Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
File:                     evOlFiiU19GsKvgy16vPHb4RCuE.mft (raw, json)
Hash identifier:          nYkKjb7xHkR7kEVPKnl9TrykfVMTJGu3M92sQpYiJ7I=
Subject key identifier:   EB:B7:54:D2:C2:2A:85:52:76:71:F8:71:25:C9:1B:FB:88:BB:43:4B
Authority key identifier: 7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1
Certificate issuer:       /CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
Certificate serial:       0194BCA9D113DBD522235E32A96F0D59E41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft
Manifest number:          028E
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: evOlFiiU19GsKvgy16vPHb4RCuE.crl (hash: vQ9Q51TbzrQMM3N70+YMqwARzDI64QeUr7xc3a8fLlg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d1:13:db:d5:22:23:5e:32:a9:6f:0d:59:e4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af3a5162894d7d1ac2af832d7abcf1dbe110ae1
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=ebb754d2c22a85527671f87125c91bfb88bb434b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:48:a0:55:53:d6:8e:16:a0:6f:e8:ac:26:09:
                    54:e3:52:d1:12:31:7d:13:fb:fd:c3:4c:e0:ce:c0:
                    41:b9:dc:88:3b:b3:d6:ce:13:28:31:a3:e6:bc:4a:
                    67:bf:e4:a8:f2:74:45:41:89:ca:56:bb:3d:80:45:
                    0a:1e:c9:5d:bb:8e:9a:8f:84:f9:8c:30:7a:04:c3:
                    17:99:28:c2:5e:21:e6:bd:1e:f0:fb:98:53:4e:11:
                    62:e9:e6:bf:bc:0c:63:90:e9:dc:d1:38:c4:d4:09:
                    90:75:4d:7c:9c:77:f1:98:a9:6f:96:c3:e0:5f:04:
                    60:19:8b:cc:98:41:24:7a:2d:64:20:e2:0a:e0:85:
                    66:a7:08:a9:56:1c:b4:c5:7c:9a:b9:8a:06:d9:9e:
                    1a:26:18:2e:e7:6d:ee:d4:2b:6a:b6:48:0e:88:a4:
                    ec:2f:57:d9:5b:a1:df:93:24:70:32:2d:06:bf:4e:
                    6b:36:c8:ea:48:6b:4d:a7:0d:dd:b8:c7:25:5c:bd:
                    e3:0b:5f:ab:17:b2:39:d7:d7:53:52:51:b2:04:57:
                    cf:6b:76:b8:c3:a6:a1:14:4b:32:68:99:02:1d:8c:
                    97:d4:f4:b6:86:fd:6a:fd:56:9b:98:81:7b:66:61:
                    1d:45:34:dd:7c:6e:fa:09:bc:3f:c3:6e:bf:6d:46:
                    35:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B7:54:D2:C2:2A:85:52:76:71:F8:71:25:C9:1B:FB:88:BB:43:4B
            X509v3 Authority Key Identifier:
                keyid:7A:F3:A5:16:28:94:D7:D1:AC:2A:F8:32:D7:AB:CF:1D:BE:11:0A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evOlFiiU19GsKvgy16vPHb4RCuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5cf57d-57fa-4f71-bf92-75d54b10309c/1/evOlFiiU19GsKvgy16vPHb4RCuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:94:db:63:0c:d0:32:eb:d1:57:2b:0f:82:88:08:cc:3c:
         bd:b2:0b:13:e3:7d:10:55:b3:f7:21:2b:80:40:d3:26:38:e4:
         53:c8:e9:8d:e8:ae:c4:fd:17:df:de:8e:d7:6c:ad:a8:76:7d:
         bf:df:f9:91:70:15:b7:d9:8e:ed:85:d0:b1:3b:a4:4e:79:cb:
         d8:f7:01:17:69:90:b7:cc:fe:be:cb:1a:54:08:d6:b4:8b:79:
         5c:80:80:a2:91:a7:93:e2:f0:59:50:c6:fe:36:c1:a5:b0:5c:
         ab:37:86:ae:70:aa:fd:8f:dd:d7:57:79:fa:7f:00:54:15:4b:
         bb:1d:66:d4:9e:ed:5d:34:4f:30:6d:1f:66:e4:44:ac:ff:e6:
         28:f8:34:b6:56:4e:3b:56:8d:72:f0:bf:c7:7d:74:7d:a2:4e:
         df:6d:02:31:fb:04:98:30:d0:4b:8f:4f:51:71:99:05:d4:79:
         25:59:6f:26:fc:37:db:2c:96:31:0c:f3:18:36:60:0c:be:17:
         70:34:c5:50:aa:25:a8:dc:b1:31:6f:58:8b:c7:f8:3d:83:71:
         3a:78:4a:9a:08:a2:ca:61:e2:bc:c6:ad:4f:1f:da:49:f5:64:
         aa:66:3c:fc:1a:e3:f6:39:29:19:66:b9:f2:82:f8:5f:2a:ec:
         ba:a6:19:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdET29UiI14yqW8NWeQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjNhNTE2Mjg5NGQ3ZDFhYzJhZjgzMmQ3YWJjZjFkYmUx
MTBhZTEwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
EyhlYmI3NTRkMmMyMmE4NTUyNzY3MWY4NzEyNWM5MWJmYjg4YmI0MzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20igVVPWjhagb+isJglU41LREjF9
E/v9w0zgzsBBudyIO7PWzhMoMaPmvEpnv+So8nRFQYnKVrs9gEUKHsldu46aj4T5
jDB6BMMXmSjCXiHmvR7w+5hTThFi6ea/vAxjkOnc0TjE1AmQdU18nHfxmKlvlsPg
XwRgGYvMmEEkei1kIOIK4IVmpwipVhy0xXyauYoG2Z4aJhgu523u1CtqtkgOiKTs
L1fZW6HfkyRwMi0Gv05rNsjqSGtNpw3duMclXL3jC1+rF7I519dTUlGyBFfPa3a4
w6ahFEsyaJkCHYyX1PS2hv1q/VabmIF7ZmEdRTTdfG76Cbw/w26/bUY1YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu3VNLCKoVSdnH4cSXJG/uIu0NLMB8GA1UdIwQY
MBaAFHrzpRYolNfRrCr4Mterzx2+EQrhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTIt
NzVkNTRiMTAzMDljLzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81Y2Y1N2QtNTdmYS00ZjcxLWJmOTItNzVkNTRiMTAzMDlj
LzEvZXZPbEZpaVUxOUdzS3ZneTE2dlBIYjRSQ3VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtiU22MM
0DLr0VcrD4KICMw8vbILE+N9EFWz9yErgEDTJjjkU8jpjeiuxP0X396O12ytqHZ9
v9/5kXAVt9mO7YXQsTukTnnL2PcBF2mQt8z+vssaVAjWtIt5XICAopGnk+LwWVDG
/jbBpbBcqzeGrnCq/Y/d11d5+n8AVBVLux1m1J7tXTRPMG0fZuRErP/mKPg0tlZO
O1aNcvC/x310faJO320CMfsEmDDQS49PUXGZBdR5JVlvJvw32yyWMQzzGDZgDL4X
cDTFUKolqNyxMW9Yi8f4PYNxOnhKmgiiymHivMatTx/aSfVkqmY8/Brj9jkpGWa5
8oL4XyrsuqYZEg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:00 2025 by rpki-client