Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
File:                     nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft (raw, json)
Hash identifier:          3ys3T7Vsk+oAEU1l3izANtORrgTIy+t5sorXQp/YTQk=
Subject key identifier:   31:1A:82:9E:20:82:5D:A6:1D:39:5F:21:71:47:78:44:6B:9D:DD:5D
Authority key identifier: 9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8
Certificate issuer:       /CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
Certificate serial:       0194BD85454013DD2E3647740A7421D90CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft
Manifest number:          2E
Signing time:             Fri 31 Jan 2025 18:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:15 +0000
Files and hashes:         1: TC7wZtb8eH22VqPATxdM0AYHsBI.roa (hash: WSEkQ29EN6gMplRxrm+JsVbPQFVHYc/Oyz8wGNQAkUY=)
                          2: nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl (hash: VC2LP98XGqCm4SRwGLUMW4JZiX34zt+0p6TIYhJcsT0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:45:40:13:dd:2e:36:47:74:0a:74:21:d9:0c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce1600f50735960f86d621cd4f5f59f879a0e8
        Validity
            Not Before: Jan 31 18:00:15 2025 GMT
            Not After : Feb  1 18:00:15 2025 GMT
        Subject: CN=311a829e20825da61d395f21714778446b9ddd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:df:4a:7e:25:ac:db:ea:3d:47:41:04:1c:6a:
                    52:af:3e:3f:ad:6e:06:65:05:1a:1e:79:d6:1c:8c:
                    a8:c7:e8:c3:b1:ca:88:c0:5b:4b:e7:86:93:39:f8:
                    b4:6c:d3:d4:a2:40:42:fc:c0:ec:b1:3d:10:3a:da:
                    32:8d:ff:10:ad:57:be:e5:d5:b3:5a:a9:fd:22:ae:
                    b1:59:13:10:57:9a:2b:26:21:0d:4c:13:5a:78:e7:
                    e5:8b:d2:bb:ec:63:e0:4f:d7:de:8b:ca:10:cd:8d:
                    bc:a4:0a:1a:0e:d3:03:73:2f:bf:68:05:95:5d:b8:
                    9c:a6:81:54:85:4b:75:9c:60:98:d5:28:a8:b5:4f:
                    ce:b3:d7:9f:ce:43:ab:28:29:db:15:f5:66:b6:f8:
                    14:7b:ee:0b:1e:4d:61:be:98:96:80:93:9b:9d:8c:
                    8f:d8:60:a3:49:76:62:ac:94:c3:97:b6:b0:95:a5:
                    0a:37:97:0f:cc:79:d2:61:55:91:b8:b1:8b:7f:75:
                    1e:80:f4:7e:bd:99:bc:b1:c3:53:41:14:3c:ea:da:
                    96:2e:0f:0b:bd:5d:9d:fb:b6:10:7d:f9:dc:d8:29:
                    8e:81:17:e7:c7:20:f4:bb:6d:a9:07:05:9c:8e:3e:
                    09:2c:d4:b3:1d:b1:c9:44:b3:e5:95:ca:52:12:dd:
                    38:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1A:82:9E:20:82:5D:A6:1D:39:5F:21:71:47:78:44:6B:9D:DD:5D
            X509v3 Authority Key Identifier:
                keyid:9C:CE:16:00:F5:07:35:96:0F:86:D6:21:CD:4F:5F:59:F8:79:A0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM4WAPUHNZYPhtYhzU9fWfh5oOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/4f17fa-d5e8-439d-87a2-df32a25c5f2f/1/nM4WAPUHNZYPhtYhzU9fWfh5oOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8e:28:f1:44:75:93:b6:4f:8f:72:d7:32:1a:4b:ad:b1:e3:
         80:1f:9f:9d:5f:ba:39:8a:b5:cd:47:84:b4:a8:67:b8:78:d2:
         8c:17:4a:1e:53:64:08:77:5c:54:95:0e:5e:27:14:27:03:23:
         7d:cc:34:74:11:e6:f5:d9:24:5e:c9:84:bf:c9:0c:52:a0:b9:
         fe:74:da:e4:4d:51:a8:64:04:4c:d4:a0:65:30:21:03:d8:de:
         4d:4b:60:f2:26:d7:36:94:f2:d4:bd:7e:01:0a:82:a0:ba:fb:
         67:ff:29:a2:8c:d9:43:10:be:05:67:b6:7e:cd:bc:28:d3:8c:
         c2:64:b7:36:5f:2b:f4:72:19:fd:0d:78:db:1d:44:bf:6f:a0:
         e0:e8:e0:30:55:c1:40:fe:51:aa:53:f1:38:7d:10:2f:3f:07:
         f2:ea:ec:8a:5f:69:27:35:e7:bf:54:d7:54:aa:dc:04:01:7a:
         b9:7b:6f:4a:8c:41:e6:4d:dd:8b:20:80:f8:f7:9b:e8:a7:ec:
         60:cf:4c:52:15:ac:50:57:f5:18:c9:f5:52:55:ee:41:f8:0a:
         a7:bc:81:cd:37:a0:d6:96:85:a4:0a:11:d5:d3:72:87:24:f1:
         d6:68:88:76:03:d2:22:76:56:86:ac:7d:6e:88:8f:47:4e:96:
         0c:61:3a:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUVAE90uNkd0CnQh2Qy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljY2UxNjAwZjUwNzM1OTYwZjg2ZDYyMWNkNGY1ZjU5Zjg3
OWEwZTgwHhcNMjUwMTMxMTgwMDE1WhcNMjUwMjAxMTgwMDE1WjAzMTEwLwYDVQQD
EygzMTFhODI5ZTIwODI1ZGE2MWQzOTVmMjE3MTQ3Nzg0NDZiOWRkZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN9KfiWs2+o9R0EEHGpSrz4/rW4G
ZQUaHnnWHIyox+jDscqIwFtL54aTOfi0bNPUokBC/MDssT0QOtoyjf8QrVe+5dWz
Wqn9Iq6xWRMQV5orJiENTBNaeOfli9K77GPgT9fei8oQzY28pAoaDtMDcy+/aAWV
XbicpoFUhUt1nGCY1SiotU/Os9efzkOrKCnbFfVmtvgUe+4LHk1hvpiWgJObnYyP
2GCjSXZirJTDl7awlaUKN5cPzHnSYVWRuLGLf3UegPR+vZm8scNTQRQ86tqWLg8L
vV2d+7YQffnc2CmOgRfnxyD0u22pBwWcjj4JLNSzHbHJRLPllcpSEt04wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEagp4ggl2mHTlfIXFHeERrnd1dMB8GA1UdIwQY
MBaAFJzOFgD1BzWWD4bWIc1PX1n4eaDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTIt
ZGYzMmEyNWM1ZjJmLzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My80ZjE3ZmEtZDVlOC00MzlkLTg3YTItZGYzMmEyNWM1ZjJm
LzEvbk00V0FQVUhOWllQaHRZaHpVOWZXZmg1b09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY4o8UR1
k7ZPj3LXMhpLrbHjgB+fnV+6OYq1zUeEtKhnuHjSjBdKHlNkCHdcVJUOXicUJwMj
fcw0dBHm9dkkXsmEv8kMUqC5/nTa5E1RqGQETNSgZTAhA9jeTUtg8ibXNpTy1L1+
AQqCoLr7Z/8poozZQxC+BWe2fs28KNOMwmS3Nl8r9HIZ/Q142x1Ev2+g4OjgMFXB
QP5RqlPxOH0QLz8H8ursil9pJzXnv1TXVKrcBAF6uXtvSoxB5k3diyCA+Peb6Kfs
YM9MUhWsUFf1GMn1UlXuQfgKp7yBzTeg1paFpAoR1dNyhyTx1miIdgPSInZWhqx9
boiPR06WDGE6PQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:18 2025 by rpki-client