Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
File:                     F1aQfnINPe6fr34YLz2ejmIe3II.mft (raw, json)
Hash identifier:          xD/5SPUfaKEqTF5t5PjJESMDRhON+Y7El7+siTX77m8=
Subject key identifier:   A6:37:F6:E5:18:DD:CF:FE:61:32:A5:1A:76:80:58:24:A9:AC:23:CE
Authority key identifier: 17:56:90:7E:72:0D:3D:EE:9F:AF:7E:18:2F:3D:9E:8E:62:1E:DC:82
Certificate issuer:       /CN=1756907e720d3dee9faf7e182f3d9e8e621edc82
Certificate serial:       0194BC3BDCB34857532990CDD9B03EF4C9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1aQfnINPe6fr34YLz2ejmIe3II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft
Manifest number:          1097
Signing time:             Fri 31 Jan 2025 12:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:27 +0000
Files and hashes:         1: F1aQfnINPe6fr34YLz2ejmIe3II.crl (hash: kcOQyXMOIynDKPxWfnNAxk9OQC8Vsh4yV5qklW8or80=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:dc:b3:48:57:53:29:90:cd:d9:b0:3e:f4:c9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1756907e720d3dee9faf7e182f3d9e8e621edc82
        Validity
            Not Before: Jan 31 12:00:27 2025 GMT
            Not After : Feb  1 12:00:27 2025 GMT
        Subject: CN=a637f6e518ddcffe6132a51a76805824a9ac23ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f0:6d:08:1f:7a:d8:93:14:bb:a9:aa:b5:27:
                    33:90:29:e2:d8:ed:ad:e0:eb:58:da:c1:60:0d:b9:
                    4b:94:71:df:f5:08:53:38:b3:36:29:bf:10:8b:f0:
                    a9:b7:48:9b:3f:ec:2d:dd:75:28:ad:d7:a6:bb:2a:
                    83:c2:73:6f:03:d9:e1:b4:07:d8:7c:d0:2f:2c:c8:
                    eb:57:57:64:f1:64:13:6b:1c:6e:6b:0b:7a:e7:b8:
                    63:c2:80:99:39:7d:9e:ab:23:95:cf:bc:57:51:94:
                    6e:6e:91:e2:f2:1f:bd:10:56:98:9f:b9:df:45:95:
                    2f:9b:4a:e5:6e:2d:81:85:66:c2:c6:c0:9e:33:99:
                    6a:cc:03:52:49:e1:50:74:68:3a:3f:c1:ee:7b:56:
                    e3:3c:14:bc:5d:32:18:9b:50:bc:3e:d8:ae:c5:41:
                    28:d2:c6:4f:a3:49:e0:92:f7:56:44:68:3a:67:b4:
                    ef:79:f5:5c:3d:ff:ec:e7:0a:97:26:87:96:e4:6f:
                    f2:c9:2e:04:df:40:dc:11:19:4d:89:35:80:29:e0:
                    59:22:48:0c:1d:e9:30:d5:03:b0:1c:95:cc:33:f4:
                    7c:f4:4b:c4:8f:69:2f:f8:68:83:dc:87:7b:02:8d:
                    d5:72:f7:b4:ad:3f:26:89:40:4d:f0:a0:15:99:78:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:F6:E5:18:DD:CF:FE:61:32:A5:1A:76:80:58:24:A9:AC:23:CE
            X509v3 Authority Key Identifier:
                keyid:17:56:90:7E:72:0D:3D:EE:9F:AF:7E:18:2F:3D:9E:8E:62:1E:DC:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1aQfnINPe6fr34YLz2ejmIe3II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/5e41cb-98d6-4653-bb04-147a46e9426b/1/F1aQfnINPe6fr34YLz2ejmIe3II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:66:15:44:aa:d0:f3:07:ff:32:d8:ea:c1:5e:0c:75:cc:04:
         ac:61:79:fd:2d:49:d1:4b:25:04:cd:c8:db:d1:80:14:db:d2:
         c3:9c:00:05:5d:c7:c0:b2:7b:c7:e1:dd:86:93:42:3d:2d:c0:
         ef:94:1e:25:53:bf:fd:b2:47:d5:8e:44:91:54:9f:17:6f:a4:
         66:24:43:03:c7:ea:4f:f4:1e:a0:23:bb:bc:db:c7:4c:ff:d2:
         88:97:2e:aa:22:e0:f9:80:fc:10:af:92:a9:93:dc:50:69:c3:
         20:3d:e5:0a:82:70:97:d3:51:d6:d7:e0:48:0c:d0:6f:59:3c:
         aa:1a:a9:b5:de:0b:5e:b1:9e:53:04:25:66:b0:bd:bf:65:45:
         a5:c7:70:4c:99:96:57:f3:1b:55:61:9d:00:95:45:14:f6:5a:
         29:fb:7d:6b:84:a1:9f:60:07:7d:b2:c2:99:da:4f:e6:78:f5:
         40:1b:39:0d:9a:c3:52:c3:24:6b:a3:40:3e:08:8c:ff:a5:79:
         cf:f4:73:3c:b8:4f:d2:82:dd:6e:5b:ce:b5:ea:e0:74:2c:92:
         93:81:d4:2a:15:14:9e:55:44:01:0c:37:e0:c5:82:c0:80:89:
         25:2b:8a:53:c5:86:a3:13:79:3a:7b:7a:9d:f0:7e:28:01:1f:
         d8:11:a2:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O9yzSFdTKZDN2bA+9MnHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTY5MDdlNzIwZDNkZWU5ZmFmN2UxODJmM2Q5ZThlNjIx
ZWRjODIwHhcNMjUwMTMxMTIwMDI3WhcNMjUwMjAxMTIwMDI3WjAzMTEwLwYDVQQD
EyhhNjM3ZjZlNTE4ZGRjZmZlNjEzMmE1MWE3NjgwNTgyNGE5YWMyM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PBtCB962JMUu6mqtSczkCni2O2t
4OtY2sFgDblLlHHf9QhTOLM2Kb8Qi/Cpt0ibP+wt3XUordemuyqDwnNvA9nhtAfY
fNAvLMjrV1dk8WQTaxxuawt657hjwoCZOX2eqyOVz7xXUZRubpHi8h+9EFaYn7nf
RZUvm0rlbi2BhWbCxsCeM5lqzANSSeFQdGg6P8Hue1bjPBS8XTIYm1C8PtiuxUEo
0sZPo0ngkvdWRGg6Z7TvefVcPf/s5wqXJoeW5G/yyS4E30DcERlNiTWAKeBZIkgM
Hekw1QOwHJXMM/R89EvEj2kv+GiD3Id7Ao3Vcve0rT8miUBN8KAVmXjLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKY39uUY3c/+YTKlGnaAWCSprCPOMB8GA1UdIwQY
MBaAFBdWkH5yDT3un69+GC89no5iHtyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFhUWZuSU5QZTZmcjM0WUx6MmVqbUllM0lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81ZTQxY2ItOThkNi00NjUzLWJiMDQt
MTQ3YTQ2ZTk0MjZiLzEvRjFhUWZuSU5QZTZmcjM0WUx6MmVqbUllM0lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81ZTQxY2ItOThkNi00NjUzLWJiMDQtMTQ3YTQ2ZTk0MjZi
LzEvRjFhUWZuSU5QZTZmcjM0WUx6MmVqbUllM0lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGYVRKrQ
8wf/MtjqwV4MdcwErGF5/S1J0UslBM3I29GAFNvSw5wABV3HwLJ7x+HdhpNCPS3A
75QeJVO//bJH1Y5EkVSfF2+kZiRDA8fqT/QeoCO7vNvHTP/SiJcuqiLg+YD8EK+S
qZPcUGnDID3lCoJwl9NR1tfgSAzQb1k8qhqptd4LXrGeUwQlZrC9v2VFpcdwTJmW
V/MbVWGdAJVFFPZaKft9a4Shn2AHfbLCmdpP5nj1QBs5DZrDUsMka6NAPgiM/6V5
z/RzPLhP0oLdblvOtergdCySk4HUKhUUnlVEAQw34MWCwICJJSuKU8WGoxN5Ont6
nfB+KAEf2BGiug==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:08 2025 by rpki-client