Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
File:                     K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft (raw, json)
Hash identifier:          5h9C+jmOD/VNOiCyx/UH92a3rSBBtNLnbpZrX7Uk8T8=
Subject key identifier:   FC:23:EB:2A:06:55:BC:C5:E5:B4:92:AF:2F:1A:44:B4:34:C4:1B:A6
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Certificate issuer:       /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial:       0194BCE078D380557D4F93E7393D108270BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
Manifest number:          0BE0
Signing time:             Fri 31 Jan 2025 15:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:14 +0000
Files and hashes:         1: 1ehPzZKxF1UYBJMFREeIsWSe-0E.roa (hash: +fEfnPMqQYMaOaxEiaDX2H+smUyU5o+FiuHqTI6a8Fg=)
                          2: 2GYZY3YmP4Z9CrbeYrsEBS4WPvQ.roa (hash: 5GQk+W5w5aJknyyML0N7FECeUlVHN3WA+aoitU2P1JY=)
                          3: 2catgB5VK787sqGbIW3dngQFHEE.roa (hash: B+SFn1cOjP49uHmdVYtQOuuR22NDQQ5ZSYkwXBcG4Xw=)
                          4: 9RSLkQ5wyeSzJcCtl7FXYXufiXg.roa (hash: C23nJYoJlpERYjPPrIl4nUFaowb3JdwHKbCCgwPR7Fc=)
                          5: A-23JzA-7G9IJRx7L7gZ2EsiZXs.roa (hash: 6GMUeHfmdErm/sIramac3F+jFlRdAFwxAZz+asqiZFE=)
                          6: K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl (hash: I/axWFOJ6zgFMBKUOldMDMSUjYyBLkn42iIP/59C+cU=)
                          7: NLONGxWCaDncCXl5R1oWg-KTHPI.roa (hash: wEU6hkf61GZGgIuFGLQHCPpd8fVGVUdNGM1QqUlTpzA=)
                          8: Q0coXhksYsiHyus7jkG0H1rCOhs.roa (hash: GLAs1yGQZUPoiQEpZ9WyTQNtMvFVhBPCXGqgjPd+Ip8=)
                          9: QZYtXBxzzLLwx6OP96338EZQNhM.roa (hash: 38l/EW42Cd8oOnZZH6RtDcfG0bGHq+MKq8reh5+yb4I=)
                          10: S5EvGcwDHH7zGUGD1TsxliOQ844.roa (hash: 9ucAO/aS27/vji8pCgT0q2aazFzXGf3O5LSygR5bboY=)
                          11: SNTwxjZqoj--loyRtn4U5ryS2tg.roa (hash: 7LntTAbrkB4D7sGOEefKUsodkOG7eI/vXEBkRmusiyk=)
                          12: TjRVD4eTC9ou630w_SogsYsS2i8.roa (hash: MzxiND3DLT/Z9YUtjr+3wENZnheDLjvzlFroyg2KDBQ=)
                          13: XSI-Z3sxC2MvxPG4GMpF-oGP6N4.roa (hash: 0PggDg6sAbSQ+x8mdqKRdmh/0V9nEdI3VW8yE7LWoS0=)
                          14: i2WjIkNXUPeX7xGHYrjhSSYgFy4.roa (hash: C+2xN+JP/GjkI/37xlqqEgKPEWpo/BcSUMTEOcKEDPs=)
                          15: sFCDhJ4M_6ODBJmgIs3kz42jtuI.roa (hash: 0A6uuIGu+YVQFGSi7WdcioqNabGg+Lb7uc7Kf+2F0zs=)
                          16: we2Sx3tWkTHYty4_DjZ0SNeayeE.roa (hash: rCq+X7txc0pJndWQs8B/o3cENUKX8Fo1V3HT1kcpm3Y=)
                          17: xLUb8C8bVOkpr7q64SBm-78jn6A.roa (hash: 2KEYFJdXXETiYVBhmOpcuh0u5oPPV72Mle9moFbgm4Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:78:d3:80:55:7d:4f:93:e7:39:3d:10:82:70:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
        Validity
            Not Before: Jan 31 15:00:14 2025 GMT
            Not After : Feb  1 15:00:14 2025 GMT
        Subject: CN=fc23eb2a0655bcc5e5b492af2f1a44b434c41ba6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:98:18:2b:de:71:bb:19:a0:53:03:7c:0c:ad:
                    00:c0:d2:7b:1d:8b:7d:bf:d5:dc:b6:81:7b:0e:75:
                    4f:2f:0a:b9:6e:75:a1:63:26:eb:8c:e6:89:c7:22:
                    4b:1e:98:d6:14:66:30:72:1f:2d:e2:89:73:7c:77:
                    0d:75:7b:18:c8:72:07:f8:a1:ae:e7:44:b3:c3:a2:
                    9e:d7:98:ff:fb:c9:dc:4e:03:0c:5b:ac:74:98:c0:
                    48:f1:31:e8:9c:c8:ef:a8:7e:61:83:54:e7:f6:33:
                    bf:f3:84:2a:ed:44:d9:b7:4b:51:22:9f:cc:0a:14:
                    7d:62:1f:38:3f:6c:2c:5b:22:2b:50:a7:97:ab:96:
                    ed:53:cb:61:ac:ad:72:64:cf:2b:ce:74:d4:e2:22:
                    aa:a4:33:9f:07:5f:a8:81:f7:e9:23:94:73:d0:ad:
                    7c:5c:30:24:d0:eb:a8:cf:be:1c:f9:53:f8:05:a5:
                    02:25:ef:f8:a7:75:57:f4:e5:38:2d:80:90:68:f3:
                    10:39:fa:2c:38:a0:90:d5:24:9c:78:66:9f:76:64:
                    8a:76:fd:d0:83:96:38:90:80:71:f4:28:41:1d:7e:
                    fd:f3:4e:b0:10:26:1f:43:46:1e:30:de:b3:69:cd:
                    f4:b7:c7:ee:a0:1f:03:24:97:85:b3:8b:02:c8:19:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:23:EB:2A:06:55:BC:C5:E5:B4:92:AF:2F:1A:44:B4:34:C4:1B:A6
            X509v3 Authority Key Identifier:
                keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:85:34:9f:9c:97:b6:bd:0c:1c:14:a9:20:19:80:66:7b:
         df:e9:05:4f:57:1d:ef:b3:64:45:92:08:2d:1e:07:e7:1f:17:
         1b:04:5d:52:60:94:d0:6d:d9:d2:d9:d8:3e:49:ce:d6:16:64:
         fa:44:d9:52:09:4c:9b:a7:e9:fc:c9:5b:44:78:3b:08:a2:11:
         fe:ac:55:7a:f8:0e:c6:8a:ce:e0:55:2d:2c:f4:43:21:af:97:
         e0:b6:a6:00:6c:9f:f6:bf:c6:bc:07:b2:98:5e:5c:07:44:f2:
         1a:11:20:5e:52:aa:22:b7:18:34:3d:78:40:e0:7c:ba:49:f1:
         14:8f:5d:f7:b7:c4:ce:69:b0:99:b3:fc:b5:09:51:b9:0f:76:
         cd:4f:eb:c4:a1:4f:84:3c:14:70:e9:84:b3:39:b5:3b:e6:5b:
         48:e9:56:d6:70:cd:74:71:3f:31:55:74:0b:7f:61:33:23:2b:
         f7:6d:ce:ce:f3:8e:d2:67:b0:b6:8d:b7:94:e0:59:46:77:ce:
         40:72:98:f9:9b:83:59:c8:86:a6:17:50:73:c4:79:08:44:41:
         67:f9:6f:42:ae:74:5c:6f:fd:da:92:6f:16:30:87:05:37:09:
         93:f1:42:f7:4c:22:80:df:b1:3c:da:ad:c3:a1:8b:1f:8d:39:
         e7:25:bb:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HjTgFV9T5PnOT0QgnC8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTY3ZTc3MmNjNzI5ODMwNWExMWZmYTY1ZGQxODVmNmE1
ODkxMGIwHhcNMjUwMTMxMTUwMDE0WhcNMjUwMjAxMTUwMDE0WjAzMTEwLwYDVQQD
EyhmYzIzZWIyYTA2NTViY2M1ZTViNDkyYWYyZjFhNDRiNDM0YzQxYmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5gYK95xuxmgUwN8DK0AwNJ7HYt9
v9XctoF7DnVPLwq5bnWhYybrjOaJxyJLHpjWFGYwch8t4olzfHcNdXsYyHIH+KGu
50Szw6Ke15j/+8ncTgMMW6x0mMBI8THonMjvqH5hg1Tn9jO/84Qq7UTZt0tRIp/M
ChR9Yh84P2wsWyIrUKeXq5btU8thrK1yZM8rznTU4iKqpDOfB1+ogffpI5Rz0K18
XDAk0Ouoz74c+VP4BaUCJe/4p3VX9OU4LYCQaPMQOfosOKCQ1SSceGafdmSKdv3Q
g5Y4kIBx9ChBHX79806wECYfQ0YeMN6zac30t8fuoB8DJJeFs4sCyBnEEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwj6yoGVbzF5bSSry8aRLQ0xBumMB8GA1UdIwQY
MBaAFCuWfncsxymDBaEf+mXdGF9qWJELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEt
NThjOTZkNjZmMGExLzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NjBlNzQtYTNiYy00NDRiLTljNmEtNThjOTZkNjZmMGEx
LzEvSzVaLWR5ekhLWU1Gb1JfNlpkMFlYMnBZa1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAno2FNJ+c
l7a9DBwUqSAZgGZ73+kFT1cd77NkRZIILR4H5x8XGwRdUmCU0G3Z0tnYPknO1hZk
+kTZUglMm6fp/MlbRHg7CKIR/qxVevgOxorO4FUtLPRDIa+X4LamAGyf9r/GvAey
mF5cB0TyGhEgXlKqIrcYND14QOB8uknxFI9d97fEzmmwmbP8tQlRuQ92zU/rxKFP
hDwUcOmEszm1O+ZbSOlW1nDNdHE/MVV0C39hMyMr923OzvOO0mewto23lOBZRnfO
QHKY+ZuDWciGphdQc8R5CERBZ/lvQq50XG/92pJvFjCHBTcJk/FC90wigN+xPNqt
w6GLH4055yW75A==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:32:46 2025 by rpki-client