Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
File:                     gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft (raw, json)
Hash identifier:          XBrJenCGmGAdQD1l+2yOSl+1SiHpyrRsa8nkYOxSD/o=
Subject key identifier:   8B:5F:0D:11:05:E9:2A:A3:28:C3:20:C8:1B:42:BA:CC:E2:48:59:6C
Authority key identifier: 80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E
Certificate issuer:       /CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
Certificate serial:       0194BBCE7F8BB1E64CB0D639D53EF55C3A59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft
Manifest number:          033D
Signing time:             Fri 31 Jan 2025 10:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:59 +0000
Files and hashes:         1: UsY0DXPP6n766FRiykt_pSqHwzE.roa (hash: NitQAMfHtwFmOnU+ziuoGVZOIdtEIm3Tg9s1wr+3SzM=)
                          2: gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl (hash: EsllTQTHU9Y3BnG9aaGcSJBUGQPaZgS2Bl02O7T5Mso=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:7f:8b:b1:e6:4c:b0:d6:39:d5:3e:f5:5c:3a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=806757de8ffcdd1fd9af78b645536bda7c76c30e
        Validity
            Not Before: Jan 31 10:00:59 2025 GMT
            Not After : Feb  1 10:00:59 2025 GMT
        Subject: CN=8b5f0d1105e92aa328c320c81b42bacce248596c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9d:8f:22:67:73:b3:8b:da:81:e8:30:0f:6e:
                    93:a1:00:50:ac:49:d1:2a:b3:d2:09:01:77:87:ea:
                    57:44:51:6f:da:7e:2c:61:4b:43:f7:54:2a:c7:8b:
                    98:07:26:33:64:43:e5:fa:6b:04:76:48:5d:50:ae:
                    b7:8c:90:a3:bd:6c:d4:ad:2f:4a:1b:3e:5c:80:e6:
                    44:24:4c:15:40:3d:dc:d2:e9:5e:cf:9a:18:f6:54:
                    20:a9:93:31:97:90:3a:61:67:e5:87:55:43:d5:8a:
                    f0:31:f2:77:21:cd:2f:db:79:88:88:03:83:7a:15:
                    ca:4b:3f:8f:5a:6c:3f:c3:cf:47:6d:76:8f:ef:35:
                    09:0a:f2:2c:22:06:a6:0f:18:26:15:1d:41:d5:d4:
                    e5:c8:92:4c:06:58:b4:66:c6:41:58:10:ac:85:9b:
                    64:f9:b1:7d:8b:01:bf:fc:39:7e:32:e3:65:ab:ef:
                    52:3e:85:c1:14:3e:0c:1c:6d:27:00:fe:a7:8f:c7:
                    4f:dc:fd:82:35:3e:fc:60:da:ad:bf:a1:40:77:fe:
                    63:b6:bc:aa:c8:74:15:1c:90:61:ec:bf:31:73:e4:
                    70:c9:29:d1:a8:7d:25:29:96:ef:f0:c2:71:aa:1d:
                    9e:ce:de:b0:28:d5:60:b9:b7:75:74:79:91:65:30:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5F:0D:11:05:E9:2A:A3:28:C3:20:C8:1B:42:BA:CC:E2:48:59:6C
            X509v3 Authority Key Identifier:
                keyid:80:67:57:DE:8F:FC:DD:1F:D9:AF:78:B6:45:53:6B:DA:7C:76:C3:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGdX3o_83R_Zr3i2RVNr2nx2ww4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a3caf-f84c-4c76-8065-962206b1686b/1/gGdX3o_83R_Zr3i2RVNr2nx2ww4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:25:3c:e6:d6:ab:bc:1c:b9:e7:0f:a6:ce:aa:96:93:18:8a:
         7b:bb:96:69:8b:ee:9b:18:5d:3d:57:91:e4:5b:6a:84:53:55:
         af:b5:c0:65:33:2c:73:b0:32:40:ee:51:9f:af:2b:cc:e7:32:
         33:70:71:f4:4a:35:13:c0:13:72:6a:48:34:bb:24:df:b7:da:
         7f:f3:06:59:2e:b3:e9:a0:30:c6:bd:e7:3a:d0:f7:ad:c5:5c:
         61:cc:30:b3:ae:cb:34:6b:82:e7:52:62:58:39:0e:12:74:97:
         a6:61:34:0f:24:18:f4:34:ea:fe:dd:e5:02:cd:50:e6:4f:63:
         0e:a0:81:39:85:67:36:98:b8:29:85:f4:54:4f:c8:09:85:ec:
         b3:e0:ba:b1:19:f9:d6:bd:32:f4:99:b9:c2:16:db:32:d9:4c:
         34:13:fc:e9:3a:bf:10:b1:c0:b8:23:6f:fd:2a:7a:34:ac:1e:
         39:d4:b5:3f:dd:ca:44:5e:58:65:31:54:d9:a9:bb:50:ca:08:
         26:62:b6:6b:ec:ba:46:57:0a:59:b6:69:60:6f:42:c7:56:49:
         1b:a4:41:3b:d2:c6:65:4d:96:3d:c3:4a:36:4a:04:87:01:f2:
         1e:6e:28:39:54:ac:5c:ec:6e:ea:45:a3:38:27:65:15:7c:8a:
         af:a3:46:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zn+LseZMsNY51T71XDpZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjc1N2RlOGZmY2RkMWZkOWFmNzhiNjQ1NTM2YmRhN2M3
NmMzMGUwHhcNMjUwMTMxMTAwMDU5WhcNMjUwMjAxMTAwMDU5WjAzMTEwLwYDVQQD
Eyg4YjVmMGQxMTA1ZTkyYWEzMjhjMzIwYzgxYjQyYmFjY2UyNDg1OTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk52PImdzs4vagegwD26ToQBQrEnR
KrPSCQF3h+pXRFFv2n4sYUtD91Qqx4uYByYzZEPl+msEdkhdUK63jJCjvWzUrS9K
Gz5cgOZEJEwVQD3c0ulez5oY9lQgqZMxl5A6YWflh1VD1YrwMfJ3Ic0v23mIiAOD
ehXKSz+PWmw/w89HbXaP7zUJCvIsIgamDxgmFR1B1dTlyJJMBli0ZsZBWBCshZtk
+bF9iwG//Dl+MuNlq+9SPoXBFD4MHG0nAP6nj8dP3P2CNT78YNqtv6FAd/5jtryq
yHQVHJBh7L8xc+RwySnRqH0lKZbv8MJxqh2ezt6wKNVgubd1dHmRZTC35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItfDREF6SqjKMMgyBtCusziSFlsMB8GA1UdIwQY
MBaAFIBnV96P/N0f2a94tkVTa9p8dsMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUt
OTYyMjA2YjE2ODZiLzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS80YTNjYWYtZjg0Yy00Yzc2LTgwNjUtOTYyMjA2YjE2ODZi
LzEvZ0dkWDNvXzgzUl9acjNpMlJWTnIybngyd3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECU85tar
vBy55w+mzqqWkxiKe7uWaYvumxhdPVeR5FtqhFNVr7XAZTMsc7AyQO5Rn68rzOcy
M3Bx9Eo1E8ATcmpINLsk37faf/MGWS6z6aAwxr3nOtD3rcVcYcwws67LNGuC51Ji
WDkOEnSXpmE0DyQY9DTq/t3lAs1Q5k9jDqCBOYVnNpi4KYX0VE/ICYXss+C6sRn5
1r0y9Jm5whbbMtlMNBP86Tq/ELHAuCNv/Sp6NKweOdS1P93KRF5YZTFU2am7UMoI
JmK2a+y6RlcKWbZpYG9Cx1ZJG6RBO9LGZU2WPcNKNkoEhwHyHm4oOVSsXOxu6kWj
OCdlFXyKr6NGOw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:32 2025 by rpki-client