Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
File:                     mBGGh_3W_4D7CYqe7vBt43f4XW4.mft (raw, json)
Hash identifier:          iQhmb3/BWgkfBFBIVPVx8ow4XPgpole5FW4bRAoVBZ8=
Subject key identifier:   B4:2F:38:01:6F:96:8D:7A:18:85:C6:99:98:43:74:98:4F:1E:65:21
Authority key identifier: 98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E
Certificate issuer:       /CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
Certificate serial:       0194BD177E6A0C9D4B9B54B24D2849E4B53B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft
Manifest number:          0985
Signing time:             Fri 31 Jan 2025 16:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:20 +0000
Files and hashes:         1: 1lsllJIGemqZ89xHiZQkdlO1fKw.roa (hash: z+LS30vNnG/3Pd/eJpUiR3agQpnmviOChE1etXIcdSc=)
                          2: 3lXi1_g77NKzjT3HhPoXoOvjf4w.roa (hash: Ay8Ub8kwHojvnn8g9zm4+05FafWEgsI4HELIX5EKY7A=)
                          3: mBGGh_3W_4D7CYqe7vBt43f4XW4.crl (hash: k8uytB0otniVInfJl2/K6YSedDed1eUQV8nN0pzBF7s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:7e:6a:0c:9d:4b:9b:54:b2:4d:28:49:e4:b5:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98118687fdd6ff80fb098a9eeef06de377f85d6e
        Validity
            Not Before: Jan 31 16:00:20 2025 GMT
            Not After : Feb  1 16:00:20 2025 GMT
        Subject: CN=b42f38016f968d7a1885c699984374984f1e6521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c1:93:5a:96:3a:90:a1:2e:ea:9c:81:db:2c:
                    90:0a:bb:e9:a9:f9:e3:3e:b6:6d:12:62:23:4d:5e:
                    9c:dd:7f:db:e7:3f:dc:d5:6f:20:d2:0c:5e:71:a0:
                    70:8e:25:c5:f5:e6:dd:1b:3c:54:cd:e7:b8:54:71:
                    52:c9:53:86:e5:ec:78:4e:c8:ef:c7:5f:e0:4e:af:
                    f4:81:17:6d:e5:99:b5:3b:e4:4d:53:ac:16:cb:5f:
                    ad:e4:21:3b:71:b6:10:49:d7:28:8e:74:88:74:92:
                    65:6b:6b:e0:1b:15:1c:69:c0:e0:b5:fd:b8:d1:5b:
                    f3:78:c2:1e:06:fb:76:43:19:4c:a8:05:ca:f4:bf:
                    e8:05:7c:a6:39:b6:6d:fb:ac:ef:64:aa:8f:d8:a9:
                    85:8c:26:37:ed:6e:5e:63:a7:5c:a6:de:60:dc:c5:
                    eb:18:aa:0b:47:67:83:f3:26:b4:3b:93:f8:73:24:
                    7b:69:0a:7e:3f:68:8f:85:9a:91:0e:4c:d4:c2:14:
                    19:1c:f3:4d:82:38:5f:c9:e8:09:3a:e5:db:44:72:
                    16:e7:2a:8b:14:16:92:89:5a:34:70:6a:85:8c:8d:
                    f4:a6:49:24:0d:7d:33:ce:37:a4:e8:10:84:f3:79:
                    b9:47:49:85:5f:6b:ab:f8:7e:cb:10:b1:a2:eb:23:
                    c3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2F:38:01:6F:96:8D:7A:18:85:C6:99:98:43:74:98:4F:1E:65:21
            X509v3 Authority Key Identifier:
                keyid:98:11:86:87:FD:D6:FF:80:FB:09:8A:9E:EE:F0:6D:E3:77:F8:5D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBGGh_3W_4D7CYqe7vBt43f4XW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5908a9-0c0f-40ab-bfd6-69af0a6e989b/1/mBGGh_3W_4D7CYqe7vBt43f4XW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:5b:0d:2c:e3:8a:fd:90:94:1e:5b:01:af:62:38:16:6b:
         e6:46:63:29:f9:96:9c:c2:84:51:51:57:c5:d8:8d:ce:51:d6:
         4d:22:26:5d:27:a9:f1:5d:23:bd:df:86:4b:86:6a:29:c1:10:
         97:fa:cf:c6:86:46:ff:cb:e3:3b:ea:f8:b5:d9:42:cc:cb:8e:
         95:6b:74:a7:40:fd:14:da:23:71:29:d1:a6:6b:a8:dd:0c:d4:
         49:11:39:2f:76:d0:da:55:16:25:c8:e9:c3:16:db:8c:1a:65:
         10:d1:94:03:23:d9:3a:9d:6f:43:af:c7:5b:9e:45:f3:3a:9e:
         6b:15:7c:71:9f:cb:45:3b:ba:66:f7:ee:23:6a:90:97:a3:d6:
         99:70:9b:dc:da:fc:d9:1f:22:55:43:4f:a4:c1:77:eb:3e:6a:
         b9:90:4d:1e:97:af:eb:15:6f:18:55:23:94:a5:4b:b4:26:54:
         ee:83:9e:3f:37:cb:da:36:93:ba:05:67:65:db:d3:bb:7b:6d:
         3e:53:58:4e:59:06:3f:2b:5d:61:35:81:c2:bb:fd:fc:99:6e:
         05:ae:62:e9:70:02:f8:46:c1:a9:90:44:09:49:e9:ab:bd:77:
         3e:53:a6:3e:0b:f7:21:5b:6b:0c:15:64:ac:e7:77:f1:74:0b:
         71:2c:f0:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F35qDJ1Lm1SyTShJ5LU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE4Njg3ZmRkNmZmODBmYjA5OGE5ZWVlZjA2ZGUzNzdm
ODVkNmUwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
EyhiNDJmMzgwMTZmOTY4ZDdhMTg4NWM2OTk5ODQzNzQ5ODRmMWU2NTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcGTWpY6kKEu6pyB2yyQCrvpqfnj
PrZtEmIjTV6c3X/b5z/c1W8g0gxecaBwjiXF9ebdGzxUzee4VHFSyVOG5ex4Tsjv
x1/gTq/0gRdt5Zm1O+RNU6wWy1+t5CE7cbYQSdcojnSIdJJla2vgGxUcacDgtf24
0VvzeMIeBvt2QxlMqAXK9L/oBXymObZt+6zvZKqP2KmFjCY37W5eY6dcpt5g3MXr
GKoLR2eD8ya0O5P4cyR7aQp+P2iPhZqRDkzUwhQZHPNNgjhfyegJOuXbRHIW5yqL
FBaSiVo0cGqFjI30pkkkDX0zzjek6BCE83m5R0mFX2ur+H7LELGi6yPD/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQvOAFvlo16GIXGmZhDdJhPHmUhMB8GA1UdIwQY
MBaAFJgRhof91v+A+wmKnu7wbeN3+F1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYt
NjlhZjBhNmU5ODliLzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy81OTA4YTktMGMwZi00MGFiLWJmZDYtNjlhZjBhNmU5ODli
LzEvbUJHR2hfM1dfNEQ3Q1lxZTd2QnQ0M2Y0WFc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADphbDSzj
iv2QlB5bAa9iOBZr5kZjKfmWnMKEUVFXxdiNzlHWTSImXSep8V0jvd+GS4ZqKcEQ
l/rPxoZG/8vjO+r4tdlCzMuOlWt0p0D9FNojcSnRpmuo3QzUSRE5L3bQ2lUWJcjp
wxbbjBplENGUAyPZOp1vQ6/HW55F8zqeaxV8cZ/LRTu6ZvfuI2qQl6PWmXCb3Nr8
2R8iVUNPpMF36z5quZBNHpev6xVvGFUjlKVLtCZU7oOePzfL2jaTugVnZdvTu3tt
PlNYTlkGPytdYTWBwrv9/JluBa5i6XAC+EbBqZBECUnpq713PlOmPgv3IVtrDBVk
rOd38XQLcSzwMg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:32 2025 by rpki-client