Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File:                     V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier:          Mqsf+UViBMe04GQvQlvIFRDCqa74g7jIsuK0Yf/S/aw=
Subject key identifier:   7F:46:24:88:E1:D9:0C:A5:E0:52:13:E8:1D:12:8C:82:D8:6C:F1:F6
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer:       /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial:       0194BBCEF7E1559474287413689A3F5CAD91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 10:01:30 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:30 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:30 +0000
Files and hashes:         1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: kk38lQrL3vBwPtua2CAlJZ+ETxdV/hni7E5Ol5JxCEc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f7:e1:55:94:74:28:74:13:68:9a:3f:5c:ad:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
        Validity
            Not Before: Jan 31 10:01:30 2025 GMT
            Not After : Feb  1 10:01:30 2025 GMT
        Subject: CN=7f462488e1d90ca5e05213e81d128c82d86cf1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:f3:e5:de:4c:9e:86:43:4e:d9:45:3e:c2:
                    81:80:c7:ab:aa:bf:05:1a:c6:48:b8:45:cc:c1:77:
                    bd:cb:42:08:90:1e:e5:77:ac:0c:34:a0:a9:79:a4:
                    4c:0e:2b:c3:b5:84:aa:00:1e:b9:b0:91:88:2d:77:
                    22:dd:2f:9d:47:b7:d9:76:9c:03:a2:3c:27:50:ae:
                    52:64:a2:27:c3:23:d5:9b:74:53:d5:e8:67:80:98:
                    2a:99:38:9e:77:5f:70:e4:f8:e2:88:a1:be:5d:29:
                    c0:73:49:ea:fe:c2:59:19:e7:2e:02:f9:eb:c6:59:
                    56:15:21:60:29:f1:a7:8e:ed:b0:62:37:3b:cf:0a:
                    01:49:0c:96:d8:69:f7:f0:9f:21:4d:0b:a4:01:31:
                    76:d4:a3:f3:4c:a0:32:dd:cb:64:85:87:a4:f5:a5:
                    55:89:1d:91:d2:2c:80:12:2e:1e:52:27:e4:d2:bb:
                    62:a3:8c:85:07:e6:79:3d:76:bd:63:69:ec:6a:78:
                    56:eb:34:de:a3:2b:81:a9:84:ab:49:c6:f7:a9:b1:
                    f0:5d:8e:05:0f:6a:f6:bd:47:5a:c7:0b:9e:65:c8:
                    05:8a:40:38:d8:74:fb:f0:21:b4:b2:13:31:fb:19:
                    15:69:11:6c:11:78:a0:7b:49:12:6b:71:d3:1b:08:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:46:24:88:E1:D9:0C:A5:E0:52:13:E8:1D:12:8C:82:D8:6C:F1:F6
            X509v3 Authority Key Identifier:
                keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:7d:87:d0:cf:00:62:93:8c:ae:b6:78:40:e8:a6:d8:96:
         8e:ed:0e:6c:7b:1c:71:aa:af:1f:d6:c9:53:05:73:e8:5f:4b:
         e3:07:77:bc:2f:a6:64:31:51:72:96:43:98:fe:80:b6:38:0e:
         fa:18:3d:7a:0b:92:a5:53:9b:11:40:48:d0:16:43:9f:40:3c:
         38:b2:d6:cc:d7:ba:07:9c:d5:02:4c:26:0a:1d:fc:16:b4:0a:
         87:b2:75:12:43:94:05:ea:02:59:03:0f:06:da:70:0c:bf:f0:
         c8:c8:c0:3d:92:48:ae:dd:c9:6e:d2:ec:ea:2a:b2:28:89:43:
         f4:bb:23:77:30:93:d2:dc:e3:66:a3:c0:75:88:cc:5f:ac:5b:
         30:30:a6:b1:12:a8:49:db:ba:ab:0f:c1:04:4e:81:2d:dd:21:
         e9:79:69:be:39:46:e7:d5:30:d9:68:98:39:de:26:37:13:49:
         47:f0:54:12:65:6b:86:ff:3f:24:80:42:8e:02:c8:c6:1f:57:
         01:05:39:2e:2b:38:14:ef:5d:04:b6:17:bd:e7:75:44:33:68:
         5f:99:18:55:ab:37:f4:42:46:30:a5:84:92:6e:85:3c:e4:ed:
         6a:15:5d:5e:4a:4d:7c:b3:6a:ce:c9:42:37:f1:a0:06:cb:ba:
         1d:40:be:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvfhVZR0KHQTaJo/XK2RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NWE5YjJmMjk2NDIwMTJiNDcwM2QyNDBlYmMxZWM4M2U0
N2QzN2QwHhcNMjUwMTMxMTAwMTMwWhcNMjUwMjAxMTAwMTMwWjAzMTEwLwYDVQQD
Eyg3ZjQ2MjQ4OGUxZDkwY2E1ZTA1MjEzZTgxZDEyOGM4MmQ4NmNmMWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Xz5d5MnoZDTtlFPsKBgMerqr8F
GsZIuEXMwXe9y0IIkB7ld6wMNKCpeaRMDivDtYSqAB65sJGILXci3S+dR7fZdpwD
ojwnUK5SZKInwyPVm3RT1ehngJgqmTied19w5PjiiKG+XSnAc0nq/sJZGecuAvnr
xllWFSFgKfGnju2wYjc7zwoBSQyW2Gn38J8hTQukATF21KPzTKAy3ctkhYek9aVV
iR2R0iyAEi4eUifk0rtio4yFB+Z5PXa9Y2nsanhW6zTeoyuBqYSrScb3qbHwXY4F
D2r2vUdaxwueZcgFikA42HT78CG0shMx+xkVaRFsEXige0kSa3HTGwjfGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9GJIjh2Qyl4FIT6B0SjILYbPH2MB8GA1UdIwQY
MBaAFFdamy8pZCAStHA9JA68Hsg+R9N9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYt
M2M0YzA1ZjE4NzMwLzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNzVmN2UtOGNkZC00YzM2LWEwOTYtM2M0YzA1ZjE4NzMw
LzEvVjFxYkx5bGtJQkswY0Qwa0Ryd2V5RDVIMDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7d9h9DP
AGKTjK62eEDoptiWju0ObHsccaqvH9bJUwVz6F9L4wd3vC+mZDFRcpZDmP6AtjgO
+hg9eguSpVObEUBI0BZDn0A8OLLWzNe6B5zVAkwmCh38FrQKh7J1EkOUBeoCWQMP
BtpwDL/wyMjAPZJIrt3JbtLs6iqyKIlD9LsjdzCT0tzjZqPAdYjMX6xbMDCmsRKo
Sdu6qw/BBE6BLd0h6XlpvjlG59Uw2WiYOd4mNxNJR/BUEmVrhv8/JIBCjgLIxh9X
AQU5Lis4FO9dBLYXved1RDNoX5kYVas39EJGMKWEkm6FPOTtahVdXkpNfLNqzslC
N/GgBsu6HUC+sQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:39 2025 by rpki-client