f:e3:
                    91:6d:55:0a:bd:43:84:f4:10:74:7e:5c:d6:eb:ef:
                    3a:f3:f4:44:c2:c1:51:e0:f6:c2:a0:3d:e6:a5:75:
                    16:a8:aa:b8:c0:e1:86:1d:21:48:f1:f9:90:65:ef:
                    dc:6b:6a:c9:82:63:88:0e:82:bc:fe:af:99:7b:6b:
                    1b:bb:f1:bf:0e:89:b0:23:15:bc:4c:e0:7d:d9:e6:
                    a6:cb:2e:ff:d4:da:03:e0:43:c4:27:1e:8f:01:50:
                    92:ac:22:5c:26:8a:3d:d9:09:a4:9b:a8:c7:1e:39:
                    47:03:09:fb:60:f5:49:7c:98:10:df:c2:44:09:9d:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:7D:6F:45:8C:6A:34:E7:37:96:78:42:49:02:B8:3C:7F:53:13:30
            X509v3 Authority Key Identifier:
                keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3c:4c:ce:ba:00:c6:42:e9:28:fa:54:fc:91:8e:f7:e5:51:
         5e:e4:ec:a1:b8:21:9e:a0:b5:5c:48:1e:8a:47:4d:57:8e:9b:
         fb:91:8c:71:32:c6:10:b0:c4:d4:3f:4a:25:87:44:60:83:d7:
         cb:3d:47:e4:a3:b7:71:28:15:35:15:6a:43:bc:90:86:f6:02:
         0e:03:44:f6:21:03:22:0e:39:74:75:cb:45:e3:f7:28:95:03:
         22:0e:88:be:9a:62:e7:b6:91:48:aa:db:ae:1b:4b:45:f5:f0:
         a3:4b:f8:b9:f0:03:a5:cc:3f:c8:18:7a:6d:76:62:cb:df:dc:
         5f:be:1e:3d:d9:09:03:d3:9b:be:c7:f2:b9:38:6d:cc:e6:01:
         6b:e3:29:58:f2:b5:77:14:1d:40:d4:f4:44:8e:07:c8:42:f1:
         5e:65:2f:1c:e2:98:32:cf:b3:c0:bb:54:5b:2a:73:cb:96:2b:
         73:c3:55:d5:20:b9:a9:9e:82:70:dd:b5:95:b0:5f:05:ca:27:
         dd:3b:fe:7b:e5:df:e5:42:c9:7f:a1:85:db:12:09:53:b7:d5:
         b6:19:a1:00:aa:42:84:0d:eb:05:d7:c5:80:28:e2:f0:07:9f:
         33:f7:46:c7:79:e7:49:39:54:44:db:d4:92:f1:a2:33:d2:0b:
         5a:25:0f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tnlks95Q6XxbWHiSISYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NDEyNjJhY2Q2MmM5MGU2ODA4MWE2Zjc3NzM3NWRmMmMz
NzEzYzIwHhcNMjUwMTMxMTcwMDI0WhcNMjUwMjAxMTcwMDI0WjAzMTEwLwYDVQQD
Eyg3ODdkNmY0NThjNmEzNGU3Mzc5Njc4NDI0OTAyYjgzYzdmNTMxMzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb93nFWKfrodImsxXsDTQKX2ATZI
OJsu4Docg/cZPbRMXJLcyhW5pJB3y9bE+KbvfBfT2y8ThD+0fi6ZEUD0hmayFTAk
ZEqQh2EYmVK/gb9yk0dJ4qu82FV7g+n26zeEe5iPw/C01iop9YX/CfK2UIjO6Flh
jYLC3h1txiJ/opuIDV0kT+ORbVUKvUOE9BB0flzW6+868/REwsFR4PbCoD3mpXUW
qKq4wOGGHSFI8fmQZe/ca2rJgmOIDoK8/q+Ze2sbu/G/DomwIxW8TOB92eamyy7/
1NoD4EPEJx6PAVCSrCJcJoo92Qmkm6jHHjlHAwn7YPVJfJgQ38JECZ05iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh9b0WMajTnN5Z4QkkCuDx/UxMwMB8GA1UdIwQY
MBaAFChBJirNYskOaAgab3dzdd8sNxPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2It
OTVhMzNlMTJhM2FkLzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8wMzIyNzYtMjVkYy00YzMwLThhN2ItOTVhMzNlMTJhM2Fk
LzEvS0VFbUtzMWl5UTVvQ0JwdmQzTjEzeXczRThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTxMzroA
xkLpKPpU/JGO9+VRXuTsobghnqC1XEgeikdNV46b+5GMcTLGELDE1D9KJYdEYIPX
yz1H5KO3cSgVNRVqQ7yQhvYCDgNE9iEDIg45dHXLReP3KJUDIg6Ivppi57aRSKrb
rhtLRfXwo0v4ufADpcw/yBh6bXZiy9/cX74ePdkJA9ObvsfyuThtzOYBa+MpWPK1
dxQdQNT0RI4HyELxXmUvHOKYMs+zwLtUWypzy5Yrc8NV1SC5qZ6CcN21lbBfBcon
3Tv+e+Xf5ULJf6GF2xIJU7fVthmhAKpChA3rBdfFgCji8AefM/dGx3nnSTlURNvU
kvGiM9ILWiUPPA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:23 2025 by rpki-client