Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File:                     J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier:          72JWswiISzE9nnGsJ/eyJbkvNqQbG+ICLzSy2IDpwQs=
Subject key identifier:   FC:B5:F7:7F:CA:96:E1:6C:1C:F6:E7:DC:82:46:BF:1F:BD:98:C8:1D
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer:       /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial:       0194BC729773DB022FBB06AE76D3F98FA60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number:          07C0
Signing time:             Fri 31 Jan 2025 13:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:13 +0000
Files and hashes:         1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=)
                          2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: H5NyS4codjCYnIPZGwc3PCdL99Xq+XnEQ/85+NUN8q4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:97:73:db:02:2f:bb:06:ae:76:d3:f9:8f:a6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
        Validity
            Not Before: Jan 31 13:00:13 2025 GMT
            Not After : Feb  1 13:00:13 2025 GMT
        Subject: CN=fcb5f77fca96e16c1cf6e7dc8246bf1fbd98c81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b5:54:77:ef:fa:30:43:ce:a1:82:2d:f7:83:
                    00:39:ad:cc:64:a7:e3:d5:38:5f:f3:e6:8d:9c:a3:
                    d2:ca:0b:d6:24:1b:a8:18:7f:58:da:c2:59:e9:c0:
                    ea:73:df:85:a7:ea:39:84:6f:70:33:0d:c6:27:ec:
                    46:76:c1:06:ea:fc:fc:5c:48:d2:4d:bd:e8:1f:2e:
                    fe:9d:b1:45:76:ce:91:0e:47:42:13:80:8b:c2:61:
                    0b:aa:7d:f6:a8:81:97:8d:89:47:ef:f2:ee:b0:be:
                    6f:09:2c:e9:0b:86:d8:96:da:8c:ef:c0:e5:16:c5:
                    d6:2c:55:b4:97:f6:3e:27:b1:de:ae:6c:35:65:a8:
                    2b:83:97:ff:f0:87:53:81:c8:1a:fc:2d:ee:ee:78:
                    9d:f9:50:34:9b:15:bd:09:7f:ca:ad:b2:7d:16:61:
                    02:96:56:91:f4:36:20:2c:7c:89:5e:fa:4c:7c:3b:
                    b7:12:f1:a1:6b:18:0c:2a:3b:ec:c2:d9:8e:60:ba:
                    4c:df:dd:e5:0d:d5:f2:7d:ce:44:c0:0c:6e:d2:06:
                    10:25:b7:63:1e:80:aa:60:f7:c7:b0:8a:31:a3:55:
                    38:8b:59:fa:54:22:0a:1d:1a:51:20:50:aa:c0:36:
                    dc:24:6a:86:ac:98:01:cf:a2:00:45:32:39:8e:3b:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B5:F7:7F:CA:96:E1:6C:1C:F6:E7:DC:82:46:BF:1F:BD:98:C8:1D
            X509v3 Authority Key Identifier:
                keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:30:ab:60:a9:5b:c2:da:94:3c:00:84:9c:9c:10:7c:4b:97:
         c7:65:77:8f:ed:b3:ae:b3:e9:da:73:80:43:dc:5c:dc:87:22:
         3f:3a:1b:89:2e:09:eb:34:f3:82:78:81:c3:8d:0c:af:3a:67:
         53:49:aa:18:f6:7d:05:24:03:cf:55:dd:4d:90:3b:f4:76:5a:
         50:4d:6a:36:86:5c:7f:a3:6a:8a:c5:bf:5f:aa:87:0e:8d:8b:
         37:75:4e:7e:0a:1a:ef:7e:84:71:b3:c0:56:e0:30:14:bd:cd:
         d4:48:f6:78:a4:22:9b:a0:2f:d6:63:17:97:76:93:14:75:e7:
         10:bc:af:f2:9e:1f:82:5f:7d:e5:f6:36:95:71:48:1e:f0:c0:
         82:fb:c5:52:54:08:c0:4e:a4:73:8c:22:97:f4:b7:1c:35:f8:
         6e:95:32:9e:e3:33:93:ea:49:5d:c5:83:f3:9d:dc:2b:c4:d2:
         1c:52:ba:9c:ce:e4:e5:87:9b:4e:24:cc:3f:bb:2c:f0:0e:c3:
         81:2f:69:33:1b:50:4e:be:b6:0e:29:bc:60:57:a7:5b:a4:ab:
         90:7e:0a:fe:c3:b3:17:5d:f7:88:fb:40:c0:f1:65:71:e4:3e:
         42:76:b2:93:a4:9b:74:c8:61:b6:01:f9:c4:31:77:58:a6:bf:
         9e:4e:e5:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpdz2wIvuwaudtP5j6YPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDAyODQ3MDYwNDMzNmZkYjkzMDhlNTFiYTUzZTk1MWFl
MmUwOTgwHhcNMjUwMTMxMTMwMDEzWhcNMjUwMjAxMTMwMDEzWjAzMTEwLwYDVQQD
EyhmY2I1Zjc3ZmNhOTZlMTZjMWNmNmU3ZGM4MjQ2YmYxZmJkOThjODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bVUd+/6MEPOoYIt94MAOa3MZKfj
1Thf8+aNnKPSygvWJBuoGH9Y2sJZ6cDqc9+Fp+o5hG9wMw3GJ+xGdsEG6vz8XEjS
Tb3oHy7+nbFFds6RDkdCE4CLwmELqn32qIGXjYlH7/LusL5vCSzpC4bYltqM78Dl
FsXWLFW0l/Y+J7Hermw1Zagrg5f/8IdTgcga/C3u7nid+VA0mxW9CX/KrbJ9FmEC
llaR9DYgLHyJXvpMfDu3EvGhaxgMKjvswtmOYLpM393lDdXyfc5EwAxu0gYQJbdj
HoCqYPfHsIoxo1U4i1n6VCIKHRpRIFCqwDbcJGqGrJgBz6IARTI5jju36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy193/KluFsHPbn3IJGvx+9mMgdMB8GA1UdIwQY
MBaAFCfQKEcGBDNv25MI5RulPpUa4uCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9iMzgwNWYtYmU2Zi00MTMzLWI1ZWMt
YTRlYmJmZTcxMGMzLzEvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9iMzgwNWYtYmU2Zi00MTMzLWI1ZWMtYTRlYmJmZTcxMGMz
LzEvSjlBb1J3WUVNMl9ia3dqbEc2VS1sUnJpNEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDCrYKlb
wtqUPACEnJwQfEuXx2V3j+2zrrPp2nOAQ9xc3IciPzobiS4J6zTzgniBw40Mrzpn
U0mqGPZ9BSQDz1XdTZA79HZaUE1qNoZcf6NqisW/X6qHDo2LN3VOfgoa736EcbPA
VuAwFL3N1Ej2eKQim6Av1mMXl3aTFHXnELyv8p4fgl995fY2lXFIHvDAgvvFUlQI
wE6kc4wil/S3HDX4bpUynuMzk+pJXcWD853cK8TSHFK6nM7k5YebTiTMP7ss8A7D
gS9pMxtQTr62Dim8YFenW6SrkH4K/sOzF133iPtAwPFlceQ+Qnayk6SbdMhhtgH5
xDF3WKa/nk7lbA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:38 2025 by rpki-client