Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
File:                     z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft (raw, json)
Hash identifier:          44dOgV1AltnLPvQzFcXPGrmJqUguPvXHn8vp8HyE3xM=
Subject key identifier:   0F:FA:22:A9:FD:F6:57:72:8B:18:BF:63:D3:F8:46:5C:6A:25:94:F3
Authority key identifier: CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC
Certificate issuer:       /CN=cf8375c321def9265983e2194d40ba97afe7f1cc
Certificate serial:       0194BC72F5CCB8F7D182E8FF431336F7A498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft
Manifest number:          0F74
Signing time:             Fri 31 Jan 2025 13:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:38 +0000
Files and hashes:         1: 1-nSqvJkTY-iEcaodIZX8AZ4YyPw.roa (hash: vUjOaLlV53p/HwQqT7e/Jx/GmnYkrtPHXgpsZfhmCG4=)
                          2: z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl (hash: rfR9z9PsFNstQeS5iKIYcsOYV1KhUIdE6vFyXr9VU6U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f5:cc:b8:f7:d1:82:e8:ff:43:13:36:f7:a4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf8375c321def9265983e2194d40ba97afe7f1cc
        Validity
            Not Before: Jan 31 13:00:38 2025 GMT
            Not After : Feb  1 13:00:38 2025 GMT
        Subject: CN=0ffa22a9fdf657728b18bf63d3f8465c6a2594f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:97:17:a8:a8:5a:03:cf:e6:9e:f3:68:43:86:
                    a3:b2:e8:89:3f:ce:58:cf:3a:b9:5d:9c:be:90:ef:
                    da:a2:9e:78:6d:4d:0e:09:6d:78:f1:94:4b:55:ef:
                    c7:4c:d3:9e:29:eb:f7:4d:9b:d7:01:fb:7e:61:1f:
                    b6:b4:ef:d4:65:da:5f:8d:db:74:13:1f:88:b8:de:
                    2f:be:60:67:ab:25:8e:f5:1a:06:1e:22:6a:d8:c1:
                    10:49:ac:a2:91:9f:4e:70:a8:5b:b1:28:de:7d:f2:
                    ee:af:b7:cd:3d:d0:90:13:81:30:09:d0:11:7f:4a:
                    bf:e8:0e:0b:04:f9:e7:5b:4a:fd:28:14:b4:32:7d:
                    ec:c4:67:2a:e1:6a:db:73:e5:87:8f:b3:93:ac:65:
                    cd:7f:3e:e5:fd:f3:d3:f1:f3:b7:ab:ae:62:e4:33:
                    28:85:64:49:f9:a2:f7:37:0c:0f:91:0f:5a:75:53:
                    fb:14:4d:3b:a4:74:3a:29:bb:2d:01:21:a8:90:1a:
                    ef:2e:1d:b2:6e:3f:06:5d:1d:05:c4:1a:d9:b1:b3:
                    c8:04:16:f9:c5:13:69:ee:73:74:42:da:5c:11:66:
                    00:90:93:6e:74:cd:79:06:52:56:a7:f2:4b:0f:bf:
                    54:75:3a:0e:a3:28:55:00:6a:4e:12:fb:49:ba:fa:
                    6a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:22:A9:FD:F6:57:72:8B:18:BF:63:D3:F8:46:5C:6A:25:94:F3
            X509v3 Authority Key Identifier:
                keyid:CF:83:75:C3:21:DE:F9:26:59:83:E2:19:4D:40:BA:97:AF:E7:F1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4N1wyHe-SZZg-IZTUC6l6_n8cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a765a3-ed94-4fe0-bf45-e0c7b96b57f2/1/z4N1wyHe-SZZg-IZTUC6l6_n8cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:af:a4:4a:83:a7:38:61:d1:1b:94:55:ec:76:b9:ce:69:24:
         f2:e8:35:d0:98:37:0f:98:08:b4:d8:f9:f3:ea:37:99:60:2b:
         5f:e3:a5:81:ad:63:f7:bc:98:02:16:f9:57:99:6d:fb:9b:ce:
         71:85:90:d9:af:df:f6:1f:dc:2d:ad:b8:18:1a:e8:6b:ce:2a:
         86:78:d1:59:e2:d3:f2:1c:4b:ae:de:b3:92:77:8c:74:7b:c9:
         1f:8c:57:92:ce:31:02:93:94:6d:e6:48:e7:30:08:ce:9f:4f:
         3c:7d:38:6b:c5:f9:38:4c:b6:12:f2:7c:aa:19:2a:65:c9:d6:
         4d:cf:d2:84:21:c5:14:6e:18:98:53:04:46:08:f3:e4:25:8f:
         50:ac:08:92:74:ea:f5:a1:82:4c:1d:e5:0f:7b:be:32:38:b5:
         0d:fd:2a:fd:ff:27:d9:14:3c:ed:bb:eb:63:18:e5:6a:70:60:
         37:d9:11:cf:1b:bd:50:e3:2e:20:1e:bc:84:8f:9c:4f:03:5d:
         3c:db:16:f8:fd:d3:5e:3d:0a:14:3d:26:3c:63:aa:91:a2:7f:
         29:76:bc:50:b0:ad:7c:40:2e:1d:88:24:d8:6a:f0:cb:3a:97:
         0f:a2:07:84:22:00:3b:d9:62:10:a6:a5:e0:de:9d:4b:15:f6:
         55:f2:79:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvXMuPfRguj/QxM296SYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODM3NWMzMjFkZWY5MjY1OTgzZTIxOTRkNDBiYTk3YWZl
N2YxY2MwHhcNMjUwMTMxMTMwMDM4WhcNMjUwMjAxMTMwMDM4WjAzMTEwLwYDVQQD
EygwZmZhMjJhOWZkZjY1NzcyOGIxOGJmNjNkM2Y4NDY1YzZhMjU5NGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspcXqKhaA8/mnvNoQ4ajsuiJP85Y
zzq5XZy+kO/aop54bU0OCW148ZRLVe/HTNOeKev3TZvXAft+YR+2tO/UZdpfjdt0
Ex+IuN4vvmBnqyWO9RoGHiJq2MEQSayikZ9OcKhbsSjeffLur7fNPdCQE4EwCdAR
f0q/6A4LBPnnW0r9KBS0Mn3sxGcq4Wrbc+WHj7OTrGXNfz7l/fPT8fO3q65i5DMo
hWRJ+aL3NwwPkQ9adVP7FE07pHQ6KbstASGokBrvLh2ybj8GXR0FxBrZsbPIBBb5
xRNp7nN0QtpcEWYAkJNudM15BlJWp/JLD79UdToOoyhVAGpOEvtJuvpqHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/6Iqn99ldyixi/Y9P4RlxqJZTzMB8GA1UdIwQY
MBaAFM+DdcMh3vkmWYPiGU1Aupev5/HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUt
ZTBjN2I5NmI1N2YyLzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hNzY1YTMtZWQ5NC00ZmUwLWJmNDUtZTBjN2I5NmI1N2Yy
LzEvejROMXd5SGUtU1paZy1JWlRVQzZsNl9uOGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAua+kSoOn
OGHRG5RV7Ha5zmkk8ug10Jg3D5gItNj58+o3mWArX+Olga1j97yYAhb5V5lt+5vO
cYWQ2a/f9h/cLa24GBroa84qhnjRWeLT8hxLrt6zkneMdHvJH4xXks4xApOUbeZI
5zAIzp9PPH04a8X5OEy2EvJ8qhkqZcnWTc/ShCHFFG4YmFMERgjz5CWPUKwIknTq
9aGCTB3lD3u+Mji1Df0q/f8n2RQ87bvrYxjlanBgN9kRzxu9UOMuIB68hI+cTwNd
PNsW+P3TXj0KFD0mPGOqkaJ/KXa8ULCtfEAuHYgk2GrwyzqXD6IHhCIAO9liEKal
4N6dSxX2VfJ57A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:40:06 2025 by rpki-client