Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
File:                     IDHrupQ_rRxUh1QOAQXhnCMs95w.mft (raw, json)
Hash identifier:          s9gXyPORnywGQfaEyLq6Af401XZxlS3j39+NQ9YR9hY=
Subject key identifier:   4A:5D:AA:B1:57:30:93:90:E7:0B:93:FC:2C:58:9F:3F:5C:7E:50:7F
Authority key identifier: 20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C
Certificate issuer:       /CN=2031ebba943fad1c5487540e0105e19c232cf79c
Certificate serial:       0194BCA97E23BC5E9E50003CAACB2A7F87C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft
Manifest number:          05E8
Signing time:             Fri 31 Jan 2025 14:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:11 +0000
Files and hashes:         1: IDHrupQ_rRxUh1QOAQXhnCMs95w.crl (hash: Z/OKtkg6Ydlj5CISqsoQ84MszsxD0avXoRKqDkuCkN0=)
                          2: tKV7ZxqGnJTtEa2_ye8Y1d8JNh0.roa (hash: 8oiml4GgGUwThCKHUcnZfuIG0l8a7ZiiCuW4RZzZ3cA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:7e:23:bc:5e:9e:50:00:3c:aa:cb:2a:7f:87:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2031ebba943fad1c5487540e0105e19c232cf79c
        Validity
            Not Before: Jan 31 14:00:11 2025 GMT
            Not After : Feb  1 14:00:11 2025 GMT
        Subject: CN=4a5daab157309390e70b93fc2c589f3f5c7e507f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:bf:01:1e:e1:28:1f:8a:2c:e9:2c:2a:bc:
                    21:40:4b:ed:84:f9:30:34:29:d6:21:5d:9d:99:27:
                    a3:f8:5f:87:8e:95:8b:0b:54:53:b0:44:b3:58:1d:
                    e2:18:d3:8d:ef:f9:6f:95:56:bb:ff:d6:0e:49:ac:
                    81:97:8d:89:7c:01:aa:16:7d:46:f0:06:84:97:df:
                    0c:d8:cb:59:3a:fb:50:a8:4e:86:d7:04:3b:f9:a9:
                    e9:60:0d:e3:05:ee:95:a3:1a:92:86:0d:f8:7a:f1:
                    fd:74:9b:e9:12:9d:47:64:00:4b:1f:6b:bb:d5:d8:
                    db:a4:9a:be:ff:59:16:28:5f:fb:44:08:0c:28:6c:
                    2f:ea:50:af:aa:d1:fb:f4:9c:a0:26:bb:13:48:53:
                    a4:91:e3:ec:77:94:ff:ae:dc:5b:23:f6:ae:a2:ff:
                    da:11:dd:b1:0c:9a:80:b8:8b:a5:02:52:1f:66:04:
                    f0:46:14:ae:73:3e:d0:69:f8:77:e8:04:7f:84:14:
                    12:54:1d:b0:9e:98:8f:b1:8b:4b:cb:c4:f7:fa:21:
                    1a:9a:44:ba:34:1b:48:93:83:cd:88:bc:79:a0:84:
                    5d:70:22:cb:e4:29:eb:2e:21:06:6d:cd:db:e4:0e:
                    d0:eb:5c:9d:cd:7c:e0:4b:7d:a7:a5:f6:68:e9:5a:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:AA:B1:57:30:93:90:E7:0B:93:FC:2C:58:9F:3F:5C:7E:50:7F
            X509v3 Authority Key Identifier:
                keyid:20:31:EB:BA:94:3F:AD:1C:54:87:54:0E:01:05:E1:9C:23:2C:F7:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDHrupQ_rRxUh1QOAQXhnCMs95w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/ce981a-a05b-4527-80af-693454237ee9/1/IDHrupQ_rRxUh1QOAQXhnCMs95w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:69:ae:c5:1d:ff:ed:a0:da:8d:89:71:bc:db:92:32:59:45:
         77:24:2e:2b:11:05:0e:d2:7c:54:49:56:cd:4d:73:80:15:3c:
         23:d3:14:55:f8:0f:9b:30:63:f7:95:63:27:cc:eb:35:ff:61:
         64:25:29:1b:39:10:37:2b:fb:db:14:0a:4d:a5:8a:09:68:42:
         86:5b:12:49:f3:81:45:05:85:9d:bd:5d:ae:8e:9b:df:08:3b:
         0d:f4:8f:12:91:ed:e4:15:59:e5:43:cd:cf:11:fb:cb:ec:28:
         ee:ef:15:9a:0c:af:ae:91:6a:66:a3:ba:5f:07:6b:c7:04:f8:
         64:a8:d8:60:c8:17:97:4b:0d:df:8c:b4:8a:05:4b:7f:f6:0b:
         e4:bc:c3:6f:ab:bf:a5:e8:43:7d:de:72:93:c6:70:dc:3a:62:
         25:b1:c4:01:d2:03:5f:c2:3f:fd:b6:01:19:42:08:76:b2:fe:
         da:84:8f:27:dc:98:68:b5:cc:3e:59:3c:54:07:eb:08:c4:02:
         c9:8f:2d:f8:92:60:d4:ec:49:a3:01:03:ff:63:0f:3c:11:68:
         49:43:c7:7e:d7:49:39:c0:2c:25:61:ee:fa:64:15:83:3a:d6:
         08:8a:62:9a:87:6a:0b:41:a6:15:4d:0d:87:c4:ae:87:da:9a:
         26:05:57:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qX4jvF6eUAA8qssqf4fDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMzFlYmJhOTQzZmFkMWM1NDg3NTQwZTAxMDVlMTljMjMy
Y2Y3OWMwHhcNMjUwMTMxMTQwMDExWhcNMjUwMjAxMTQwMDExWjAzMTEwLwYDVQQD
Eyg0YTVkYWFiMTU3MzA5MzkwZTcwYjkzZmMyYzU4OWYzZjVjN2U1MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuq/AR7hKB+KLOksKrwhQEvthPkw
NCnWIV2dmSej+F+HjpWLC1RTsESzWB3iGNON7/lvlVa7/9YOSayBl42JfAGqFn1G
8AaEl98M2MtZOvtQqE6G1wQ7+anpYA3jBe6VoxqShg34evH9dJvpEp1HZABLH2u7
1djbpJq+/1kWKF/7RAgMKGwv6lCvqtH79JygJrsTSFOkkePsd5T/rtxbI/auov/a
Ed2xDJqAuIulAlIfZgTwRhSucz7Qafh36AR/hBQSVB2wnpiPsYtLy8T3+iEamkS6
NBtIk4PNiLx5oIRdcCLL5CnrLiEGbc3b5A7Q61ydzXzgS32npfZo6VqrKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpdqrFXMJOQ5wuT/CxYnz9cflB/MB8GA1UdIwQY
MBaAFCAx67qUP60cVIdUDgEF4ZwjLPecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYt
NjkzNDU0MjM3ZWU5LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZTk4MWEtYTA1Yi00NTI3LTgwYWYtNjkzNDU0MjM3ZWU5
LzEvSURIcnVwUV9yUnhVaDFRT0FRWGhuQ01zOTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWmuxR3/
7aDajYlxvNuSMllFdyQuKxEFDtJ8VElWzU1zgBU8I9MUVfgPmzBj95VjJ8zrNf9h
ZCUpGzkQNyv72xQKTaWKCWhChlsSSfOBRQWFnb1dro6b3wg7DfSPEpHt5BVZ5UPN
zxH7y+wo7u8VmgyvrpFqZqO6XwdrxwT4ZKjYYMgXl0sN34y0igVLf/YL5LzDb6u/
pehDfd5yk8Zw3DpiJbHEAdIDX8I//bYBGUIIdrL+2oSPJ9yYaLXMPlk8VAfrCMQC
yY8t+JJg1OxJowED/2MPPBFoSUPHftdJOcAsJWHu+mQVgzrWCIpimodqC0GmFU0N
h8Suh9qaJgVXZQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:10 2025 by rpki-client