Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File:                     F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier:          j2Nbi33uiU0LRR505HhLwNbBWrSsCzMUB/NiwLL/JA0=
Subject key identifier:   DB:D5:C6:D5:2C:D2:D1:66:AB:B5:BC:89:81:49:79:B2:C8:F6:0F:E8
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer:       /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial:       0194BD17C040DA5ABAA1FF3623110BA654CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number:          1153
Signing time:             Fri 31 Jan 2025 16:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:37 +0000
Files and hashes:         1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: bsdD6ttyEf60ZuI30ikEySRT7fwNXv1qBC1JoXWFg2w=)
                          2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:c0:40:da:5a:ba:a1:ff:36:23:11:0b:a6:54:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
        Validity
            Not Before: Jan 31 16:00:37 2025 GMT
            Not After : Feb  1 16:00:37 2025 GMT
        Subject: CN=dbd5c6d52cd2d166abb5bc89814979b2c8f60fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:e2:92:9e:ed:f0:73:d5:00:ec:62:a5:f3:
                    15:14:3c:f2:5e:5c:30:f6:f6:6c:0f:65:bf:24:d4:
                    d1:59:7f:1b:37:82:e4:e2:60:e6:3b:28:09:0a:fa:
                    0a:cc:3e:0e:5d:e7:5d:13:3e:a4:44:70:f0:1c:dc:
                    98:b4:ef:5c:0d:a2:15:b7:bb:2d:69:4a:3e:6f:98:
                    0e:7d:de:ff:a1:f6:84:aa:b3:d3:4a:da:d6:ef:8f:
                    73:8b:3b:f3:94:ea:69:ae:09:82:81:a0:70:16:2f:
                    65:fc:30:77:e9:f4:d3:4a:45:31:44:00:07:a5:31:
                    37:ee:ec:5e:dd:9f:a7:03:08:cd:00:3a:86:fc:ff:
                    b8:ee:e3:fd:7b:f0:70:8d:4d:1e:57:2f:9c:35:cd:
                    b9:2c:ad:5a:52:7a:4b:d0:45:66:ae:1a:09:83:b2:
                    38:4a:95:48:a2:79:55:04:35:b5:ca:5d:54:3c:8a:
                    ef:b5:f0:34:30:bc:f8:bc:a2:58:ad:89:3a:37:30:
                    fb:16:4c:55:9e:41:ad:65:10:06:64:60:3d:bf:f5:
                    21:a2:66:c6:c8:ce:23:e2:50:22:dc:09:61:40:cb:
                    35:77:18:64:bc:91:fe:76:3a:44:a9:06:bd:5f:9d:
                    b4:16:ff:f5:20:a9:cc:41:25:d9:cb:fe:ab:b8:89:
                    e3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D5:C6:D5:2C:D2:D1:66:AB:B5:BC:89:81:49:79:B2:C8:F6:0F:E8
            X509v3 Authority Key Identifier:
                keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:90:2b:4c:85:bf:6c:f9:7b:da:f9:65:a2:8a:a6:77:3e:d0:
         38:56:f6:a9:78:5d:31:5d:51:cf:b4:99:bf:9b:a9:bc:a8:50:
         ac:cc:fb:cb:e0:0f:90:a9:d9:9c:23:19:43:db:2b:0d:fc:28:
         4a:f0:9d:26:74:ad:5d:e1:9e:f0:3a:24:7b:91:86:05:9b:bb:
         b1:53:dd:30:5f:e7:1a:60:f6:13:bc:55:53:4e:10:38:8e:84:
         e0:84:24:e4:07:66:12:3a:da:9f:bc:ff:75:d0:dc:dd:b8:36:
         94:35:cd:0f:b8:84:d1:28:4f:49:14:6a:7f:f9:56:7f:1f:68:
         77:a5:29:a1:ea:e1:17:b6:0b:11:59:d0:d7:59:09:66:6e:65:
         21:54:28:81:c7:f7:64:2d:cf:ab:cf:29:e4:38:c1:61:37:f6:
         5c:0f:7d:cc:7e:fb:36:8b:0f:f7:63:54:56:8b:13:24:62:21:
         7b:68:83:cc:4a:86:d1:c7:c5:98:78:25:fc:32:94:d7:c1:65:
         6a:1d:1f:2e:2d:d6:0d:c8:e9:af:35:03:35:b0:1d:1b:a9:98:
         a7:0f:6b:c8:ca:01:39:5d:b8:9d:e1:1f:00:d4:b0:51:e7:20:
         4c:90:41:eb:3d:31:35:d2:cb:a3:18:5b:a7:75:83:3b:19:c5:
         52:bb:6c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F8BA2lq6of82IxELplTPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YWM4MGIwZWVmNTcwOGM2NDM5MDU0NWQxYTcxMzkwMjQ0
YjZkMWIwHhcNMjUwMTMxMTYwMDM3WhcNMjUwMjAxMTYwMDM3WjAzMTEwLwYDVQQD
EyhkYmQ1YzZkNTJjZDJkMTY2YWJiNWJjODk4MTQ5NzliMmM4ZjYwZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJbikp7t8HPVAOxipfMVFDzyXlww
9vZsD2W/JNTRWX8bN4Lk4mDmOygJCvoKzD4OXeddEz6kRHDwHNyYtO9cDaIVt7st
aUo+b5gOfd7/ofaEqrPTStrW749zizvzlOpprgmCgaBwFi9l/DB36fTTSkUxRAAH
pTE37uxe3Z+nAwjNADqG/P+47uP9e/BwjU0eVy+cNc25LK1aUnpL0EVmrhoJg7I4
SpVIonlVBDW1yl1UPIrvtfA0MLz4vKJYrYk6NzD7FkxVnkGtZRAGZGA9v/UhombG
yM4j4lAi3AlhQMs1dxhkvJH+djpEqQa9X520Fv/1IKnMQSXZy/6ruInjJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvVxtUs0tFmq7W8iYFJebLI9g/oMB8GA1UdIwQY
MBaAFBesgLDu9XCMZDkFRdGnE5AkS20bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZ5QXNPNzFjSXhrT1FWRjBhY1RrQ1JMYlJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83ZTJhZGEtMGRjMS00ZjNlLWE1OGQt
YTI5ZTgxNGI5YjI5LzEvRjZ5QXNPNzFjSXhrT1FWRjBhY1RrQ1JMYlJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83ZTJhZGEtMGRjMS00ZjNlLWE1OGQtYTI5ZTgxNGI5YjI5
LzEvRjZ5QXNPNzFjSXhrT1FWRjBhY1RrQ1JMYlJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJArTIW/
bPl72vllooqmdz7QOFb2qXhdMV1Rz7SZv5upvKhQrMz7y+APkKnZnCMZQ9srDfwo
SvCdJnStXeGe8Doke5GGBZu7sVPdMF/nGmD2E7xVU04QOI6E4IQk5AdmEjran7z/
ddDc3bg2lDXND7iE0ShPSRRqf/lWfx9od6UpoerhF7YLEVnQ11kJZm5lIVQogcf3
ZC3Pq88p5DjBYTf2XA99zH77NosP92NUVosTJGIhe2iDzEqG0cfFmHgl/DKU18Fl
ah0fLi3WDcjprzUDNbAdG6mYpw9ryMoBOV24neEfANSwUecgTJBB6z0xNdLLoxhb
p3WDOxnFUrtsmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:41 2025 by rpki-client