Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
File:                     h7l24qq5IySO6A7lfL00rYe87zQ.mft (raw, json)
Hash identifier:          RUR+jSZ5P8tSVPTk/pGCN1yklm9pNFtABE4v+ciTRT0=
Subject key identifier:   AF:13:19:82:C1:59:F0:92:F9:84:B2:B0:0D:C0:8F:11:58:25:47:57
Authority key identifier: 87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34
Certificate issuer:       /CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
Certificate serial:       0194BBCDD5AB36D30602EC3A2CF3D90454FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft
Manifest number:          0B1E
Signing time:             Fri 31 Jan 2025 10:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:16 +0000
Files and hashes:         1: h7l24qq5IySO6A7lfL00rYe87zQ.crl (hash: r/elkdr2f41OZQnKFANZBT0d3d29eyrIzMEU+KnL5Sw=)
                          2: hrRjboaEddMTvU1wn6u0WdMEQ5k.roa (hash: R2w89TKLu5CTfHL7zBMhtJ8zldIghHv3KwB06EytEuE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:d5:ab:36:d3:06:02:ec:3a:2c:f3:d9:04:54:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b976e2aab923248ee80ee57cbd34ad87bcef34
        Validity
            Not Before: Jan 31 10:00:16 2025 GMT
            Not After : Feb  1 10:00:16 2025 GMT
        Subject: CN=af131982c159f092f984b2b00dc08f1158254757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5e:94:c5:4f:80:3d:0a:ea:29:4b:88:75:55:
                    fc:fd:ec:c5:91:54:37:3a:a0:e1:7c:9c:de:9f:ba:
                    19:1a:39:ce:0a:55:28:6e:5c:97:bc:8e:d8:08:2d:
                    e6:79:df:a1:c7:d5:8b:37:2a:bd:92:b1:2f:f6:d3:
                    af:d7:18:2f:ed:e5:13:0d:11:10:7d:ad:62:1d:89:
                    56:21:17:20:2f:f4:df:2c:63:e2:67:2a:ea:17:a7:
                    dc:5e:c9:66:c1:16:6d:f0:ca:02:fd:c4:38:ba:52:
                    2e:6f:73:50:14:d5:78:bd:56:82:fc:51:64:54:7f:
                    51:ed:5f:d6:76:83:a4:37:84:b6:04:95:39:dc:70:
                    c0:8f:c3:b2:a0:7d:cf:8b:2c:3c:22:40:90:38:ef:
                    ef:44:43:c7:ca:f1:80:a2:ba:fa:7e:62:76:87:69:
                    75:42:c4:ab:d9:c5:23:c0:3c:df:ff:e5:1a:78:76:
                    c6:e0:0c:d2:57:10:9d:85:b9:2a:2d:10:bf:b3:dd:
                    1d:83:9c:85:55:6d:dd:b3:9e:19:ff:21:86:a7:e8:
                    f9:61:97:c4:d4:64:1d:4f:06:7a:1e:de:f9:9f:ce:
                    3f:a1:60:cf:fa:aa:66:3a:8b:fc:33:85:72:bd:a0:
                    97:68:8e:68:96:8a:0a:db:72:9f:2d:9e:58:d9:e5:
                    60:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:13:19:82:C1:59:F0:92:F9:84:B2:B0:0D:C0:8F:11:58:25:47:57
            X509v3 Authority Key Identifier:
                keyid:87:B9:76:E2:AA:B9:23:24:8E:E8:0E:E5:7C:BD:34:AD:87:BC:EF:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7l24qq5IySO6A7lfL00rYe87zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92399b-1bed-45e2-9c93-e1b8ff25f60b/1/h7l24qq5IySO6A7lfL00rYe87zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ac:a0:fa:9e:0f:7f:87:e9:2b:c0:24:8a:69:c1:87:05:2c:
         26:ca:a5:10:f8:cf:46:d0:94:6d:3a:89:ab:b5:29:4b:ea:7c:
         2e:49:9f:c8:0f:58:87:20:bd:a4:f5:e1:de:e6:1e:f9:29:af:
         83:e8:fb:be:27:1b:2a:19:1f:b8:ec:88:21:f8:d8:ef:92:dd:
         e2:16:4d:f2:50:70:35:6a:71:b4:7c:47:17:48:30:0a:b0:67:
         59:ea:35:b1:81:1a:4c:c0:78:00:6c:07:bf:e8:39:a4:d5:0a:
         9f:f1:64:99:16:bc:75:0d:8c:d4:ff:81:56:c1:64:b8:6c:a2:
         46:c4:66:59:83:53:c7:3e:01:f5:b2:31:de:b7:a3:cd:2b:b5:
         2b:ea:19:0f:fc:c4:87:42:91:e5:5e:dd:55:93:bf:fa:d2:38:
         57:30:a0:6b:4e:c5:61:c9:f9:3d:25:a4:69:aa:10:f1:c8:d7:
         34:0d:ec:af:d1:94:95:61:c0:ec:52:ad:24:7f:ac:81:5f:c0:
         f2:7a:f5:dc:f7:a6:2f:86:31:86:79:75:b1:76:ea:55:3b:a8:
         07:1e:5c:8d:82:36:df:d0:30:22:74:66:a2:11:a6:c6:23:a6:
         fd:db:41:da:28:0f:09:3f:81:3e:56:61:e4:5a:b7:22:d5:ed:
         bd:3a:cd:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zdWrNtMGAuw6LPPZBFT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3Yjk3NmUyYWFiOTIzMjQ4ZWU4MGVlNTdjYmQzNGFkODdi
Y2VmMzQwHhcNMjUwMTMxMTAwMDE2WhcNMjUwMjAxMTAwMDE2WjAzMTEwLwYDVQQD
EyhhZjEzMTk4MmMxNTlmMDkyZjk4NGIyYjAwZGMwOGYxMTU4MjU0NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF6UxU+APQrqKUuIdVX8/ezFkVQ3
OqDhfJzen7oZGjnOClUoblyXvI7YCC3med+hx9WLNyq9krEv9tOv1xgv7eUTDREQ
fa1iHYlWIRcgL/TfLGPiZyrqF6fcXslmwRZt8MoC/cQ4ulIub3NQFNV4vVaC/FFk
VH9R7V/WdoOkN4S2BJU53HDAj8OyoH3Piyw8IkCQOO/vREPHyvGAorr6fmJ2h2l1
QsSr2cUjwDzf/+UaeHbG4AzSVxCdhbkqLRC/s90dg5yFVW3ds54Z/yGGp+j5YZfE
1GQdTwZ6Ht75n84/oWDP+qpmOov8M4VyvaCXaI5olooK23KfLZ5Y2eVgaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8TGYLBWfCS+YSysA3AjxFYJUdXMB8GA1UdIwQY
MBaAFIe5duKquSMkjugO5Xy9NK2HvO80MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMt
ZTFiOGZmMjVmNjBiLzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi85MjM5OWItMWJlZC00NWUyLTljOTMtZTFiOGZmMjVmNjBi
LzEvaDdsMjRxcTVJeVNPNkE3bGZMMDByWWU4N3pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKyg+p4P
f4fpK8AkimnBhwUsJsqlEPjPRtCUbTqJq7UpS+p8LkmfyA9YhyC9pPXh3uYe+Smv
g+j7vicbKhkfuOyIIfjY75Ld4hZN8lBwNWpxtHxHF0gwCrBnWeo1sYEaTMB4AGwH
v+g5pNUKn/FkmRa8dQ2M1P+BVsFkuGyiRsRmWYNTxz4B9bIx3rejzSu1K+oZD/zE
h0KR5V7dVZO/+tI4VzCga07FYcn5PSWkaaoQ8cjXNA3sr9GUlWHA7FKtJH+sgV/A
8nr13PemL4Yxhnl1sXbqVTuoBx5cjYI239AwInRmohGmxiOm/dtB2igPCT+BPlZh
5Fq3ItXtvTrNdw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:03 2025 by rpki-client