Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File:                     MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier:          EAI6SDMBicSml+DZ6VPHIAsvm4vIHZtq+c7kA9TWtUs=
Subject key identifier:   1D:39:25:0E:7C:56:30:67:1C:D8:19:31:23:1D:42:14:1F:33:88:CC
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer:       /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial:       0194BC3C02FB17EB60D88A0000CA04C5510E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number:          03E2
Signing time:             Fri 31 Jan 2025 12:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:36 +0000
Files and hashes:         1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: pfCNFdVtUAP4uMqJ7g8epqOBiEk+EMjRyikK3CInsm0=)
                          2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:02:fb:17:eb:60:d8:8a:00:00:ca:04:c5:51:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
        Validity
            Not Before: Jan 31 12:00:36 2025 GMT
            Not After : Feb  1 12:00:36 2025 GMT
        Subject: CN=1d39250e7c5630671cd81931231d42141f3388cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9d:2f:37:8d:99:02:f3:82:47:68:69:3b:2c:
                    a0:27:b4:54:7a:76:33:fe:2d:55:a8:68:99:c3:19:
                    e1:42:0a:eb:d8:2b:19:36:93:03:7d:93:32:d8:b4:
                    59:b3:b9:89:43:16:b9:44:5f:66:9e:5a:08:1b:30:
                    88:85:63:f1:d3:57:0b:68:35:ce:35:0b:4b:87:75:
                    63:2a:90:fa:7a:4f:d8:30:1b:40:59:df:c7:7b:35:
                    a7:cc:07:74:b0:bd:92:cc:a6:a7:83:90:d1:9c:5a:
                    31:70:15:33:0a:1c:94:1d:ca:52:27:98:1b:73:e9:
                    5d:8c:dc:89:24:0d:f5:28:73:77:2d:3c:88:32:f4:
                    69:82:72:2f:56:0c:ee:6c:44:29:b3:da:8e:cf:6c:
                    3d:ae:f0:f1:14:f4:1b:7c:ac:b6:f1:d7:0b:94:34:
                    e6:35:02:5b:26:d0:e9:19:52:0f:29:eb:47:b2:9b:
                    51:39:26:db:19:93:53:50:4c:c8:7e:25:f8:f7:b9:
                    29:4a:62:20:f2:f9:0e:a3:7a:21:6c:b7:1d:5f:98:
                    24:56:7b:1b:0c:55:bb:f2:40:c9:b5:16:7c:b8:5f:
                    99:9a:26:4a:90:c4:20:91:ed:25:b8:46:36:48:91:
                    5c:b3:59:e8:4f:94:c7:4d:a0:df:e4:43:9c:7e:16:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:39:25:0E:7C:56:30:67:1C:D8:19:31:23:1D:42:14:1F:33:88:CC
            X509v3 Authority Key Identifier:
                keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:76:24:82:3c:44:3f:63:3d:1d:39:72:55:50:a5:f4:cc:
         99:eb:18:13:34:68:00:0a:f1:a4:61:f7:43:6f:c9:26:bb:a5:
         ad:c6:d9:6d:f8:21:31:0b:6e:52:95:60:e4:8f:39:ca:16:9b:
         95:7c:87:d9:3b:7d:f7:45:1e:8f:6d:27:0e:20:b9:44:97:27:
         40:41:87:75:2b:96:a8:68:a7:dc:65:a4:75:39:2c:5e:44:83:
         ab:11:82:8f:c4:75:0b:82:25:e4:07:92:b5:2d:5f:fa:b9:3c:
         e6:6c:72:39:2e:18:86:c5:e6:ce:c1:4a:45:1d:cd:93:90:35:
         a1:49:4b:72:a5:dd:5e:8a:9e:12:36:fc:c7:97:fa:12:d0:c7:
         75:06:94:64:fe:9d:a1:cb:fb:2e:db:4c:ff:6f:d5:c6:ce:50:
         8f:ea:46:1c:73:18:9f:99:78:04:bd:da:57:56:24:72:ca:12:
         e1:44:f1:a7:68:03:10:07:91:f8:90:c2:40:fc:ea:f0:5c:bd:
         a9:c7:28:bb:de:d9:06:4d:ef:02:09:4d:c2:7b:d1:11:ad:6e:
         0d:8a:98:f2:43:c2:1d:af:ff:5f:c4:35:5c:c6:78:0b:2d:3e:
         9f:86:07:9b:70:dd:05:95:90:cb:68:3f:32:25:a1:b0:6f:28:
         24:5e:c1:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAL7F+tg2IoAAMoExVEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxM2ViZTQzNmE3NTYyOWI4ZjNkYjc0YTlhM2ZhMWQ1ZDMw
YWQzN2YwHhcNMjUwMTMxMTIwMDM2WhcNMjUwMjAxMTIwMDM2WjAzMTEwLwYDVQQD
EygxZDM5MjUwZTdjNTYzMDY3MWNkODE5MzEyMzFkNDIxNDFmMzM4OGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJ0vN42ZAvOCR2hpOyygJ7RUenYz
/i1VqGiZwxnhQgrr2CsZNpMDfZMy2LRZs7mJQxa5RF9mnloIGzCIhWPx01cLaDXO
NQtLh3VjKpD6ek/YMBtAWd/HezWnzAd0sL2SzKang5DRnFoxcBUzChyUHcpSJ5gb
c+ldjNyJJA31KHN3LTyIMvRpgnIvVgzubEQps9qOz2w9rvDxFPQbfKy28dcLlDTm
NQJbJtDpGVIPKetHsptROSbbGZNTUEzIfiX497kpSmIg8vkOo3ohbLcdX5gkVnsb
DFW78kDJtRZ8uF+ZmiZKkMQgke0luEY2SJFcs1noT5THTaDf5EOcfhaBrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB05JQ58VjBnHNgZMSMdQhQfM4jMMB8GA1UdIwQY
MBaAFDE+vkNqdWKbjz23Spo/odXTCtN/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVQ2LVEycDFZcHVQUGJkS21qLWgxZE1LMDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83MmNjMmItN2MxZi00YTM2LWE3MDAt
OTYwYzhmMGE5NWIyLzEvTVQ2LVEycDFZcHVQUGJkS21qLWgxZE1LMDM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy83MmNjMmItN2MxZi00YTM2LWE3MDAtOTYwYzhmMGE5NWIy
LzEvTVQ2LVEycDFZcHVQUGJkS21qLWgxZE1LMDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyt2JII8
RD9jPR05clVQpfTMmesYEzRoAArxpGH3Q2/JJrulrcbZbfghMQtuUpVg5I85yhab
lXyH2Tt990Uej20nDiC5RJcnQEGHdSuWqGin3GWkdTksXkSDqxGCj8R1C4Il5AeS
tS1f+rk85mxyOS4YhsXmzsFKRR3Nk5A1oUlLcqXdXoqeEjb8x5f6EtDHdQaUZP6d
ocv7LttM/2/Vxs5Qj+pGHHMYn5l4BL3aV1YkcsoS4UTxp2gDEAeR+JDCQPzq8Fy9
qccou97ZBk3vAglNwnvREa1uDYqY8kPCHa//X8Q1XMZ4Cy0+n4YHm3DdBZWQy2g/
MiWhsG8oJF7BBg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:47:05 2025 by rpki-client