Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
File:                     FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json)
Hash identifier:          dmzttjIwZTOZFEkPfMZgO/45/tcBQcIm8leb366b2YA=
Subject key identifier:   81:AA:11:0F:A0:E6:98:BF:ED:D6:15:FB:5C:FA:68:67:A4:70:41:F0
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Certificate issuer:       /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial:       0194BCA98A61AC2B810BD6C5F8BB4E8DE134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
Manifest number:          143E
Signing time:             Fri 31 Jan 2025 14:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:15 +0000
Files and hashes:         1: 08gO2xhzYB9MrOPyUgzVPTFsEks.roa (hash: uuTu5Ilmhz+ZTWX0lT3lDAgUnguN/hhWVP6RiQFWbO0=)
                          2: 2WvVwy-PRL5GLrJD80GhjHcE31U.roa (hash: V+gab5/KP1zLki+Ce4a8elUju3qZMThRlJep3bHdmjU=)
                          3: DlttiF7sTnpZBCWr79VnOWAb-Cw.roa (hash: 1I+LBYXesIZu1L3F5YYgW1sIY18eU3XqF+UKWnyiXM4=)
                          4: E_7lfxRnXL43BaxS0BR35ae28-8.roa (hash: bsdbl8+gmpOB2GMwRa9PUSXIwKLCbxh9y6aoGWsrfmA=)
                          5: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: AP4qRWWafaVeQvAtx1EGPRreXxBphb1nylakuQyZtKs=)
                          6: LVCOq86MWXkEBLGlXajn0ZENzKo.roa (hash: za/dFUKCElp0tRhTQ1rRsumZkCaRLeXmcSoTGiaBfbk=)
                          7: MRT2LF_aEOeFlu0z18oRZu0OKoQ.roa (hash: RWWOAldqVltxk1TROg2IYHHxbCDwXOV9TETvXzcXc50=)
                          8: RS51aQgOg2IG7Kd3gYmS2BKt-mo.roa (hash: 04jNZ5D66dkBNT8VoJCjjfzY2tYl+DQ4VUJcAaUENu8=)
                          9: UkVGZcePqwW-KxvbBYt50liz4UM.roa (hash: HUtG9jf1oU5Vm0ZUnGnbYEpFmR4EvSJFZLnuUG/MWnk=)
                          10: kVpC8L3NVBoBD0uRMCZwUe0L0hI.roa (hash: ZhoOhvNlGipJNbOy/H0tyIYa78nFkIWP7NHbAfT2b3I=)
                          11: uqIp0R_dvDEsqpriRwcj3sItHGw.roa (hash: 0M8ijVLRqjXM3pBRfR1epwx7A0hp1U4azXVWoA9LspU=)
                          12: wNeMSi5MrXHKJ9Bcd1J1t9TUVxs.roa (hash: 3TBrkx3yBNsIFnG+W7zhjJSop/DWdhzl60pc+HRX438=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:8a:61:ac:2b:81:0b:d6:c5:f8:bb:4e:8d:e1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
        Validity
            Not Before: Jan 31 14:00:15 2025 GMT
            Not After : Feb  1 14:00:15 2025 GMT
        Subject: CN=81aa110fa0e698bfedd615fb5cfa6867a47041f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:be:18:d1:f0:50:f8:08:b4:86:4d:74:69:
                    d3:18:01:3c:52:19:2d:ed:13:9d:7f:75:fa:f1:8a:
                    40:ec:c4:0a:d5:c8:1a:21:03:4b:71:94:e3:fd:a5:
                    0b:4d:ab:3e:68:7d:ac:df:26:56:18:e5:e7:eb:05:
                    d2:d7:96:ac:bb:5b:09:34:50:6c:9f:bf:7d:68:d4:
                    3f:39:20:66:1f:2b:84:d6:83:ba:23:f5:01:15:2e:
                    9c:33:9b:04:07:df:43:f8:b8:5a:9e:cf:6a:b2:59:
                    eb:af:6a:ea:f2:df:e0:50:81:ca:f5:6d:90:1c:d0:
                    83:ba:a6:6b:9e:1b:f1:ca:4d:b9:67:83:f0:36:11:
                    25:c3:3d:d6:7e:be:b1:2c:b5:17:10:2a:0e:0e:eb:
                    02:aa:93:52:a1:69:c7:57:d3:58:fb:04:ee:26:33:
                    55:2a:49:98:ca:5a:29:c7:9b:42:a6:c1:f1:63:a9:
                    b7:70:73:17:7e:27:0a:d1:9f:d0:27:01:41:68:40:
                    09:23:47:42:3c:19:0c:47:10:6b:27:2a:35:55:3d:
                    90:f1:24:a7:48:76:1d:3f:a9:7d:00:b1:b3:58:20:
                    22:e4:e0:90:ad:bc:8f:5d:16:55:45:58:e4:97:d7:
                    1b:ef:54:6e:f1:e4:9d:36:f7:ce:73:1b:d9:31:05:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:AA:11:0F:A0:E6:98:BF:ED:D6:15:FB:5C:FA:68:67:A4:70:41:F0
            X509v3 Authority Key Identifier:
                keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a6:fa:a6:65:c7:39:f0:58:a1:40:57:59:89:2a:34:7c:03:
         a1:bd:2b:cf:c5:dd:50:f2:df:11:9a:9d:05:1a:14:14:5d:ad:
         20:c1:ee:c0:97:c7:29:d4:81:5a:9d:c4:31:95:69:a2:e2:75:
         5a:84:cc:a5:4e:07:b5:e4:73:58:a5:16:25:f7:47:3a:f4:3f:
         44:4a:5a:6f:5a:13:39:fa:9c:21:61:41:98:10:90:08:4b:24:
         17:ce:6e:a3:d2:43:6d:25:ac:fa:ac:ea:2e:3f:5f:57:ef:cd:
         52:86:54:4b:fa:76:bf:94:89:44:2f:26:c8:2f:3e:cc:f3:62:
         48:40:54:1b:7f:29:5e:a6:c4:5d:f6:74:4a:fb:cc:32:b1:42:
         24:0e:36:28:d7:59:d8:5f:7b:ce:0a:8e:4a:ea:1b:85:ba:5f:
         9f:23:81:6e:6c:25:09:85:4a:39:50:98:d3:59:b0:57:a9:2a:
         36:8e:fd:31:37:c0:ad:24:58:af:74:be:45:d7:67:49:f4:d5:
         2f:a8:1b:20:9c:64:f3:77:af:3b:0c:9f:7e:a7:9b:a9:e8:50:
         23:25:dd:2e:4b:54:59:6b:53:74:19:37:f5:05:5c:a6:2f:6f:
         c8:5b:ef:bf:71:d2:dc:76:67:56:e5:fc:19:f7:a4:55:82:83:
         70:71:ec:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qYphrCuBC9bF+LtOjeE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk
MTRjYzYwHhcNMjUwMTMxMTQwMDE1WhcNMjUwMjAxMTQwMDE1WjAzMTEwLwYDVQQD
Eyg4MWFhMTEwZmEwZTY5OGJmZWRkNjE1ZmI1Y2ZhNjg2N2E0NzA0MWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwy+GNHwUPgItIZNdGnTGAE8Uhkt
7ROdf3X68YpA7MQK1cgaIQNLcZTj/aULTas+aH2s3yZWGOXn6wXS15asu1sJNFBs
n799aNQ/OSBmHyuE1oO6I/UBFS6cM5sEB99D+Lhans9qslnrr2rq8t/gUIHK9W2Q
HNCDuqZrnhvxyk25Z4PwNhElwz3Wfr6xLLUXECoODusCqpNSoWnHV9NY+wTuJjNV
KkmYylopx5tCpsHxY6m3cHMXficK0Z/QJwFBaEAJI0dCPBkMRxBrJyo1VT2Q8SSn
SHYdP6l9ALGzWCAi5OCQrbyPXRZVRVjkl9cb71Ru8eSdNvfOcxvZMQXQowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGqEQ+g5pi/7dYV+1z6aGekcEHwMB8GA1UdIwQY
MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt
ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx
LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjab6pmXH
OfBYoUBXWYkqNHwDob0rz8XdUPLfEZqdBRoUFF2tIMHuwJfHKdSBWp3EMZVpouJ1
WoTMpU4HteRzWKUWJfdHOvQ/REpab1oTOfqcIWFBmBCQCEskF85uo9JDbSWs+qzq
Lj9fV+/NUoZUS/p2v5SJRC8myC8+zPNiSEBUG38pXqbEXfZ0SvvMMrFCJA42KNdZ
2F97zgqOSuobhbpfnyOBbmwlCYVKOVCY01mwV6kqNo79MTfArSRYr3S+RddnSfTV
L6gbIJxk83evOwyffqebqehQIyXdLktUWWtTdBk39QVcpi9vyFvvv3HS3HZnVuX8
GfekVYKDcHHsFw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:45 2025 by rpki-client