Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File:                     1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier:          Q0lSWKI5ahcEfFEtjALKCTlHzMDfEtxaiPan3vtMb5A=
Subject key identifier:   EE:92:80:35:C1:23:63:C3:50:12:A0:03:49:80:F0:03:74:68:3A:1F
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer:       /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial:       0194BD855AB722A5AB8C7762F3A40504E965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number:          0284
Signing time:             Fri 31 Jan 2025 18:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:20 +0000
Files and hashes:         1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: GIKdcKaKhXyMF1VyHQACNWVnUi54li8ztUYDkcjaUTs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:5a:b7:22:a5:ab:8c:77:62:f3:a4:05:04:e9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
        Validity
            Not Before: Jan 31 18:00:20 2025 GMT
            Not After : Feb  1 18:00:20 2025 GMT
        Subject: CN=ee928035c12363c35012a0034980f00374683a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:82:01:b3:e9:94:f5:d1:8c:d5:76:44:7c:27:
                    bf:27:df:f2:ea:11:5e:47:43:65:33:9b:6e:9a:92:
                    2e:05:01:20:43:58:33:b6:14:3b:ab:22:37:ab:96:
                    c2:ca:07:25:e5:3d:4a:c0:c6:c1:09:bc:9c:b8:73:
                    43:56:ec:ba:e8:c3:e6:1d:ed:2e:2d:d9:8e:57:33:
                    bd:54:1d:31:20:cf:4e:cf:1f:0b:eb:85:bf:d7:d5:
                    bf:34:98:0b:ac:8d:26:ec:90:b6:61:a7:b5:5d:96:
                    73:a7:d8:31:ec:04:cc:e8:f3:81:8a:61:9e:b3:30:
                    56:b5:a6:94:d8:47:26:e0:72:bf:e0:26:ab:c2:96:
                    34:45:ef:1a:ce:20:08:8a:2b:40:75:0c:01:6e:ed:
                    23:9e:1a:aa:30:47:4c:4c:72:e4:4c:bc:b9:c6:56:
                    ef:87:35:61:e9:99:8e:7f:83:05:77:3e:f9:fd:6a:
                    7e:a2:2c:37:71:b3:7d:28:c0:f9:16:72:cd:68:32:
                    55:32:22:f3:6b:e4:9c:17:69:ee:be:e1:b4:f2:3d:
                    e6:20:87:f6:6d:5e:9a:6f:3c:51:24:2d:af:cb:16:
                    ff:28:77:07:62:a2:64:d1:b5:86:b8:5d:57:93:04:
                    45:a6:61:95:57:f4:71:84:d7:21:6a:56:91:57:15:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:92:80:35:C1:23:63:C3:50:12:A0:03:49:80:F0:03:74:68:3A:1F
            X509v3 Authority Key Identifier:
                keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f2:e9:a6:d3:7e:69:50:c0:28:db:e7:f2:ba:61:61:d1:6b:
         cf:52:0f:62:47:99:35:7e:78:8b:d9:98:41:27:c0:d3:3c:10:
         11:a7:ee:77:a5:fe:99:72:5a:10:38:26:5e:db:ec:18:cb:e7:
         9e:cc:8f:e8:de:9d:aa:1d:48:f7:83:23:2d:55:2d:47:fb:e5:
         5a:0f:3d:d4:ac:40:b2:e8:7c:9e:68:76:27:18:34:8a:79:16:
         91:78:93:84:bb:43:03:ca:3b:2a:5b:fc:9f:ea:a1:f9:da:d0:
         a1:a6:89:74:db:63:cd:51:87:06:9a:d7:b0:86:82:3c:41:d4:
         9f:2b:4d:99:fe:bf:f3:4c:b8:82:c4:1e:78:09:17:cf:ae:ca:
         bc:ec:c8:62:1b:aa:ab:de:d7:42:cf:44:09:2f:b3:2c:7b:ab:
         14:0e:dc:f3:89:fc:b3:42:06:97:d0:a0:0b:2d:85:20:fc:bc:
         7b:60:1c:14:8e:97:af:43:4e:13:8c:35:14:81:a4:fb:e0:fc:
         c8:77:67:2a:51:96:28:5c:f4:98:90:93:59:71:36:8d:a0:f4:
         fe:c1:a8:b0:06:56:d7:e5:b5:9a:0c:04:0b:43:9e:e5:d4:3d:
         1d:bb:9e:9f:2c:1e:7e:f1:7e:f7:23:4e:57:2f:9a:a3:ef:57:
         b0:04:d7:a1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS9hVq3IqWrjHdi86QFBOllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjUwMTMxMTgwMDIwWhcNMjUwMjAxMTgwMDIwWjAzMTEwLwYDVQQD
EyhlZTkyODAzNWMxMjM2M2MzNTAxMmEwMDM0OTgwZjAwMzc0NjgzYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oIBs+mU9dGM1XZEfCe/J9/y6hFe
R0NlM5tumpIuBQEgQ1gzthQ7qyI3q5bCygcl5T1KwMbBCbycuHNDVuy66MPmHe0u
LdmOVzO9VB0xIM9Ozx8L64W/19W/NJgLrI0m7JC2Yae1XZZzp9gx7ATM6POBimGe
szBWtaaU2Ecm4HK/4CarwpY0Re8aziAIiitAdQwBbu0jnhqqMEdMTHLkTLy5xlbv
hzVh6ZmOf4MFdz75/Wp+oiw3cbN9KMD5FnLNaDJVMiLza+ScF2nuvuG08j3mIIf2
bV6abzxRJC2vyxb/KHcHYqJk0bWGuF1XkwRFpmGVV/RxhNchalaRVxVUPQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFO6SgDXBI2PDUBKgA0mA8AN0aDofMB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn/Lp
ptN+aVDAKNvn8rphYdFrz1IPYkeZNX54i9mYQSfA0zwQEafud6X+mXJaEDgmXtvs
GMvnnsyP6N6dqh1I94MjLVUtR/vlWg891KxAsuh8nmh2Jxg0inkWkXiThLtDA8o7
Klv8n+qh+drQoaaJdNtjzVGHBprXsIaCPEHUnytNmf6/80y4gsQeeAkXz67KvOzI
Yhuqq97XQs9ECS+zLHurFA7c84n8s0IGl9CgCy2FIPy8e2AcFI6Xr0NOE4w1FIGk
++D8yHdnKlGWKFz0mJCTWXE2jaD0/sGosAZW1+W1mgwEC0Oe5dQ9HbuenywefvF+
9yNOVy+ao+9XsATXoQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:15 2025 by rpki-client