Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File:                     97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier:          VkDZWUed4uGB3i348VvwMPqevyXnBykTpn0fV5/kCkI=
Subject key identifier:   50:C9:6F:6B:FB:36:BB:D1:0E:1D:92:E2:3B:C3:B9:28:C2:D4:D0:66
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer:       /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial:       0194BC3C671BBD6FEAB44F902F12C1D992C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number:          13BE
Signing time:             Fri 31 Jan 2025 12:01:02 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:02 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:02 +0000
Files and hashes:         1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: 3YfDtlak/SuORf8ar+pPEIEhnm+ukcPgC1O8Y27LL2I=)
                          2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:67:1b:bd:6f:ea:b4:4f:90:2f:12:c1:d9:92:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
        Validity
            Not Before: Jan 31 12:01:02 2025 GMT
            Not After : Feb  1 12:01:02 2025 GMT
        Subject: CN=50c96f6bfb36bbd10e1d92e23bc3b928c2d4d066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ef:79:31:b9:c0:b9:d5:ac:24:e1:4a:b0:38:
                    9d:c6:dc:70:19:c9:b2:86:39:6b:9d:fd:6d:37:6d:
                    59:36:1a:9f:e1:c0:11:b0:fa:ac:74:d0:41:d6:69:
                    36:ea:e9:95:5f:fd:7e:4b:f3:c9:b8:c6:41:05:85:
                    46:f4:d6:99:96:a1:46:42:46:e2:b4:92:de:c6:8b:
                    c8:0d:0a:69:03:58:c6:b8:36:8a:31:e6:5c:dc:ae:
                    41:13:6c:d2:82:c1:01:b0:cb:ae:ad:cf:5c:23:3b:
                    3a:c7:1c:82:52:bc:46:c0:3e:59:4e:ea:c7:54:62:
                    6a:35:18:e6:f2:47:49:17:cf:ec:16:52:75:ba:3d:
                    18:5a:41:ec:08:5d:11:1c:8e:05:20:75:af:40:ef:
                    ee:2c:89:d3:85:cf:58:11:ee:55:3c:7b:ab:76:bd:
                    e4:5e:45:61:ff:94:b5:ff:07:7b:c9:8e:d4:f7:3e:
                    7b:37:8f:29:15:f9:6b:ea:13:76:83:a1:35:86:41:
                    19:92:95:5b:45:7e:fb:03:4d:d8:0c:1d:15:fb:5b:
                    e1:fc:d4:93:6d:72:18:03:f8:fd:dc:16:7d:8d:b3:
                    61:fd:bd:0f:52:2b:f0:19:7d:d8:4c:96:23:e0:48:
                    10:f1:7a:71:94:2a:ea:d1:2a:7d:dc:82:26:fa:3d:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C9:6F:6B:FB:36:BB:D1:0E:1D:92:E2:3B:C3:B9:28:C2:D4:D0:66
            X509v3 Authority Key Identifier:
                keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:f4:ef:f7:01:64:b8:f5:2d:db:f6:a0:f0:b5:bd:ee:ec:
         69:9a:ef:0a:a4:10:ee:44:fc:76:e0:38:42:a5:da:25:af:c8:
         88:5b:ef:57:b0:0e:1a:bf:bc:42:b9:5b:01:83:8f:7c:f1:2b:
         56:6a:e1:24:be:be:24:40:4b:ac:30:87:f5:1b:f7:88:99:79:
         86:bc:82:34:46:97:7f:82:0a:48:f3:43:fc:05:24:ed:ae:07:
         3f:02:0f:0c:f0:b9:66:2e:86:ed:38:90:4f:af:6a:a7:d1:f8:
         5d:cd:6a:10:34:b0:c3:b5:2f:9e:18:b4:23:72:84:db:30:b6:
         8e:75:1a:f7:e5:6d:82:7e:eb:0c:88:33:e9:0a:33:95:ab:48:
         ee:08:4c:b3:c4:aa:67:4b:d0:fd:16:62:b5:2b:75:4c:a4:8a:
         95:79:58:f8:81:27:d1:e7:24:89:48:63:ba:c5:2f:be:db:8c:
         03:10:53:95:1b:16:fe:d2:4e:9a:1c:5c:cd:e9:63:e9:5d:96:
         a4:2a:bf:b2:2e:27:c8:4a:ac:fc:ca:21:8a:b7:ae:d5:17:ba:
         ea:8e:45:8a:5a:87:35:1f:c3:76:74:72:ca:73:df:5b:f5:db:
         d9:b1:e0:d8:6f:c4:98:bd:d0:7f:a8:4f:6d:3f:05:b8:97:d7:
         cd:49:5e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGcbvW/qtE+QLxLB2ZLFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YmMyOWYzNTM4NTJkMTgwZDIzNDEwOTk3ZDBmMDQ3ZWMx
Nzc4ZDMwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
Eyg1MGM5NmY2YmZiMzZiYmQxMGUxZDkyZTIzYmMzYjkyOGMyZDRkMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle95MbnAudWsJOFKsDidxtxwGcmy
hjlrnf1tN21ZNhqf4cARsPqsdNBB1mk26umVX/1+S/PJuMZBBYVG9NaZlqFGQkbi
tJLexovIDQppA1jGuDaKMeZc3K5BE2zSgsEBsMuurc9cIzs6xxyCUrxGwD5ZTurH
VGJqNRjm8kdJF8/sFlJ1uj0YWkHsCF0RHI4FIHWvQO/uLInThc9YEe5VPHurdr3k
XkVh/5S1/wd7yY7U9z57N48pFflr6hN2g6E1hkEZkpVbRX77A03YDB0V+1vh/NST
bXIYA/j93BZ9jbNh/b0PUivwGX3YTJYj4EgQ8XpxlCrq0Sp93IIm+j0nGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDJb2v7NrvRDh2S4jvDuSjC1NBmMB8GA1UdIwQY
MBaAFPe8KfNThS0YDSNBCZfQ8EfsF3jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUt
ZmU1NzNiMDIzZmQyLzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS83ZWQwOGItNDkyZC00NGJmLTllNGUtZmU1NzNiMDIzZmQy
LzEvOTd3cDgxT0ZMUmdOSTBFSmw5RHdSLXdYZU5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcf07/cB
ZLj1Ldv2oPC1ve7saZrvCqQQ7kT8duA4QqXaJa/IiFvvV7AOGr+8QrlbAYOPfPEr
VmrhJL6+JEBLrDCH9Rv3iJl5hryCNEaXf4IKSPND/AUk7a4HPwIPDPC5Zi6G7TiQ
T69qp9H4Xc1qEDSww7Uvnhi0I3KE2zC2jnUa9+Vtgn7rDIgz6QozlatI7ghMs8Sq
Z0vQ/RZitSt1TKSKlXlY+IEn0eckiUhjusUvvtuMAxBTlRsW/tJOmhxczelj6V2W
pCq/si4nyEqs/Mohireu1Re66o5FilqHNR/DdnRyynPfW/Xb2bHg2G/EmL3Qf6hP
bT8FuJfXzUlezw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:50:48 2025 by rpki-client