Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
File:                     AYJcep4nAba6NnDQjSoQqeoV0-M.mft (raw, json)
Hash identifier:          6KPrw1feX0bw2OYmiXA/pCJj3T1HJLvyKuh2DU9JtEI=
Subject key identifier:   95:63:78:71:34:C1:36:92:17:3F:BC:9E:2F:D3:BB:8D:23:6A:E7:7B
Authority key identifier: 01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3
Certificate issuer:       /CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
Certificate serial:       0194BC3C85EE6978639C1513394F00787170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft
Manifest number:          0571
Signing time:             Fri 31 Jan 2025 12:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:10 +0000
Files and hashes:         1: AYJcep4nAba6NnDQjSoQqeoV0-M.crl (hash: qIvmjEd1eR16IdR0/fiRZX3Y/h7lKWq0d+uNp9ma0xA=)
                          2: BFnGMJbw_FyqQDvzEvSvzgyfC8c.roa (hash: Z0qcTwZhrvNxXQZpuNqxicC23C3Fi6C39Y2LCY//Cvo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:85:ee:69:78:63:9c:15:13:39:4f:00:78:71:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01825c7a9e2701b6ba3670d08d2a10a9ea15d3e3
        Validity
            Not Before: Jan 31 12:01:10 2025 GMT
            Not After : Feb  1 12:01:10 2025 GMT
        Subject: CN=9563787134c13692173fbc9e2fd3bb8d236ae77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:64:65:a5:55:dc:4a:40:b6:31:d8:9f:a2:03:
                    3d:17:1d:54:49:de:59:fc:7c:a2:69:74:e9:83:3f:
                    63:fb:7e:e5:54:29:f9:7f:66:0c:9c:1f:a4:23:52:
                    3f:5b:9c:b4:23:9c:9f:6d:b5:43:67:9c:e3:c9:a7:
                    04:93:41:2a:b0:30:08:9c:b2:40:2e:70:f6:e5:2a:
                    45:03:c5:38:04:09:27:da:7f:3b:8f:58:ce:a7:f3:
                    ae:ca:95:53:8d:16:e2:73:ba:88:4c:ef:6b:f8:7b:
                    bd:f7:d6:d4:51:b3:62:e3:7a:7d:66:29:e9:8c:d6:
                    d8:98:90:d9:69:e5:1c:20:bf:f5:8d:3e:75:f1:a2:
                    eb:c1:fd:99:69:75:36:d5:f0:78:1b:29:ae:c7:99:
                    7b:6d:6d:38:02:cc:a7:55:83:a6:bf:2e:e5:cd:c8:
                    14:78:c1:25:75:e1:49:42:f9:f8:99:8f:5f:54:32:
                    e8:c9:14:42:e3:6e:12:b1:f2:2b:3d:f6:c8:a9:66:
                    b2:11:ff:00:ba:92:18:99:de:12:b1:55:19:a9:75:
                    20:db:dc:6a:b5:b1:56:31:14:23:b9:49:7f:cb:31:
                    9d:ea:99:f2:80:05:0f:9c:d1:1d:f9:d7:4b:71:48:
                    90:78:b6:da:23:47:51:f3:18:36:4d:ae:74:19:9d:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:78:71:34:C1:36:92:17:3F:BC:9E:2F:D3:BB:8D:23:6A:E7:7B
            X509v3 Authority Key Identifier:
                keyid:01:82:5C:7A:9E:27:01:B6:BA:36:70:D0:8D:2A:10:A9:EA:15:D3:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYJcep4nAba6NnDQjSoQqeoV0-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ac03-dc6a-40c0-82cb-8f10d5b96fd4/1/AYJcep4nAba6NnDQjSoQqeoV0-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:58:99:28:e8:81:2a:95:6a:c9:29:13:16:45:5b:78:de:c9:
         9f:33:43:28:9d:a5:4a:29:15:e6:b7:56:b0:1b:c6:b6:78:30:
         de:ae:eb:91:b0:4e:13:3e:e2:04:67:7a:e7:3f:9e:d7:6a:18:
         82:62:fc:01:7a:bb:98:59:70:c2:f0:1d:14:a6:5b:d9:2a:0e:
         c9:7d:10:8b:42:99:5f:96:d0:ce:88:c6:f3:74:a0:af:22:7e:
         2f:8b:7d:6c:04:b7:b6:08:b8:c6:12:dc:0d:2b:78:ee:34:1f:
         b5:b6:33:d1:92:e2:da:17:c1:cf:fe:76:ec:43:da:18:e7:08:
         90:43:a5:c8:ad:3a:d6:ff:e1:90:29:35:3c:26:14:8b:e0:3a:
         5f:52:81:e6:28:46:4c:fc:e1:a4:d6:93:0c:28:d3:97:a9:a3:
         f3:23:77:a8:ef:a2:a0:5a:ad:d5:fa:11:e0:7b:48:4f:31:72:
         ec:ef:c5:7d:97:0a:94:f1:b1:9c:02:99:af:21:c9:8c:63:89:
         fc:f2:e9:40:22:e0:40:87:f2:2d:6d:43:a8:da:9a:d9:37:05:
         1b:c1:dc:8c:bd:eb:15:c4:92:e4:bb:4f:a2:ce:d9:85:9e:cc:
         b2:53:3e:32:b7:81:44:8b:fe:5f:af:8d:f0:5e:9e:41:a4:3b:
         65:9e:85:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIXuaXhjnBUTOU8AeHFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxODI1YzdhOWUyNzAxYjZiYTM2NzBkMDhkMmExMGE5ZWEx
NWQzZTMwHhcNMjUwMTMxMTIwMTEwWhcNMjUwMjAxMTIwMTEwWjAzMTEwLwYDVQQD
Eyg5NTYzNzg3MTM0YzEzNjkyMTczZmJjOWUyZmQzYmI4ZDIzNmFlNzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mRlpVXcSkC2MdifogM9Fx1USd5Z
/HyiaXTpgz9j+37lVCn5f2YMnB+kI1I/W5y0I5yfbbVDZ5zjyacEk0EqsDAInLJA
LnD25SpFA8U4BAkn2n87j1jOp/OuypVTjRbic7qITO9r+Hu999bUUbNi43p9Zinp
jNbYmJDZaeUcIL/1jT518aLrwf2ZaXU21fB4Gymux5l7bW04AsynVYOmvy7lzcgU
eMEldeFJQvn4mY9fVDLoyRRC424SsfIrPfbIqWayEf8AupIYmd4SsVUZqXUg29xq
tbFWMRQjuUl/yzGd6pnygAUPnNEd+ddLcUiQeLbaI0dR8xg2Ta50GZ3ieQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVjeHE0wTaSFz+8ni/Tu40jaud7MB8GA1UdIwQY
MBaAFAGCXHqeJwG2ujZw0I0qEKnqFdPjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2It
OGYxMGQ1Yjk2ZmQ0LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83OWFjMDMtZGM2YS00MGMwLTgyY2ItOGYxMGQ1Yjk2ZmQ0
LzEvQVlKY2VwNG5BYmE2Tm5EUWpTb1FxZW9WMC1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1iZKOiB
KpVqySkTFkVbeN7JnzNDKJ2lSikV5rdWsBvGtngw3q7rkbBOEz7iBGd65z+e12oY
gmL8AXq7mFlwwvAdFKZb2SoOyX0Qi0KZX5bQzojG83SgryJ+L4t9bAS3tgi4xhLc
DSt47jQftbYz0ZLi2hfBz/527EPaGOcIkEOlyK061v/hkCk1PCYUi+A6X1KB5ihG
TPzhpNaTDCjTl6mj8yN3qO+ioFqt1foR4HtITzFy7O/FfZcKlPGxnAKZryHJjGOJ
/PLpQCLgQIfyLW1DqNqa2TcFG8HcjL3rFcSS5LtPos7ZhZ7MslM+MreBRIv+X6+N
8F6eQaQ7ZZ6Fwg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:55 2025 by rpki-client