Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
File:                     tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft (raw, json)
Hash identifier:          /ZysZBfoSP51Ayw4KuAjsqAWtVsf+dAwO3HiaY6SiHc=
Subject key identifier:   E1:3B:EA:C3:D1:F9:A0:67:02:0C:67:31:44:5A:D8:F3:A3:92:3C:D0
Authority key identifier: B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2
Certificate issuer:       /CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
Certificate serial:       0194BCAA13CDB2BDCCF2B747DD8F1618E158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft
Manifest number:          06CB
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: P4_VmIDFfqYiDiPBdVVMzIA4LMY.roa (hash: fbL8P+MktK6PkeO1KtnH7o+BeC/FNslw8AAfJjr38OY=)
                          2: WKELc_W8mdXUUZ324MSWDeu1wXI.roa (hash: 0tteI0ps1fiC7XdrvhsFyeYnjz3rCzmXkLHL3vxN7GA=)
                          3: tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl (hash: cXv81LeOxvvPYreCyMGbgOtgEXqc6Kw2dx3iDqPcTKI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:13:cd:b2:bd:cc:f2:b7:47:dd:8f:16:18:e1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53d9f1bc3f0d90b6dcd1e9f6fd1e506188ea7c2
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=e13beac3d1f9a067020c6731445ad8f3a3923cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2c:52:ee:c8:90:a0:d2:2b:3d:5a:61:48:d5:
                    bf:54:bb:c0:ea:76:a2:21:97:76:30:85:a3:03:5c:
                    d3:1a:86:1d:01:98:90:9e:83:bc:c7:08:aa:7a:5a:
                    ae:4c:0e:53:0d:3a:18:99:99:f0:8e:fe:51:fa:cd:
                    70:9c:cb:0b:5a:ae:9d:21:32:0f:bd:2d:99:70:89:
                    46:d7:23:6f:4e:72:c4:09:21:be:11:fc:1d:54:ae:
                    e2:b7:d4:10:4f:35:a1:91:ad:fa:0b:8c:d8:75:d9:
                    90:8e:a3:92:c6:1c:7c:33:1e:3b:3e:06:fe:0a:63:
                    65:eb:0e:0a:8a:8a:2b:04:5f:17:34:32:06:d3:93:
                    2c:e1:3f:11:30:c5:81:89:ae:b8:79:22:90:2d:5d:
                    9f:35:b4:44:71:f8:4d:b7:c2:01:65:2c:5b:3b:c2:
                    64:34:11:66:cf:23:56:a5:ee:b9:0b:40:aa:3e:cd:
                    82:6e:df:07:8d:d4:59:38:ec:f5:62:19:f6:2b:a6:
                    5f:9e:1f:6e:3d:18:bd:7e:91:bd:90:88:25:0a:c0:
                    cd:9d:1b:f6:43:ad:6d:eb:a5:61:06:52:c6:09:ac:
                    0e:35:14:b1:78:ac:e8:89:99:93:ea:7c:0b:fb:36:
                    e6:85:20:0b:f7:a3:70:6a:79:6b:25:13:96:66:4a:
                    52:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:3B:EA:C3:D1:F9:A0:67:02:0C:67:31:44:5A:D8:F3:A3:92:3C:D0
            X509v3 Authority Key Identifier:
                keyid:B5:3D:9F:1B:C3:F0:D9:0B:6D:CD:1E:9F:6F:D1:E5:06:18:8E:A7:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT2fG8Pw2QttzR6fb9HlBhiOp8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0e3d64-f290-4893-9a40-c9e141333d58/1/tT2fG8Pw2QttzR6fb9HlBhiOp8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:35:fd:23:60:d4:dc:49:42:9b:0c:f6:be:35:b7:cf:76:8a:
         ac:f5:b2:5d:55:21:18:ae:e7:ba:0e:d6:3f:68:94:f1:85:13:
         28:26:64:72:59:f5:d5:54:ff:1a:25:f3:7d:d7:7f:c4:ce:22:
         c6:a4:f7:80:23:46:ac:23:60:8d:98:8a:41:98:28:93:7a:b9:
         db:0d:72:d7:30:8d:64:65:07:6f:9e:e3:06:ff:a5:9e:ef:17:
         d0:fe:6a:6d:ca:e7:04:9c:56:cc:11:5a:37:39:18:00:3a:5e:
         86:99:8c:3d:e5:53:6c:67:f4:46:2c:fa:49:0c:6c:76:6d:79:
         1b:fd:a1:70:41:bf:4b:3f:22:23:65:37:c7:0f:89:91:aa:d9:
         ee:0a:0d:1a:2b:af:99:53:35:16:f2:a5:fc:d6:ec:c3:cf:31:
         27:6d:a7:a5:1f:c1:3f:bd:9c:b0:56:ed:6e:e6:03:21:d9:ea:
         bb:e4:ca:ac:f3:ec:08:c8:3a:33:bd:1a:44:c0:e7:40:c2:fd:
         ab:f8:2f:ea:1b:6c:3b:fc:a6:ee:9e:22:80:52:8c:be:95:0a:
         80:8e:4a:51:20:78:e3:68:6a:73:b8:4d:59:0b:50:79:90:e6:
         bb:6e:bf:8d:1a:7b:c9:5e:ec:d1:d3:94:81:38:b0:10:e1:6b:
         c8:3b:65:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qhPNsr3M8rdH3Y8WGOFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2Q5ZjFiYzNmMGQ5MGI2ZGNkMWU5ZjZmZDFlNTA2MTg4
ZWE3YzIwHhcNMjUwMTMxMTQwMDUwWhcNMjUwMjAxMTQwMDUwWjAzMTEwLwYDVQQD
EyhlMTNiZWFjM2QxZjlhMDY3MDIwYzY3MzE0NDVhZDhmM2EzOTIzY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SxS7siQoNIrPVphSNW/VLvA6nai
IZd2MIWjA1zTGoYdAZiQnoO8xwiqelquTA5TDToYmZnwjv5R+s1wnMsLWq6dITIP
vS2ZcIlG1yNvTnLECSG+EfwdVK7it9QQTzWhka36C4zYddmQjqOSxhx8Mx47Pgb+
CmNl6w4KioorBF8XNDIG05Ms4T8RMMWBia64eSKQLV2fNbREcfhNt8IBZSxbO8Jk
NBFmzyNWpe65C0CqPs2Cbt8HjdRZOOz1Yhn2K6Zfnh9uPRi9fpG9kIglCsDNnRv2
Q61t66VhBlLGCawONRSxeKzoiZmT6nwL+zbmhSAL96NwanlrJROWZkpSIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOE76sPR+aBnAgxnMURa2POjkjzQMB8GA1UdIwQY
MBaAFLU9nxvD8NkLbc0en2/R5QYYjqfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAt
YzllMTQxMzMzZDU4LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZTNkNjQtZjI5MC00ODkzLTlhNDAtYzllMTQxMzMzZDU4
LzEvdFQyZkc4UHcyUXR0elI2ZmI5SGxCaGlPcDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDX9I2DU
3ElCmwz2vjW3z3aKrPWyXVUhGK7nug7WP2iU8YUTKCZkcln11VT/GiXzfdd/xM4i
xqT3gCNGrCNgjZiKQZgok3q52w1y1zCNZGUHb57jBv+lnu8X0P5qbcrnBJxWzBFa
NzkYADpehpmMPeVTbGf0Riz6SQxsdm15G/2hcEG/Sz8iI2U3xw+JkarZ7goNGiuv
mVM1FvKl/Nbsw88xJ22npR/BP72csFbtbuYDIdnqu+TKrPPsCMg6M70aRMDnQML9
q/gv6htsO/ym7p4igFKMvpUKgI5KUSB442hqc7hNWQtQeZDmu26/jRp7yV7s0dOU
gTiwEOFryDtlTA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:03 2025 by rpki-client