Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
File:                     gs1f087z4cqiC7ph-i1RtrlOtU0.mft (raw, json)
Hash identifier:          KoqpXR26u2MDLG+D0mGYpB1bzspN0VT77CCJ54Ahmd8=
Subject key identifier:   9F:14:08:16:E6:38:96:E7:65:A5:2C:E6:FF:D7:CF:13:E4:59:9C:DF
Authority key identifier: 82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D
Certificate issuer:       /CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
Certificate serial:       0194BBCEBFA466E793A9B22B8D39AEE5D9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft
Manifest number:          05A6
Signing time:             Fri 31 Jan 2025 10:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:16 +0000
Files and hashes:         1: 6-Zj3bcyCjNacB1xPlmd-41FIz0.roa (hash: A56X5AQbB29BB1sjg1qgfONBr80piND7T2p/Wos86gU=)
                          2: gs1f087z4cqiC7ph-i1RtrlOtU0.crl (hash: XK5nZRzloYOBCxEF09rv6wBEor+w+jWbz7CQabqXuBo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:bf:a4:66:e7:93:a9:b2:2b:8d:39:ae:e5:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82cd5fd3cef3e1caa20bba61fa2d51b6b94eb54d
        Validity
            Not Before: Jan 31 10:01:16 2025 GMT
            Not After : Feb  1 10:01:16 2025 GMT
        Subject: CN=9f140816e63896e765a52ce6ffd7cf13e4599cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8b:43:0e:21:3d:05:5b:4c:ba:36:dd:6c:45:
                    ff:eb:88:85:03:a6:e5:c1:b6:17:fa:b5:d8:70:50:
                    fc:ca:45:f8:fa:67:0a:b4:37:92:5a:c9:cd:ad:9b:
                    70:00:57:be:ee:4e:88:b0:9c:78:16:d7:1f:6a:f3:
                    57:ce:44:ec:a7:22:8d:e2:a5:1b:31:01:fd:a2:16:
                    88:43:11:33:ca:a7:7b:f0:b1:9a:4f:5b:ba:10:70:
                    17:c9:44:eb:1c:5e:91:c2:dd:5c:34:00:84:8b:b2:
                    90:3e:4f:33:6b:c7:1b:b4:92:6e:a1:49:3f:ce:7c:
                    b3:42:45:ae:c8:0d:41:41:53:91:81:3c:51:88:ce:
                    a7:2f:5b:c2:22:29:33:46:25:48:b4:dd:32:2f:b7:
                    9d:20:1b:6f:cf:f3:c0:38:98:2f:92:1b:09:4b:53:
                    81:a3:6e:ef:ba:be:ba:9b:9c:cd:7b:fa:9c:bd:13:
                    bf:bf:f8:e1:34:04:e0:9e:e0:b3:5c:4d:82:8c:0d:
                    dc:3e:7b:d3:4a:e1:14:2e:e9:31:af:d2:d3:76:4d:
                    3f:0b:dc:98:73:c5:ec:74:33:b1:6a:f2:01:93:75:
                    67:5b:24:15:1c:97:42:65:2c:f1:e0:ef:4e:1f:93:
                    ae:30:02:86:f9:fc:8d:f6:e3:60:b6:71:b6:41:df:
                    93:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:14:08:16:E6:38:96:E7:65:A5:2C:E6:FF:D7:CF:13:E4:59:9C:DF
            X509v3 Authority Key Identifier:
                keyid:82:CD:5F:D3:CE:F3:E1:CA:A2:0B:BA:61:FA:2D:51:B6:B9:4E:B5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gs1f087z4cqiC7ph-i1RtrlOtU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/536e54-d8fd-45ef-be60-f52306eeb722/1/gs1f087z4cqiC7ph-i1RtrlOtU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:cb:5b:8a:ed:a2:07:aa:3d:c7:8d:c1:04:8e:71:01:f5:
         48:c8:7d:06:69:85:bc:8d:9e:67:cb:c9:14:bf:a1:34:02:fe:
         ed:e5:41:16:49:d7:8f:e9:43:ba:b7:d9:e5:cb:4f:2e:93:26:
         a4:ab:b1:bb:01:f1:dd:84:4d:58:6b:7d:66:95:4f:ec:69:4f:
         73:9a:a4:34:78:48:66:d7:82:37:de:96:7a:83:1d:d5:d3:fd:
         03:9e:34:5b:0c:72:03:43:31:f7:24:86:fd:9b:26:6c:3a:f1:
         c9:d3:84:32:95:6e:f3:d5:10:dd:b2:a1:8b:3b:1e:e8:d8:65:
         bd:d4:79:50:a4:f9:5c:a1:e2:04:cf:3f:2d:ba:8b:f7:80:ee:
         f6:ee:4e:30:57:4a:64:7b:e4:14:4c:c5:31:5f:c7:7c:5f:ba:
         10:b5:38:d4:85:b4:f3:cf:2e:ca:e6:bc:19:64:57:c4:d2:54:
         92:90:88:aa:ca:6c:27:ac:31:5a:d1:60:f4:a6:83:c0:4a:fa:
         6f:60:92:ec:de:00:27:53:ca:ec:d9:ea:77:e7:85:4c:35:bb:
         9f:77:19:f6:67:c3:9f:f5:73:32:19:38:ef:4d:24:77:70:ea:
         78:9d:42:50:53:31:be:80:bf:e2:a7:04:53:17:65:0b:da:75:
         c0:9b:e6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zr+kZueTqbIrjTmu5dnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyY2Q1ZmQzY2VmM2UxY2FhMjBiYmE2MWZhMmQ1MWI2Yjk0
ZWI1NGQwHhcNMjUwMTMxMTAwMTE2WhcNMjUwMjAxMTAwMTE2WjAzMTEwLwYDVQQD
Eyg5ZjE0MDgxNmU2Mzg5NmU3NjVhNTJjZTZmZmQ3Y2YxM2U0NTk5Y2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YtDDiE9BVtMujbdbEX/64iFA6bl
wbYX+rXYcFD8ykX4+mcKtDeSWsnNrZtwAFe+7k6IsJx4FtcfavNXzkTspyKN4qUb
MQH9ohaIQxEzyqd78LGaT1u6EHAXyUTrHF6Rwt1cNACEi7KQPk8za8cbtJJuoUk/
znyzQkWuyA1BQVORgTxRiM6nL1vCIikzRiVItN0yL7edIBtvz/PAOJgvkhsJS1OB
o27vur66m5zNe/qcvRO/v/jhNATgnuCzXE2CjA3cPnvTSuEULukxr9LTdk0/C9yY
c8XsdDOxavIBk3VnWyQVHJdCZSzx4O9OH5OuMAKG+fyN9uNgtnG2Qd+TjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8UCBbmOJbnZaUs5v/XzxPkWZzfMB8GA1UdIwQY
MBaAFILNX9PO8+HKogu6YfotUba5TrVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAt
ZjUyMzA2ZWViNzIyLzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MzZlNTQtZDhmZC00NWVmLWJlNjAtZjUyMzA2ZWViNzIy
LzEvZ3MxZjA4N3o0Y3FpQzdwaC1pMVJ0cmxPdFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZHLW4rt
ogeqPceNwQSOcQH1SMh9BmmFvI2eZ8vJFL+hNAL+7eVBFknXj+lDurfZ5ctPLpMm
pKuxuwHx3YRNWGt9ZpVP7GlPc5qkNHhIZteCN96WeoMd1dP9A540WwxyA0Mx9ySG
/ZsmbDrxydOEMpVu89UQ3bKhizse6NhlvdR5UKT5XKHiBM8/LbqL94Du9u5OMFdK
ZHvkFEzFMV/HfF+6ELU41IW0888uyua8GWRXxNJUkpCIqspsJ6wxWtFg9KaDwEr6
b2CS7N4AJ1PK7Nnqd+eFTDW7n3cZ9mfDn/VzMhk4700kd3DqeJ1CUFMxvoC/4qcE
UxdlC9p1wJvmEg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:27 2025 by rpki-client