Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft
File:                     NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft (raw, json)
Hash identifier:          6+sOR1b9dD4zVe8XCKs8Tz80M1pSBSqG5kb4cVaGgEQ=
Subject key identifier:   93:F8:84:50:8D:D2:4D:61:D0:22:83:67:10:7F:CD:BB:58:24:30:66
Authority key identifier: 35:E4:B0:33:9A:0B:CB:35:39:4B:0B:CD:1E:03:10:97:C5:AB:3D:9E
Certificate issuer:       /CN=35e4b0339a0bcb35394b0bcd1e031097c5ab3d9e
Certificate serial:       0194BD17B485485AA31D0D9F427D122060CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft
Manifest number:          083F
Signing time:             Fri 31 Jan 2025 16:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:34 +0000
Files and hashes:         1: NeSwM5oLyzU5SwvNHgMQl8WrPZ4.crl (hash: akLl8hg4WDO7sucCVmn2kiTg97UdPLyOsNI4B06hCwc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b4:85:48:5a:a3:1d:0d:9f:42:7d:12:20:60:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e4b0339a0bcb35394b0bcd1e031097c5ab3d9e
        Validity
            Not Before: Jan 31 16:00:34 2025 GMT
            Not After : Feb  1 16:00:34 2025 GMT
        Subject: CN=93f884508dd24d61d0228367107fcdbb58243066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:40:37:57:8b:d7:e4:f0:18:f7:47:f5:d8:92:
                    59:d2:b9:c2:f7:bb:2e:82:4d:d8:bb:b2:aa:72:89:
                    97:5c:9d:bf:17:2a:65:7f:d7:26:ea:92:e4:c4:62:
                    00:44:0a:88:d5:ec:6d:cf:c4:58:e8:52:b0:de:e6:
                    d0:96:57:90:9f:ac:7c:d9:1c:3e:5f:11:b6:1c:c1:
                    43:ec:88:69:dd:4f:02:13:06:16:d3:d5:b3:ed:b5:
                    61:84:77:a3:c8:f0:f0:75:7b:92:3c:19:dd:b3:db:
                    fd:2d:64:e0:a8:72:92:f2:a2:45:e8:03:53:ab:dd:
                    06:28:d2:69:96:64:49:6f:ec:d5:e2:04:f0:80:04:
                    b4:0f:83:f4:28:88:27:32:65:9e:1b:4a:5a:2f:2d:
                    ba:12:8a:d1:41:b4:21:30:fd:88:0c:76:83:2c:b8:
                    db:3c:db:73:e5:dd:d7:74:3d:e0:e8:0b:96:5a:b0:
                    18:c0:e2:4b:95:43:f4:59:19:42:ae:87:1a:e7:0c:
                    03:40:52:ef:86:03:25:43:3f:1f:0b:43:69:45:77:
                    fd:3d:c8:b1:14:91:3c:f2:a9:86:61:31:5c:d2:12:
                    2c:d2:2d:bc:1a:92:e3:dd:3f:56:73:5b:b8:ea:fb:
                    18:df:00:d0:2a:bc:22:09:85:44:ca:c0:ae:c1:39:
                    57:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:84:50:8D:D2:4D:61:D0:22:83:67:10:7F:CD:BB:58:24:30:66
            X509v3 Authority Key Identifier:
                keyid:35:E4:B0:33:9A:0B:CB:35:39:4B:0B:CD:1E:03:10:97:C5:AB:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/432623-06b1-4847-9829-ff333fc3c64c/1/NeSwM5oLyzU5SwvNHgMQl8WrPZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:07:b0:d3:2e:30:e1:89:7d:9e:1f:0f:39:b3:79:ac:e8:
         66:6f:63:0a:8a:0d:a1:f3:ac:23:41:bf:c6:b3:f9:bd:ee:f6:
         81:4a:73:ef:56:b2:bd:36:5e:02:11:2b:ac:d6:bc:ef:cd:57:
         11:e2:9f:42:37:a1:ba:3d:4c:aa:bd:7f:ee:d2:ba:d3:fc:12:
         26:8b:a8:22:17:ec:07:d9:17:98:1a:4d:ac:8b:64:25:98:f5:
         ba:3d:68:eb:d4:6e:f5:7e:f1:41:8c:2a:3b:5f:90:d0:08:49:
         92:14:f5:e5:65:a0:e4:ff:ed:4e:d6:37:5b:a0:d7:75:88:f2:
         5e:60:76:7f:fb:de:9d:0f:76:b7:e0:d0:5f:2e:4c:57:bb:11:
         07:ba:13:05:4b:52:e6:58:59:f8:4a:48:0c:e4:aa:08:d8:62:
         04:c2:ed:da:63:8a:4a:05:3e:3c:59:a1:11:d6:fb:7b:5c:fb:
         51:63:f5:7c:5f:a4:a5:4e:39:21:f3:06:72:ea:96:ed:56:40:
         0a:61:d3:1d:bc:41:d4:e2:a7:02:87:52:ce:fa:70:dc:91:50:
         52:47:6e:1b:4b:c1:35:b9:6b:21:6d:4d:ab:b3:d0:ce:f7:db:
         a2:8e:54:e7:df:db:9d:6c:cf:1a:63:29:c0:0a:82:ce:84:74:
         82:6b:93:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7SFSFqjHQ2fQn0SIGDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTRiMDMzOWEwYmNiMzUzOTRiMGJjZDFlMDMxMDk3YzVh
YjNkOWUwHhcNMjUwMTMxMTYwMDM0WhcNMjUwMjAxMTYwMDM0WjAzMTEwLwYDVQQD
Eyg5M2Y4ODQ1MDhkZDI0ZDYxZDAyMjgzNjcxMDdmY2RiYjU4MjQzMDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUA3V4vX5PAY90f12JJZ0rnC97su
gk3Yu7KqcomXXJ2/Fyplf9cm6pLkxGIARAqI1extz8RY6FKw3ubQlleQn6x82Rw+
XxG2HMFD7Ihp3U8CEwYW09Wz7bVhhHejyPDwdXuSPBnds9v9LWTgqHKS8qJF6ANT
q90GKNJplmRJb+zV4gTwgAS0D4P0KIgnMmWeG0paLy26EorRQbQhMP2IDHaDLLjb
PNtz5d3XdD3g6AuWWrAYwOJLlUP0WRlCroca5wwDQFLvhgMlQz8fC0NpRXf9Pcix
FJE88qmGYTFc0hIs0i28GpLj3T9Wc1u46vsY3wDQKrwiCYVEysCuwTlX/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJP4hFCN0k1h0CKDZxB/zbtYJDBmMB8GA1UdIwQY
MBaAFDXksDOaC8s1OUsLzR4DEJfFqz2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVTd001b0x5elU1U3d2TkhnTVFsOFdyUFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MzI2MjMtMDZiMS00ODQ3LTk4Mjkt
ZmYzMzNmYzNjNjRjLzEvTmVTd001b0x5elU1U3d2TkhnTVFsOFdyUFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80MzI2MjMtMDZiMS00ODQ3LTk4MjktZmYzMzNmYzNjNjRj
LzEvTmVTd001b0x5elU1U3d2TkhnTVFsOFdyUFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAltwHsNMu
MOGJfZ4fDzmzeazoZm9jCooNofOsI0G/xrP5ve72gUpz71ayvTZeAhErrNa8781X
EeKfQjehuj1Mqr1/7tK60/wSJouoIhfsB9kXmBpNrItkJZj1uj1o69Ru9X7xQYwq
O1+Q0AhJkhT15WWg5P/tTtY3W6DXdYjyXmB2f/venQ92t+DQXy5MV7sRB7oTBUtS
5lhZ+EpIDOSqCNhiBMLt2mOKSgU+PFmhEdb7e1z7UWP1fF+kpU45IfMGcuqW7VZA
CmHTHbxB1OKnAodSzvpw3JFQUkduG0vBNblrIW1Nq7PQzvfboo5U59/bnWzPGmMp
wAqCzoR0gmuTpw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:22 2025 by rpki-client