Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
File:                     bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft (raw, json)
Hash identifier:          dXhG3VLf7kJkWdUMhEOJ9ECbnEnXgv7AM6l5AfVCUNg=
Subject key identifier:   4F:86:2B:D1:92:E0:14:0C:9A:43:F3:C0:53:4F:7F:EF:A6:7F:C5:8B
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Certificate issuer:       /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial:       0194BCAA3DA84C8106FB08F89F43606B0933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
Manifest number:          1144
Signing time:             Fri 31 Jan 2025 14:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:00 +0000
Files and hashes:         1: 6cqFumwYbobMDkWDDiEiiFoc7Sg.roa (hash: 4eHS/VJ9mPCyO9nNLtbC8pNl7VyahPHi4NuuAaELh/w=)
                          2: bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl (hash: si+oWb0uJfzZVW0yjp2F4W7v4mKFOYv8+HZ1+wvlzG0=)
                          3: tI868MCQG893IS8cCKhA3Gnv9u4.roa (hash: AVSP0s3nbiSWpz8l7ynDbY6/apcfYdcvmQMyPra2nQw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:3d:a8:4c:81:06:fb:08:f8:9f:43:60:6b:09:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
        Validity
            Not Before: Jan 31 14:01:00 2025 GMT
            Not After : Feb  1 14:01:00 2025 GMT
        Subject: CN=4f862bd192e0140c9a43f3c0534f7fefa67fc58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:20:f0:75:7c:a3:b6:90:21:03:ee:ab:d6:b3:
                    ac:0d:cc:b0:4c:c4:f4:c4:53:7d:73:d9:0c:33:e2:
                    f3:88:63:8d:12:09:7d:ed:c0:90:c5:9a:b7:a8:d0:
                    96:71:3c:51:2b:db:ee:25:55:14:b0:e7:62:59:41:
                    f5:f1:8d:b6:b2:a9:a0:98:a5:29:ad:78:4e:87:fd:
                    9e:db:50:8c:93:43:68:21:0c:c0:d2:3f:ea:b8:27:
                    5e:f6:64:8a:d5:70:a4:01:ee:a2:fa:1e:f6:c8:4f:
                    b3:97:6a:0a:a3:30:e1:90:f2:55:bd:18:a4:10:a9:
                    a7:d3:23:86:81:27:3e:b7:bd:18:42:a2:dc:69:ed:
                    09:65:1b:c8:f1:7d:63:19:c2:f4:75:85:d0:da:be:
                    87:55:a1:39:06:fe:e6:6c:22:9e:eb:f1:b4:d3:ec:
                    0f:7f:6b:b1:6b:52:7f:7a:ed:97:23:99:5a:d6:0f:
                    17:1e:ce:5f:59:ef:68:8b:0e:68:c9:c8:86:bb:da:
                    7f:d5:dc:f9:05:92:58:5e:2e:ff:7a:b8:0c:3c:55:
                    6b:a4:89:61:a8:fa:e3:f8:32:18:9d:fd:7c:15:f5:
                    58:44:90:05:0c:03:7a:24:d5:5c:34:bb:35:51:2d:
                    bb:d1:cd:8b:ac:9d:5c:3e:64:42:59:88:cc:92:0f:
                    d2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:2B:D1:92:E0:14:0C:9A:43:F3:C0:53:4F:7F:EF:A6:7F:C5:8B
            X509v3 Authority Key Identifier:
                keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:04:7a:1d:19:c1:ec:9a:54:64:81:79:af:8f:b5:88:99:e1:
         e0:6f:0a:f3:04:7b:41:fa:ec:1a:d9:dd:56:a9:5f:9c:14:b9:
         8b:40:21:d1:6f:5c:67:df:03:2b:79:32:96:87:3b:07:02:a8:
         f0:34:9d:a1:61:a5:1d:97:57:9c:65:0d:f1:b3:ea:46:3c:86:
         fd:f9:93:7b:48:90:8f:b2:8b:b0:e7:6b:04:3d:47:aa:7b:ce:
         4c:1f:05:6e:e3:85:70:7b:a7:4b:dc:3a:43:ee:cb:de:e5:17:
         10:01:a3:0c:2a:bf:8b:52:3d:71:fe:f1:04:48:85:ab:f6:1e:
         51:9c:6a:0a:ea:eb:ec:00:86:43:6c:be:1f:23:59:54:4d:dc:
         86:59:8c:18:f6:ac:af:c7:c1:84:a4:03:01:a8:95:74:76:0b:
         ea:57:e4:00:bf:77:f8:54:23:5a:d9:f5:23:29:9c:fe:0e:17:
         a6:5e:5d:34:06:99:3f:64:4a:73:54:d1:13:7b:2d:b9:e5:b6:
         84:26:fb:61:d5:8a:33:b1:36:26:5d:c6:cc:c5:d8:2c:eb:0a:
         13:09:b3:ea:d9:58:f2:3a:9f:af:78:87:20:78:04:8f:d6:1b:
         31:18:6b:16:ae:a0:48:7e:4c:f6:07:e0:6f:ee:a9:e9:fb:11:
         8f:ca:68:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qj2oTIEG+wj4n0NgawkzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3
ZjIwZTUwHhcNMjUwMTMxMTQwMTAwWhcNMjUwMjAxMTQwMTAwWjAzMTEwLwYDVQQD
Eyg0Zjg2MmJkMTkyZTAxNDBjOWE0M2YzYzA1MzRmN2ZlZmE2N2ZjNThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iDwdXyjtpAhA+6r1rOsDcywTMT0
xFN9c9kMM+LziGONEgl97cCQxZq3qNCWcTxRK9vuJVUUsOdiWUH18Y22sqmgmKUp
rXhOh/2e21CMk0NoIQzA0j/quCde9mSK1XCkAe6i+h72yE+zl2oKozDhkPJVvRik
EKmn0yOGgSc+t70YQqLcae0JZRvI8X1jGcL0dYXQ2r6HVaE5Bv7mbCKe6/G00+wP
f2uxa1J/eu2XI5la1g8XHs5fWe9oiw5oyciGu9p/1dz5BZJYXi7/ergMPFVrpIlh
qPrj+DIYnf18FfVYRJAFDAN6JNVcNLs1US270c2LrJ1cPmRCWYjMkg/SMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+GK9GS4BQMmkPzwFNPf++mf8WLMB8GA1UdIwQY
MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt
NjdhZDYwZDM4NmRkLzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk
LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwR6HRnB
7JpUZIF5r4+1iJnh4G8K8wR7QfrsGtndVqlfnBS5i0Ah0W9cZ98DK3kyloc7BwKo
8DSdoWGlHZdXnGUN8bPqRjyG/fmTe0iQj7KLsOdrBD1HqnvOTB8FbuOFcHunS9w6
Q+7L3uUXEAGjDCq/i1I9cf7xBEiFq/YeUZxqCurr7ACGQ2y+HyNZVE3chlmMGPas
r8fBhKQDAaiVdHYL6lfkAL93+FQjWtn1Iymc/g4Xpl5dNAaZP2RKc1TRE3stueW2
hCb7YdWKM7E2Jl3GzMXYLOsKEwmz6tlY8jqfr3iHIHgEj9YbMRhrFq6gSH5M9gfg
b+6p6fsRj8pojg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:03 2025 by rpki-client