Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
File:                     kwd6mXyVvQGmTUCK_PVU2ItNteU.mft (raw, json)
Hash identifier:          AkPtg4AQsdiqarca1RWqr3NrfsRXzhZOmaMkHtKT1F4=
Subject key identifier:   26:66:77:E1:06:03:19:A1:72:C3:33:9E:59:1B:AC:6D:62:22:69:88
Authority key identifier: 93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5
Certificate issuer:       /CN=93077a997c95bd01a64d408afcf554d88b4db5e5
Certificate serial:       0194BD85B11BA03C4419C5FD4E4B557CEC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft
Manifest number:          0315
Signing time:             Fri 31 Jan 2025 18:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:42 +0000
Files and hashes:         1: kwd6mXyVvQGmTUCK_PVU2ItNteU.crl (hash: xhOrCm0vCtDlI0Zl71+w74VHFUWVSfohRvroLKqIBvs=)
                          2: uYWwRm4H6YcSfThBlj9ZG4s8g-o.roa (hash: k7HHEyNrsyk4kGL9qKSfgAwu15JappUHRUGh3h3zAJw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b1:1b:a0:3c:44:19:c5:fd:4e:4b:55:7c:ec:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93077a997c95bd01a64d408afcf554d88b4db5e5
        Validity
            Not Before: Jan 31 18:00:42 2025 GMT
            Not After : Feb  1 18:00:42 2025 GMT
        Subject: CN=266677e1060319a172c3339e591bac6d62226988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ee:0b:03:f4:6c:a6:40:90:b4:ff:ff:39:cf:
                    1c:96:92:d1:9b:e5:9e:01:82:b6:57:5a:ca:68:f5:
                    95:c0:ac:d2:7f:bd:fc:6a:79:3f:9d:50:2e:94:b2:
                    62:9f:8a:25:3b:cf:9a:41:cd:39:8d:37:5e:44:99:
                    5a:5d:29:a3:4a:94:80:f3:c9:26:8f:41:9a:4c:56:
                    22:45:d2:89:06:1d:15:ba:2f:05:56:41:01:35:a7:
                    af:8c:b1:13:bf:8b:b9:c4:5d:d3:bf:89:fa:85:90:
                    db:1f:db:ef:83:06:8e:e1:f5:b8:de:6b:bc:c0:6b:
                    a0:00:ab:55:44:7d:4d:1e:ff:bf:36:da:27:23:10:
                    41:30:d1:69:2d:6c:4d:b9:98:a7:5b:10:0d:3f:de:
                    77:e5:21:07:f3:8c:86:2d:a5:92:87:91:c5:ef:45:
                    cd:e1:12:ce:17:e3:ac:0d:3f:66:ac:3d:9c:f8:44:
                    5e:09:39:c9:c8:b9:80:5e:c5:2d:f3:72:20:57:d6:
                    35:fc:e9:22:63:d7:9f:74:0d:d4:51:6b:fa:32:57:
                    41:71:e6:9a:a8:e2:e0:bb:c0:78:ec:3c:a6:29:e8:
                    fc:63:8d:c9:a1:98:6f:ed:2a:6c:51:b2:11:06:9f:
                    8f:d8:55:c3:0a:bf:07:43:53:02:14:9d:d7:ec:3a:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:66:77:E1:06:03:19:A1:72:C3:33:9E:59:1B:AC:6D:62:22:69:88
            X509v3 Authority Key Identifier:
                keyid:93:07:7A:99:7C:95:BD:01:A6:4D:40:8A:FC:F5:54:D8:8B:4D:B5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwd6mXyVvQGmTUCK_PVU2ItNteU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/1bac01-212c-4f4c-8d3a-65257b1fec6d/1/kwd6mXyVvQGmTUCK_PVU2ItNteU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3e:6c:37:bc:81:80:71:f7:22:8c:95:d9:d9:38:66:6d:cc:
         dd:2c:2b:71:96:dd:eb:6f:fe:96:61:6d:6c:db:f6:04:55:34:
         e2:99:46:b4:be:44:9f:77:7b:ec:4d:fc:89:c8:e5:c3:d3:0c:
         a6:8f:35:d5:1a:0a:0d:a0:ef:7c:56:4c:a7:c6:00:a3:cf:a7:
         77:e3:4b:d5:d3:c3:6e:42:f0:4c:de:15:68:31:96:ad:63:3a:
         55:84:77:28:4b:ff:e1:8a:80:55:59:fb:84:ea:e9:e2:9c:f3:
         f9:6a:cd:d7:6f:61:4c:60:e2:80:e4:71:e8:a1:c0:b6:c7:45:
         0b:fe:32:96:d4:33:02:a6:a5:bb:ce:19:04:a9:6d:98:4b:fc:
         cd:9e:06:35:00:17:41:b3:cc:5b:6f:bd:0f:a6:eb:41:35:44:
         80:d0:93:32:8e:9b:93:1a:6e:ae:4a:1f:4c:51:de:40:cf:a5:
         77:65:92:ae:88:1a:7f:a9:2a:55:79:f2:7d:62:84:2c:d2:85:
         98:a0:4f:fd:01:52:81:26:6a:b2:d9:34:06:44:4f:2c:79:15:
         cd:5a:c5:af:04:73:d4:81:cd:bc:4f:86:0b:bd:c5:df:5a:3c:
         49:0f:b9:54:1b:1a:81:5c:99:4f:50:04:a6:a2:a2:a0:a7:8c:
         d9:75:24:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbEboDxEGcX9TktVfOw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMDc3YTk5N2M5NWJkMDFhNjRkNDA4YWZjZjU1NGQ4OGI0
ZGI1ZTUwHhcNMjUwMTMxMTgwMDQyWhcNMjUwMjAxMTgwMDQyWjAzMTEwLwYDVQQD
EygyNjY2NzdlMTA2MDMxOWExNzJjMzMzOWU1OTFiYWM2ZDYyMjI2OTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue4LA/RspkCQtP//Oc8clpLRm+We
AYK2V1rKaPWVwKzSf738ank/nVAulLJin4olO8+aQc05jTdeRJlaXSmjSpSA88km
j0GaTFYiRdKJBh0Vui8FVkEBNaevjLETv4u5xF3Tv4n6hZDbH9vvgwaO4fW43mu8
wGugAKtVRH1NHv+/NtonIxBBMNFpLWxNuZinWxANP9535SEH84yGLaWSh5HF70XN
4RLOF+OsDT9mrD2c+EReCTnJyLmAXsUt83IgV9Y1/OkiY9efdA3UUWv6MldBceaa
qOLgu8B47DymKej8Y43JoZhv7SpsUbIRBp+P2FXDCr8HQ1MCFJ3X7Drk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZmd+EGAxmhcsMznlkbrG1iImmIMB8GA1UdIwQY
MBaAFJMHepl8lb0Bpk1Aivz1VNiLTbXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2Et
NjUyNTdiMWZlYzZkLzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xYmFjMDEtMjEyYy00ZjRjLThkM2EtNjUyNTdiMWZlYzZk
LzEva3dkNm1YeVZ2UUdtVFVDS19QVlUySXROdGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjj5sN7yB
gHH3IoyV2dk4Zm3M3SwrcZbd62/+lmFtbNv2BFU04plGtL5En3d77E38icjlw9MM
po811RoKDaDvfFZMp8YAo8+nd+NL1dPDbkLwTN4VaDGWrWM6VYR3KEv/4YqAVVn7
hOrp4pzz+WrN129hTGDigORx6KHAtsdFC/4yltQzAqalu84ZBKltmEv8zZ4GNQAX
QbPMW2+9D6brQTVEgNCTMo6bkxpurkofTFHeQM+ld2WSrogaf6kqVXnyfWKELNKF
mKBP/QFSgSZqstk0BkRPLHkVzVrFrwRz1IHNvE+GC73F31o8SQ+5VBsagVyZT1AE
pqKioKeM2XUkzw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:20 2025 by rpki-client