Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
File:                     XwNIeIMukX__nNPIbA-h5WX4IdM.mft (raw, json)
Hash identifier:          ZmjTdrqhHHQ5xDRAXqcJxEhZvnGOjhNwrU/i2/fiytA=
Subject key identifier:   56:3E:E9:ED:7F:70:0C:F1:BB:79:95:A2:9F:AA:88:04:44:A4:0A:85
Authority key identifier: 5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3
Certificate issuer:       /CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
Certificate serial:       0194BD17FB6AC69B6BCA0D34ED0241362366
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft
Manifest number:          0F78
Signing time:             Fri 31 Jan 2025 16:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:52 +0000
Files and hashes:         1: XwNIeIMukX__nNPIbA-h5WX4IdM.crl (hash: l9VVtzegpRDjDgO/vYXoZOk0AS/fi2sPC7CBSabEs9c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:fb:6a:c6:9b:6b:ca:0d:34:ed:02:41:36:23:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f034878832e917fff9cd3c86c0fa1e565f821d3
        Validity
            Not Before: Jan 31 16:00:52 2025 GMT
            Not After : Feb  1 16:00:52 2025 GMT
        Subject: CN=563ee9ed7f700cf1bb7995a29faa880444a40a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5e:41:b8:40:f3:96:70:70:e8:12:36:ca:f8:
                    d7:00:f6:aa:96:57:12:b7:1d:3a:4e:64:6c:82:c0:
                    83:40:f1:34:8a:71:1d:fc:43:2a:e5:95:c5:d3:43:
                    f9:5d:2f:27:80:c7:e9:83:c8:64:8f:1d:ee:27:f8:
                    6a:da:41:e9:87:bf:4c:8a:68:00:c9:84:05:4a:40:
                    e0:dc:8b:a1:fe:cd:ed:f9:0a:e4:cc:4d:7e:6b:19:
                    99:c7:4a:2f:66:2d:c2:ce:f1:ec:fe:40:f3:8e:c8:
                    0b:63:21:df:4d:4c:73:d9:0c:3f:07:7c:10:f6:b3:
                    16:4e:bf:bb:9f:b0:36:ba:4b:88:66:e1:43:3f:dd:
                    7a:9e:44:f8:d2:5a:fb:63:be:a8:27:20:55:88:f2:
                    1d:c6:75:a3:0e:50:c8:d3:c9:d0:ac:9d:b6:bc:76:
                    8b:c9:50:3f:0f:bc:81:82:af:7c:92:53:92:94:87:
                    0d:c5:4b:8d:8b:7b:40:38:3f:98:db:3d:84:66:93:
                    c1:ca:1b:c2:c8:b3:d2:9e:3e:fd:52:99:53:c8:80:
                    f1:a2:06:80:f0:85:04:52:7a:b4:4d:0f:d8:be:26:
                    4e:44:ec:8c:11:10:c4:88:e0:11:92:41:70:95:65:
                    33:a1:38:37:a5:5a:fb:55:62:2e:ea:60:7c:27:9d:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3E:E9:ED:7F:70:0C:F1:BB:79:95:A2:9F:AA:88:04:44:A4:0A:85
            X509v3 Authority Key Identifier:
                keyid:5F:03:48:78:83:2E:91:7F:FF:9C:D3:C8:6C:0F:A1:E5:65:F8:21:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwNIeIMukX__nNPIbA-h5WX4IdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/38cbeb-c0af-4c37-b569-df1c57c2a751/1/XwNIeIMukX__nNPIbA-h5WX4IdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:44:d6:e1:dc:57:f0:d2:38:8a:c5:1a:19:21:22:b9:9b:a7:
         75:7d:d0:da:a0:16:5c:88:8f:e5:3c:45:59:f4:9e:4a:f9:35:
         4b:26:f7:e2:59:a4:38:90:a7:6f:04:1e:92:f4:97:50:16:ee:
         f9:48:21:c0:f2:b0:a7:95:8d:56:e7:c4:d4:2d:1d:ad:16:04:
         5f:c4:c3:b3:28:6b:52:b0:2b:35:ae:2e:58:0f:3d:26:c0:18:
         62:b0:16:41:4e:32:10:f7:65:fc:cf:06:5d:69:ac:59:10:cd:
         7f:b9:0e:dc:d6:5e:03:b5:88:f3:fb:7e:52:19:91:0b:d8:f5:
         18:a9:b5:ec:e1:b9:5e:4f:8b:b6:04:c3:c4:fe:59:75:cb:8a:
         be:52:f1:63:1b:40:c3:1d:e6:5d:f9:49:34:53:a9:7a:21:03:
         a1:34:74:50:6d:8a:6c:fc:0c:1c:26:e0:07:32:5b:ab:b5:98:
         c9:bf:35:cd:5a:c0:7e:86:71:0b:49:4e:3e:8e:70:91:5f:52:
         f4:a7:7d:96:85:1c:82:1e:89:8e:96:f5:4e:0c:04:86:da:3d:
         d7:69:0c:2f:87:87:48:94:57:54:90:d7:73:36:86:27:51:d9:
         11:38:4a:46:56:67:a7:46:82:7d:96:a4:86:bc:cf:5c:6a:a2:
         00:e1:35:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/tqxptryg007QJBNiNmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMDM0ODc4ODMyZTkxN2ZmZjljZDNjODZjMGZhMWU1NjVm
ODIxZDMwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
Eyg1NjNlZTllZDdmNzAwY2YxYmI3OTk1YTI5ZmFhODgwNDQ0YTQwYTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF5BuEDzlnBw6BI2yvjXAPaqllcS
tx06TmRsgsCDQPE0inEd/EMq5ZXF00P5XS8ngMfpg8hkjx3uJ/hq2kHph79MimgA
yYQFSkDg3Iuh/s3t+QrkzE1+axmZx0ovZi3CzvHs/kDzjsgLYyHfTUxz2Qw/B3wQ
9rMWTr+7n7A2ukuIZuFDP916nkT40lr7Y76oJyBViPIdxnWjDlDI08nQrJ22vHaL
yVA/D7yBgq98klOSlIcNxUuNi3tAOD+Y2z2EZpPByhvCyLPSnj79UplTyIDxogaA
8IUEUnq0TQ/YviZOROyMERDEiOARkkFwlWUzoTg3pVr7VWIu6mB8J50WYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFY+6e1/cAzxu3mVop+qiAREpAqFMB8GA1UdIwQY
MBaAFF8DSHiDLpF//5zTyGwPoeVl+CHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zOGNiZWItYzBhZi00YzM3LWI1Njkt
ZGYxYzU3YzJhNzUxLzEvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zOGNiZWItYzBhZi00YzM3LWI1NjktZGYxYzU3YzJhNzUx
LzEvWHdOSWVJTXVrWF9fbk5QSWJBLWg1V1g0SWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUTW4dxX
8NI4isUaGSEiuZundX3Q2qAWXIiP5TxFWfSeSvk1Syb34lmkOJCnbwQekvSXUBbu
+UghwPKwp5WNVufE1C0drRYEX8TDsyhrUrArNa4uWA89JsAYYrAWQU4yEPdl/M8G
XWmsWRDNf7kO3NZeA7WI8/t+UhmRC9j1GKm17OG5Xk+LtgTDxP5ZdcuKvlLxYxtA
wx3mXflJNFOpeiEDoTR0UG2KbPwMHCbgBzJbq7WYyb81zVrAfoZxC0lOPo5wkV9S
9Kd9loUcgh6Jjpb1TgwEhto912kML4eHSJRXVJDXczaGJ1HZEThKRlZnp0aCfZak
hrzPXGqiAOE1uQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client