Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File:                     8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier:          Bk/DZh9MPE87obM7lNbd+Ba6cjLAd/SVfpa8fcjVWnU=
Subject key identifier:   9C:D3:69:86:EF:16:D4:59:71:9F:5C:A0:68:39:4C:6D:6E:AC:AD:73
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer:       /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial:       0194BD4E97FAB734793992F5EC163BC7EF14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number:          0E3B
Signing time:             Fri 31 Jan 2025 17:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:31 +0000
Files and hashes:         1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: wY5BmRDeoUDOUc8Zq5lIgn/6vEsMh1/bMOQontIWh2s=)
                          2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:97:fa:b7:34:79:39:92:f5:ec:16:3b:c7:ef:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
        Validity
            Not Before: Jan 31 17:00:31 2025 GMT
            Not After : Feb  1 17:00:31 2025 GMT
        Subject: CN=9cd36986ef16d459719f5ca068394c6d6eacad73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:14:82:05:17:40:e0:56:97:c6:8d:b9:1d:
                    60:93:83:05:50:ee:6a:75:cc:a9:2e:ba:40:55:6a:
                    6f:5b:ea:12:8e:ea:ee:0d:5f:39:88:cd:81:2b:80:
                    6e:cb:37:33:65:e6:73:c3:18:26:4b:4e:4d:75:28:
                    3c:dd:3c:54:58:7f:04:df:04:a8:5d:89:ae:7d:d3:
                    eb:0e:8a:79:58:6c:44:4e:fc:3d:56:68:a5:71:66:
                    13:9e:9a:0a:96:7a:8b:ff:ea:a9:0e:23:f7:c4:77:
                    47:bc:8a:da:86:22:71:df:db:fe:83:61:ec:ac:de:
                    fa:7e:0e:6a:b7:f8:8a:1b:27:e7:e1:98:5f:f3:81:
                    0d:35:70:e2:ea:e0:51:5c:d2:05:ad:bd:f3:97:4d:
                    a6:6e:8d:1f:0b:17:a0:8c:74:7c:a7:23:2b:71:3c:
                    a8:2f:7c:3b:91:d1:ee:aa:58:4f:3c:a0:ae:f1:f2:
                    03:e7:39:fe:53:ca:ff:c0:33:cc:1b:ce:74:a9:ac:
                    7b:a6:27:35:8a:31:2d:aa:9d:48:62:54:38:11:a4:
                    72:d7:bf:95:02:ae:05:5a:af:3e:c4:d2:60:6e:41:
                    f0:db:db:f9:d7:da:51:41:ed:8a:60:21:5a:6a:9e:
                    4a:22:74:c7:48:cc:99:64:e2:a2:b7:ac:6f:3b:a2:
                    75:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D3:69:86:EF:16:D4:59:71:9F:5C:A0:68:39:4C:6D:6E:AC:AD:73
            X509v3 Authority Key Identifier:
                keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:e8:c1:45:11:2e:a3:25:87:e1:ec:55:db:e4:df:9f:cb:7d:
         97:e7:71:71:b5:8a:82:07:fa:3b:c0:f2:c2:a8:6a:13:fa:77:
         ee:13:05:5f:36:39:f9:cb:b6:2a:9f:4c:e7:47:e2:7b:bb:32:
         a7:e2:90:93:69:ae:e3:06:89:12:78:12:39:72:9e:e7:1c:17:
         0f:50:e5:1a:4b:ba:3b:d8:a6:d6:f8:6c:dc:4c:81:9e:de:12:
         a2:3e:06:94:aa:30:88:48:77:e8:ee:e6:81:4b:96:ef:45:b9:
         27:01:20:ce:30:48:d7:cb:68:15:a1:98:c7:5d:57:37:93:37:
         60:a3:55:29:12:de:8f:a7:0e:b6:1f:6e:b8:24:a1:36:37:06:
         f0:fc:22:f8:33:34:f8:ee:58:94:7c:82:98:4a:bc:2f:f3:9d:
         dd:ba:43:4e:d6:c3:cc:ff:9c:29:c0:5d:a4:5c:7d:ee:fe:c4:
         9e:d8:26:ad:3f:7d:5d:02:c5:3c:ec:94:2b:ee:3e:b1:62:9a:
         ab:30:60:70:9d:9c:d0:b4:3f:b9:9e:83:c6:14:6a:99:0b:68:
         e8:ef:66:37:81:fc:ec:5e:6e:3e:20:ad:c4:51:6f:35:1c:d6:
         e3:8f:a0:a4:64:24:db:e7:29:f0:51:5f:98:9a:be:31:88:3c:
         79:a7:f8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tpf6tzR5OZL17BY7x+8UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyN2EyMzYwN2Y2ZDFlNmU2Y2VkMWRkOTRjOWJkMTBiMzA2
ZjYwOWQwHhcNMjUwMTMxMTcwMDMxWhcNMjUwMjAxMTcwMDMxWjAzMTEwLwYDVQQD
Eyg5Y2QzNjk4NmVmMTZkNDU5NzE5ZjVjYTA2ODM5NGM2ZDZlYWNhZDczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqgUggUXQOBWl8aNuR1gk4MFUO5q
dcypLrpAVWpvW+oSjuruDV85iM2BK4BuyzczZeZzwxgmS05NdSg83TxUWH8E3wSo
XYmufdPrDop5WGxETvw9VmilcWYTnpoKlnqL/+qpDiP3xHdHvIrahiJx39v+g2Hs
rN76fg5qt/iKGyfn4Zhf84ENNXDi6uBRXNIFrb3zl02mbo0fCxegjHR8pyMrcTyo
L3w7kdHuqlhPPKCu8fID5zn+U8r/wDPMG850qax7pic1ijEtqp1IYlQ4EaRy17+V
Aq4FWq8+xNJgbkHw29v519pRQe2KYCFaap5KInTHSMyZZOKit6xvO6J16QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzTaYbvFtRZcZ9coGg5TG1urK1zMB8GA1UdIwQY
MBaAFPJ6I2B/bR5ubO0d2Uyb0Qswb2CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEt
ODc5MTNjMzU0OTJhLzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC84ZWEzZjEtNmI4Mi00N2NhLTg4YTEtODc5MTNjMzU0OTJh
LzEvOG5vallIOXRIbTVzN1IzWlRKdlJDekJ2WUowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwOjBRREu
oyWH4exV2+Tfn8t9l+dxcbWKggf6O8DywqhqE/p37hMFXzY5+cu2Kp9M50fie7sy
p+KQk2mu4waJEngSOXKe5xwXD1DlGku6O9im1vhs3EyBnt4Soj4GlKowiEh36O7m
gUuW70W5JwEgzjBI18toFaGYx11XN5M3YKNVKRLej6cOth9uuCShNjcG8Pwi+DM0
+O5YlHyCmEq8L/Od3bpDTtbDzP+cKcBdpFx97v7EntgmrT99XQLFPOyUK+4+sWKa
qzBgcJ2c0LQ/uZ6DxhRqmQto6O9mN4H87F5uPiCtxFFvNRzW44+gpGQk2+cp8FFf
mJq+MYg8eaf4YA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:36 2025 by rpki-client