Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File:                     FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier:          PaVYionoX7kna7KlKblzAoxsu+7RpNpJdDbKCn/q3y4=
Subject key identifier:   66:EE:FE:08:0B:6A:89:F2:D7:B4:7C:96:DE:97:B8:C2:78:64:46:D4
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer:       /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial:       0194BC72D26F6C6CE07DDA5EFA3D2BC1C952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number:          1435
Signing time:             Fri 31 Jan 2025 13:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:29 +0000
Files and hashes:         1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: Ly13xYXiSokaQ0QSWKpmR6WKD+sT41yxSbg2iqwE0j4=)
                          2: N5Gh8WU6LbeHtUd8XRyhLT7tdkQ.roa (hash: mitxt5I+lSF+4rUo8JMUQCIfsBb/PVUX3ZvyGSCEfWk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:d2:6f:6c:6c:e0:7d:da:5e:fa:3d:2b:c1:c9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
        Validity
            Not Before: Jan 31 13:00:29 2025 GMT
            Not After : Feb  1 13:00:29 2025 GMT
        Subject: CN=66eefe080b6a89f2d7b47c96de97b8c2786446d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7b:31:a3:d1:10:d5:fa:bc:8e:4b:95:f2:51:
                    c2:72:c9:5d:7f:80:01:4f:2b:79:55:f1:f6:4b:ce:
                    fd:85:dc:fd:c9:e7:cd:11:3c:7f:6d:4b:7c:6b:71:
                    e5:77:00:3d:e6:fe:1a:21:2a:c0:11:9b:4c:ee:4e:
                    3e:0e:39:a7:44:2c:95:67:04:65:d3:da:a3:e5:ab:
                    55:3a:c2:3d:58:7c:26:fa:fc:4a:10:e3:3a:b3:a7:
                    43:11:68:51:8c:8d:81:dd:a3:85:74:af:83:64:81:
                    2a:0b:67:20:73:67:b0:c4:82:f5:03:a1:5c:0c:f3:
                    98:46:20:0c:ea:79:67:b7:4d:63:21:b3:d2:86:29:
                    f5:5b:ad:49:53:be:10:db:78:50:e9:b4:75:a5:8e:
                    e9:c3:f2:c6:81:98:31:a5:73:6c:8c:88:39:97:97:
                    bf:03:26:08:72:e8:38:fd:b4:34:7f:91:85:db:b9:
                    db:22:d3:59:8c:74:22:99:9e:ac:27:50:59:4c:15:
                    1b:60:34:93:01:f5:8e:4b:ac:f8:61:cf:10:26:4e:
                    9c:28:34:8b:bb:1a:a3:48:fd:f9:2b:82:b0:7c:bb:
                    7b:6c:f6:b0:48:f7:b3:3f:f2:a9:72:a7:ba:13:ab:
                    d1:ec:c1:56:7d:dc:e7:db:98:43:ac:9e:a1:9a:de:
                    aa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EE:FE:08:0B:6A:89:F2:D7:B4:7C:96:DE:97:B8:C2:78:64:46:D4
            X509v3 Authority Key Identifier:
                keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:78:01:17:56:96:de:e4:d4:22:74:52:c0:69:eb:74:ba:
         8d:e1:dd:7f:83:e8:14:07:bc:f8:d5:6e:7c:a1:46:e3:ec:d1:
         b9:03:28:4b:cf:9f:05:a6:37:25:2e:f3:cd:0c:c4:f4:84:c5:
         ec:a9:c2:89:e1:5e:d4:dc:b5:07:dd:c3:8c:31:e9:92:07:b1:
         4c:40:23:75:73:c9:98:ea:68:67:6b:30:f9:2a:da:2e:18:fd:
         90:60:94:4b:92:74:06:bc:9a:46:da:4e:ce:01:41:d2:15:d5:
         42:ab:7b:aa:a5:78:af:c5:d6:e5:79:dd:4a:62:7d:c4:5a:2a:
         7f:eb:aa:29:07:96:40:67:e1:98:5b:f5:2a:1d:83:95:6b:0a:
         44:a6:3d:3d:4f:0a:5e:1a:37:cc:a8:dd:4e:0c:4e:93:e4:3e:
         e5:b6:f8:14:46:1d:21:c8:c5:91:fd:18:de:15:bd:fc:88:88:
         6f:33:5b:4d:a5:8f:94:f9:10:1f:90:ca:41:48:6a:ab:a4:6f:
         4a:e1:7e:a0:47:67:8b:32:f3:ab:85:e3:33:85:4a:44:29:51:
         ff:63:53:8b:29:5a:6c:0a:37:89:29:4f:1b:12:83:cc:3c:63:
         eb:c9:62:c0:65:36:a6:12:31:34:f4:c9:78:02:99:27:39:dd:
         ea:54:ed:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8ctJvbGzgfdpe+j0rwclSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MjQxZGQ4M2Q4YWMwODBiNjY1MDRiZjkzNzQ1OWZmY2Vj
NGNjYzQwHhcNMjUwMTMxMTMwMDI5WhcNMjUwMjAxMTMwMDI5WjAzMTEwLwYDVQQD
Eyg2NmVlZmUwODBiNmE4OWYyZDdiNDdjOTZkZTk3YjhjMjc4NjQ0NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nsxo9EQ1fq8jkuV8lHCcsldf4AB
Tyt5VfH2S879hdz9yefNETx/bUt8a3HldwA95v4aISrAEZtM7k4+DjmnRCyVZwRl
09qj5atVOsI9WHwm+vxKEOM6s6dDEWhRjI2B3aOFdK+DZIEqC2cgc2ewxIL1A6Fc
DPOYRiAM6nlnt01jIbPShin1W61JU74Q23hQ6bR1pY7pw/LGgZgxpXNsjIg5l5e/
AyYIcug4/bQ0f5GF27nbItNZjHQimZ6sJ1BZTBUbYDSTAfWOS6z4Yc8QJk6cKDSL
uxqjSP35K4KwfLt7bPawSPezP/Kpcqe6E6vR7MFWfdzn25hDrJ6hmt6qIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbu/ggLaony17R8lt6XuMJ4ZEbUMB8GA1UdIwQY
MBaAFBYkHdg9isCAtmUEv5N0Wf/OxMzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWIt
NWU3NDlmNDM0MWE0LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWItNWU3NDlmNDM0MWE0
LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtl4ARdW
lt7k1CJ0UsBp63S6jeHdf4PoFAe8+NVufKFG4+zRuQMoS8+fBaY3JS7zzQzE9ITF
7KnCieFe1Ny1B93DjDHpkgexTEAjdXPJmOpoZ2sw+SraLhj9kGCUS5J0BryaRtpO
zgFB0hXVQqt7qqV4r8XW5XndSmJ9xFoqf+uqKQeWQGfhmFv1Kh2DlWsKRKY9PU8K
Xho3zKjdTgxOk+Q+5bb4FEYdIcjFkf0Y3hW9/IiIbzNbTaWPlPkQH5DKQUhqq6Rv
SuF+oEdnizLzq4XjM4VKRClR/2NTiylabAo3iSlPGxKDzDxj68liwGU2phIxNPTJ
eAKZJznd6lTtUA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:55:01 2025 by rpki-client