Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          noN/jZ7Mnq70Ept19UvwXPa+dqU6MJ9CiQ+PoNvqEcU=
Subject key identifier:   76:63:CD:92:5A:43:D2:50:0E:08:9C:99:CA:20:86:F9:5C:DF:10:85
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       0194BD855F5132986DFEE0A7581C7B35D9D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          12B3
Signing time:             Fri 31 Jan 2025 18:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:22 +0000
Files and hashes:         1: dUzHcv1qzeux_y2IL7xdvYNLLOQ.roa (hash: nSNOUC9fK3tMm0ddVALi9dbfVwMcfIB34jQG6rm/2t0=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: CnHLSbplrhkJ4Ue4b3wBrrSHQecsoU/485E2E3cL638=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:5f:51:32:98:6d:fe:e0:a7:58:1c:7b:35:d9:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Jan 31 18:00:22 2025 GMT
            Not After : Feb  1 18:00:22 2025 GMT
        Subject: CN=7663cd925a43d2500e089c99ca2086f95cdf1085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:06:67:cf:55:6a:fc:8d:3e:21:bf:1e:c7:
                    1a:5d:32:86:77:f5:49:59:b9:5c:d6:34:ad:2b:27:
                    b9:53:9d:ae:a2:a1:3e:e7:89:51:45:48:3c:08:67:
                    4f:ec:c9:9a:bf:c6:9f:12:73:10:43:fa:bd:8f:d7:
                    54:c5:5d:d2:6d:7c:d8:84:d8:ab:5d:db:0e:9c:ab:
                    3f:88:30:8c:87:8c:d9:b4:ee:98:a3:97:f4:76:be:
                    77:38:a3:e4:82:f4:87:c0:61:45:21:1f:87:e6:ed:
                    b2:47:1f:65:4f:c9:b5:66:e4:cc:e0:10:1e:4d:9f:
                    83:8c:4f:ad:cc:cb:a3:ac:e7:1f:c5:a3:f2:fe:92:
                    2a:da:38:81:37:b4:dd:fc:9b:59:d5:3b:f2:33:2c:
                    0e:32:e4:2d:9a:29:dd:aa:90:b3:71:f2:54:bb:ad:
                    33:46:b7:4c:ee:19:62:7e:90:32:23:f4:c6:8f:0e:
                    72:ae:cd:c9:b4:1b:8a:c0:b2:86:eb:9c:6d:8d:63:
                    d1:27:f8:08:3d:b8:0e:e8:bb:f8:b5:ba:2e:9b:f0:
                    f4:af:89:0a:98:62:c9:89:03:c2:af:09:ca:72:f0:
                    18:1a:71:3d:c8:ee:e8:66:a5:8b:97:4f:6b:65:c0:
                    b9:e2:57:20:20:b0:d0:f1:5e:70:7a:86:f4:4c:ad:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:63:CD:92:5A:43:D2:50:0E:08:9C:99:CA:20:86:F9:5C:DF:10:85
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b2:34:4e:cf:38:e8:71:da:be:6b:f6:e2:a1:61:9b:ed:d8:
         6a:67:15:3e:f0:01:ba:09:86:d1:ec:63:9a:8f:23:9d:76:75:
         cc:c4:8b:f7:6b:70:57:ac:89:a4:02:de:6f:d2:97:66:2b:56:
         ae:55:44:25:ce:5a:3c:ff:52:2c:2e:11:7f:2f:1d:a4:ee:14:
         b4:6d:7b:f9:10:4b:e2:2f:b0:6e:ba:d1:ed:30:16:42:03:0e:
         82:b2:f3:5f:55:1f:91:34:12:1d:1d:8f:9b:39:b8:11:c8:10:
         26:f1:50:86:29:31:a8:a8:8a:0b:d2:c6:f2:f1:b9:b2:88:0d:
         ff:21:46:99:66:80:b3:6b:00:80:08:83:eb:bd:41:8c:01:25:
         93:19:5c:78:b9:52:7e:f5:dc:56:ce:32:77:bd:9f:ce:c4:67:
         28:a2:85:b7:9a:8a:14:3e:af:1f:71:5a:c3:da:a1:be:da:4d:
         6f:57:74:b0:5f:a2:53:9d:67:35:62:de:7e:ec:d5:eb:36:3d:
         a1:66:7d:84:b7:f4:63:46:58:fe:7d:80:29:4f:a1:2a:52:59:
         c9:9d:4a:b2:ff:42:ad:ac:46:32:a8:76:0e:8d:09:df:00:ea:
         53:5f:bf:2f:c8:fd:71:a2:8b:f1:84:88:69:88:77:d1:f1:46:
         33:6e:6e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hV9RMpht/uCnWBx7NdnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjUwMTMxMTgwMDIyWhcNMjUwMjAxMTgwMDIyWjAzMTEwLwYDVQQD
Eyg3NjYzY2Q5MjVhNDNkMjUwMGUwODljOTljYTIwODZmOTVjZGYxMDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWAGZ89VavyNPiG/HscaXTKGd/VJ
Wblc1jStKye5U52uoqE+54lRRUg8CGdP7Mmav8afEnMQQ/q9j9dUxV3SbXzYhNir
XdsOnKs/iDCMh4zZtO6Yo5f0dr53OKPkgvSHwGFFIR+H5u2yRx9lT8m1ZuTM4BAe
TZ+DjE+tzMujrOcfxaPy/pIq2jiBN7Td/JtZ1TvyMywOMuQtmindqpCzcfJUu60z
RrdM7hlifpAyI/TGjw5yrs3JtBuKwLKG65xtjWPRJ/gIPbgO6Lv4tboum/D0r4kK
mGLJiQPCrwnKcvAYGnE9yO7oZqWLl09rZcC54lcgILDQ8V5weob0TK1mVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZjzZJaQ9JQDgicmcoghvlc3xCFMB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrI0Ts84
6HHavmv24qFhm+3YamcVPvABugmG0exjmo8jnXZ1zMSL92twV6yJpALeb9KXZitW
rlVEJc5aPP9SLC4Rfy8dpO4UtG17+RBL4i+wbrrR7TAWQgMOgrLzX1UfkTQSHR2P
mzm4EcgQJvFQhikxqKiKC9LG8vG5sogN/yFGmWaAs2sAgAiD671BjAElkxlceLlS
fvXcVs4yd72fzsRnKKKFt5qKFD6vH3Faw9qhvtpNb1d0sF+iU51nNWLefuzV6zY9
oWZ9hLf0Y0ZY/n2AKU+hKlJZyZ1Ksv9CraxGMqh2Do0J3wDqU1+/L8j9caKL8YSI
aYh30fFGM25uqg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:39 2025 by rpki-client