Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          269jXTAHnD/0G5lOe/OnKw+UVIFHmprQ0dHgyad03+4=
Subject key identifier:   1D:B5:47:BB:9E:54:F5:0D:2F:D1:4B:41:2C:A8:B3:02:FE:8D:96:11
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       0194BD17B5D278345BCD7489033CC37D0C34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 16:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:35 +0000
Files and hashes:         1: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: fM7ppNE1AXV2kVu9Rd4khKpQGrWWmkVS+73cZ0VLmuI=)
                          2: duO9LxBTkVs9bWkFXNzc7GNBnLM.roa (hash: qNyvixX6BJstTr21KHWMkBm39t0mtYSLiR/YYgK3594=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b5:d2:78:34:5b:cd:74:89:03:3c:c3:7d:0c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: Jan 31 16:00:35 2025 GMT
            Not After : Feb  1 16:00:35 2025 GMT
        Subject: CN=1db547bb9e54f50d2fd14b412ca8b302fe8d9611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:b0:bb:e6:38:d5:2d:ca:e6:03:9a:93:3b:
                    f1:a7:e9:0b:78:6b:51:3c:b6:8f:73:e0:5c:ff:8a:
                    c8:13:9c:2f:2d:51:16:52:ba:2f:97:dc:64:80:17:
                    b6:5a:64:f6:dd:20:18:1d:00:80:54:df:a4:bb:b8:
                    5a:d1:81:d3:f7:06:13:71:b3:61:a5:0c:58:31:27:
                    04:0c:22:25:36:75:f1:d2:6a:1d:0f:fa:b5:2f:24:
                    95:8c:5a:fb:7e:83:3e:75:4c:31:e6:36:2d:94:0f:
                    4f:55:4a:fe:28:e9:f7:0c:a5:5c:1c:a0:db:2a:1f:
                    d5:b6:91:4e:2f:cb:17:15:cc:b7:cc:4c:ac:43:34:
                    1f:67:34:9b:af:77:bd:f8:0c:a6:05:42:eb:fd:db:
                    a8:bc:46:18:cc:ca:af:9c:27:80:dc:d4:ad:a8:a2:
                    71:ab:0f:92:03:0c:77:46:e7:ce:df:d5:44:e5:da:
                    a3:03:1d:ee:c2:22:33:fb:b7:4a:ae:8e:48:8d:2a:
                    a0:df:0e:7c:28:6d:13:26:63:5a:22:0d:33:25:cc:
                    1f:f8:60:5d:71:89:39:e7:d1:68:a3:59:cb:9a:5d:
                    7e:0e:dd:02:a5:cc:3a:23:6e:e9:c7:fb:eb:02:33:
                    ad:cf:15:39:e0:5b:2a:2b:81:ff:40:d1:d3:29:05:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B5:47:BB:9E:54:F5:0D:2F:D1:4B:41:2C:A8:B3:02:FE:8D:96:11
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3c:26:1f:d9:73:11:88:88:5c:1a:a0:8e:a1:09:24:00:ca:
         05:36:91:70:c3:89:c9:a6:6b:9f:d7:3e:8b:9f:62:2b:30:07:
         8e:a3:ec:35:4f:a8:9e:0f:ac:cb:22:55:a4:5e:6e:01:98:a0:
         bd:db:60:4d:eb:78:b0:57:db:74:78:18:26:99:7c:22:d2:e2:
         93:96:ad:c3:d8:13:64:2f:27:45:f5:e7:c2:1a:df:2e:1f:b2:
         30:93:23:68:46:69:b4:af:a7:61:35:d5:aa:2d:cb:67:03:e7:
         6f:df:57:c3:37:4b:67:72:6b:3d:e3:5e:c1:eb:cc:0d:2d:34:
         39:c9:49:4d:e0:9b:94:ab:54:23:7f:dd:f4:41:f2:34:54:8a:
         49:81:f3:e3:9f:75:5d:37:95:25:8c:29:b5:30:52:a2:4e:cc:
         e6:51:51:d2:73:e4:d2:54:57:f3:75:d7:1b:b2:ac:73:cd:a4:
         c7:8f:78:9d:ea:ad:58:59:48:b0:52:21:bf:bd:77:74:9d:c2:
         4f:75:a2:79:19:ce:8d:e5:93:a5:b2:d3:ce:e0:aa:94:c0:37:
         90:7a:75:82:21:46:b9:f6:03:d5:b7:4c:ff:09:88:44:c5:08:
         89:61:8c:9d:9f:93:f5:41:51:09:57:4e:7e:0e:0e:93:71:15:
         c0:14:78:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7XSeDRbzXSJAzzDfQw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDRhOWYzNjY1MDg0ZjUwMDk5MjFhYzUyZDExOTc1MGJl
ZWQ0YjQwHhcNMjUwMTMxMTYwMDM1WhcNMjUwMjAxMTYwMDM1WjAzMTEwLwYDVQQD
EygxZGI1NDdiYjllNTRmNTBkMmZkMTRiNDEyY2E4YjMwMmZlOGQ5NjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCqwu+Y41S3K5gOakzvxp+kLeGtR
PLaPc+Bc/4rIE5wvLVEWUrovl9xkgBe2WmT23SAYHQCAVN+ku7ha0YHT9wYTcbNh
pQxYMScEDCIlNnXx0modD/q1LySVjFr7foM+dUwx5jYtlA9PVUr+KOn3DKVcHKDb
Kh/VtpFOL8sXFcy3zEysQzQfZzSbr3e9+AymBULr/duovEYYzMqvnCeA3NStqKJx
qw+SAwx3RufO39VE5dqjAx3uwiIz+7dKro5IjSqg3w58KG0TJmNaIg0zJcwf+GBd
cYk559Foo1nLml1+Dt0Cpcw6I27px/vrAjOtzxU54FsqK4H/QNHTKQW7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB21R7ueVPUNL9FLQSyoswL+jZYRMB8GA1UdIwQY
MBaAFPNEqfNmUIT1AJkhrFLRGXUL7tS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjkt
ZDhjN2VmMTU1MTFkLzEvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC83MTZhOTAtZDI5NS00OTAzLTkwZjktZDhjN2VmMTU1MTFk
LzEvODBTcDgyWlFoUFVBbVNHc1V0RVpkUXZ1MUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzwmH9lz
EYiIXBqgjqEJJADKBTaRcMOJyaZrn9c+i59iKzAHjqPsNU+ong+syyJVpF5uAZig
vdtgTet4sFfbdHgYJpl8ItLik5atw9gTZC8nRfXnwhrfLh+yMJMjaEZptK+nYTXV
qi3LZwPnb99XwzdLZ3JrPeNewevMDS00OclJTeCblKtUI3/d9EHyNFSKSYHz4591
XTeVJYwptTBSok7M5lFR0nPk0lRX83XXG7Ksc82kx494neqtWFlIsFIhv713dJ3C
T3WieRnOjeWTpbLTzuCqlMA3kHp1giFGufYD1bdM/wmIRMUIiWGMnZ+T9UFRCVdO
fg4Ok3EVwBR40g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:47 2025 by rpki-client