Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
File:                     z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft (raw, json)
Hash identifier:          8C3OprfsAaVWNWFa/UUNm+JYGKXw+u/8WAD7pIxsYJ4=
Subject key identifier:   8E:F8:3C:0D:90:19:E6:BE:94:74:11:EF:97:E1:CF:89:07:15:95:CA
Authority key identifier: CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77
Certificate issuer:       /CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
Certificate serial:       0194BD1764401A0327AB24798F69AEA90066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft
Manifest number:          032A
Signing time:             Fri 31 Jan 2025 16:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:14 +0000
Files and hashes:         1: tPR9H_DIj2ZRBOQ92V0Cq0cgME0.roa (hash: 04OzE6roqkiLsdkvUp90YsNXVC5oCpySc5tEOrXmoM8=)
                          2: z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl (hash: 6aPFsl/9/MuVzjZrew4BiORrTP5q6uMbw5HsD1RGrdU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:64:40:1a:03:27:ab:24:79:8f:69:ae:a9:00:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6a7a426dc519963d33d2dc6cef782fd5f2dc77
        Validity
            Not Before: Jan 31 16:00:14 2025 GMT
            Not After : Feb  1 16:00:14 2025 GMT
        Subject: CN=8ef83c0d9019e6be947411ef97e1cf89071595ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:ac:ca:18:dc:3e:6a:3f:4b:fb:61:ff:4c:
                    c1:11:75:56:48:2f:4c:a3:f0:8c:f9:59:cf:04:c8:
                    5d:4f:9f:aa:97:11:e0:48:df:2b:1c:6e:56:8f:47:
                    84:1a:ed:3d:47:fd:20:5f:49:2d:96:6e:22:a0:c8:
                    df:cf:2f:42:d7:e4:88:ef:fb:a4:79:37:70:57:3d:
                    4d:75:02:39:ba:30:1a:65:9d:97:9a:b0:a5:ee:da:
                    56:e6:3d:69:20:bf:ac:be:6f:6c:d8:7a:76:7a:bf:
                    92:8e:47:3a:3c:d0:35:26:f5:cc:38:f4:9b:78:62:
                    72:15:e1:e8:df:8e:be:04:77:ec:4f:d4:ab:06:2b:
                    d1:60:ab:24:93:31:65:9a:ca:ac:30:73:43:d9:9d:
                    90:6e:13:e1:a4:27:be:25:90:94:24:30:4a:8c:a7:
                    54:b7:52:43:39:36:5b:c6:1d:89:b9:7f:e9:07:56:
                    0f:d5:1a:cf:3e:57:99:59:29:e3:ac:dc:54:59:f6:
                    ae:5b:bc:f9:6b:6e:70:ff:04:5f:57:c0:53:a7:46:
                    85:4d:9e:31:b0:9b:aa:ad:61:58:85:63:ef:54:ca:
                    ee:8c:23:f4:12:f9:6d:7e:d5:f1:b9:ed:a7:5d:b3:
                    14:27:78:95:4b:fc:2b:65:1f:c7:91:20:91:66:ba:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F8:3C:0D:90:19:E6:BE:94:74:11:EF:97:E1:CF:89:07:15:95:CA
            X509v3 Authority Key Identifier:
                keyid:CF:6A:7A:42:6D:C5:19:96:3D:33:D2:DC:6C:EF:78:2F:D5:F2:DC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/051420-dcb7-4b21-b13e-d2db73ff31bc/1/z2p6Qm3FGZY9M9LcbO94L9Xy3Hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:07:bd:2b:49:9e:2b:dc:b8:37:f7:a4:e5:d1:2c:07:13:6c:
         e3:f0:9f:5c:81:15:56:9e:b4:0d:ed:e0:2d:ae:cd:6f:b5:9d:
         8b:e6:da:4c:c8:ad:ed:78:37:f1:19:52:c8:4f:4b:97:e1:1a:
         41:70:3a:33:86:a0:be:f6:7c:b3:36:8b:d6:ca:ba:20:d1:c7:
         4b:3c:e2:71:24:47:ad:20:4b:3f:6b:84:93:a3:db:99:87:a0:
         06:ca:bb:ff:33:ea:5d:cb:dc:c3:ba:b4:95:fb:47:c1:cb:38:
         7a:f8:04:c6:d8:1b:aa:34:a5:fd:66:24:4e:66:4d:73:99:ca:
         4e:82:1a:c2:d5:8e:77:14:2d:45:d2:4a:36:c2:16:44:3e:be:
         ec:24:f8:74:ce:25:18:71:14:2b:7b:89:23:c4:29:d7:e3:57:
         a7:49:f9:cc:95:36:79:38:af:ea:3c:3e:d8:22:e8:d5:45:2b:
         e4:c7:e7:8e:11:7c:64:8b:9f:fd:4d:48:fd:ab:d2:48:6f:80:
         c1:61:e1:8a:2f:5d:91:b5:ba:16:ec:fc:f1:e7:db:89:33:69:
         65:26:5d:89:f5:29:34:e4:58:83:18:b9:2b:ac:f5:28:8a:f1:
         0d:b5:d7:78:34:46:67:b0:f8:fc:0f:38:e9:76:2d:24:ce:c5:
         9c:9e:27:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2RAGgMnqyR5j2muqQBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmE3YTQyNmRjNTE5OTYzZDMzZDJkYzZjZWY3ODJmZDVm
MmRjNzcwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
Eyg4ZWY4M2MwZDkwMTllNmJlOTQ3NDExZWY5N2UxY2Y4OTA3MTU5NWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfmsyhjcPmo/S/th/0zBEXVWSC9M
o/CM+VnPBMhdT5+qlxHgSN8rHG5Wj0eEGu09R/0gX0ktlm4ioMjfzy9C1+SI7/uk
eTdwVz1NdQI5ujAaZZ2XmrCl7tpW5j1pIL+svm9s2Hp2er+Sjkc6PNA1JvXMOPSb
eGJyFeHo346+BHfsT9SrBivRYKskkzFlmsqsMHND2Z2QbhPhpCe+JZCUJDBKjKdU
t1JDOTZbxh2JuX/pB1YP1RrPPleZWSnjrNxUWfauW7z5a25w/wRfV8BTp0aFTZ4x
sJuqrWFYhWPvVMrujCP0EvltftXxue2nXbMUJ3iVS/wrZR/HkSCRZrpVbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI74PA2QGea+lHQR75fhz4kHFZXKMB8GA1UdIwQY
MBaAFM9qekJtxRmWPTPS3GzveC/V8tx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2Ut
ZDJkYjczZmYzMWJjLzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNTE0MjAtZGNiNy00YjIxLWIxM2UtZDJkYjczZmYzMWJj
LzEvejJwNlFtM0ZHWlk5TTlMY2JPOTRMOVh5M0hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARQe9K0me
K9y4N/ek5dEsBxNs4/CfXIEVVp60De3gLa7Nb7Wdi+baTMit7Xg38RlSyE9Ll+Ea
QXA6M4agvvZ8szaL1sq6INHHSzzicSRHrSBLP2uEk6PbmYegBsq7/zPqXcvcw7q0
lftHwcs4evgExtgbqjSl/WYkTmZNc5nKToIawtWOdxQtRdJKNsIWRD6+7CT4dM4l
GHEUK3uJI8Qp1+NXp0n5zJU2eTiv6jw+2CLo1UUr5MfnjhF8ZIuf/U1I/avSSG+A
wWHhii9dkbW6Fuz88efbiTNpZSZdifUpNORYgxi5K6z1KIrxDbXXeDRGZ7D4/A84
6XYtJM7FnJ4nYg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:35 2025 by rpki-client