Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File:                     8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier:          v+d74UvEA5652EVnAHwBEg1nJurZxv+0EoQVXGhjg98=
Subject key identifier:   14:00:C7:BB:A8:B2:9B:F3:26:F1:FC:6A:8F:E1:40:E9:0F:38:87:37
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer:       /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial:       0194BD17B0C16C6424BEAB58F976D82578AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 16:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:33 +0000
Files and hashes:         1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: FE82zPx+pm2VEvmxPJ8cQH3sHdm5EMRlAB9/wzcci5M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b0:c1:6c:64:24:be:ab:58:f9:76:d8:25:78:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
        Validity
            Not Before: Jan 31 16:00:33 2025 GMT
            Not After : Feb  1 16:00:33 2025 GMT
        Subject: CN=1400c7bba8b29bf326f1fc6a8fe140e90f388737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:ec:8d:ec:e3:ab:c1:00:0e:4f:85:c1:47:
                    cb:c1:b1:e7:00:14:d9:51:6d:53:90:42:c6:13:c1:
                    5d:fd:56:a7:19:3a:be:a4:c9:ec:80:36:dc:f2:42:
                    90:b9:b9:87:47:36:09:f6:12:5e:f7:18:92:fd:3f:
                    d8:df:f9:d5:75:86:22:5a:ec:9f:5f:9f:b3:89:19:
                    48:26:16:e1:1d:8e:2f:2e:3a:3b:a8:9d:44:20:53:
                    aa:4d:ab:4a:c7:82:82:18:b2:46:86:59:59:83:1b:
                    a8:10:b2:a9:26:b1:30:0f:40:21:8a:02:c1:82:43:
                    7d:cb:d0:99:e5:76:5a:4d:96:91:03:ca:eb:99:32:
                    3c:97:2f:a5:49:f6:26:4d:4c:03:6c:df:16:50:33:
                    ac:b2:a5:e7:8d:53:f4:0c:5e:6e:18:c3:f6:da:19:
                    0d:a6:75:b7:93:e5:81:08:de:87:c1:ae:32:13:85:
                    63:11:61:61:69:4f:97:06:4c:6b:d7:fc:3f:21:41:
                    f1:f4:aa:be:52:90:62:32:88:cc:79:6a:23:4d:d1:
                    0e:8c:96:10:be:6d:bc:84:c4:a9:12:44:b5:a1:66:
                    b9:25:2c:26:ac:df:94:93:31:6e:44:4a:57:aa:b1:
                    30:aa:0b:7d:65:27:49:ae:bc:19:07:97:32:96:40:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:00:C7:BB:A8:B2:9B:F3:26:F1:FC:6A:8F:E1:40:E9:0F:38:87:37
            X509v3 Authority Key Identifier:
                keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:01:9e:72:20:ef:ad:d0:be:97:49:7e:75:85:a4:d8:40:
         4f:d9:cf:46:88:b6:03:44:8d:ed:82:81:3f:97:c4:2b:55:ef:
         6e:5d:dc:80:86:44:70:d2:87:31:db:e2:89:a4:db:0a:da:d7:
         25:92:60:49:3b:2d:bf:fe:9e:7e:5c:0a:44:36:dd:e1:f1:85:
         24:71:f4:2c:a3:d4:f4:8d:08:e7:3d:cf:a4:56:13:1f:71:93:
         a3:4e:4a:4c:2a:50:0a:44:65:77:84:cd:bc:65:6b:93:90:21:
         ea:1b:d0:f0:3c:17:ef:ff:0a:d1:06:50:c0:e2:01:12:32:61:
         63:3f:15:95:a7:35:08:4d:03:ea:65:54:ea:ae:af:d3:f5:6d:
         18:fc:a6:77:1f:f4:15:0c:53:39:1b:e7:17:6a:8e:76:ab:05:
         b7:42:0d:46:39:56:21:74:32:82:93:d0:3b:0f:71:23:e3:52:
         1c:60:e5:f3:78:70:5a:a1:28:f4:3d:a3:52:0b:3b:b2:da:c5:
         42:29:b2:b7:70:06:79:11:a2:a8:97:25:74:50:7e:5a:33:62:
         d8:32:62:4d:cd:b3:f9:ab:77:05:31:8c:7a:72:f0:51:20:e5:
         10:4b:fd:02:a7:03:b9:82:b4:0f:a5:69:a8:0a:ab:9a:1c:a6:
         00:d3:7f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7DBbGQkvqtY+XbYJXirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYWMwY2U3MDBiMTdkNDk5ZTg5OGVjN2ExNDczMDQwNTE1
N2M0NzgwHhcNMjUwMTMxMTYwMDMzWhcNMjUwMjAxMTYwMDMzWjAzMTEwLwYDVQQD
EygxNDAwYzdiYmE4YjI5YmYzMjZmMWZjNmE4ZmUxNDBlOTBmMzg4NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IDsjezjq8EADk+FwUfLwbHnABTZ
UW1TkELGE8Fd/VanGTq+pMnsgDbc8kKQubmHRzYJ9hJe9xiS/T/Y3/nVdYYiWuyf
X5+ziRlIJhbhHY4vLjo7qJ1EIFOqTatKx4KCGLJGhllZgxuoELKpJrEwD0AhigLB
gkN9y9CZ5XZaTZaRA8rrmTI8ly+lSfYmTUwDbN8WUDOssqXnjVP0DF5uGMP22hkN
pnW3k+WBCN6Hwa4yE4VjEWFhaU+XBkxr1/w/IUHx9Kq+UpBiMojMeWojTdEOjJYQ
vm28hMSpEkS1oWa5JSwmrN+UkzFuREpXqrEwqgt9ZSdJrrwZB5cylkChuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQAx7uospvzJvH8ao/hQOkPOIc3MB8GA1UdIwQY
MBaAFPCsDOcAsX1JnomOx6FHMEBRV8R4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgt
N2U0NmNjMzcwMWI5LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC84ZmIyYTYtY2FlNS00ZjM5LWE4NTgtN2U0NmNjMzcwMWI5
LzEvOEt3TTV3Q3hmVW1laVk3SG9VY3dRRkZYeEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3gBnnIg
763QvpdJfnWFpNhAT9nPRoi2A0SN7YKBP5fEK1Xvbl3cgIZEcNKHMdviiaTbCtrX
JZJgSTstv/6eflwKRDbd4fGFJHH0LKPU9I0I5z3PpFYTH3GTo05KTCpQCkRld4TN
vGVrk5Ah6hvQ8DwX7/8K0QZQwOIBEjJhYz8Vlac1CE0D6mVU6q6v0/VtGPymdx/0
FQxTORvnF2qOdqsFt0INRjlWIXQygpPQOw9xI+NSHGDl83hwWqEo9D2jUgs7strF
Qimyt3AGeRGiqJcldFB+WjNi2DJiTc2z+at3BTGMenLwUSDlEEv9AqcDuYK0D6Vp
qAqrmhymANN/BA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:23 2025 by rpki-client