Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
File:                     rSRGM37TPO3jTe_1VxBdxxwDqRY.mft (raw, json)
Hash identifier:          HAhPDdrXIx13YeHwPq+q8lRahgHDXFyaA9sblnq6//Y=
Subject key identifier:   93:08:95:48:F8:96:93:09:5F:CD:86:A2:BD:27:7C:FE:36:00:C6:F1
Authority key identifier: AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16
Certificate issuer:       /CN=ad2446337ed33cede34deff557105dc71c03a916
Certificate serial:       0194BBCE4B868C34D61B64C3AD43D4A671A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft
Manifest number:          03BB
Signing time:             Fri 31 Jan 2025 10:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:46 +0000
Files and hashes:         1: rSRGM37TPO3jTe_1VxBdxxwDqRY.crl (hash: Da5Ifof+OkSVv1WSb2VpfuYEnwwk/qGrUntw0493bLY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:4b:86:8c:34:d6:1b:64:c3:ad:43:d4:a6:71:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2446337ed33cede34deff557105dc71c03a916
        Validity
            Not Before: Jan 31 10:00:46 2025 GMT
            Not After : Feb  1 10:00:46 2025 GMT
        Subject: CN=93089548f89693095fcd86a2bd277cfe3600c6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:83:2a:90:8b:f1:db:e7:30:ab:7d:e5:36:45:
                    34:64:8d:60:27:a4:86:4c:58:89:07:e0:2e:f4:2d:
                    d7:5c:b2:3e:4a:72:0e:9d:40:8e:23:06:78:0b:49:
                    74:5a:e3:8d:d4:b6:e1:6b:4f:4b:c0:1c:2b:d9:1a:
                    b4:82:61:79:28:39:10:b6:99:20:60:2d:1e:d3:a7:
                    7f:f5:39:af:b5:ca:7c:cf:39:20:2a:09:7e:c8:94:
                    07:af:a2:c4:6a:47:c9:88:1e:98:a0:36:4f:2c:69:
                    99:f7:6d:85:21:52:d7:a6:aa:59:63:17:aa:7d:db:
                    b8:94:01:e1:da:48:52:ad:92:31:08:c1:59:c3:48:
                    06:3f:be:86:a0:cd:c2:b2:da:bc:c7:df:ad:00:ae:
                    7e:cd:66:21:a2:1b:d4:21:66:e4:60:c6:73:d2:24:
                    e6:80:86:07:96:fc:01:60:22:d1:0a:ab:bd:78:93:
                    2e:09:51:3f:fe:15:21:a2:a2:14:f8:07:eb:c9:5a:
                    c7:34:cb:3a:91:9c:a5:fd:4d:45:43:50:ff:d6:16:
                    16:0d:6c:5e:93:54:e6:11:8d:5a:2a:ab:b2:87:2e:
                    83:b9:09:90:e3:71:2c:38:ae:50:0f:1d:3a:b1:55:
                    9e:91:d5:76:e4:b8:ab:36:91:37:b1:7d:d4:0e:dc:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:08:95:48:F8:96:93:09:5F:CD:86:A2:BD:27:7C:FE:36:00:C6:F1
            X509v3 Authority Key Identifier:
                keyid:AD:24:46:33:7E:D3:3C:ED:E3:4D:EF:F5:57:10:5D:C7:1C:03:A9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRGM37TPO3jTe_1VxBdxxwDqRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cfa76c-05cc-43dc-98f1-e707dec7bd6c/1/rSRGM37TPO3jTe_1VxBdxxwDqRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:44:f7:5b:6d:73:e7:57:87:a3:72:97:bc:42:d1:52:8e:32:
         7b:6c:88:2e:65:ce:51:df:75:85:7e:b9:bf:cd:12:f8:df:d6:
         ac:f8:48:a9:f7:fc:85:30:27:36:33:60:c5:60:57:1b:e7:0b:
         18:8f:cc:d5:a7:73:2b:13:09:ff:5b:68:03:02:e6:02:3b:79:
         91:51:e4:14:8c:19:3b:6c:7b:0a:f4:f9:ae:13:99:c8:b3:2a:
         e4:83:c4:fa:65:6a:46:56:21:66:5e:8b:de:6b:0d:6d:10:6f:
         d4:99:8e:48:74:36:00:07:94:0a:a6:8a:36:04:ef:c9:c9:9f:
         be:dc:52:ac:28:13:6e:93:4e:25:a7:98:2a:d9:a5:3f:12:07:
         53:f4:05:23:3b:1d:fd:12:7b:d2:36:42:a9:e0:51:fa:a5:d2:
         a1:f7:eb:98:7f:21:5a:d8:6d:88:c3:ba:49:9a:98:63:9d:7d:
         fe:d5:7a:57:91:9c:88:35:21:2e:21:85:0e:63:a8:e5:e8:ba:
         4b:a2:30:f9:76:27:26:b4:3b:b7:50:78:9c:71:8a:53:9c:a1:
         f2:38:6a:62:dc:27:90:b6:57:15:70:b7:14:13:c3:1b:4e:18:
         6d:f7:18:5a:09:63:94:8f:1e:c3:56:27:3a:30:05:b0:6f:63:
         1f:cf:4c:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkuGjDTWG2TDrUPUpnGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMjQ0NjMzN2VkMzNjZWRlMzRkZWZmNTU3MTA1ZGM3MWMw
M2E5MTYwHhcNMjUwMTMxMTAwMDQ2WhcNMjUwMjAxMTAwMDQ2WjAzMTEwLwYDVQQD
Eyg5MzA4OTU0OGY4OTY5MzA5NWZjZDg2YTJiZDI3N2NmZTM2MDBjNmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34MqkIvx2+cwq33lNkU0ZI1gJ6SG
TFiJB+Au9C3XXLI+SnIOnUCOIwZ4C0l0WuON1Lbha09LwBwr2Rq0gmF5KDkQtpkg
YC0e06d/9Tmvtcp8zzkgKgl+yJQHr6LEakfJiB6YoDZPLGmZ922FIVLXpqpZYxeq
fdu4lAHh2khSrZIxCMFZw0gGP76GoM3Cstq8x9+tAK5+zWYhohvUIWbkYMZz0iTm
gIYHlvwBYCLRCqu9eJMuCVE//hUhoqIU+AfryVrHNMs6kZyl/U1FQ1D/1hYWDWxe
k1TmEY1aKquyhy6DuQmQ43EsOK5QDx06sVWekdV25LirNpE3sX3UDtz56QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMIlUj4lpMJX82Gor0nfP42AMbxMB8GA1UdIwQY
MBaAFK0kRjN+0zzt403v9VcQXcccA6kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEt
ZTcwN2RlYzdiZDZjLzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jZmE3NmMtMDVjYy00M2RjLTk4ZjEtZTcwN2RlYzdiZDZj
LzEvclNSR00zN1RQTzNqVGVfMVZ4QmR4eHdEcVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAukT3W21z
51eHo3KXvELRUo4ye2yILmXOUd91hX65v80S+N/WrPhIqff8hTAnNjNgxWBXG+cL
GI/M1adzKxMJ/1toAwLmAjt5kVHkFIwZO2x7CvT5rhOZyLMq5IPE+mVqRlYhZl6L
3msNbRBv1JmOSHQ2AAeUCqaKNgTvycmfvtxSrCgTbpNOJaeYKtmlPxIHU/QFIzsd
/RJ70jZCqeBR+qXSoffrmH8hWthtiMO6SZqYY519/tV6V5GciDUhLiGFDmOo5ei6
S6Iw+XYnJrQ7t1B4nHGKU5yh8jhqYtwnkLZXFXC3FBPDG04YbfcYWgljlI8ew1Yn
OjAFsG9jH89Mcw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:27 2025 by rpki-client