Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft
File:                     xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft (raw, json)
Hash identifier:          g/+IOzqNq/9HN7pQZ5WgCemFeSKigQbJ8Add5UctpLc=
Subject key identifier:   27:E3:F3:47:FF:4C:48:88:CA:1F:D4:E2:E6:29:B4:00:44:95:B9:E1
Authority key identifier: C4:0D:C8:A6:5A:F6:7E:72:DF:DF:31:CC:88:94:79:71:9E:4F:D7:A3
Certificate issuer:       /CN=c40dc8a65af67e72dfdf31cc889479719e4fd7a3
Certificate serial:       0194BBCEC122A8FADC9E8C3DA04AD72378FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xA3Iplr2fnLf3zHMiJR5cZ5P16M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft
Manifest number:          10D0
Signing time:             Fri 31 Jan 2025 10:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:16 +0000
Files and hashes:         1: xA3Iplr2fnLf3zHMiJR5cZ5P16M.crl (hash: B6obKtu3Q/DvXB1kyHE09heeh5Z7LIlIl7yQbaMpf3A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c1:22:a8:fa:dc:9e:8c:3d:a0:4a:d7:23:78:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40dc8a65af67e72dfdf31cc889479719e4fd7a3
        Validity
            Not Before: Jan 31 10:01:16 2025 GMT
            Not After : Feb  1 10:01:16 2025 GMT
        Subject: CN=27e3f347ff4c4888ca1fd4e2e629b4004495b9e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:61:6b:d3:f7:85:34:a6:1b:63:93:48:a2:f4:
                    aa:c1:c5:78:ed:3b:ea:79:e7:81:67:d6:37:84:69:
                    0c:0e:5a:a7:2e:64:65:31:b1:4b:27:74:81:d0:64:
                    22:ee:ee:42:ff:9a:d8:b8:ae:72:b4:60:01:35:2c:
                    73:3c:d7:b5:0b:47:01:34:02:c4:63:b7:ea:01:9d:
                    37:6c:5d:8d:cb:20:4d:fd:0f:3c:fc:52:41:93:c9:
                    03:2c:f1:01:5f:d2:8d:fc:8d:92:08:05:2a:88:9b:
                    cd:82:06:c4:26:79:b9:f3:c5:7d:2e:f7:2b:68:23:
                    75:ef:97:ef:04:c0:24:6f:1f:03:3b:b6:6c:03:8e:
                    9d:40:0d:44:e9:75:2a:4c:d1:aa:02:93:9c:81:2f:
                    f9:13:cc:b8:19:61:e1:3e:2e:09:ce:a7:e8:de:ae:
                    23:5b:6f:fe:ff:3d:50:13:bd:76:7e:71:79:41:d1:
                    57:d0:f3:8b:c3:2f:ee:17:d7:2f:fe:22:48:06:fd:
                    15:bc:65:13:e8:32:f1:66:57:86:9d:83:1b:e4:9b:
                    92:56:d2:cb:d3:bb:0e:30:af:d0:aa:59:8c:5b:8b:
                    5e:39:ff:31:03:f5:a2:48:79:b6:c1:d9:f4:34:9a:
                    47:d9:6e:91:56:8b:ba:88:ea:17:cf:c4:9c:9d:e6:
                    0f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E3:F3:47:FF:4C:48:88:CA:1F:D4:E2:E6:29:B4:00:44:95:B9:E1
            X509v3 Authority Key Identifier:
                keyid:C4:0D:C8:A6:5A:F6:7E:72:DF:DF:31:CC:88:94:79:71:9E:4F:D7:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xA3Iplr2fnLf3zHMiJR5cZ5P16M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/18b255-805a-41e7-8955-40d4a8226a36/1/xA3Iplr2fnLf3zHMiJR5cZ5P16M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:99:71:0a:c0:02:8e:12:18:f4:58:aa:b9:d2:ac:d5:ad:aa:
         e5:8e:43:ab:67:67:7f:fd:39:d0:04:6c:81:2f:2a:94:c4:77:
         43:f4:7c:5d:ac:f3:01:3f:50:a3:51:02:70:31:2c:b6:fd:65:
         cd:81:30:f3:8d:3a:9a:58:a6:de:d6:d2:ae:10:4b:30:64:89:
         97:a3:e2:49:22:16:3e:cc:fb:bc:28:4b:00:89:74:2a:52:97:
         c5:72:13:68:4c:c3:e3:06:97:da:8b:94:fe:5d:64:57:3b:91:
         a8:56:f9:11:47:7e:c5:a8:87:76:c6:3c:35:55:d8:f6:81:77:
         54:70:3f:ba:0e:a2:0e:91:43:bf:d3:c3:08:89:6f:71:8d:98:
         e8:b7:54:0b:41:d0:42:be:aa:3b:5c:7d:66:b4:90:49:05:52:
         91:64:eb:04:cb:06:18:da:9a:66:98:61:9d:42:54:18:93:e5:
         6a:0b:42:c1:5e:a9:ed:22:59:d3:79:4b:d6:d0:8a:9b:d3:44:
         25:f5:3f:4b:79:61:9b:48:bc:98:4a:32:32:b4:3d:e9:03:59:
         41:e4:d4:24:32:5d:03:0e:ad:92:49:27:c7:af:a0:b9:02:23:
         7f:0f:b9:34:1f:62:39:6d:e6:2a:84:5d:b1:23:08:8a:58:84:
         dd:af:41:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zsEiqPrcnow9oErXI3j8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MGRjOGE2NWFmNjdlNzJkZmRmMzFjYzg4OTQ3OTcxOWU0
ZmQ3YTMwHhcNMjUwMTMxMTAwMTE2WhcNMjUwMjAxMTAwMTE2WjAzMTEwLwYDVQQD
EygyN2UzZjM0N2ZmNGM0ODg4Y2ExZmQ0ZTJlNjI5YjQwMDQ0OTViOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GFr0/eFNKYbY5NIovSqwcV47Tvq
eeeBZ9Y3hGkMDlqnLmRlMbFLJ3SB0GQi7u5C/5rYuK5ytGABNSxzPNe1C0cBNALE
Y7fqAZ03bF2NyyBN/Q88/FJBk8kDLPEBX9KN/I2SCAUqiJvNggbEJnm588V9Lvcr
aCN175fvBMAkbx8DO7ZsA46dQA1E6XUqTNGqApOcgS/5E8y4GWHhPi4Jzqfo3q4j
W2/+/z1QE712fnF5QdFX0POLwy/uF9cv/iJIBv0VvGUT6DLxZleGnYMb5JuSVtLL
07sOMK/QqlmMW4teOf8xA/WiSHm2wdn0NJpH2W6RVou6iOoXz8ScneYPDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfj80f/TEiIyh/U4uYptABElbnhMB8GA1UdIwQY
MBaAFMQNyKZa9n5y398xzIiUeXGeT9ejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEEzSXBscjJmbkxmM3pITWlKUjVjWjVQMTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xOGIyNTUtODA1YS00MWU3LTg5NTUt
NDBkNGE4MjI2YTM2LzEveEEzSXBscjJmbkxmM3pITWlKUjVjWjVQMTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8xOGIyNTUtODA1YS00MWU3LTg5NTUtNDBkNGE4MjI2YTM2
LzEveEEzSXBscjJmbkxmM3pITWlKUjVjWjVQMTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJlxCsAC
jhIY9FiqudKs1a2q5Y5Dq2dnf/050ARsgS8qlMR3Q/R8XazzAT9Qo1ECcDEstv1l
zYEw8406mlim3tbSrhBLMGSJl6PiSSIWPsz7vChLAIl0KlKXxXITaEzD4waX2ouU
/l1kVzuRqFb5EUd+xaiHdsY8NVXY9oF3VHA/ug6iDpFDv9PDCIlvcY2Y6LdUC0HQ
Qr6qO1x9ZrSQSQVSkWTrBMsGGNqaZphhnUJUGJPlagtCwV6p7SJZ03lL1tCKm9NE
JfU/S3lhm0i8mEoyMrQ96QNZQeTUJDJdAw6tkkknx6+guQIjfw+5NB9iOW3mKoRd
sSMIiliE3a9B5g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:28 2025 by rpki-client