Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
File:                     g_j9dJOi_gViIttB7Wkwg7UOzPs.mft (raw, json)
Hash identifier:          VzxQVrtZYLAt/CAvZporkzpzGqNtb7vHfjkBzMyrOSs=
Subject key identifier:   3F:12:C6:E1:CA:7E:95:FF:0E:F2:18:3E:F4:E7:41:F9:94:F0:85:3D
Authority key identifier: 83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB
Certificate issuer:       /CN=83f8fd7493a2fe056222db41ed693083b50eccfb
Certificate serial:       0194BCA9DD99FA4B12944C060F46D3657952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft
Manifest number:          05D6
Signing time:             Fri 31 Jan 2025 14:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:36 +0000
Files and hashes:         1: g_j9dJOi_gViIttB7Wkwg7UOzPs.crl (hash: Pd5rV5cWhZNQKMKryhFKaBZez3eK4RXuoLuKW0mFUbg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:dd:99:fa:4b:12:94:4c:06:0f:46:d3:65:79:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83f8fd7493a2fe056222db41ed693083b50eccfb
        Validity
            Not Before: Jan 31 14:00:36 2025 GMT
            Not After : Feb  1 14:00:36 2025 GMT
        Subject: CN=3f12c6e1ca7e95ff0ef2183ef4e741f994f0853d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:34:19:24:a6:53:32:a5:cc:c1:85:65:32:da:
                    e1:5b:a1:c6:59:99:70:29:c7:30:4c:27:ed:78:16:
                    e4:4d:8e:61:79:0b:15:74:0c:9e:ad:ba:28:d9:61:
                    42:c1:ad:56:41:74:3e:f2:8c:a0:94:ce:ad:21:84:
                    b5:e5:33:c3:23:a7:40:72:40:f3:98:5b:d0:b4:8c:
                    4b:76:10:df:13:c0:01:68:d6:9b:cf:04:a1:ca:a8:
                    12:f3:96:74:63:f4:51:58:9f:ba:9d:2c:95:83:fd:
                    d8:c7:48:fa:ce:13:47:3a:a8:29:e6:d6:b6:7b:ed:
                    ec:d1:df:d2:85:93:ee:cd:1d:5d:df:87:d8:42:c1:
                    9c:1b:6d:d0:14:49:c0:fd:83:c0:eb:1d:8d:ed:b5:
                    13:d9:0a:7d:54:6e:a5:ce:ff:55:c1:8e:97:c1:da:
                    4f:ec:64:e6:17:30:c4:e9:33:7b:82:d6:84:70:5a:
                    b9:a1:cf:cb:8c:c2:ec:16:48:9e:a2:d6:88:ad:4e:
                    11:a6:b3:80:29:7b:75:5a:f9:a0:78:fa:8b:e5:11:
                    16:ff:31:44:4e:e5:06:57:65:c1:68:88:43:aa:b0:
                    49:18:05:46:68:e4:c1:db:c2:03:80:76:b4:42:26:
                    75:e7:00:ea:a0:45:8b:8a:5e:4e:85:bc:f6:9c:65:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:12:C6:E1:CA:7E:95:FF:0E:F2:18:3E:F4:E7:41:F9:94:F0:85:3D
            X509v3 Authority Key Identifier:
                keyid:83:F8:FD:74:93:A2:FE:05:62:22:DB:41:ED:69:30:83:B5:0E:CC:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_j9dJOi_gViIttB7Wkwg7UOzPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/12d6f2-f481-49fd-8f20-a043c230f30d/1/g_j9dJOi_gViIttB7Wkwg7UOzPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b1:2a:fe:e9:97:02:cb:40:3b:e0:e0:49:54:19:88:ef:97:
         ef:fc:3c:f1:da:82:09:cc:59:18:4c:3d:8c:1d:a6:cd:30:a3:
         9e:21:57:00:97:40:94:8e:0d:dc:d1:e7:db:89:f0:4d:1b:54:
         22:07:6e:df:15:a7:ac:ed:57:86:1c:02:53:b0:be:3e:87:a5:
         88:bb:56:fe:77:9d:a2:a8:d7:2c:e7:75:af:3d:db:6e:bc:dd:
         fc:05:c6:19:cd:a9:5b:84:3e:3b:dc:09:77:ac:ff:b5:a6:8e:
         8f:fe:0b:a0:83:ce:71:82:50:ad:37:03:9a:01:0a:2d:9b:cf:
         1c:ab:09:e1:a6:09:e1:ba:90:c7:ce:4e:a7:37:15:4a:2a:f6:
         86:a3:9b:a6:45:1b:b0:64:d9:cc:4e:8d:8b:77:c2:f5:6b:da:
         59:ad:9b:5c:e2:47:aa:2b:fa:c2:47:2d:70:84:f2:6f:2d:cd:
         51:c5:98:d6:5e:45:37:ed:5d:70:66:b9:ea:39:fc:99:f8:11:
         41:1b:41:29:02:bc:66:e9:17:36:31:37:46:4d:a3:2c:2a:0f:
         c9:c4:f5:5e:d4:ed:20:9e:b8:c8:95:f9:e5:0c:26:f3:76:c7:
         86:d2:b0:fd:c2:7f:00:b9:78:63:08:c7:c0:5e:0e:7a:a3:63:
         2a:a1:40:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qd2Z+ksSlEwGD0bTZXlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZjhmZDc0OTNhMmZlMDU2MjIyZGI0MWVkNjkzMDgzYjUw
ZWNjZmIwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
EygzZjEyYzZlMWNhN2U5NWZmMGVmMjE4M2VmNGU3NDFmOTk0ZjA4NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jQZJKZTMqXMwYVlMtrhW6HGWZlw
KccwTCfteBbkTY5heQsVdAyerboo2WFCwa1WQXQ+8oyglM6tIYS15TPDI6dAckDz
mFvQtIxLdhDfE8ABaNabzwShyqgS85Z0Y/RRWJ+6nSyVg/3Yx0j6zhNHOqgp5ta2
e+3s0d/ShZPuzR1d34fYQsGcG23QFEnA/YPA6x2N7bUT2Qp9VG6lzv9VwY6XwdpP
7GTmFzDE6TN7gtaEcFq5oc/LjMLsFkieotaIrU4RprOAKXt1WvmgePqL5REW/zFE
TuUGV2XBaIhDqrBJGAVGaOTB28IDgHa0QiZ15wDqoEWLil5Ohbz2nGWcfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8SxuHKfpX/DvIYPvTnQfmU8IU9MB8GA1UdIwQY
MBaAFIP4/XSTov4FYiLbQe1pMIO1Dsz7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAt
YTA0M2MyMzBmMzBkLzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8xMmQ2ZjItZjQ4MS00OWZkLThmMjAtYTA0M2MyMzBmMzBk
LzEvZ19qOWRKT2lfZ1ZpSXR0QjdXa3dnN1VPelBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbEq/umX
AstAO+DgSVQZiO+X7/w88dqCCcxZGEw9jB2mzTCjniFXAJdAlI4N3NHn24nwTRtU
Igdu3xWnrO1XhhwCU7C+PoeliLtW/nedoqjXLOd1rz3bbrzd/AXGGc2pW4Q+O9wJ
d6z/taaOj/4LoIPOcYJQrTcDmgEKLZvPHKsJ4aYJ4bqQx85OpzcVSir2hqObpkUb
sGTZzE6Ni3fC9WvaWa2bXOJHqiv6wkctcITyby3NUcWY1l5FN+1dcGa56jn8mfgR
QRtBKQK8ZukXNjE3Rk2jLCoPycT1XtTtIJ64yJX55Qwm83bHhtKw/cJ/ALl4YwjH
wF4OeqNjKqFABg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:18 2025 by rpki-client