Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
File:                     dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft (raw, json)
Hash identifier:          xcgM4cmX02uXPYtZIa+QznkAUGiyhHTS5ml39gb5SVE=
Subject key identifier:   B4:BF:09:F9:0D:4B:13:9A:05:A4:BD:86:DE:A2:33:F1:FE:E1:B6:1B
Authority key identifier: 76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E
Certificate issuer:       /CN=763d7a5535a5249e97a75064669399a93c46cc8e
Certificate serial:       0194BC3BC1D3584738C97D5F7F38D929EB62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft
Manifest number:          0865
Signing time:             Fri 31 Jan 2025 12:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:20 +0000
Files and hashes:         1: dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl (hash: XBNLB+eDnXu8dvKpU2ID6YgDQ6exmxGR5yTNFMZ2oqU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c1:d3:58:47:38:c9:7d:5f:7f:38:d9:29:eb:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=763d7a5535a5249e97a75064669399a93c46cc8e
        Validity
            Not Before: Jan 31 12:00:20 2025 GMT
            Not After : Feb  1 12:00:20 2025 GMT
        Subject: CN=b4bf09f90d4b139a05a4bd86dea233f1fee1b61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:01:2e:22:83:13:17:0c:44:f9:59:c1:76:a2:
                    91:f3:0c:f0:33:70:56:5f:f9:59:e2:82:63:bc:4d:
                    27:43:1e:00:21:ab:91:68:27:94:dd:fb:a3:7f:dc:
                    b7:31:95:65:31:62:37:e9:db:a7:34:91:4c:04:7f:
                    be:cb:53:11:e2:8a:b9:c5:3b:ab:17:a5:09:f0:1c:
                    1f:1b:2c:4d:b4:39:57:92:a1:9a:51:fb:0f:dd:df:
                    0a:43:b4:c6:71:0e:31:ca:f1:3a:1c:da:af:0a:c3:
                    63:d0:eb:84:e9:64:c1:2c:d7:5c:6a:53:85:26:5e:
                    d8:b4:ab:ce:69:dd:b4:b1:25:a5:95:2c:cb:bf:e9:
                    fa:ae:31:78:93:1c:c3:17:c3:a1:47:9e:58:76:4f:
                    e8:db:6d:15:58:c7:c6:b9:0f:c0:02:c1:41:58:21:
                    ca:5c:e8:6c:e6:ff:ba:bc:2a:00:40:06:f4:ec:dd:
                    ce:eb:0f:40:f2:87:5f:54:f7:e8:b2:1d:e5:61:42:
                    53:af:a6:fb:76:07:d2:3c:f0:c4:75:76:a2:30:d8:
                    80:eb:55:27:41:b5:78:ed:b6:4e:47:3c:f3:fd:6e:
                    dd:bb:3e:50:6c:a4:35:0e:aa:1a:59:66:69:91:47:
                    e0:2c:d1:22:e4:59:98:7f:8a:65:cc:23:0a:1f:1e:
                    2a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BF:09:F9:0D:4B:13:9A:05:A4:BD:86:DE:A2:33:F1:FE:E1:B6:1B
            X509v3 Authority Key Identifier:
                keyid:76:3D:7A:55:35:A5:24:9E:97:A7:50:64:66:93:99:A9:3C:46:CC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/850b0b-b306-4d7f-b198-8822bd386840/1/dj16VTWlJJ6Xp1BkZpOZqTxGzI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:35:3f:33:27:66:f8:ce:d3:9c:cf:2c:06:1b:24:9d:25:
         42:66:02:fe:25:ec:04:32:91:aa:d0:86:d0:cc:d3:bf:1a:2a:
         4c:3d:d7:81:db:38:ca:d4:a3:c9:2b:62:ec:b6:5d:45:f3:c1:
         1a:99:f2:27:58:8b:ff:fd:ab:c0:26:cd:be:b9:71:08:08:dc:
         fc:8d:44:3f:15:ce:0a:23:04:1d:6a:88:6e:e2:b7:50:db:8e:
         ab:7e:8f:6b:82:f1:1f:49:ea:23:46:84:20:e9:9a:f1:33:ff:
         fa:b4:87:e5:10:67:58:65:89:6b:3d:84:70:97:82:f9:c1:a8:
         4f:0c:d6:d0:f2:d1:c0:a7:8f:7f:74:1c:a8:d3:25:ee:ad:b3:
         15:09:b0:97:84:c8:10:1a:4a:25:d3:82:02:b5:71:ee:4a:79:
         28:a6:3b:f7:75:fc:d4:b3:b5:3a:3a:f8:39:51:ef:0b:20:e6:
         0b:fd:24:53:a6:ec:08:53:6d:cc:b3:45:16:a9:28:05:07:b0:
         45:4c:51:8f:5c:b1:86:27:03:e5:e5:87:f2:05:ee:22:4d:7d:
         0d:5c:32:8c:d7:8f:2c:62:ce:59:41:26:2f:b0:ae:f6:a3:07:
         b3:b5:c0:76:db:55:2f:d7:48:27:5b:d9:13:3e:9e:23:d6:7c:
         a9:da:12:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8HTWEc4yX1ffzjZKetiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2M2Q3YTU1MzVhNTI0OWU5N2E3NTA2NDY2OTM5OWE5M2M0
NmNjOGUwHhcNMjUwMTMxMTIwMDIwWhcNMjUwMjAxMTIwMDIwWjAzMTEwLwYDVQQD
EyhiNGJmMDlmOTBkNGIxMzlhMDVhNGJkODZkZWEyMzNmMWZlZTFiNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gEuIoMTFwxE+VnBdqKR8wzwM3BW
X/lZ4oJjvE0nQx4AIauRaCeU3fujf9y3MZVlMWI36dunNJFMBH++y1MR4oq5xTur
F6UJ8BwfGyxNtDlXkqGaUfsP3d8KQ7TGcQ4xyvE6HNqvCsNj0OuE6WTBLNdcalOF
Jl7YtKvOad20sSWllSzLv+n6rjF4kxzDF8OhR55Ydk/o220VWMfGuQ/AAsFBWCHK
XOhs5v+6vCoAQAb07N3O6w9A8odfVPfosh3lYUJTr6b7dgfSPPDEdXaiMNiA61Un
QbV47bZORzzz/W7duz5QbKQ1DqoaWWZpkUfgLNEi5FmYf4plzCMKHx4qTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS/CfkNSxOaBaS9ht6iM/H+4bYbMB8GA1UdIwQY
MBaAFHY9elU1pSSel6dQZGaTmak8RsyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgt
ODgyMmJkMzg2ODQwLzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NTBiMGItYjMwNi00ZDdmLWIxOTgtODgyMmJkMzg2ODQw
LzEvZGoxNlZUV2xKSjZYcDFCa1pwT1pxVHhHekk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJ01PzMn
ZvjO05zPLAYbJJ0lQmYC/iXsBDKRqtCG0MzTvxoqTD3Xgds4ytSjySti7LZdRfPB
GpnyJ1iL//2rwCbNvrlxCAjc/I1EPxXOCiMEHWqIbuK3UNuOq36Pa4LxH0nqI0aE
IOma8TP/+rSH5RBnWGWJaz2EcJeC+cGoTwzW0PLRwKePf3QcqNMl7q2zFQmwl4TI
EBpKJdOCArVx7kp5KKY793X81LO1Ojr4OVHvCyDmC/0kU6bsCFNtzLNFFqkoBQew
RUxRj1yxhicD5eWH8gXuIk19DVwyjNePLGLOWUEmL7Cu9qMHs7XAdttVL9dIJ1vZ
Ez6eI9Z8qdoSqA==
-----END CERTIFICATE-----
Generated at Thu May 1 15:05:08 2025 by rpki-client