Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
File:                     V2tXrthT-J2ipbI98X-SF-76YbY.mft (raw, json)
Hash identifier:          B3wdLZ4+aZUAdYd6Ru1W4tb/7c+1MtdB11NUOV8shFc=
Subject key identifier:   32:69:CB:65:97:76:D2:FC:F5:46:D8:94:AD:DC:0E:EB:FE:48:EC:71
Authority key identifier: 57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6
Certificate issuer:       /CN=576b57aed853f89da2a5b23df17f9217eefa61b6
Certificate serial:       0194BBCE0A1A0F326340F53AC51B4142D5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:29 +0000
Files and hashes:         1: B3vxfCdBbqCpFRIfeZyCQ2Fihm4.roa (hash: QTf5FbWUd2JRsm5/AHBpunnMm6hqVgSwd8D8NPeJObg=)
                          2: V2tXrthT-J2ipbI98X-SF-76YbY.crl (hash: ZBab5m48+0+ggn1AyJctnfPPxw+p/iIOA8mBeg9Z+HQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:0a:1a:0f:32:63:40:f5:3a:c5:1b:41:42:d5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576b57aed853f89da2a5b23df17f9217eefa61b6
        Validity
            Not Before: Jan 31 10:00:29 2025 GMT
            Not After : Feb  1 10:00:29 2025 GMT
        Subject: CN=3269cb659776d2fcf546d894addc0eebfe48ec71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7d:03:ea:97:e6:ff:05:c8:ac:49:1b:a4:19:
                    cd:1e:60:c3:02:41:16:d2:38:a3:58:66:5f:34:82:
                    91:03:99:4b:ea:1c:a6:0f:be:f3:c3:02:6c:51:55:
                    63:07:b3:74:dc:75:59:bf:2d:e5:30:47:2a:79:fb:
                    d2:f2:31:04:e1:24:d0:51:02:fd:a3:d6:ec:1a:7c:
                    8b:9f:07:7f:9b:5a:ac:6c:81:d2:35:0e:95:24:68:
                    82:4a:7b:cb:8f:05:b0:d2:3f:25:71:67:0b:12:6c:
                    35:d0:f8:6a:84:ac:78:f3:53:e2:88:4d:eb:e9:49:
                    32:a4:37:4e:7d:e9:1a:e3:6b:3e:60:d4:d0:8a:8a:
                    40:64:8e:23:5a:27:5f:34:15:08:54:6b:62:a7:c3:
                    66:0c:0f:35:a2:35:20:f0:92:0e:89:17:cd:86:ab:
                    4f:2d:ce:ca:30:1e:c9:c0:c3:19:78:81:e8:22:cb:
                    1c:c2:7e:bc:6c:ff:51:84:6a:2f:bd:8d:51:e7:33:
                    08:08:03:18:80:f3:56:69:c1:e1:66:a3:d5:45:4a:
                    b7:55:98:be:4a:d9:ae:c0:9d:20:7c:37:1b:0c:b6:
                    64:b8:d5:0b:4c:a3:89:2e:3b:50:0d:c4:48:21:fa:
                    fa:8e:c0:ad:7c:3b:60:c0:bd:db:f3:1e:a0:f0:2e:
                    6f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:69:CB:65:97:76:D2:FC:F5:46:D8:94:AD:DC:0E:EB:FE:48:EC:71
            X509v3 Authority Key Identifier:
                keyid:57:6B:57:AE:D8:53:F8:9D:A2:A5:B2:3D:F1:7F:92:17:EE:FA:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V2tXrthT-J2ipbI98X-SF-76YbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/46f501-7745-49da-b1d8-07309e796c78/1/V2tXrthT-J2ipbI98X-SF-76YbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:96:e9:62:45:fc:18:50:e5:e3:a3:6e:68:fc:37:20:bb:4d:
         63:a7:b2:ef:53:cb:3e:6e:33:ae:f6:3f:19:a1:e9:e8:72:d5:
         7d:79:bb:47:db:05:2a:37:8b:66:72:b6:ce:8e:16:5b:e8:06:
         25:b0:a0:f8:33:7a:a7:e3:9f:cb:fd:1f:aa:cd:67:d5:82:e4:
         01:55:40:d2:88:2a:7c:a8:a8:a5:1d:c5:bd:c9:e1:a5:70:77:
         5d:29:8c:6d:16:27:eb:3b:ff:e3:94:74:62:b0:fe:52:c1:c4:
         97:3f:8b:f9:1a:96:35:4a:3d:1b:32:5e:fd:92:7c:fd:f6:52:
         88:ec:01:44:c8:2f:9d:02:0b:e9:1d:2c:70:a0:9e:03:f9:52:
         2f:6e:74:a4:c4:2c:1b:8c:f6:06:56:f9:25:18:34:42:92:f2:
         9a:ce:37:f4:f2:b2:b6:6a:5a:6f:3c:c9:38:95:76:94:56:3c:
         40:e5:0b:c7:c1:8e:cc:96:84:8e:77:b4:a6:9b:2f:a1:3d:2d:
         7c:ea:53:2e:3a:2a:18:df:de:0d:a4:f5:f7:31:d6:92:a2:de:
         94:8a:ec:96:d9:a4:8f:1e:6a:93:27:b9:cc:61:4e:a1:45:7d:
         2f:b3:f9:d1:16:65:6b:65:4f:09:10:40:10:86:00:ad:97:d6:
         0f:be:f6:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zgoaDzJjQPU6xRtBQtXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmI1N2FlZDg1M2Y4OWRhMmE1YjIzZGYxN2Y5MjE3ZWVm
YTYxYjYwHhcNMjUwMTMxMTAwMDI5WhcNMjUwMjAxMTAwMDI5WjAzMTEwLwYDVQQD
EygzMjY5Y2I2NTk3NzZkMmZjZjU0NmQ4OTRhZGRjMGVlYmZlNDhlYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt30D6pfm/wXIrEkbpBnNHmDDAkEW
0jijWGZfNIKRA5lL6hymD77zwwJsUVVjB7N03HVZvy3lMEcqefvS8jEE4STQUQL9
o9bsGnyLnwd/m1qsbIHSNQ6VJGiCSnvLjwWw0j8lcWcLEmw10PhqhKx481PiiE3r
6UkypDdOfeka42s+YNTQiopAZI4jWidfNBUIVGtip8NmDA81ojUg8JIOiRfNhqtP
Lc7KMB7JwMMZeIHoIsscwn68bP9RhGovvY1R5zMICAMYgPNWacHhZqPVRUq3VZi+
StmuwJ0gfDcbDLZkuNULTKOJLjtQDcRIIfr6jsCtfDtgwL3b8x6g8C5vWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJpy2WXdtL89UbYlK3cDuv+SOxxMB8GA1UdIwQY
MBaAFFdrV67YU/idoqWyPfF/khfu+mG2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjJ0WHJ0aFQtSjJpcGJJOThYLVNGLTc2WWJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS80NmY1MDEtNzc0NS00OWRhLWIxZDgt
MDczMDllNzk2Yzc4LzEvVjJ0WHJ0aFQtSjJpcGJJOThYLVNGLTc2WWJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS80NmY1MDEtNzc0NS00OWRhLWIxZDgtMDczMDllNzk2Yzc4
LzEvVjJ0WHJ0aFQtSjJpcGJJOThYLVNGLTc2WWJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5bpYkX8
GFDl46NuaPw3ILtNY6ey71PLPm4zrvY/GaHp6HLVfXm7R9sFKjeLZnK2zo4WW+gG
JbCg+DN6p+Ofy/0fqs1n1YLkAVVA0ogqfKiopR3FvcnhpXB3XSmMbRYn6zv/45R0
YrD+UsHElz+L+RqWNUo9GzJe/ZJ8/fZSiOwBRMgvnQIL6R0scKCeA/lSL250pMQs
G4z2Blb5JRg0QpLyms439PKytmpabzzJOJV2lFY8QOULx8GOzJaEjne0ppsvoT0t
fOpTLjoqGN/eDaT19zHWkqLelIrsltmkjx5qkye5zGFOoUV9L7P50RZla2VPCRBA
EIYArZfWD772Yw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:27:35 2025 by rpki-client