Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
File:                     fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json)
Hash identifier:          aQ+xDy++3a8vYXWgU7ZbU+KLPCkaMbiDxBXa5rSr6Ms=
Subject key identifier:   17:EA:B6:78:C4:99:CB:68:D3:59:F2:95:E4:38:DB:10:2F:E2:68:CB
Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C
Certificate issuer:       /CN=7e7a20b486821d627bd36095e7a05af9faa1529c
Certificate serial:       0194BCE0CF88714EF367B81CBC1B87E88BFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft
Manifest number:          04D7
Signing time:             Fri 31 Jan 2025 15:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:37 +0000
Files and hashes:         1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: C+4J5UOol/wu4jbp9oa6PC4aGxspg1SBj4FPz7ZWw2c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:cf:88:71:4e:f3:67:b8:1c:bc:1b:87:e8:8b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c
        Validity
            Not Before: Jan 31 15:00:37 2025 GMT
            Not After : Feb  1 15:00:37 2025 GMT
        Subject: CN=17eab678c499cb68d359f295e438db102fe268cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:2a:17:62:0c:ed:e3:39:59:65:36:35:9d:
                    79:cd:21:63:9e:ec:c5:00:4b:83:cb:79:26:5e:cc:
                    57:bc:8c:96:0d:11:aa:ce:4a:84:0f:3e:dc:6e:ba:
                    04:6b:85:4a:b5:85:28:fe:11:5c:06:7d:35:89:a6:
                    80:30:1c:af:61:b7:87:92:30:46:84:98:e0:9e:bb:
                    30:ae:be:13:c1:40:a3:1c:ee:3b:f0:ac:e5:28:2d:
                    80:46:86:09:fe:b0:52:92:0a:d3:95:0b:53:27:82:
                    4b:98:c0:1d:68:46:57:e2:5d:35:c7:ad:bd:e2:c7:
                    77:3f:fc:e5:c5:41:f3:52:1c:c2:05:35:64:53:b7:
                    78:7b:be:64:0e:27:be:0d:ff:91:36:7b:d5:da:88:
                    c1:f1:17:ef:ce:32:91:22:73:c3:31:f7:c8:76:8b:
                    18:b5:25:36:f9:25:24:0e:f9:e3:3e:90:8e:32:40:
                    27:30:bf:1d:fd:9e:3e:66:2b:e3:07:11:dd:ce:11:
                    94:14:ae:51:9e:07:76:0a:63:8f:eb:7a:b2:6d:53:
                    64:23:dd:e5:b1:74:bd:80:73:5e:37:6f:44:23:44:
                    26:3d:88:ab:d9:b9:75:f8:ab:ae:61:07:c5:f6:20:
                    0f:b7:e7:27:23:68:47:be:c4:39:40:f2:3b:5d:b4:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EA:B6:78:C4:99:CB:68:D3:59:F2:95:E4:38:DB:10:2F:E2:68:CB
            X509v3 Authority Key Identifier:
                keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:c9:42:79:11:eb:e2:3c:bb:85:aa:a1:8f:0f:14:c7:b6:
         36:82:48:4d:6a:67:f9:b4:d5:86:3a:6a:28:35:9d:c9:b0:cd:
         c2:d5:b3:f1:38:14:0e:81:38:99:51:8e:00:f9:ca:9e:c3:7f:
         27:bd:e2:ac:60:c9:75:4c:ac:a5:56:29:fc:5f:42:59:49:95:
         b3:f0:96:ab:e6:7b:c4:b6:1e:02:24:31:a0:73:e4:6e:27:e6:
         54:ca:0d:0a:34:bf:31:41:0b:10:f9:25:6a:13:25:08:55:33:
         f1:c1:1c:a2:a3:58:39:8d:0d:18:fc:ba:ad:cd:52:9a:6b:c4:
         82:72:e4:e8:df:4a:a5:f7:2c:dc:ee:7d:a6:d3:a8:64:a8:4f:
         87:e9:2f:85:f3:a0:78:9d:fc:ca:c7:d1:72:9e:f5:6f:78:0a:
         17:42:75:25:0e:c7:5f:19:92:f1:2a:cb:ed:c5:ca:2a:75:6e:
         e5:7d:d4:55:7b:ef:a3:89:5e:56:53:a5:9d:a3:3b:dc:f4:74:
         74:35:9e:d5:56:79:51:6d:af:bd:69:a7:44:f0:fe:27:fa:5d:
         10:f8:bc:00:2d:fc:37:82:52:3a:a4:a3:40:27:d9:0b:e9:d4:
         e8:64:28:72:57:ae:07:03:11:3c:8d:a7:c9:38:ed:d6:19:e4:
         b2:f8:09:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M+IcU7zZ7gcvBuH6Iv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlN2EyMGI0ODY4MjFkNjI3YmQzNjA5NWU3YTA1YWY5ZmFh
MTUyOWMwHhcNMjUwMTMxMTUwMDM3WhcNMjUwMjAxMTUwMDM3WjAzMTEwLwYDVQQD
EygxN2VhYjY3OGM0OTljYjY4ZDM1OWYyOTVlNDM4ZGIxMDJmZTI2OGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqwqF2IM7eM5WWU2NZ15zSFjnuzF
AEuDy3kmXsxXvIyWDRGqzkqEDz7cbroEa4VKtYUo/hFcBn01iaaAMByvYbeHkjBG
hJjgnrswrr4TwUCjHO478KzlKC2ARoYJ/rBSkgrTlQtTJ4JLmMAdaEZX4l01x629
4sd3P/zlxUHzUhzCBTVkU7d4e75kDie+Df+RNnvV2ojB8RfvzjKRInPDMffIdosY
tSU2+SUkDvnjPpCOMkAnML8d/Z4+ZivjBxHdzhGUFK5Rngd2CmOP63qybVNkI93l
sXS9gHNeN29EI0QmPYir2bl1+KuuYQfF9iAPt+cnI2hHvsQ5QPI7XbSJgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBfqtnjEmcto01nyleQ42xAv4mjLMB8GA1UdIwQY
MBaAFH56ILSGgh1ie9NgleegWvn6oVKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUt
YmE3NWY0NzVmYzNlLzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUtYmE3NWY0NzVmYzNl
LzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1LJQnkR
6+I8u4WqoY8PFMe2NoJITWpn+bTVhjpqKDWdybDNwtWz8TgUDoE4mVGOAPnKnsN/
J73irGDJdUyspVYp/F9CWUmVs/CWq+Z7xLYeAiQxoHPkbifmVMoNCjS/MUELEPkl
ahMlCFUz8cEcoqNYOY0NGPy6rc1SmmvEgnLk6N9Kpfcs3O59ptOoZKhPh+kvhfOg
eJ38ysfRcp71b3gKF0J1JQ7HXxmS8SrL7cXKKnVu5X3UVXvvo4leVlOlnaM73PR0
dDWe1VZ5UW2vvWmnRPD+J/pdEPi8AC38N4JSOqSjQCfZC+nU6GQocleuBwMRPI2n
yTjt1hnksvgJwA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:29 2025 by rpki-client