Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.mft
File:                     Jvyww2VaPFLwMKZNtmE5YloP--A.mft (raw, json)
Hash identifier:          fFnBtRwy04qXB2oTyOqm+t3yXgv46wVoBvPfzGXBJ78=
Subject key identifier:   97:D9:65:C6:27:F1:BC:19:CB:48:68:77:2C:7B:6B:DD:E6:52:1A:13
Authority key identifier: 26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0
Certificate issuer:       /CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
Certificate serial:       0194BBCEA35F26297C49D6246A5149D2584A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:09 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:09 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:09 +0000
Files and hashes:         1: Jvyww2VaPFLwMKZNtmE5YloP--A.crl (hash: qAk/uzZIeIclZ8zWZE027ayJZwHKcojUL6LXSAhNI4o=)
                          2: yxofyA5fIMjKe3ieqVgZb-edgIg.roa (hash: +OP6UZvkCAZ/npr1tk+mM2rvs48Bb9dmoLT1SnUOUIg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a3:5f:26:29:7c:49:d6:24:6a:51:49:d2:58:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26fcb0c3655a3c52f030a64db66139625a0ffbe0
        Validity
            Not Before: Jan 31 10:01:09 2025 GMT
            Not After : Feb  1 10:01:09 2025 GMT
        Subject: CN=97d965c627f1bc19cb4868772c7b6bdde6521a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:10:fd:c7:a4:a7:36:36:92:19:8a:8e:bc:
                    46:6c:d6:8c:5c:67:c4:97:e1:54:6b:34:83:03:77:
                    59:3a:49:db:02:c5:55:f4:54:32:1a:8c:cc:33:8b:
                    f2:f2:fd:99:22:4a:a2:64:cd:cd:d3:74:70:5a:cb:
                    85:8e:9d:73:74:f7:3e:c0:63:d6:e1:b4:35:58:c0:
                    a5:7a:b0:92:5b:ba:46:31:9a:b0:b9:d8:d4:d3:6f:
                    0f:b5:5f:44:51:27:1d:9b:d8:27:37:09:10:e0:7e:
                    ee:5c:3c:92:70:02:3a:38:0b:1b:0e:39:6c:c7:7b:
                    c6:49:65:20:55:17:72:64:b7:ca:5d:94:18:56:33:
                    f5:66:1e:f6:ed:db:ca:2b:6b:d1:5e:9f:15:77:77:
                    31:2e:27:eb:50:14:5a:dd:36:fb:d6:bc:f9:f3:a0:
                    9c:6b:93:da:6b:d2:22:cb:05:2e:5a:ba:95:5c:72:
                    a9:90:91:66:55:66:21:c4:ad:f8:98:44:01:79:61:
                    af:c6:cb:a0:7a:6d:a6:55:62:73:84:21:33:42:1f:
                    0a:77:89:49:ba:5b:9c:71:b2:07:1e:2e:5d:b8:b8:
                    16:13:e4:51:31:f1:20:8c:57:09:d9:c6:88:b2:af:
                    e7:7a:93:0a:1b:6a:7a:6f:39:6e:19:26:5f:ec:cf:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D9:65:C6:27:F1:BC:19:CB:48:68:77:2C:7B:6B:DD:E6:52:1A:13
            X509v3 Authority Key Identifier:
                keyid:26:FC:B0:C3:65:5A:3C:52:F0:30:A6:4D:B6:61:39:62:5A:0F:FB:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jvyww2VaPFLwMKZNtmE5YloP--A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/46b67c-80be-4fca-be24-1eb2a6ef5217/1/Jvyww2VaPFLwMKZNtmE5YloP--A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:10:b7:cb:5b:fa:05:79:89:97:e8:54:6a:47:81:bc:72:
         b3:8f:38:c2:99:4a:25:4f:95:d5:34:44:4e:da:7f:85:02:5b:
         a6:43:da:3f:0d:08:16:dc:98:af:2b:97:55:af:ed:92:73:fe:
         e7:df:a3:c3:ef:97:c9:59:5d:6f:13:0e:0c:d6:5e:5e:20:39:
         b4:fc:16:35:c9:2b:da:4d:8f:64:41:b5:b0:85:8d:21:81:09:
         d2:54:04:77:1f:da:51:63:0d:ee:a7:70:e1:15:21:70:e1:29:
         a4:80:b8:ff:65:ad:65:40:ac:73:62:76:5a:8d:6c:5b:34:9a:
         6a:ba:76:5a:75:d6:6f:1f:80:10:96:e8:88:79:9b:58:5b:b4:
         87:3d:95:0e:d0:cb:d8:19:d6:21:87:01:c0:26:12:04:8e:af:
         62:64:3e:26:b3:e1:c7:b8:29:df:28:55:ea:d0:56:dc:21:b1:
         31:15:fc:2d:32:91:9f:a5:18:73:f9:1c:21:1e:d6:33:ad:ea:
         1c:3b:8e:89:ed:b9:74:c8:d3:84:ec:ce:3f:e7:0b:83:7b:6b:
         d8:a8:3d:b4:b4:a8:56:9c:da:0e:0b:0b:ee:ff:ac:63:2b:93:
         7c:e7:0c:37:fb:a6:ea:72:97:72:b8:e9:2a:e4:30:7d:98:a6:
         ea:cf:1f:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqNfJil8SdYkalFJ0lhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZmNiMGMzNjU1YTNjNTJmMDMwYTY0ZGI2NjEzOTYyNWEw
ZmZiZTAwHhcNMjUwMTMxMTAwMTA5WhcNMjUwMjAxMTAwMTA5WjAzMTEwLwYDVQQD
Eyg5N2Q5NjVjNjI3ZjFiYzE5Y2I0ODY4NzcyYzdiNmJkZGU2NTIxYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV4Q/cekpzY2khmKjrxGbNaMXGfE
l+FUazSDA3dZOknbAsVV9FQyGozMM4vy8v2ZIkqiZM3N03RwWsuFjp1zdPc+wGPW
4bQ1WMClerCSW7pGMZqwudjU028PtV9EUScdm9gnNwkQ4H7uXDyScAI6OAsbDjls
x3vGSWUgVRdyZLfKXZQYVjP1Zh727dvKK2vRXp8Vd3cxLifrUBRa3Tb71rz586Cc
a5Paa9IiywUuWrqVXHKpkJFmVWYhxK34mEQBeWGvxsugem2mVWJzhCEzQh8Kd4lJ
uluccbIHHi5duLgWE+RRMfEgjFcJ2caIsq/nepMKG2p6bzluGSZf7M+8NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfZZcYn8bwZy0hodyx7a93mUhoTMB8GA1UdIwQY
MBaAFCb8sMNlWjxS8DCmTbZhOWJaD/vgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZ5d3cyVmFQRkx3TUtaTnRtRTVZbG9QLS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NmI2N2MtODBiZS00ZmNhLWJlMjQt
MWViMmE2ZWY1MjE3LzEvSnZ5d3cyVmFQRkx3TUtaTnRtRTVZbG9QLS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NmI2N2MtODBiZS00ZmNhLWJlMjQtMWViMmE2ZWY1MjE3
LzEvSnZ5d3cyVmFQRkx3TUtaTnRtRTVZbG9QLS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqNsQt8tb
+gV5iZfoVGpHgbxys484wplKJU+V1TRETtp/hQJbpkPaPw0IFtyYryuXVa/tknP+
59+jw++XyVldbxMODNZeXiA5tPwWNckr2k2PZEG1sIWNIYEJ0lQEdx/aUWMN7qdw
4RUhcOEppIC4/2WtZUCsc2J2Wo1sWzSaarp2WnXWbx+AEJboiHmbWFu0hz2VDtDL
2BnWIYcBwCYSBI6vYmQ+JrPhx7gp3yhV6tBW3CGxMRX8LTKRn6UYc/kcIR7WM63q
HDuOie25dMjThOzOP+cLg3tr2Kg9tLSoVpzaDgsL7v+sYyuTfOcMN/um6nKXcrjp
KuQwfZim6s8ffA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:12 2025 by rpki-client