Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
File:                     eQjeIC4XTLI3Rty97qip1ElYABk.mft (raw, json)
Hash identifier:          Unx5h/WgGxVX8FAU5sHtui1NKHDlLlALTvQ4UYTpdGY=
Subject key identifier:   A8:0B:48:FB:31:2F:52:FA:80:BC:E5:39:96:BA:0D:3F:4E:9B:69:D6
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Certificate issuer:       /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial:       0194BC72A32B86048AB39D227D967AE2D4F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft
Manifest number:          113B
Signing time:             Fri 31 Jan 2025 13:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:16 +0000
Files and hashes:         1: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (hash: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=)
                          2: eQjeIC4XTLI3Rty97qip1ElYABk.crl (hash: TmqLESeSUR5Nk+7OswrxsAQ8sXkXLveMusnO6QUmli0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a3:2b:86:04:8a:b3:9d:22:7d:96:7a:e2:d4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
        Validity
            Not Before: Jan 31 13:00:16 2025 GMT
            Not After : Feb  1 13:00:16 2025 GMT
        Subject: CN=a80b48fb312f52fa80bce53996ba0d3f4e9b69d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:d7:42:c9:b3:3c:30:33:e1:d0:8a:32:b2:
                    c8:de:e1:0f:ef:e4:74:ae:d6:5b:8a:9d:22:ad:09:
                    31:d9:0e:58:67:b9:8e:58:ef:8b:fe:74:dc:21:16:
                    e1:9e:48:58:6a:06:a0:88:6a:82:38:35:82:87:e1:
                    e6:a1:de:14:03:4b:7f:af:ee:92:79:c1:a4:cf:1d:
                    00:e1:5c:60:0a:2d:c4:1d:7c:21:28:23:50:e4:cd:
                    98:fe:5f:26:3f:72:71:fc:d6:63:7b:8d:0e:20:c7:
                    a8:83:a8:5f:01:38:59:b7:f3:28:0f:d6:1f:78:35:
                    d3:e2:68:62:e0:62:d6:80:ba:7d:c7:e3:51:99:5a:
                    0f:a9:97:ce:1f:d0:c2:cb:9e:58:bd:9e:ff:ea:cf:
                    70:86:2a:66:f8:4c:08:9c:6b:e4:c8:f6:4c:ec:b9:
                    03:5a:ce:20:6f:03:7f:cd:54:a2:56:29:a0:72:15:
                    04:74:48:ab:ed:d3:2b:ee:53:70:0e:11:a6:7d:50:
                    2d:8a:fa:27:95:ad:9f:c6:1a:5c:eb:8a:f4:9d:e1:
                    d9:fa:52:72:a3:ac:ed:15:68:70:7b:6d:af:c0:a5:
                    00:7b:c6:67:95:c9:11:92:cd:eb:0e:19:0c:7e:5d:
                    01:f3:bb:f6:57:4c:8d:0b:97:12:72:28:5c:00:59:
                    c3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0B:48:FB:31:2F:52:FA:80:BC:E5:39:96:BA:0D:3F:4E:9B:69:D6
            X509v3 Authority Key Identifier:
                keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:83:91:c1:8a:fd:e9:2c:e9:40:b4:8e:f1:32:6b:6d:58:
         d2:94:68:0d:72:42:ff:54:37:f6:a1:f3:f2:be:2a:bc:d1:d1:
         a5:52:c2:16:38:2d:6b:bd:e6:c5:8b:10:94:9d:b8:24:81:cb:
         bc:20:96:67:cf:53:37:01:d0:5d:37:a4:c3:00:59:b1:08:5f:
         01:85:08:c3:4a:a6:07:c0:6d:95:61:70:a8:8a:c9:98:de:a1:
         65:71:f4:fb:34:80:af:8a:da:56:eb:4b:fa:c2:2b:1b:ee:34:
         9b:e1:18:c9:b1:4f:10:60:49:af:b7:78:8f:0e:a3:e8:a8:13:
         4a:23:ef:6e:76:9c:ca:c3:d5:3d:06:6b:81:06:39:e1:ce:b6:
         18:74:7d:72:2c:89:44:51:e3:cd:25:d1:70:08:f9:14:9a:c4:
         e3:cf:0d:ff:80:ad:e4:1e:89:5d:2b:a5:46:ee:1b:90:2a:41:
         62:30:3a:38:b5:ff:7d:81:4f:4f:e5:3c:65:5c:a5:47:49:8f:
         3f:d1:d1:0c:50:1e:4c:5f:66:e8:83:b7:83:af:7d:4a:00:7d:
         24:13:b2:3f:1d:a4:8b:25:0a:7e:7c:53:58:f1:09:21:0c:10:
         23:75:1f:11:11:4b:34:23:1d:df:13:75:59:e7:14:34:66:21:
         1e:55:a7:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqMrhgSKs50ifZZ64tT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDhkZTIwMmUxNzRjYjIzNzQ2ZGNiZGVlYThhOWQ0NDk1
ODAwMTkwHhcNMjUwMTMxMTMwMDE2WhcNMjUwMjAxMTMwMDE2WjAzMTEwLwYDVQQD
EyhhODBiNDhmYjMxMmY1MmZhODBiY2U1Mzk5NmJhMGQzZjRlOWI2OWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbrXQsmzPDAz4dCKMrLI3uEP7+R0
rtZbip0irQkx2Q5YZ7mOWO+L/nTcIRbhnkhYagagiGqCODWCh+Hmod4UA0t/r+6S
ecGkzx0A4VxgCi3EHXwhKCNQ5M2Y/l8mP3Jx/NZje40OIMeog6hfAThZt/MoD9Yf
eDXT4mhi4GLWgLp9x+NRmVoPqZfOH9DCy55YvZ7/6s9whipm+EwInGvkyPZM7LkD
Ws4gbwN/zVSiVimgchUEdEir7dMr7lNwDhGmfVAtivonla2fxhpc64r0neHZ+lJy
o6ztFWhwe22vwKUAe8ZnlckRks3rDhkMfl0B87v2V0yNC5cScihcAFnDawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgLSPsxL1L6gLzlOZa6DT9Om2nWMB8GA1UdIwQY
MBaAFHkI3iAuF0yyN0bcve6oqdRJWAAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMt
NTYxZDVmZjhkYzBlLzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMtNTYxZDVmZjhkYzBl
LzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzWDkcGK
/eks6UC0jvEya21Y0pRoDXJC/1Q39qHz8r4qvNHRpVLCFjgta73mxYsQlJ24JIHL
vCCWZ89TNwHQXTekwwBZsQhfAYUIw0qmB8BtlWFwqIrJmN6hZXH0+zSAr4raVutL
+sIrG+40m+EYybFPEGBJr7d4jw6j6KgTSiPvbnacysPVPQZrgQY54c62GHR9ciyJ
RFHjzSXRcAj5FJrE488N/4Ct5B6JXSulRu4bkCpBYjA6OLX/fYFPT+U8ZVylR0mP
P9HRDFAeTF9m6IO3g699SgB9JBOyPx2kiyUKfnxTWPEJIQwQI3UfERFLNCMd3xN1
WecUNGYhHlWn5A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:19 2025 by rpki-client