Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File:                     fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier:          TpAh6Ie+FlNM99+Wmtwa1q1fbF+nIyWwp/7NHWlV8/A=
Subject key identifier:   B5:E3:A3:2C:A7:10:6B:7D:28:56:8E:23:98:69:3A:24:DA:1F:A9:E7
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer:       /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial:       0194BC3CA806CBE90010C47A9D6B1A596EC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number:          0D2A
Signing time:             Fri 31 Jan 2025 12:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:19 +0000
Files and hashes:         1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: 4NSIMwr62e3pHsB6Q2lM58O3K90mCnN2icwRKdmqcHI=)
                          2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:a8:06:cb:e9:00:10:c4:7a:9d:6b:1a:59:6e:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
        Validity
            Not Before: Jan 31 12:01:19 2025 GMT
            Not After : Feb  1 12:01:19 2025 GMT
        Subject: CN=b5e3a32ca7106b7d28568e2398693a24da1fa9e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:58:47:8f:e4:38:56:d5:64:d8:cc:ef:36:
                    49:de:12:9f:82:f5:19:9c:86:32:31:fd:45:56:dc:
                    ec:7b:8e:34:f2:ae:13:0b:16:a6:d6:57:60:65:8b:
                    d0:9b:2d:74:19:de:2f:1c:cf:fc:88:8a:47:f3:66:
                    1d:90:9d:4e:6c:6b:5b:76:22:3e:d1:a3:13:4b:f5:
                    8f:84:2e:26:a6:df:0c:3d:db:0c:85:e7:cc:41:01:
                    50:a3:88:0c:be:8e:7e:e4:63:89:e3:92:4c:9a:d6:
                    06:2a:8b:01:89:9f:33:dd:84:d6:68:ea:aa:50:4b:
                    82:22:23:c4:5f:9d:9b:37:fa:95:02:6f:f4:3e:30:
                    81:07:be:22:7a:78:1f:3c:e0:bf:c2:bf:70:68:4d:
                    66:a9:07:1a:47:39:e7:1b:54:4b:28:91:18:f0:31:
                    43:de:f6:dd:fc:2c:0d:1d:65:c2:27:b7:55:fb:ab:
                    c6:3c:b7:24:35:e9:f6:6c:0c:aa:ff:b4:ae:a3:06:
                    6a:69:cb:7e:7b:c3:ee:bd:15:a2:24:26:95:c8:0e:
                    9f:40:80:9f:e3:68:ef:ee:46:73:aa:3a:78:2e:fc:
                    88:5a:88:56:b1:65:a8:69:f7:94:69:85:63:46:96:
                    56:65:d7:3a:de:5d:37:2c:bd:d4:af:d7:a9:49:9f:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E3:A3:2C:A7:10:6B:7D:28:56:8E:23:98:69:3A:24:DA:1F:A9:E7
            X509v3 Authority Key Identifier:
                keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:51:a8:0d:1b:fd:03:70:cd:00:f6:71:bf:88:09:52:e3:f5:
         89:b9:7d:ad:41:9c:e0:c6:2e:91:85:12:b2:18:f3:b5:3f:fd:
         da:96:f8:27:22:cd:d9:5a:b5:ca:9c:ed:76:85:1f:74:33:84:
         6c:6f:46:d9:19:ec:f6:72:49:ed:21:b7:78:de:1c:39:2c:9c:
         7f:94:90:2f:2e:a6:a7:94:21:e7:e4:86:a9:bd:7c:d8:32:e2:
         5c:8f:7a:20:8b:db:1b:63:6b:28:69:0c:5d:74:f7:93:f5:cf:
         3b:8e:ef:56:9f:10:1b:c2:8f:6b:40:ac:f9:f6:5d:25:ac:65:
         f3:ca:f2:82:9b:e6:d6:bb:88:4a:b1:74:08:e9:d9:ef:c4:41:
         3a:70:c0:a6:c3:5d:48:48:50:2c:ae:be:82:6d:ca:5e:80:06:
         6f:75:24:ac:c2:89:66:91:b0:fe:c8:a5:89:a7:a7:56:24:40:
         f2:3e:3a:1b:dd:c4:35:20:52:dc:6f:e8:82:63:ee:09:34:a6:
         72:b4:b7:89:d8:5a:5d:27:50:9a:3e:98:c6:22:4a:d5:7b:42:
         ea:1d:a1:c7:88:ae:17:e5:d2:9f:79:0e:8b:1a:9a:cd:ac:bc:
         31:d5:f7:3c:b1:7f:0c:ad:3e:6d:02:20:78:50:1b:b3:d6:3e:
         01:87:13:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKgGy+kAEMR6nWsaWW7IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkN2NiMjk3OGJiNTRlYjU1N2NhZTNmZmIzNWU0NmFjNGQ1
YzIyYmYwHhcNMjUwMTMxMTIwMTE5WhcNMjUwMjAxMTIwMTE5WjAzMTEwLwYDVQQD
EyhiNWUzYTMyY2E3MTA2YjdkMjg1NjhlMjM5ODY5M2EyNGRhMWZhOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcJYR4/kOFbVZNjM7zZJ3hKfgvUZ
nIYyMf1FVtzse4408q4TCxam1ldgZYvQmy10Gd4vHM/8iIpH82YdkJ1ObGtbdiI+
0aMTS/WPhC4mpt8MPdsMhefMQQFQo4gMvo5+5GOJ45JMmtYGKosBiZ8z3YTWaOqq
UEuCIiPEX52bN/qVAm/0PjCBB74iengfPOC/wr9waE1mqQcaRznnG1RLKJEY8DFD
3vbd/CwNHWXCJ7dV+6vGPLckNen2bAyq/7SuowZqact+e8PuvRWiJCaVyA6fQICf
42jv7kZzqjp4LvyIWohWsWWoafeUaYVjRpZWZdc63l03LL3Ur9epSZ8ZFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXjoyynEGt9KFaOI5hpOiTaH6nnMB8GA1UdIwQY
MBaAFH18speLtU61V8rj/7NeRqxNXCK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5Mzct
MjRjM2Q5ZTI1NDAxLzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82Y2VhMzctZDI3MC00ZDFjLWE5MzctMjRjM2Q5ZTI1NDAx
LzEvZlh5eWw0dTFUclZYeXVQX3MxNUdyRTFjSXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVGoDRv9
A3DNAPZxv4gJUuP1ibl9rUGc4MYukYUSshjztT/92pb4JyLN2Vq1ypztdoUfdDOE
bG9G2Rns9nJJ7SG3eN4cOSycf5SQLy6mp5Qh5+SGqb182DLiXI96IIvbG2NrKGkM
XXT3k/XPO47vVp8QG8KPa0Cs+fZdJaxl88rygpvm1ruISrF0COnZ78RBOnDApsNd
SEhQLK6+gm3KXoAGb3UkrMKJZpGw/siliaenViRA8j46G93ENSBS3G/ogmPuCTSm
crS3idhaXSdQmj6YxiJK1XtC6h2hx4iuF+XSn3kOixqazay8MdX3PLF/DK0+bQIg
eFAbs9Y+AYcTeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:25:36 2025 by rpki-client