Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
File:                     hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json)
Hash identifier:          vSF+Zl1vkjH3ag62szOixc3am9+/LIV5IWyGGB8rTXQ=
Subject key identifier:   55:31:61:53:F2:E9:1B:4D:E9:DA:1A:1A:ED:AF:5D:6B:E6:DE:5F:54
Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Certificate issuer:       /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Certificate serial:       0194BD17BD63EC30A829E143EA85F26BEC84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
Manifest number:          0DBA
Signing time:             Fri 31 Jan 2025 16:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:37 +0000
Files and hashes:         1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: ePers6bvjX810ctb8fdcDbmlECqmGZ+qOazoxP7gGBU=)
                          2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:bd:63:ec:30:a8:29:e1:43:ea:85:f2:6b:ec:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
        Validity
            Not Before: Jan 31 16:00:37 2025 GMT
            Not After : Feb  1 16:00:37 2025 GMT
        Subject: CN=55316153f2e91b4de9da1a1aedaf5d6be6de5f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:62:3f:ed:b3:08:d1:95:3e:08:76:a7:75:
                    13:e5:1d:9d:6a:c0:3a:4c:0a:3e:b1:f4:7f:c8:e3:
                    e1:1e:d6:c1:59:d7:cc:5e:1a:5d:bb:f7:58:e8:8e:
                    1c:01:bb:d6:24:09:aa:bb:c1:7f:23:27:9f:c1:f2:
                    7e:b5:c9:1e:26:0f:9b:7e:97:da:b2:22:fd:7f:8f:
                    54:28:eb:8f:52:cf:3d:d6:f6:d9:46:d2:cf:dd:36:
                    34:91:8e:62:a3:08:de:ef:ea:18:98:f6:f8:b1:00:
                    48:8f:09:aa:9b:13:be:48:49:20:02:b6:3e:f8:ed:
                    05:30:e2:d3:67:59:80:27:66:22:0a:44:d3:57:91:
                    4e:8e:13:d0:38:46:2a:57:c5:0c:a0:a8:84:f9:d7:
                    f4:f1:50:d3:7c:d4:d7:0e:93:a7:17:44:55:fb:50:
                    fe:ea:07:89:42:55:2e:8f:37:cd:7f:8a:2d:7a:1a:
                    55:1a:8c:3f:5e:73:3f:8f:a2:cf:6e:2c:a2:63:2b:
                    e8:9b:8f:74:aa:34:d0:d8:7b:cd:ab:86:67:4d:40:
                    f4:e3:72:bf:e6:87:78:57:69:f8:7a:db:cf:7d:f8:
                    9f:28:c3:64:0f:19:81:f8:ef:d6:66:5f:4e:25:ef:
                    1f:41:6f:c8:66:ca:19:dd:6d:5a:8a:7f:85:5d:64:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:31:61:53:F2:E9:1B:4D:E9:DA:1A:1A:ED:AF:5D:6B:E6:DE:5F:54
            X509v3 Authority Key Identifier:
                keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:ab:f0:5a:66:b3:b0:d5:40:32:fa:71:b0:1d:db:16:9b:
         b5:a2:b1:68:6f:81:ee:3b:30:29:6b:e6:d5:ab:31:41:0c:6b:
         00:9e:35:cc:7e:80:aa:d4:58:3a:c3:57:80:8b:fb:cf:f1:9f:
         18:6d:26:30:ee:cb:0c:37:29:47:84:e8:b0:c9:78:89:88:ef:
         a8:a6:df:e9:bf:f7:ee:93:bb:db:b4:84:61:2e:9e:b4:e2:fd:
         b1:8e:6b:79:e0:06:2b:1b:23:55:43:da:a8:1a:1b:40:69:de:
         2f:05:5c:f7:4e:a2:cd:00:ea:0b:65:89:0e:20:af:37:3a:92:
         75:21:db:c1:e2:15:f6:20:ff:61:96:35:7c:57:6e:78:27:53:
         bf:4b:03:b4:2d:b2:d9:47:9f:c0:e1:8f:e8:fb:03:c7:31:6b:
         f9:bb:4e:cd:24:86:44:58:8c:54:ae:3c:2f:d4:4a:39:20:84:
         39:95:f8:2f:36:1f:07:66:97:5d:de:f9:ad:8f:4e:80:85:59:
         73:71:a3:66:6b:29:4c:4a:b5:e8:c2:8e:52:18:c0:68:ba:4b:
         6b:d1:e5:cd:c2:43:38:7c:af:9b:f9:a1:6a:a1:76:cf:f0:ae:
         98:ae:57:56:35:22:8a:d3:95:d2:90:b0:33:ca:4c:a6:ac:53:
         0d:92:e7:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F71j7DCoKeFD6oXya+yEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi
YTljNGYwHhcNMjUwMTMxMTYwMDM3WhcNMjUwMjAxMTYwMDM3WjAzMTEwLwYDVQQD
Eyg1NTMxNjE1M2YyZTkxYjRkZTlkYTFhMWFlZGFmNWQ2YmU2ZGU1ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O5iP+2zCNGVPgh2p3UT5R2dasA6
TAo+sfR/yOPhHtbBWdfMXhpdu/dY6I4cAbvWJAmqu8F/IyefwfJ+tckeJg+bfpfa
siL9f49UKOuPUs891vbZRtLP3TY0kY5iowje7+oYmPb4sQBIjwmqmxO+SEkgArY+
+O0FMOLTZ1mAJ2YiCkTTV5FOjhPQOEYqV8UMoKiE+df08VDTfNTXDpOnF0RV+1D+
6geJQlUujzfNf4otehpVGow/XnM/j6LPbiyiYyvom490qjTQ2HvNq4ZnTUD043K/
5od4V2n4etvPffifKMNkDxmB+O/WZl9OJe8fQW/IZsoZ3W1ain+FXWQRiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUxYVPy6RtN6doaGu2vXWvm3l9UMB8GA1UdIwQY
MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt
Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2
LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2Kr8Fpm
s7DVQDL6cbAd2xabtaKxaG+B7jswKWvm1asxQQxrAJ41zH6AqtRYOsNXgIv7z/Gf
GG0mMO7LDDcpR4TosMl4iYjvqKbf6b/37pO727SEYS6etOL9sY5reeAGKxsjVUPa
qBobQGneLwVc906izQDqC2WJDiCvNzqSdSHbweIV9iD/YZY1fFdueCdTv0sDtC2y
2UefwOGP6PsDxzFr+btOzSSGRFiMVK48L9RKOSCEOZX4LzYfB2aXXd75rY9OgIVZ
c3GjZmspTEq16MKOUhjAaLpLa9HlzcJDOHyvm/mhaqF2z/CumK5XVjUiitOV0pCw
M8pMpqxTDZLnNg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:24 2025 by rpki-client