Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
File:                     qMbudsTo2UYU4IJQX_6MmRokr4o.mft (raw, json)
Hash identifier:          va9frw7RjYvoA7PT9oFnkkTvrq5G2ZL0X3P5UhP0mFY=
Subject key identifier:   17:54:5F:AC:EC:D7:BB:5B:51:1F:4F:E5:B6:3A:BF:CA:8D:52:1B:3A
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Certificate issuer:       /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial:       0194BC72AADD9A27705D12E122D793CF89AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft
Manifest number:          108F
Signing time:             Fri 31 Jan 2025 13:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:18 +0000
Files and hashes:         1: WTYKu26kIWjOTIQNkx9XhusumzA.roa (hash: jdR1zGE/VerZVpVMdByTcrJDOg5A7+iJoxqGyTD0+wQ=)
                          2: qMbudsTo2UYU4IJQX_6MmRokr4o.crl (hash: x3+gjaiH56FpnWXmo4s7DvKc0k36HS5X4pllMSMv4f4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:aa:dd:9a:27:70:5d:12:e1:22:d7:93:cf:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
        Validity
            Not Before: Jan 31 13:00:18 2025 GMT
            Not After : Feb  1 13:00:18 2025 GMT
        Subject: CN=17545facecd7bb5b511f4fe5b63abfca8d521b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:65:21:49:8a:41:c0:c0:16:2e:b7:ba:f7:
                    7e:16:e2:34:67:6d:bf:4d:e4:73:2c:1e:4b:4b:46:
                    5b:b1:1f:17:39:a4:8b:db:13:0d:be:66:f4:b1:3c:
                    ca:fc:d6:25:20:fd:ce:6e:88:3f:93:05:eb:ec:a0:
                    65:ce:ce:41:1e:8e:3c:63:6f:b9:9e:ac:91:2b:1a:
                    c0:91:7b:4d:ab:aa:15:11:46:be:6d:d1:78:6b:05:
                    c5:67:30:2b:65:90:4d:68:99:c7:26:21:12:3e:06:
                    f1:85:06:b2:c3:19:c2:d3:0e:ac:e9:12:b1:32:71:
                    e3:da:ef:e4:e7:db:f3:15:13:90:6f:a9:9a:26:35:
                    95:b5:3d:17:3f:b1:68:99:cb:88:03:6e:11:51:ff:
                    1f:b2:63:7f:96:1a:bf:16:c0:a5:76:d5:75:52:d9:
                    3f:1c:77:5d:65:5d:bc:b4:eb:f1:45:34:47:7e:73:
                    66:6f:3a:b8:c7:5d:3f:29:e7:ea:04:0b:34:d3:2a:
                    b9:e0:60:b1:6b:50:2b:23:b5:3b:f7:5b:aa:df:1e:
                    69:d5:5d:a4:38:59:a2:f0:3b:d1:e9:73:47:60:54:
                    0e:4d:19:ec:8f:b6:4a:ae:84:f0:9a:18:9c:79:b4:
                    d9:50:5c:0e:88:ac:ae:97:a6:70:fc:2e:88:67:5c:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:54:5F:AC:EC:D7:BB:5B:51:1F:4F:E5:B6:3A:BF:CA:8D:52:1B:3A
            X509v3 Authority Key Identifier:
                keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:7a:02:01:5c:e1:a3:6b:09:be:2a:8e:05:33:f9:2d:32:0c:
         64:4a:e1:e4:1a:63:30:bd:89:ed:06:0e:ad:5c:fa:c9:40:5d:
         68:0d:17:b8:b5:d5:6c:d1:17:d3:68:72:26:89:83:93:4f:2b:
         ad:e9:f9:10:c2:c7:5a:de:fd:d6:cd:e5:0e:d9:bc:db:d5:8d:
         f1:99:72:d0:8d:e2:3f:a9:7a:16:87:33:20:c6:a9:b3:0a:7b:
         25:c1:94:18:06:d8:c5:41:00:fc:07:42:61:bc:1a:63:3f:bf:
         4c:f6:c6:db:c4:be:81:0d:14:43:b5:49:7c:d1:19:d8:9b:79:
         8b:1a:aa:65:f1:25:b4:1e:3e:55:d5:3f:2c:35:7a:a6:09:3b:
         71:31:64:5c:67:6c:c0:0e:7c:76:5e:d7:40:93:50:a6:4e:96:
         49:de:c2:86:a8:25:4a:2a:23:33:7a:ec:fb:3d:72:0a:3a:3a:
         c3:b9:79:85:d9:04:2d:e8:71:1b:db:26:66:f2:d6:ba:09:99:
         73:e5:44:2e:fc:83:e6:6a:78:69:db:6a:28:d1:32:b7:ee:d9:
         f3:6c:80:7b:5e:d8:a9:25:7c:38:05:69:b1:e1:9e:a0:d7:c9:
         99:8a:3f:3a:20:b5:e1:9f:08:db:b1:dc:09:3c:89:80:a5:b1:
         1d:88:52:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqrdmidwXRLhIteTz4mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZlZTc2YzRlOGQ5NDYxNGUwODI1MDVmZmU4Yzk5MWEy
NGFmOGEwHhcNMjUwMTMxMTMwMDE4WhcNMjUwMjAxMTMwMDE4WjAzMTEwLwYDVQQD
EygxNzU0NWZhY2VjZDdiYjViNTExZjRmZTViNjNhYmZjYThkNTIxYjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/1lIUmKQcDAFi63uvd+FuI0Z22/
TeRzLB5LS0ZbsR8XOaSL2xMNvmb0sTzK/NYlIP3Obog/kwXr7KBlzs5BHo48Y2+5
nqyRKxrAkXtNq6oVEUa+bdF4awXFZzArZZBNaJnHJiESPgbxhQaywxnC0w6s6RKx
MnHj2u/k59vzFROQb6maJjWVtT0XP7FomcuIA24RUf8fsmN/lhq/FsCldtV1Utk/
HHddZV28tOvxRTRHfnNmbzq4x10/KefqBAs00yq54GCxa1ArI7U791uq3x5p1V2k
OFmi8DvR6XNHYFQOTRnsj7ZKroTwmhicebTZUFwOiKyul6Zw/C6IZ1ybgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdUX6zs17tbUR9P5bY6v8qNUhs6MB8GA1UdIwQY
MBaAFKjG7nbE6NlGFOCCUF/+jJkaJK+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1idWRzVG8yVVlVNElKUVhfNk1tUm9rcjRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84MWJmMDMtNjk1Yy00YmIxLWExMGMt
ZTdlZGViYTdiNzAyLzEvcU1idWRzVG8yVVlVNElKUVhfNk1tUm9rcjRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84MWJmMDMtNjk1Yy00YmIxLWExMGMtZTdlZGViYTdiNzAy
LzEvcU1idWRzVG8yVVlVNElKUVhfNk1tUm9rcjRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3oCAVzh
o2sJviqOBTP5LTIMZErh5BpjML2J7QYOrVz6yUBdaA0XuLXVbNEX02hyJomDk08r
ren5EMLHWt791s3lDtm829WN8Zly0I3iP6l6FoczIMapswp7JcGUGAbYxUEA/AdC
YbwaYz+/TPbG28S+gQ0UQ7VJfNEZ2Jt5ixqqZfEltB4+VdU/LDV6pgk7cTFkXGds
wA58dl7XQJNQpk6WSd7ChqglSiojM3rs+z1yCjo6w7l5hdkELehxG9smZvLWugmZ
c+VELvyD5mp4adtqKNEyt+7Z82yAe17YqSV8OAVpseGeoNfJmYo/OiC14Z8I27Hc
CTyJgKWxHYhSHg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 03:50:25 2025 by rpki-client