Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
File:                     ggA1PrKBit3XElx4FCFDMUneb2I.mft (raw, json)
Hash identifier:          NnANKYZ5Jhl6hO6FgpzjhIh5PO5U3iV+YnSEBBTcZCA=
Subject key identifier:   BB:A2:F7:E9:FB:EB:49:B7:4C:73:D1:07:A7:4F:7E:3C:2A:83:D2:25
Authority key identifier: 82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62
Certificate issuer:       /CN=8200353eb2818addd7125c781421433149de6f62
Certificate serial:       0194BBCEBAE9358F42786742745742CF36EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft
Manifest number:          03A0
Signing time:             Fri 31 Jan 2025 10:01:15 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:15 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:15 +0000
Files and hashes:         1: ggA1PrKBit3XElx4FCFDMUneb2I.crl (hash: a3B63Bj6EoXp7LDZJXINj4itVpjMhUODcST5AJed/PE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ba:e9:35:8f:42:78:67:42:74:57:42:cf:36:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8200353eb2818addd7125c781421433149de6f62
        Validity
            Not Before: Jan 31 10:01:15 2025 GMT
            Not After : Feb  1 10:01:15 2025 GMT
        Subject: CN=bba2f7e9fbeb49b74c73d107a74f7e3c2a83d225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:54:d5:72:37:11:e0:3c:e5:1a:46:82:9d:
                    00:8d:9c:fa:8e:88:bf:10:1c:ed:82:2c:a0:af:ed:
                    3b:df:ab:a7:ff:46:74:8b:94:bf:9c:94:32:ac:71:
                    4e:82:9b:08:3e:91:88:f9:70:3d:b7:2d:0b:9c:74:
                    a9:85:37:92:84:65:6b:5b:4b:70:b4:59:c8:4d:9d:
                    68:4b:0d:c4:56:fc:b1:24:49:3c:9c:64:49:0e:64:
                    fa:4d:9e:c2:cf:a7:f7:66:ba:44:54:d8:61:bc:1f:
                    17:ce:1d:0a:16:43:81:df:9b:7c:70:a6:b9:0c:d5:
                    7f:9a:de:55:72:54:bd:1e:3f:a9:c5:bc:7c:4b:3d:
                    0d:ad:35:6e:b8:28:4f:e5:d5:92:29:e2:05:d6:b7:
                    33:72:79:fe:33:1e:93:99:8d:8c:c0:bb:cf:bf:e8:
                    38:c5:28:35:d1:33:11:f2:bc:c9:7a:73:3a:ef:fa:
                    71:33:e9:39:cf:5a:b9:bd:48:2a:84:37:b5:11:ea:
                    00:c9:79:53:09:f4:8c:f4:4c:f1:fc:74:33:60:f1:
                    2d:ac:d1:58:1d:ee:ed:9f:84:d9:dc:99:dc:f3:ff:
                    ee:64:05:a8:68:d6:f4:ba:16:a6:e7:3c:6a:af:39:
                    c9:5d:37:de:75:ce:5f:5b:c7:4a:7b:81:d7:e4:fb:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A2:F7:E9:FB:EB:49:B7:4C:73:D1:07:A7:4F:7E:3C:2A:83:D2:25
            X509v3 Authority Key Identifier:
                keyid:82:00:35:3E:B2:81:8A:DD:D7:12:5C:78:14:21:43:31:49:DE:6F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ggA1PrKBit3XElx4FCFDMUneb2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/d2310f-2438-475a-b391-7cd613a527d1/1/ggA1PrKBit3XElx4FCFDMUneb2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:27:e0:3e:5a:32:87:f7:df:68:0b:98:5d:14:a5:50:29:16:
         56:fa:90:26:49:55:7e:1f:db:cb:40:ec:22:ca:84:f4:4a:4a:
         e3:0f:a2:5d:2e:6c:34:ab:9f:5a:55:11:c9:d3:cb:9c:ed:7a:
         b2:22:df:d5:ab:c4:5e:89:6c:5f:ad:0d:1a:0c:5b:5f:61:da:
         1d:1f:7e:7e:c0:bc:24:38:65:93:ff:5d:36:64:fd:b3:0d:2b:
         5e:d6:f1:88:a3:6b:8b:a8:19:e6:d9:a6:d7:1a:e5:18:3d:fc:
         4d:10:45:14:c3:03:75:0d:13:e2:6c:bd:21:23:e2:0c:3a:bc:
         5f:59:fd:8a:04:e9:7c:67:49:20:6b:3c:e6:29:d5:a6:af:70:
         20:c5:b9:85:c1:f2:ac:fc:ce:10:d7:a9:74:3e:85:85:4c:87:
         3d:7b:95:4f:a9:e5:e7:27:82:fe:e7:57:58:ec:20:74:88:19:
         1f:44:10:e3:d1:be:14:21:28:45:3a:95:b5:5d:8c:49:89:e7:
         1d:c2:82:5d:1a:3a:dc:b6:93:3d:1a:1a:cc:a3:96:b4:c5:e7:
         c5:69:00:3f:50:d7:b8:ca:b5:77:e3:a9:4c:82:94:56:bb:c5:
         1b:f3:f3:15:e2:c8:72:f4:f5:1c:75:f3:90:9f:35:cf:e2:75:
         91:d6:a8:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrrpNY9CeGdCdFdCzzbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMDAzNTNlYjI4MThhZGRkNzEyNWM3ODE0MjE0MzMxNDlk
ZTZmNjIwHhcNMjUwMTMxMTAwMTE1WhcNMjUwMjAxMTAwMTE1WjAzMTEwLwYDVQQD
EyhiYmEyZjdlOWZiZWI0OWI3NGM3M2QxMDdhNzRmN2UzYzJhODNkMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsFU1XI3EeA85RpGgp0AjZz6joi/
EBztgiygr+0736un/0Z0i5S/nJQyrHFOgpsIPpGI+XA9ty0LnHSphTeShGVrW0tw
tFnITZ1oSw3EVvyxJEk8nGRJDmT6TZ7Cz6f3ZrpEVNhhvB8Xzh0KFkOB35t8cKa5
DNV/mt5VclS9Hj+pxbx8Sz0NrTVuuChP5dWSKeIF1rczcnn+Mx6TmY2MwLvPv+g4
xSg10TMR8rzJenM67/pxM+k5z1q5vUgqhDe1EeoAyXlTCfSM9Ezx/HQzYPEtrNFY
He7tn4TZ3Jnc8//uZAWoaNb0uham5zxqrznJXTfedc5fW8dKe4HX5PsmXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLui9+n760m3THPRB6dPfjwqg9IlMB8GA1UdIwQY
MBaAFIIANT6ygYrd1xJceBQhQzFJ3m9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9kMjMxMGYtMjQzOC00NzVhLWIzOTEt
N2NkNjEzYTUyN2QxLzEvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9kMjMxMGYtMjQzOC00NzVhLWIzOTEtN2NkNjEzYTUyN2Qx
LzEvZ2dBMVByS0JpdDNYRWx4NEZDRkRNVW5lYjJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPifgPloy
h/ffaAuYXRSlUCkWVvqQJklVfh/by0DsIsqE9EpK4w+iXS5sNKufWlURydPLnO16
siLf1avEXolsX60NGgxbX2HaHR9+fsC8JDhlk/9dNmT9sw0rXtbxiKNri6gZ5tmm
1xrlGD38TRBFFMMDdQ0T4my9ISPiDDq8X1n9igTpfGdJIGs85inVpq9wIMW5hcHy
rPzOENepdD6FhUyHPXuVT6nl5yeC/udXWOwgdIgZH0QQ49G+FCEoRTqVtV2MSYnn
HcKCXRo63LaTPRoazKOWtMXnxWkAP1DXuMq1d+OpTIKUVrvFG/PzFeLIcvT1HHXz
kJ81z+J1kdaoRg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:32 2025 by rpki-client