Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
File:                     96wXOfUp2vTMczgkibgFl-ugf0E.mft (raw, json)
Hash identifier:          3WxapRcDSpFayer5krx7hEOLtTICYr+VBdZv3VMrwVs=
Subject key identifier:   49:5E:C2:2C:B9:E7:4A:25:B3:99:AE:62:9F:B4:B4:50:C3:E3:54:14
Authority key identifier: F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41
Certificate issuer:       /CN=f7ac1739f529daf4cc73382489b80597eba07f41
Certificate serial:       0194BC72E9CFC525A14B47E953C2B37B4DF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft
Manifest number:          0663
Signing time:             Fri 31 Jan 2025 13:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:35 +0000
Files and hashes:         1: 96wXOfUp2vTMczgkibgFl-ugf0E.crl (hash: 6LVxmMDKhDL8npQF1LJEiI9WSWpUxnWdQs7WId3q0CA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e9:cf:c5:25:a1:4b:47:e9:53:c2:b3:7b:4d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ac1739f529daf4cc73382489b80597eba07f41
        Validity
            Not Before: Jan 31 13:00:35 2025 GMT
            Not After : Feb  1 13:00:35 2025 GMT
        Subject: CN=495ec22cb9e74a25b399ae629fb4b450c3e35414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:de:0f:2c:b9:95:47:32:17:35:16:f1:de:
                    ec:56:92:b8:27:1a:25:02:24:9d:31:a6:36:b4:d8:
                    d4:5b:65:d0:c1:e4:f3:cd:fc:3f:0d:c4:bc:1d:3b:
                    5f:5a:f6:38:7c:c9:53:5e:99:b3:60:38:f1:d7:f9:
                    76:f6:15:42:02:1d:66:a2:9c:a7:01:4d:31:6a:5f:
                    53:1f:94:8e:7e:29:5f:c7:53:9d:b2:4d:5d:d5:f4:
                    9f:4a:21:f6:8b:45:76:ad:b5:06:5f:3d:94:17:f3:
                    3a:87:07:78:5f:b7:d8:45:d5:89:04:f1:60:b8:2d:
                    b3:da:53:ae:52:aa:1a:92:ee:65:08:c4:70:8a:65:
                    19:75:c3:e5:76:b0:89:ba:ee:a1:32:35:a8:d8:82:
                    2c:3d:3f:ed:16:f2:c5:00:3e:e5:8c:e2:69:0c:88:
                    a9:47:7f:01:aa:c5:54:4a:bf:77:bc:8c:95:b6:ac:
                    7e:9d:a9:48:51:83:dc:85:e8:66:cc:ac:ce:5c:16:
                    a0:ed:4a:7d:bc:e2:fe:a7:ab:6a:2a:ff:e1:ff:06:
                    01:4b:bc:7d:1b:67:76:a9:a4:a0:59:cf:76:81:df:
                    46:8c:1c:5d:de:ef:81:df:ad:fd:b8:90:ab:4c:53:
                    e7:a2:cf:86:53:d4:11:63:83:17:81:76:ce:78:08:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5E:C2:2C:B9:E7:4A:25:B3:99:AE:62:9F:B4:B4:50:C3:E3:54:14
            X509v3 Authority Key Identifier:
                keyid:F7:AC:17:39:F5:29:DA:F4:CC:73:38:24:89:B8:05:97:EB:A0:7F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96wXOfUp2vTMczgkibgFl-ugf0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/123b25-fee4-490b-be00-0b8a792c1b9d/1/96wXOfUp2vTMczgkibgFl-ugf0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:13:cb:ea:52:fc:45:1c:f9:bd:7e:3f:9a:14:c3:2a:7e:08:
         b1:25:d2:9b:f5:5a:fe:48:ab:7f:72:65:92:dc:a0:6c:33:20:
         0a:60:a0:56:bb:30:1d:b4:14:8b:2d:a4:9b:f8:f9:c6:5f:b8:
         99:3f:23:aa:7c:e4:28:66:cb:ca:18:30:d3:70:bf:2a:50:02:
         85:98:b3:0e:ca:90:80:04:51:c1:16:02:77:27:29:77:5f:40:
         40:a5:28:f7:88:d5:54:a7:91:69:6e:7b:b3:86:78:a0:ac:34:
         90:ac:7c:09:be:4e:bf:04:78:76:fd:dd:c3:62:da:68:ab:b8:
         f0:7b:f6:ed:b6:34:ab:c3:ee:d1:63:a2:fe:ae:34:ee:9c:21:
         35:7e:c7:eb:de:25:79:60:fb:84:d4:f0:e8:9c:f1:ba:50:58:
         77:61:84:24:ee:be:0e:a9:d4:17:69:ed:1c:3a:cd:7b:5e:a4:
         c4:a9:06:54:e9:b0:5f:6c:e4:8a:ab:a6:91:fd:2b:23:9e:2c:
         78:0d:98:51:15:79:c8:fc:c2:f2:d1:77:2b:a1:45:f3:73:82:
         27:9b:5f:90:d9:d2:21:0c:58:49:ed:e1:01:8a:7b:33:8a:ef:
         0e:d5:b6:3d:96:ab:bb:d9:3a:13:f6:1c:79:eb:10:7e:d9:49:
         64:b7:81:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cunPxSWhS0fpU8Kze034MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWMxNzM5ZjUyOWRhZjRjYzczMzgyNDg5YjgwNTk3ZWJh
MDdmNDEwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
Eyg0OTVlYzIyY2I5ZTc0YTI1YjM5OWFlNjI5ZmI0YjQ1MGMzZTM1NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6beDyy5lUcyFzUW8d7sVpK4Jxol
AiSdMaY2tNjUW2XQweTzzfw/DcS8HTtfWvY4fMlTXpmzYDjx1/l29hVCAh1mopyn
AU0xal9TH5SOfilfx1Odsk1d1fSfSiH2i0V2rbUGXz2UF/M6hwd4X7fYRdWJBPFg
uC2z2lOuUqoaku5lCMRwimUZdcPldrCJuu6hMjWo2IIsPT/tFvLFAD7ljOJpDIip
R38BqsVUSr93vIyVtqx+nalIUYPchehmzKzOXBag7Up9vOL+p6tqKv/h/wYBS7x9
G2d2qaSgWc92gd9GjBxd3u+B3639uJCrTFPnos+GU9QRY4MXgXbOeAizfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElewiy550ols5muYp+0tFDD41QUMB8GA1UdIwQY
MBaAFPesFzn1Kdr0zHM4JIm4BZfroH9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAt
MGI4YTc5MmMxYjlkLzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8xMjNiMjUtZmVlNC00OTBiLWJlMDAtMGI4YTc5MmMxYjlk
LzEvOTZ3WE9mVXAydlRNY3pna2liZ0ZsLXVnZjBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxBPL6lL8
RRz5vX4/mhTDKn4IsSXSm/Va/kirf3JlktygbDMgCmCgVrswHbQUiy2km/j5xl+4
mT8jqnzkKGbLyhgw03C/KlAChZizDsqQgARRwRYCdycpd19AQKUo94jVVKeRaW57
s4Z4oKw0kKx8Cb5OvwR4dv3dw2LaaKu48Hv27bY0q8Pu0WOi/q407pwhNX7H694l
eWD7hNTw6JzxulBYd2GEJO6+DqnUF2ntHDrNe16kxKkGVOmwX2zkiqumkf0rI54s
eA2YURV5yPzC8tF3K6FF83OCJ5tfkNnSIQxYSe3hAYp7M4rvDtW2PZaru9k6E/Yc
eesQftlJZLeB3w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:34 2025 by rpki-client