Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
File:                     Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft (raw, json)
Hash identifier:          yjt3KkmyrmAij+HmOVr+Vu1z4MgHknDI1NTRA6FVMNQ=
Subject key identifier:   51:2D:62:0F:76:59:3F:65:A1:17:E8:9D:09:06:FB:5C:92:69:89:EB
Authority key identifier: 0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35
Certificate issuer:       /CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
Certificate serial:       0194BBCDE7B19DBDBAABFC4FA587377A1ACF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft
Manifest number:          0B95
Signing time:             Fri 31 Jan 2025 10:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:21 +0000
Files and hashes:         1: Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl (hash: Ahg5+YyhWExHz8qdbjvILtC0wKKYzY4zIGvlxkCSMyg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:e7:b1:9d:bd:ba:ab:fc:4f:a5:87:37:7a:1a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecd2727e74a9c6aae88f9a0110d0c949b1e9735
        Validity
            Not Before: Jan 31 10:00:21 2025 GMT
            Not After : Feb  1 10:00:21 2025 GMT
        Subject: CN=512d620f76593f65a117e89d0906fb5c926989eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:4f:ab:f8:28:e2:03:99:08:0b:7e:38:e6:
                    b8:52:33:84:3c:cd:ca:27:36:29:c2:9b:06:7e:5d:
                    6a:3f:ed:56:ed:f8:4a:b2:cd:1f:9e:4b:08:1d:ea:
                    3b:6b:4d:ad:bd:57:ad:0c:a3:44:f8:8e:48:e7:e5:
                    db:c3:62:ce:b0:81:e8:2e:e6:f5:64:c5:54:97:aa:
                    61:4b:0f:79:45:db:90:69:3e:6a:ef:c9:65:78:c6:
                    5d:4f:c0:6d:9a:91:7f:82:a9:1e:a9:5c:52:67:bd:
                    f6:8b:4c:ba:80:cf:bd:91:80:72:ee:2a:1a:d8:c0:
                    a5:64:72:2c:7f:6e:35:fd:81:51:ae:f1:89:90:c5:
                    79:6e:7c:c6:57:5c:a6:34:f1:33:21:97:fd:af:2a:
                    3e:84:26:e4:fe:04:0f:84:4e:47:39:10:1f:16:7d:
                    02:14:49:f7:ce:b0:32:69:55:4f:db:d3:0d:3e:03:
                    a2:b2:c5:b8:0a:f8:35:cc:7a:fe:4a:80:0a:48:be:
                    90:04:61:0b:c0:a6:af:26:00:d7:e5:d0:8f:05:45:
                    36:a0:cc:4b:83:30:cb:aa:9d:5b:64:39:96:74:c1:
                    15:79:d1:61:bd:52:f7:de:cb:72:c9:2e:25:f0:6b:
                    6a:3b:f8:64:bf:e6:0a:b9:95:10:64:53:f1:75:a2:
                    4b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2D:62:0F:76:59:3F:65:A1:17:E8:9D:09:06:FB:5C:92:69:89:EB
            X509v3 Authority Key Identifier:
                keyid:0E:CD:27:27:E7:4A:9C:6A:AE:88:F9:A0:11:0D:0C:94:9B:1E:97:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ds0nJ-dKnGquiPmgEQ0MlJselzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d2e093-c264-4d78-97b7-620c6a36e0b8/1/Ds0nJ-dKnGquiPmgEQ0MlJselzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:3d:78:88:0c:f7:4c:0d:47:ae:09:0b:66:c7:79:5f:d7:f7:
         9c:49:82:70:0a:b8:3f:f4:f9:50:6f:8d:99:7d:18:b6:47:4f:
         f3:9a:58:9c:07:e3:c4:4f:15:60:8a:4b:a7:07:79:ec:dc:3f:
         47:b5:1f:3b:82:ea:c0:79:67:f6:c1:56:ce:26:8b:65:27:c4:
         b2:37:09:ab:4e:96:26:ad:f7:3c:52:69:e5:37:f1:65:eb:07:
         e5:b1:1a:8b:4a:26:26:e9:39:0e:7e:f9:7c:c8:a6:a1:b7:ba:
         e7:04:6d:38:08:c7:cf:33:9e:7d:b6:f3:47:80:a4:20:f3:ea:
         01:8d:4e:bf:9c:ec:03:81:09:de:d9:67:5e:e5:79:8a:81:9f:
         42:e1:d8:45:c7:e5:b7:e7:4f:03:c7:ff:46:f1:13:02:23:03:
         ac:3f:ac:37:db:77:16:e3:b6:db:4a:1a:9e:b5:b8:6c:72:56:
         c5:9e:33:97:81:08:cf:71:4c:81:5c:eb:e8:e3:77:8d:b9:f1:
         2e:cf:c7:0d:2d:5c:21:a9:77:60:4d:f5:0d:b5:db:ef:98:82:
         0e:e5:db:3e:5d:17:e2:a0:ae:45:81:7c:53:a2:04:0e:04:14:
         d5:a2:b8:fd:23:0b:66:da:4e:20:24:20:05:e4:b7:72:07:d0:
         73:0b:54:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeexnb26q/xPpYc3ehrPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2QyNzI3ZTc0YTljNmFhZTg4ZjlhMDExMGQwYzk0OWIx
ZTk3MzUwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
Eyg1MTJkNjIwZjc2NTkzZjY1YTExN2U4OWQwOTA2ZmI1YzkyNjk4OWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCxPq/go4gOZCAt+OOa4UjOEPM3K
JzYpwpsGfl1qP+1W7fhKss0fnksIHeo7a02tvVetDKNE+I5I5+Xbw2LOsIHoLub1
ZMVUl6phSw95RduQaT5q78lleMZdT8BtmpF/gqkeqVxSZ732i0y6gM+9kYBy7ioa
2MClZHIsf241/YFRrvGJkMV5bnzGV1ymNPEzIZf9ryo+hCbk/gQPhE5HORAfFn0C
FEn3zrAyaVVP29MNPgOissW4Cvg1zHr+SoAKSL6QBGELwKavJgDX5dCPBUU2oMxL
gzDLqp1bZDmWdMEVedFhvVL33styyS4l8GtqO/hkv+YKuZUQZFPxdaJLjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEtYg92WT9loRfonQkG+1ySaYnrMB8GA1UdIwQY
MBaAFA7NJyfnSpxqroj5oBENDJSbHpc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHMwbkotZEtuR3F1aVBtZ0VRME1sSnNlbHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMmUwOTMtYzI2NC00ZDc4LTk3Yjct
NjIwYzZhMzZlMGI4LzEvRHMwbkotZEtuR3F1aVBtZ0VRME1sSnNlbHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kMmUwOTMtYzI2NC00ZDc4LTk3YjctNjIwYzZhMzZlMGI4
LzEvRHMwbkotZEtuR3F1aVBtZ0VRME1sSnNlbHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABz14iAz3
TA1HrgkLZsd5X9f3nEmCcAq4P/T5UG+NmX0YtkdP85pYnAfjxE8VYIpLpwd57Nw/
R7UfO4LqwHln9sFWziaLZSfEsjcJq06WJq33PFJp5TfxZesH5bEai0omJuk5Dn75
fMimobe65wRtOAjHzzOefbbzR4CkIPPqAY1Ov5zsA4EJ3tlnXuV5ioGfQuHYRcfl
t+dPA8f/RvETAiMDrD+sN9t3FuO220oanrW4bHJWxZ4zl4EIz3FMgVzr6ON3jbnx
Ls/HDS1cIal3YE31DbXb75iCDuXbPl0X4qCuRYF8U6IEDgQU1aK4/SMLZtpOICQg
BeS3cgfQcwtUqA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:02 2025 by rpki-client