Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
File:                     6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft (raw, json)
Hash identifier:          f5OONwF7VtY5VcuaPfvXClQgZIt5liqKUunDtDeMN0c=
Subject key identifier:   12:83:64:FD:89:99:E6:86:21:46:53:07:D0:13:3D:24:7D:92:56:28
Authority key identifier: EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9
Certificate issuer:       /CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
Certificate serial:       0194BD858BBD01DB217C9EEF1E89017ECF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft
Manifest number:          0747
Signing time:             Fri 31 Jan 2025 18:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:33 +0000
Files and hashes:         1: 6IQHtBCS1JE9_VEW3BeNg7TDXiE.roa (hash: 6uQ/4oFYw1xhoqw3/qkx1eHe1uT4WuqtHU7wwwKQl2Q=)
                          2: 6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl (hash: 2Cg9KJnBz4XPsoenoMI/2tBsMBlpbLS13Eq98uHCHvQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:8b:bd:01:db:21:7c:9e:ef:1e:89:01:7e:cf:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea60327c9e2a4e3e37d547b536143500d0a5dcb9
        Validity
            Not Before: Jan 31 18:00:33 2025 GMT
            Not After : Feb  1 18:00:33 2025 GMT
        Subject: CN=128364fd8999e68621465307d0133d247d925628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:40:df:e8:a9:10:30:71:46:22:2a:00:73:
                    16:0a:ff:29:bb:7c:1d:9b:8d:a6:bb:b6:6e:41:1c:
                    97:5d:40:ae:54:e9:97:ae:e0:95:65:bb:56:08:a4:
                    8d:85:29:5f:02:3b:ae:13:70:14:f9:b9:dd:d0:7c:
                    ea:8d:5c:f2:9f:e8:d4:61:50:34:10:ee:05:33:a6:
                    61:29:d2:59:b0:5d:bf:72:4d:2b:1f:55:d2:3d:7e:
                    83:26:8f:78:59:88:79:18:95:36:57:64:4d:b3:3b:
                    82:a5:78:82:87:59:97:16:93:e0:5a:db:fb:39:8d:
                    6f:bb:35:56:a8:2a:87:69:c1:36:3c:8a:ae:8f:9a:
                    69:b3:98:d8:f9:87:78:12:54:cb:d3:92:ed:40:02:
                    03:ac:00:72:e1:b4:26:9b:86:98:57:4c:62:4f:43:
                    65:06:2e:74:2b:45:75:65:64:ac:c7:c8:e6:98:ba:
                    7f:0b:28:9f:8b:78:b2:93:19:91:bf:97:d3:7c:2e:
                    99:0c:e0:2b:e5:c2:81:1b:dc:8a:89:b7:cd:94:86:
                    1f:c5:90:d4:7a:62:5f:9f:ae:43:64:77:b5:22:19:
                    32:34:7d:86:e0:69:30:61:48:04:56:ef:e8:88:05:
                    11:54:26:3f:28:34:41:62:ef:59:a4:ee:8a:43:98:
                    a7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:83:64:FD:89:99:E6:86:21:46:53:07:D0:13:3D:24:7D:92:56:28
            X509v3 Authority Key Identifier:
                keyid:EA:60:32:7C:9E:2A:4E:3E:37:D5:47:B5:36:14:35:00:D0:A5:DC:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/23322a-a356-469b-87a6-546e2f5d7d26/1/6mAyfJ4qTj431Ue1NhQ1ANCl3Lk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:52:3c:20:0a:16:92:33:29:c3:e1:d8:e0:0a:7f:d8:03:70:
         ea:22:f4:05:ca:8e:7d:35:da:d1:8c:17:89:c8:8e:a9:2d:92:
         a3:28:92:c5:0c:a1:07:51:ae:06:64:d1:55:cd:df:df:0e:6f:
         7c:e5:f8:aa:37:0c:63:55:db:a4:15:65:23:78:ae:44:de:16:
         06:43:27:a5:8a:36:1b:79:1b:bb:a1:ff:a2:71:a2:20:e0:46:
         f1:0a:8c:30:3d:b3:a2:1a:f0:bd:53:7e:60:12:44:b3:44:41:
         72:60:27:9e:ab:0f:a3:f7:b0:9b:a2:fb:c2:46:51:92:6d:e9:
         c3:e1:a8:6a:73:44:71:cc:d2:0a:0c:d1:9a:44:dd:ff:eb:94:
         1c:5c:92:2a:72:e1:cd:2c:68:c3:eb:ab:8f:df:fa:ec:d6:77:
         64:5e:c6:04:d5:12:e2:1f:b2:29:bc:85:c0:25:94:57:be:7c:
         16:8a:07:43:ef:9b:87:44:c0:b9:49:38:b0:27:be:fb:11:5b:
         22:d9:3b:19:d7:7a:fc:68:db:93:26:95:f8:94:cb:55:28:b4:
         88:80:4c:cf:ce:c4:ab:c5:a8:0e:b7:19:6e:e1:90:c9:c3:bd:
         a2:f6:b9:e0:33:63:1c:12:b8:e2:92:be:40:2e:1f:f8:96:9b:
         6a:ab:af:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYu9AdshfJ7vHokBfs8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNjAzMjdjOWUyYTRlM2UzN2Q1NDdiNTM2MTQzNTAwZDBh
NWRjYjkwHhcNMjUwMTMxMTgwMDMzWhcNMjUwMjAxMTgwMDMzWjAzMTEwLwYDVQQD
EygxMjgzNjRmZDg5OTllNjg2MjE0NjUzMDdkMDEzM2QyNDdkOTI1NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MZA3+ipEDBxRiIqAHMWCv8pu3wd
m42mu7ZuQRyXXUCuVOmXruCVZbtWCKSNhSlfAjuuE3AU+bnd0HzqjVzyn+jUYVA0
EO4FM6ZhKdJZsF2/ck0rH1XSPX6DJo94WYh5GJU2V2RNszuCpXiCh1mXFpPgWtv7
OY1vuzVWqCqHacE2PIquj5pps5jY+Yd4ElTL05LtQAIDrABy4bQmm4aYV0xiT0Nl
Bi50K0V1ZWSsx8jmmLp/Cyifi3iykxmRv5fTfC6ZDOAr5cKBG9yKibfNlIYfxZDU
emJfn65DZHe1IhkyNH2G4GkwYUgEVu/oiAURVCY/KDRBYu9ZpO6KQ5inKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBKDZP2JmeaGIUZTB9ATPSR9klYoMB8GA1UdIwQY
MBaAFOpgMnyeKk4+N9VHtTYUNQDQpdy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm1BeWZKNHFUajQzMVVlMU5oUTFBTkNsM0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMzMyMmEtYTM1Ni00NjliLTg3YTYt
NTQ2ZTJmNWQ3ZDI2LzEvNm1BeWZKNHFUajQzMVVlMU5oUTFBTkNsM0xrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMzMyMmEtYTM1Ni00NjliLTg3YTYtNTQ2ZTJmNWQ3ZDI2
LzEvNm1BeWZKNHFUajQzMVVlMU5oUTFBTkNsM0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsFI8IAoW
kjMpw+HY4Ap/2ANw6iL0BcqOfTXa0YwXiciOqS2SoyiSxQyhB1GuBmTRVc3f3w5v
fOX4qjcMY1XbpBVlI3iuRN4WBkMnpYo2G3kbu6H/onGiIOBG8QqMMD2zohrwvVN+
YBJEs0RBcmAnnqsPo/ewm6L7wkZRkm3pw+GoanNEcczSCgzRmkTd/+uUHFySKnLh
zSxow+urj9/67NZ3ZF7GBNUS4h+yKbyFwCWUV758FooHQ++bh0TAuUk4sCe++xFb
Itk7Gdd6/GjbkyaV+JTLVSi0iIBMz87Eq8WoDrcZbuGQycO9ova54DNjHBK44pK+
QC4f+JabaquvHg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:59 2025 by rpki-client