Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
File:                     lowsVdyOuZe_WRIdTC_9VESiLi0.mft (raw, json)
Hash identifier:          XB0ldFZ9adoLCl/8n/3UAZbQsCbx76Q8xQl/Dc3jFZk=
Subject key identifier:   D6:F0:8A:96:25:69:76:81:31:B3:94:69:8E:1C:EA:48:1F:8F:27:CE
Authority key identifier: 96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D
Certificate issuer:       /CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
Certificate serial:       0194BC3C33867F8A4B197F21D81A8D8A6D73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 12:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:49 +0000
Files and hashes:         1: lowsVdyOuZe_WRIdTC_9VESiLi0.crl (hash: K4K6UtE4Cdl1vM2G9/k1sz7WERCXAVjSZpf4qfzbBbU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:33:86:7f:8a:4b:19:7f:21:d8:1a:8d:8a:6d:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968c2c55dc8eb997bf59121d4c2ffd5444a22e2d
        Validity
            Not Before: Jan 31 12:00:49 2025 GMT
            Not After : Feb  1 12:00:49 2025 GMT
        Subject: CN=d6f08a962569768131b394698e1cea481f8f27ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e5:af:4e:8c:db:3a:8d:30:11:70:86:a9:f2:
                    39:1b:da:b7:5a:fb:e4:84:b9:28:cd:6b:8e:8d:ca:
                    b0:a9:82:b0:65:d1:a6:ef:6f:7e:5d:ed:78:a8:ba:
                    43:c1:c3:11:4f:30:2e:db:f0:59:e9:7e:04:b4:20:
                    31:60:0d:46:a2:aa:d0:bc:67:d3:d7:3d:ca:9d:7d:
                    62:b1:46:0f:ad:70:38:d2:1d:fa:b5:2a:82:79:1f:
                    89:5b:e1:c1:bc:11:a2:f0:00:92:a3:1f:aa:49:ca:
                    84:f3:0b:f3:eb:17:ca:d1:4e:a0:f9:24:0a:0a:3f:
                    a1:90:ea:92:74:23:0d:47:02:80:8c:d5:41:34:97:
                    11:6d:a0:d0:85:e7:da:72:88:7a:9d:f4:96:88:88:
                    23:b4:b1:be:fd:78:07:f9:b8:d3:f5:93:7c:34:95:
                    29:5c:c9:47:fc:85:c5:e7:ab:a6:de:ed:4d:1c:8a:
                    33:e8:22:63:ed:80:df:c9:94:7c:e4:dd:85:c9:6b:
                    55:74:71:26:00:ed:3b:49:ce:bc:12:18:41:6f:58:
                    07:d2:b7:0a:3e:27:94:09:cc:a5:9b:28:7c:16:a4:
                    d3:28:4b:26:e4:4c:40:e1:fb:31:6c:1c:af:97:26:
                    f6:1d:59:b6:b8:d5:8e:cf:34:5f:58:d5:fe:86:ce:
                    f0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:8A:96:25:69:76:81:31:B3:94:69:8E:1C:EA:48:1F:8F:27:CE
            X509v3 Authority Key Identifier:
                keyid:96:8C:2C:55:DC:8E:B9:97:BF:59:12:1D:4C:2F:FD:54:44:A2:2E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lowsVdyOuZe_WRIdTC_9VESiLi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/e4741b-f5b5-418f-8e96-154e599fd35f/1/lowsVdyOuZe_WRIdTC_9VESiLi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:4a:02:3e:12:e5:ca:44:3d:f9:80:bf:11:44:56:22:98:e5:
         08:4a:19:c3:a7:05:6b:75:06:23:c6:e5:53:cb:7a:fe:3c:c6:
         0e:13:41:94:40:0f:39:f0:de:c2:a9:d4:cd:a7:91:b9:8b:3f:
         7c:79:75:33:47:21:14:ed:5a:79:7c:2b:65:89:f3:ec:41:81:
         f9:5e:44:2c:76:f7:4d:e6:36:7d:9f:45:d4:95:52:8a:33:d9:
         5d:0e:41:af:9b:87:91:47:6b:3a:1a:07:dd:92:b7:a3:26:f3:
         62:18:ab:d8:24:f9:d4:ca:39:99:00:b3:4d:43:95:00:92:c5:
         80:c8:e4:39:0e:5a:b3:e7:69:f4:b7:9a:c9:99:56:20:58:b0:
         86:89:be:aa:2f:b1:8c:e5:6c:31:10:94:4e:75:c7:e0:ed:cd:
         7c:3c:e6:5d:7e:28:5e:85:4b:07:b7:60:75:e1:eb:16:ec:00:
         32:6f:c6:86:27:63:47:82:d4:8c:a0:0a:c9:05:54:ac:7c:a0:
         b6:f2:bb:b3:41:ce:b3:9d:71:6c:7e:c8:d1:df:20:8e:ad:48:
         f0:9a:84:0d:73:c9:6a:5f:97:ea:f4:7b:a4:e9:82:55:86:ef:
         9b:5d:85:f6:c0:e8:7d:73:f3:1a:19:0f:54:17:2f:79:0b:d2:
         1d:bd:c5:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDOGf4pLGX8h2BqNim1zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OGMyYzU1ZGM4ZWI5OTdiZjU5MTIxZDRjMmZmZDU0NDRh
MjJlMmQwHhcNMjUwMTMxMTIwMDQ5WhcNMjUwMjAxMTIwMDQ5WjAzMTEwLwYDVQQD
EyhkNmYwOGE5NjI1Njk3NjgxMzFiMzk0Njk4ZTFjZWE0ODFmOGYyN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuWvTozbOo0wEXCGqfI5G9q3Wvvk
hLkozWuOjcqwqYKwZdGm729+Xe14qLpDwcMRTzAu2/BZ6X4EtCAxYA1GoqrQvGfT
1z3KnX1isUYPrXA40h36tSqCeR+JW+HBvBGi8ACSox+qScqE8wvz6xfK0U6g+SQK
Cj+hkOqSdCMNRwKAjNVBNJcRbaDQhefacoh6nfSWiIgjtLG+/XgH+bjT9ZN8NJUp
XMlH/IXF56um3u1NHIoz6CJj7YDfyZR85N2FyWtVdHEmAO07Sc68EhhBb1gH0rcK
PieUCcylmyh8FqTTKEsm5ExA4fsxbByvlyb2HVm2uNWOzzRfWNX+hs7w9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbwipYlaXaBMbOUaY4c6kgfjyfOMB8GA1UdIwQY
MBaAFJaMLFXcjrmXv1kSHUwv/VREoi4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYt
MTU0ZTU5OWZkMzVmLzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9lNDc0MWItZjViNS00MThmLThlOTYtMTU0ZTU5OWZkMzVm
LzEvbG93c1ZkeU91WmVfV1JJZFRDXzlWRVNpTGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkoCPhLl
ykQ9+YC/EURWIpjlCEoZw6cFa3UGI8blU8t6/jzGDhNBlEAPOfDewqnUzaeRuYs/
fHl1M0chFO1aeXwrZYnz7EGB+V5ELHb3TeY2fZ9F1JVSijPZXQ5Br5uHkUdrOhoH
3ZK3oybzYhir2CT51Mo5mQCzTUOVAJLFgMjkOQ5as+dp9LeayZlWIFiwhom+qi+x
jOVsMRCUTnXH4O3NfDzmXX4oXoVLB7dgdeHrFuwAMm/GhidjR4LUjKAKyQVUrHyg
tvK7s0HOs51xbH7I0d8gjq1I8JqEDXPJal+X6vR7pOmCVYbvm12F9sDofXPzGhkP
VBcveQvSHb3FdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:35 2025 by rpki-client