Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          PAXupLTlbAMRtA1Ij4KWTClQ8s/4gb6H62DQKpijh7I=
Subject key identifier:   25:01:9F:51:8D:B1:B5:65:E1:86:15:0F:EC:F4:FF:38:4E:0B:98:00
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       0194BD4E3F39F5E0D9B1437C0DAC7B0E2655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          144F
Signing time:             Fri 31 Jan 2025 17:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:09 +0000
Files and hashes:         1: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (hash: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: STMa2z2CLYqGq8j6hjkl3NosKoh5jD41uRvh6b/ZSmk=)
                          3: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (hash: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=)
                          4: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (hash: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=)
                          5: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (hash: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:3f:39:f5:e0:d9:b1:43:7c:0d:ac:7b:0e:26:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Jan 31 17:00:09 2025 GMT
            Not After : Feb  1 17:00:09 2025 GMT
        Subject: CN=25019f518db1b565e186150fecf4ff384e0b9800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:14:c5:2f:23:45:7b:ea:ae:a9:4c:9f:47:
                    19:e6:f0:22:ba:86:9b:37:06:b2:68:14:cb:65:96:
                    49:59:a7:8a:e0:35:45:96:7f:b0:18:85:e6:6e:f9:
                    f9:ad:7a:de:7a:a3:38:9f:1e:f2:36:de:fb:c1:68:
                    36:2b:51:2d:1c:f0:1d:e8:ad:35:e0:c7:d0:b2:9e:
                    50:36:ff:87:62:c7:f9:ad:bf:9b:51:85:38:29:1d:
                    21:e1:46:ae:87:1a:6a:ce:21:5c:0a:cb:22:90:25:
                    dd:16:d0:96:5e:3f:d4:0a:dd:0d:41:fa:68:13:0f:
                    e4:e9:1e:c8:a9:3c:91:13:49:52:9a:a9:eb:f9:c6:
                    15:1e:55:9b:32:5b:44:f6:b6:25:c8:95:f4:ea:5d:
                    d1:57:0b:c7:fb:cb:43:66:16:58:7e:5a:fa:4f:02:
                    de:45:00:cb:95:52:41:13:1a:a5:e2:06:c0:17:95:
                    52:99:82:6f:f1:b2:86:a5:5f:59:7e:c5:db:18:12:
                    57:93:7f:f4:7a:43:f4:75:1b:90:b9:5a:1a:16:16:
                    49:cc:b4:03:b5:a9:a1:05:34:f3:8d:e8:7b:3f:0e:
                    3a:56:e6:54:9c:92:bd:67:ab:b6:5c:60:84:96:96:
                    fa:5b:f8:fd:2e:41:ae:ad:a9:d0:9d:59:7c:53:b2:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:9F:51:8D:B1:B5:65:E1:86:15:0F:EC:F4:FF:38:4E:0B:98:00
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:ae:29:06:a2:58:e5:3e:df:95:47:9a:bb:b7:9e:83:f2:
         14:df:9f:9e:05:90:cd:e2:a3:ec:d0:f8:ae:b4:4d:af:d4:27:
         46:ba:e9:61:3c:f9:3e:7b:ce:78:a6:67:3b:e3:7d:01:41:96:
         7e:a7:2e:a5:30:e5:61:fb:20:67:34:63:b0:e8:44:47:79:29:
         a2:bf:20:37:49:27:0c:04:b4:65:b4:b3:85:38:09:84:97:34:
         1a:3f:2a:ee:7f:71:47:79:21:0e:b4:20:23:eb:dd:a8:42:77:
         6d:5f:25:9d:93:f4:c4:5c:1a:86:68:c1:ee:e8:b3:0b:a5:15:
         f6:ea:74:47:05:49:32:be:e8:35:c9:9f:36:45:51:89:5b:33:
         66:3e:cb:81:4c:ab:98:2e:75:59:cb:fb:55:54:2f:f9:95:fb:
         ea:b9:b8:4f:40:fd:3a:1f:27:18:59:32:04:5d:c1:4b:6b:20:
         ee:92:ad:c2:b7:49:4d:66:49:8f:23:ad:0a:5a:2a:aa:95:4c:
         67:c3:09:dc:d7:9b:0b:eb:d2:32:03:c3:e2:96:df:f3:f2:6b:
         ff:64:df:be:c6:c8:69:1c:91:a7:cf:7a:e8:a6:ee:af:c7:c1:
         99:ff:85:6f:63:60:36:79:4f:c6:b2:a1:1f:55:dd:f0:5b:4a:
         f1:6b:b4:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tj859eDZsUN8Dax7DiZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjUwMTMxMTcwMDA5WhcNMjUwMjAxMTcwMDA5WjAzMTEwLwYDVQQD
EygyNTAxOWY1MThkYjFiNTY1ZTE4NjE1MGZlY2Y0ZmYzODRlMGI5ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi8UxS8jRXvqrqlMn0cZ5vAiuoab
NwayaBTLZZZJWaeK4DVFln+wGIXmbvn5rXreeqM4nx7yNt77wWg2K1EtHPAd6K01
4MfQsp5QNv+HYsf5rb+bUYU4KR0h4UauhxpqziFcCssikCXdFtCWXj/UCt0NQfpo
Ew/k6R7IqTyRE0lSmqnr+cYVHlWbMltE9rYlyJX06l3RVwvH+8tDZhZYflr6TwLe
RQDLlVJBExql4gbAF5VSmYJv8bKGpV9ZfsXbGBJXk3/0ekP0dRuQuVoaFhZJzLQD
tamhBTTzjeh7Pw46VuZUnJK9Z6u2XGCElpb6W/j9LkGuranQnVl8U7JPhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUBn1GNsbVl4YYVD+z0/zhOC5gAMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm26uKQai
WOU+35VHmru3noPyFN+fngWQzeKj7ND4rrRNr9QnRrrpYTz5PnvOeKZnO+N9AUGW
fqcupTDlYfsgZzRjsOhER3kpor8gN0knDAS0ZbSzhTgJhJc0Gj8q7n9xR3khDrQg
I+vdqEJ3bV8lnZP0xFwahmjB7uizC6UV9up0RwVJMr7oNcmfNkVRiVszZj7LgUyr
mC51Wcv7VVQv+ZX76rm4T0D9Oh8nGFkyBF3BS2sg7pKtwrdJTWZJjyOtCloqqpVM
Z8MJ3NebC+vSMgPD4pbf8/Jr/2TfvsbIaRyRp8966Kbur8fBmf+Fb2NgNnlPxrKh
H1Xd8FtK8Wu02A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:31 2025 by rpki-client