Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
File:                     ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft (raw, json)
Hash identifier:          /43DIzSk346C0rwdshdJ1Ut//2blKKSiA7zn4fgigHk=
Subject key identifier:   24:93:90:63:4C:85:D0:A7:35:99:8B:3E:72:7F:D4:5C:55:C9:B6:93
Authority key identifier: 65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB
Certificate issuer:       /CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
Certificate serial:       0194BCE05CF29102C923985CEA25978C9FDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft
Manifest number:          0212
Signing time:             Fri 31 Jan 2025 15:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:07 +0000
Files and hashes:         1: TbjsUDhMP9oiyRFzkMf_XEJ0_gs.roa (hash: N0QojbQjnjXATXQxNe2ZVC9V9rik44C7TlWbUv97jVE=)
                          2: ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl (hash: YpbnWIwoHRhoc7J6wz1em2KaIUEtP43Ad1Ofh5XObV4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:5c:f2:91:02:c9:23:98:5c:ea:25:97:8c:9f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65b128a5adcbccdf15cb979ad6abf2b9640fdbdb
        Validity
            Not Before: Jan 31 15:00:07 2025 GMT
            Not After : Feb  1 15:00:07 2025 GMT
        Subject: CN=249390634c85d0a735998b3e727fd45c55c9b693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:28:06:2e:e6:a9:ff:88:c9:26:c7:db:f4:
                    08:1a:0c:9c:6f:eb:36:25:9f:49:19:a0:f7:3a:40:
                    35:ac:09:61:bd:c1:f8:74:75:42:53:43:2a:c3:26:
                    f3:c2:5a:7c:82:9f:f1:d3:1a:ca:85:37:9e:f1:c7:
                    8f:7c:cb:06:3e:52:8b:83:e0:de:8c:56:40:fd:0d:
                    98:f5:c8:32:23:66:3e:3d:cd:eb:8e:f6:a2:c1:19:
                    f3:91:9b:b3:88:c6:37:34:bb:e2:c1:dd:d1:f3:46:
                    8e:16:1c:ae:d3:70:5d:52:d0:db:04:2d:7d:0c:c2:
                    24:21:84:9b:38:b1:b0:4f:e1:04:aa:33:50:9f:e3:
                    50:52:3c:9a:83:17:59:42:a5:47:92:46:71:67:09:
                    44:78:2b:19:eb:38:8f:43:9d:8f:55:16:b6:96:4f:
                    a5:a9:93:32:4f:5f:c6:fc:63:4a:83:c8:8e:1b:0f:
                    2c:bb:d9:c8:de:be:e9:e4:ca:6c:34:56:74:5a:3f:
                    60:61:d1:12:6a:e0:d3:6a:78:8f:13:3e:ae:ed:87:
                    41:e2:0e:5d:08:30:a6:06:52:79:cc:b7:3c:6f:e4:
                    b7:06:6e:83:5f:78:ee:b4:cb:76:2a:f6:bd:b9:b9:
                    d1:42:80:27:67:e4:19:91:ea:60:b9:75:bd:9d:fe:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:93:90:63:4C:85:D0:A7:35:99:8B:3E:72:7F:D4:5C:55:C9:B6:93
            X509v3 Authority Key Identifier:
                keyid:65:B1:28:A5:AD:CB:CC:DF:15:CB:97:9A:D6:AB:F2:B9:64:0F:DB:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbEopa3LzN8Vy5ea1qvyuWQP29s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c095fc-d573-4ad9-9e2e-bd86d4b32c58/1/ZbEopa3LzN8Vy5ea1qvyuWQP29s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:88:80:9e:af:b0:bf:55:55:c5:f4:e2:75:be:6d:23:84:fb:
         6f:c0:18:97:c6:b1:00:17:f6:63:da:a0:0b:98:5e:ef:eb:29:
         f5:18:4f:02:de:e8:b0:c0:f4:18:ad:dd:34:e5:dd:f1:1f:22:
         54:4e:c0:6f:ca:85:87:2e:0e:06:2c:70:36:37:2c:2e:8e:c9:
         35:93:e0:79:cc:bb:7d:65:f3:a6:7b:26:ed:a1:06:ab:fd:d2:
         4c:ec:b9:63:e1:80:47:fa:64:c2:a4:e0:4b:17:c0:d3:03:49:
         90:e5:91:78:c8:61:15:c5:49:9f:3d:46:33:af:1c:74:d3:90:
         02:a7:ae:aa:61:9a:a8:68:88:f3:f6:48:48:59:a6:2a:8a:fa:
         81:48:c8:f3:28:57:f9:dd:44:21:c3:2d:ba:8b:33:e4:63:73:
         b7:e7:c6:f9:c2:96:ed:b5:94:bb:b4:03:0a:0d:93:1f:7d:c4:
         47:ed:a6:d2:6e:63:08:68:49:a7:fb:1e:06:10:40:4f:f3:6a:
         54:ca:94:a0:80:ae:07:45:cb:31:a2:43:f8:5b:da:1b:7b:61:
         73:8b:48:8e:f5:59:9a:d5:ab:9e:fd:75:c8:c3:97:b3:25:08:
         be:1d:3c:99:f4:d4:bf:79:36:49:91:e1:65:f6:85:1b:aa:0d:
         d5:a1:54:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84FzykQLJI5hc6iWXjJ/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjEyOGE1YWRjYmNjZGYxNWNiOTc5YWQ2YWJmMmI5NjQw
ZmRiZGIwHhcNMjUwMTMxMTUwMDA3WhcNMjUwMjAxMTUwMDA3WjAzMTEwLwYDVQQD
EygyNDkzOTA2MzRjODVkMGE3MzU5OThiM2U3MjdmZDQ1YzU1YzliNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprMoBi7mqf+IySbH2/QIGgycb+s2
JZ9JGaD3OkA1rAlhvcH4dHVCU0Mqwybzwlp8gp/x0xrKhTee8cePfMsGPlKLg+De
jFZA/Q2Y9cgyI2Y+Pc3rjvaiwRnzkZuziMY3NLviwd3R80aOFhyu03BdUtDbBC19
DMIkIYSbOLGwT+EEqjNQn+NQUjyagxdZQqVHkkZxZwlEeCsZ6ziPQ52PVRa2lk+l
qZMyT1/G/GNKg8iOGw8su9nI3r7p5MpsNFZ0Wj9gYdESauDTaniPEz6u7YdB4g5d
CDCmBlJ5zLc8b+S3Bm6DX3jutMt2Kva9ubnRQoAnZ+QZkepguXW9nf57CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSTkGNMhdCnNZmLPnJ/1FxVybaTMB8GA1UdIwQY
MBaAFGWxKKWty8zfFcuXmtar8rlkD9vbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUt
YmQ4NmQ0YjMyYzU4LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDk1ZmMtZDU3My00YWQ5LTllMmUtYmQ4NmQ0YjMyYzU4
LzEvWmJFb3BhM0x6TjhWeTVlYTFxdnl1V1FQMjlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIiAnq+w
v1VVxfTidb5tI4T7b8AYl8axABf2Y9qgC5he7+sp9RhPAt7osMD0GK3dNOXd8R8i
VE7Ab8qFhy4OBixwNjcsLo7JNZPgecy7fWXzpnsm7aEGq/3STOy5Y+GAR/pkwqTg
SxfA0wNJkOWReMhhFcVJnz1GM68cdNOQAqeuqmGaqGiI8/ZISFmmKor6gUjI8yhX
+d1EIcMtuosz5GNzt+fG+cKW7bWUu7QDCg2TH33ER+2m0m5jCGhJp/seBhBAT/Nq
VMqUoICuB0XLMaJD+FvaG3thc4tIjvVZmtWrnv11yMOXsyUIvh08mfTUv3k2SZHh
ZfaFG6oN1aFUDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:08 2025 by rpki-client