Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
File:                     6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft (raw, json)
Hash identifier:          BBvlYEyRlD9z2fF52ZjznwIg9ejPyuvO05GRqlBH+I4=
Subject key identifier:   51:16:58:3A:3D:DC:E4:C2:1D:18:68:01:01:DC:6B:1F:9F:51:CF:D6
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Certificate issuer:       /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial:       0194BD1791B9616B68866006356C0A37E924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft
Manifest number:          0B20
Signing time:             Fri 31 Jan 2025 16:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:25 +0000
Files and hashes:         1: 6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl (hash: Labn2KHGNjfK9pCpQl3+yJ95i3xmP6xLUdVeEfKiZSg=)
                          2: RshraodQG0v2CwIen1d8e2inEyk.roa (hash: tjJ3tzpy63NbiAcLeNQHsJL6oNJgQPy/v6//+8AFf5w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:91:b9:61:6b:68:86:60:06:35:6c:0a:37:e9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
        Validity
            Not Before: Jan 31 16:00:25 2025 GMT
            Not After : Feb  1 16:00:25 2025 GMT
        Subject: CN=5116583a3ddce4c21d18680101dc6b1f9f51cfd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d0:88:9c:6e:82:16:fc:1b:d1:21:f6:df:71:
                    4d:01:59:9d:66:1b:6c:e9:7f:88:3a:11:45:dc:d4:
                    95:28:01:7a:cf:87:25:ed:c3:0f:4c:78:26:a1:a0:
                    b9:60:22:44:d9:88:a5:e3:8d:7b:eb:df:0d:da:13:
                    50:d1:f1:ec:20:dc:0a:1f:07:e7:58:7c:45:6f:24:
                    90:3e:f6:69:60:ae:55:46:f9:50:cd:51:e1:51:ef:
                    2f:b6:03:0f:35:a1:28:dd:5c:01:86:94:a6:4b:2a:
                    1a:ba:1a:a1:9d:9c:86:6c:a4:f0:f4:ef:28:f1:0d:
                    8e:36:9c:cf:cb:3d:7d:7b:9a:77:bd:3d:6d:7a:46:
                    51:24:f0:b3:dc:b8:af:95:d8:1c:55:68:90:d0:91:
                    a9:14:8f:02:3f:1c:bb:a0:78:d7:ea:34:c6:a4:8a:
                    a0:76:5e:8c:1f:f6:9e:18:90:d1:cd:e3:3e:c5:25:
                    c1:87:1a:30:92:ef:eb:5d:a7:57:58:16:b6:f4:3c:
                    9e:28:d5:89:e6:53:85:89:78:34:47:6b:ca:8a:0f:
                    f6:cd:83:c7:bc:c9:73:c1:7f:0f:d0:6c:5b:0c:d6:
                    2d:4e:74:91:8f:08:f6:1d:dd:0f:b0:3a:1c:ae:97:
                    6e:31:ba:41:7f:b0:2b:50:9d:7a:0d:29:af:9f:3e:
                    a7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:16:58:3A:3D:DC:E4:C2:1D:18:68:01:01:DC:6B:1F:9F:51:CF:D6
            X509v3 Authority Key Identifier:
                keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f0:17:c2:5c:fb:56:04:23:87:f4:da:90:bc:05:78:68:33:
         32:5d:5b:6c:5c:e6:8a:12:12:c6:0f:3f:be:59:fd:da:8d:da:
         ce:ff:26:60:39:a7:ea:17:49:42:47:b1:ad:37:8c:5e:6e:ef:
         03:26:cf:d9:54:af:b4:d8:90:22:10:69:dc:19:2d:eb:28:07:
         88:1e:d1:33:6c:42:25:f6:00:40:1c:fd:50:39:43:c0:5c:a7:
         bc:94:fb:54:3b:ee:67:6e:eb:c8:4c:17:d9:71:29:33:f6:76:
         f8:33:5f:3f:c5:cd:bc:28:5b:52:c7:a2:1d:c3:a7:4d:1d:a0:
         cc:f3:1f:53:56:50:6c:aa:8c:9f:49:0a:ad:07:8f:35:57:6b:
         dc:0b:a7:b6:a3:fa:f0:94:61:3a:34:c0:a8:ed:ff:9b:2a:16:
         a7:8f:d4:12:d5:04:c6:3b:53:f0:4a:61:1c:e4:c5:f5:22:e8:
         c0:04:f2:d7:94:69:47:43:72:6e:e1:3e:52:69:ed:28:55:82:
         06:63:7e:2b:b0:a9:62:26:01:4e:17:57:ac:f1:97:63:09:82:
         f4:d3:79:f9:6a:29:26:b9:b3:d6:6c:62:33:0b:6b:72:26:52:
         8b:cd:e1:ae:e5:1d:92:43:02:c6:41:12:61:6d:e6:87:f6:67:
         15:69:10:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5G5YWtohmAGNWwKN+kkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4ODdlNWZjYmNiZjFhZDAzMjY4ZGFjOWVlNWQyOTIwMjUz
NjgwOTAwHhcNMjUwMTMxMTYwMDI1WhcNMjUwMjAxMTYwMDI1WjAzMTEwLwYDVQQD
Eyg1MTE2NTgzYTNkZGNlNGMyMWQxODY4MDEwMWRjNmIxZjlmNTFjZmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstCInG6CFvwb0SH233FNAVmdZhts
6X+IOhFF3NSVKAF6z4cl7cMPTHgmoaC5YCJE2Yil4417698N2hNQ0fHsINwKHwfn
WHxFbySQPvZpYK5VRvlQzVHhUe8vtgMPNaEo3VwBhpSmSyoauhqhnZyGbKTw9O8o
8Q2ONpzPyz19e5p3vT1tekZRJPCz3LivldgcVWiQ0JGpFI8CPxy7oHjX6jTGpIqg
dl6MH/aeGJDRzeM+xSXBhxowku/rXadXWBa29DyeKNWJ5lOFiXg0R2vKig/2zYPH
vMlzwX8P0GxbDNYtTnSRjwj2Hd0PsDocrpduMbpBf7ArUJ16DSmvnz6nkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEWWDo93OTCHRhoAQHcax+fUc/WMB8GA1UdIwQY
MBaAFOiH5fy8vxrQMmjaye5dKSAlNoCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMWZiNDYtOGI0Ny00ZjkxLThiOWEt
ZDdmYWE3ZTdlODRkLzEvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jMWZiNDYtOGI0Ny00ZjkxLThiOWEtZDdmYWE3ZTdlODRk
LzEvNklmbF9MeV9HdEF5YU5ySjdsMHBJQ1UyZ0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvAXwlz7
VgQjh/TakLwFeGgzMl1bbFzmihISxg8/vln92o3azv8mYDmn6hdJQkexrTeMXm7v
AybP2VSvtNiQIhBp3Bkt6ygHiB7RM2xCJfYAQBz9UDlDwFynvJT7VDvuZ27ryEwX
2XEpM/Z2+DNfP8XNvChbUseiHcOnTR2gzPMfU1ZQbKqMn0kKrQePNVdr3AuntqP6
8JRhOjTAqO3/myoWp4/UEtUExjtT8EphHOTF9SLowATy15RpR0NybuE+UmntKFWC
BmN+K7CpYiYBThdXrPGXYwmC9NN5+WopJrmz1mxiMwtrciZSi83hruUdkkMCxkES
YW3mh/ZnFWkQuA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:50 2025 by rpki-client