Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
File:                     79YM7FOzoM_Iy0VDotCopZ5glu4.mft (raw, json)
Hash identifier:          HrbNCf0JGtpNyoKechjC0iJRmA2z7vLM9KwkVHv9h+M=
Subject key identifier:   92:DC:6C:27:F8:F2:96:BC:C4:F1:3B:98:9C:A1:45:D2:60:EF:05:38
Authority key identifier: EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE
Certificate issuer:       /CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
Certificate serial:       0194BC04E5248A540690A7D8732CC9365B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft
Manifest number:          1301
Signing time:             Fri 31 Jan 2025 11:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:24 +0000
Files and hashes:         1: 79YM7FOzoM_Iy0VDotCopZ5glu4.crl (hash: KConblM8D93+Qof1d+HaYhvEthtfQbgS7ak9RoqJ0JY=)
                          2: hSNRyfJ3PH2KGCseUOEvDGpfyK8.roa (hash: XdLLCZX0/z3+SIY+d7BWzoDcMrU0AuJsTdPOrDQnlMU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e5:24:8a:54:06:90:a7:d8:73:2c:c9:36:5b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efd60cec53b3a0cfc8cb4543a2d0a8a59e6096ee
        Validity
            Not Before: Jan 31 11:00:24 2025 GMT
            Not After : Feb  1 11:00:24 2025 GMT
        Subject: CN=92dc6c27f8f296bcc4f13b989ca145d260ef0538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cf:cc:b9:db:d5:de:46:10:7b:eb:d0:42:44:
                    6f:b3:59:b1:b5:d0:c4:46:a4:e7:52:80:1d:8c:3c:
                    59:3b:d2:23:57:5a:2c:7b:4e:0e:e1:ae:f4:f8:29:
                    19:df:b5:0c:1b:50:b0:93:47:5d:e8:0a:a6:0b:bf:
                    e8:de:f0:cb:49:ed:3b:89:51:07:35:7b:a1:0f:3c:
                    f2:ea:b4:9b:2a:a7:c9:73:3e:41:48:bc:84:3e:cd:
                    41:d9:44:20:ff:35:0c:a2:ee:b2:3b:a4:70:59:97:
                    2b:50:e5:30:62:63:49:ba:81:21:08:b1:b1:33:66:
                    ea:27:b8:9c:61:c4:8a:a5:13:83:79:8a:ab:cc:65:
                    ea:25:38:8b:83:d6:4c:a9:15:88:27:41:6a:dd:9e:
                    11:64:f7:a4:84:a8:8c:68:69:4e:b9:bb:b6:df:60:
                    59:a7:ce:f8:3d:62:18:f7:43:19:54:16:b1:c3:a9:
                    92:b0:ab:4e:93:43:c4:20:3e:d4:69:5d:ef:7d:3f:
                    51:63:4d:f9:18:bf:de:36:22:83:82:50:93:f6:36:
                    33:18:13:aa:58:0f:b3:68:1d:e5:3d:e7:4b:b9:77:
                    e5:e3:59:e4:87:4c:b0:40:b2:83:f8:c4:65:2a:31:
                    92:56:17:2b:d9:3b:3a:29:01:12:c8:69:e4:9b:00:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DC:6C:27:F8:F2:96:BC:C4:F1:3B:98:9C:A1:45:D2:60:EF:05:38
            X509v3 Authority Key Identifier:
                keyid:EF:D6:0C:EC:53:B3:A0:CF:C8:CB:45:43:A2:D0:A8:A5:9E:60:96:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79YM7FOzoM_Iy0VDotCopZ5glu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/43e959-397e-4e95-9978-9e128cf3c3ad/1/79YM7FOzoM_Iy0VDotCopZ5glu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:08:87:87:0c:2f:4b:f4:16:b9:89:11:49:13:5f:65:29:d7:
         6a:ec:43:84:2f:aa:05:63:60:76:51:9b:e9:78:42:d7:59:e6:
         f1:c1:6f:ab:37:8f:ed:2e:1d:8a:4b:a9:11:b4:9e:a4:5d:87:
         6f:53:4e:45:87:20:c1:2f:49:2f:2b:b2:16:62:e9:ce:a6:de:
         13:eb:c0:04:df:5a:d3:c9:6b:a6:8e:f2:6f:20:96:f4:65:15:
         64:d1:a3:e4:84:d8:73:ea:27:49:ff:47:c6:74:c9:ac:34:62:
         50:e9:23:37:79:28:c9:a7:cc:80:7d:fe:82:c3:fe:3d:3e:7c:
         de:85:b8:84:6d:c8:72:13:49:a7:eb:75:85:9d:dd:35:c8:bb:
         1a:46:89:bb:2c:ce:53:dd:9b:6c:a7:f5:58:9d:a8:14:44:3e:
         00:a0:d8:7f:99:69:32:b3:f2:a3:3e:e0:fc:05:e5:b8:56:f2:
         b7:b5:a7:19:0e:95:46:94:fe:dd:9f:44:ff:ae:a4:df:ac:3d:
         dc:8a:d3:d7:fb:1f:f3:8e:cf:be:34:d0:7c:e6:ef:00:2b:2f:
         93:bc:54:48:a0:22:c5:2a:f2:4e:78:c3:8f:d1:c3:6c:c5:39:
         9d:f9:34:77:ae:2f:ca:73:43:6d:b8:3d:c0:c0:d7:00:e5:c2:
         19:81:d4:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOUkilQGkKfYcyzJNluLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZDYwY2VjNTNiM2EwY2ZjOGNiNDU0M2EyZDBhOGE1OWU2
MDk2ZWUwHhcNMjUwMTMxMTEwMDI0WhcNMjUwMjAxMTEwMDI0WjAzMTEwLwYDVQQD
Eyg5MmRjNmMyN2Y4ZjI5NmJjYzRmMTNiOTg5Y2ExNDVkMjYwZWYwNTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M/MudvV3kYQe+vQQkRvs1mxtdDE
RqTnUoAdjDxZO9IjV1ose04O4a70+CkZ37UMG1Cwk0dd6AqmC7/o3vDLSe07iVEH
NXuhDzzy6rSbKqfJcz5BSLyEPs1B2UQg/zUMou6yO6RwWZcrUOUwYmNJuoEhCLGx
M2bqJ7icYcSKpRODeYqrzGXqJTiLg9ZMqRWIJ0Fq3Z4RZPekhKiMaGlOubu232BZ
p874PWIY90MZVBaxw6mSsKtOk0PEID7UaV3vfT9RY035GL/eNiKDglCT9jYzGBOq
WA+zaB3lPedLuXfl41nkh0ywQLKD+MRlKjGSVhcr2Ts6KQESyGnkmwBtQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLcbCf48pa8xPE7mJyhRdJg7wU4MB8GA1UdIwQY
MBaAFO/WDOxTs6DPyMtFQ6LQqKWeYJbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlZTTdGT3pvTV9JeTBWRG90Q29wWjVnbHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80M2U5NTktMzk3ZS00ZTk1LTk5Nzgt
OWUxMjhjZjNjM2FkLzEvNzlZTTdGT3pvTV9JeTBWRG90Q29wWjVnbHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80M2U5NTktMzk3ZS00ZTk1LTk5NzgtOWUxMjhjZjNjM2Fk
LzEvNzlZTTdGT3pvTV9JeTBWRG90Q29wWjVnbHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagiHhwwv
S/QWuYkRSRNfZSnXauxDhC+qBWNgdlGb6XhC11nm8cFvqzeP7S4dikupEbSepF2H
b1NORYcgwS9JLyuyFmLpzqbeE+vABN9a08lrpo7ybyCW9GUVZNGj5ITYc+onSf9H
xnTJrDRiUOkjN3koyafMgH3+gsP+PT583oW4hG3IchNJp+t1hZ3dNci7GkaJuyzO
U92bbKf1WJ2oFEQ+AKDYf5lpMrPyoz7g/AXluFbyt7WnGQ6VRpT+3Z9E/66k36w9
3IrT1/sf847PvjTQfObvACsvk7xUSKAixSryTnjDj9HDbMU5nfk0d64vynNDbbg9
wMDXAOXCGYHUTQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:14 2025 by rpki-client