Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
File:                     PE71UtfFcTYTTntE1pfLAs3n2H0.mft (raw, json)
Hash identifier:          ncL4/oLeNhSvbBwx6qHzWsto9dul6NVAgX49RPLqqqc=
Subject key identifier:   46:90:06:15:6C:16:8B:67:1F:F6:DB:CD:1B:0F:C7:07:29:23:17:B6
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Certificate issuer:       /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial:       0194BCA997D8ECB9427E4F7A0AF8399E83E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
Manifest number:          088F
Signing time:             Fri 31 Jan 2025 14:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:18 +0000
Files and hashes:         1: PE71UtfFcTYTTntE1pfLAs3n2H0.crl (hash: F+OKoo0pqOZU7rwdzCDMcs8fEfSvTijrw0jNCZ8KoSw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:97:d8:ec:b9:42:7e:4f:7a:0a:f8:39:9e:83:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
        Validity
            Not Before: Jan 31 14:00:18 2025 GMT
            Not After : Feb  1 14:00:18 2025 GMT
        Subject: CN=469006156c168b671ff6dbcd1b0fc707292317b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:7a:6d:38:92:ea:bf:93:0d:4f:ff:6f:cb:
                    cf:92:3f:19:df:e2:2f:4e:58:0c:e6:fc:38:38:2d:
                    45:1a:84:2a:4f:5a:e5:26:f3:6b:02:ef:f1:60:84:
                    11:41:a9:7b:8c:43:6e:f8:41:09:48:11:39:f9:99:
                    a9:2a:e8:66:61:21:5b:78:7c:c6:da:5b:7b:6d:e7:
                    04:e6:32:de:6e:c7:aa:a7:93:df:94:61:a6:52:47:
                    7c:e7:b2:5c:2c:e8:67:3e:fe:7a:ad:30:96:84:10:
                    bc:d3:00:d5:b6:77:84:91:03:d2:6e:74:e8:5e:5d:
                    38:a9:6d:ef:cc:54:35:9d:43:7a:e4:35:10:bc:e3:
                    98:cb:27:df:7b:7e:9d:c1:e0:04:d4:a0:1d:94:be:
                    e5:0d:bd:ac:41:1c:1c:3f:41:de:e5:ba:1d:d5:e5:
                    9c:e4:c2:f1:43:47:d0:c5:4b:d8:f8:2a:ee:68:58:
                    91:5e:b7:d3:d3:81:17:ff:65:9d:da:58:63:4a:1e:
                    57:a7:c6:25:2d:5b:9e:38:a8:b1:44:12:99:f9:9d:
                    97:41:29:db:fc:a5:88:14:cb:b6:5d:34:26:a4:bb:
                    e7:b7:92:b0:a0:95:c4:0d:2f:63:03:f7:a8:8c:11:
                    a2:da:3a:d8:d3:f5:92:bf:d1:8a:3a:9b:3a:bc:e2:
                    2c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:90:06:15:6C:16:8B:67:1F:F6:DB:CD:1B:0F:C7:07:29:23:17:B6
            X509v3 Authority Key Identifier:
                keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:97:74:4d:74:5e:99:c7:5e:55:c7:48:f4:6c:ad:a9:0c:78:
         d1:a3:64:4b:57:48:4b:fb:1d:07:8b:cb:17:e9:aa:6c:d3:fa:
         c7:0f:35:ce:0a:e7:34:18:59:34:d8:8b:fb:e9:49:da:40:a9:
         45:3f:31:ee:15:f3:ab:97:a8:ee:40:9c:16:1b:e5:0d:36:18:
         52:20:e8:80:90:9f:fc:67:a2:a6:55:1d:27:d7:d7:48:21:39:
         32:4e:ce:ba:22:4c:bc:ff:0e:fd:e5:c9:31:e0:68:7f:83:3c:
         c5:79:2e:1e:2c:23:5e:c3:70:5d:20:1b:1f:92:24:f7:a1:36:
         90:fa:76:b2:aa:14:a8:46:8e:5d:fc:09:06:7f:a9:69:6e:89:
         a5:22:7b:d6:a9:02:c3:0a:50:5e:67:16:67:26:de:95:fd:ce:
         ba:88:95:a5:f6:b5:d2:d5:54:fc:95:0f:4d:aa:6f:2e:bd:1f:
         19:e5:9f:7f:f7:94:6c:7b:a7:39:39:c8:d3:ff:71:4c:06:c4:
         10:1e:14:6d:49:4e:d2:c2:ad:f5:49:1f:84:fe:46:92:d3:7f:
         e9:ab:bc:fc:56:67:45:5b:33:dc:15:25:23:3b:4e:68:00:af:
         48:8c:a5:bb:7a:83:2d:a3:f8:f8:2a:fd:b3:a2:1d:00:92:4a:
         8a:ee:f5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZfY7LlCfk96Cvg5noPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVmNTUyZDdjNTcxMzYxMzRlN2I0NGQ2OTdjYjAyY2Rl
N2Q4N2QwHhcNMjUwMTMxMTQwMDE4WhcNMjUwMjAxMTQwMDE4WjAzMTEwLwYDVQQD
Eyg0NjkwMDYxNTZjMTY4YjY3MWZmNmRiY2QxYjBmYzcwNzI5MjMxN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/R6bTiS6r+TDU//b8vPkj8Z3+Iv
TlgM5vw4OC1FGoQqT1rlJvNrAu/xYIQRQal7jENu+EEJSBE5+ZmpKuhmYSFbeHzG
2lt7becE5jLebseqp5PflGGmUkd857JcLOhnPv56rTCWhBC80wDVtneEkQPSbnTo
Xl04qW3vzFQ1nUN65DUQvOOYyyffe36dweAE1KAdlL7lDb2sQRwcP0He5bod1eWc
5MLxQ0fQxUvY+CruaFiRXrfT04EX/2Wd2lhjSh5Xp8YlLVueOKixRBKZ+Z2XQSnb
/KWIFMu2XTQmpLvnt5KwoJXEDS9jA/eojBGi2jrY0/WSv9GKOps6vOIsVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaQBhVsFotnH/bbzRsPxwcpIxe2MB8GA1UdIwQY
MBaAFDxO9VLXxXE2E057RNaXywLN59h9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3MVV0ZkZjVFlUVG50RTFwZkxBczNuMkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iMzIxZDEtODE0Yi00Y2Y5LTlkMDct
MTE0NDFlMTZhMTM3LzEvUEU3MVV0ZkZjVFlUVG50RTFwZkxBczNuMkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iMzIxZDEtODE0Yi00Y2Y5LTlkMDctMTE0NDFlMTZhMTM3
LzEvUEU3MVV0ZkZjVFlUVG50RTFwZkxBczNuMkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpd0TXRe
mcdeVcdI9GytqQx40aNkS1dIS/sdB4vLF+mqbNP6xw81zgrnNBhZNNiL++lJ2kCp
RT8x7hXzq5eo7kCcFhvlDTYYUiDogJCf/GeiplUdJ9fXSCE5Mk7OuiJMvP8O/eXJ
MeBof4M8xXkuHiwjXsNwXSAbH5Ik96E2kPp2sqoUqEaOXfwJBn+paW6JpSJ71qkC
wwpQXmcWZybelf3OuoiVpfa10tVU/JUPTapvLr0fGeWff/eUbHunOTnI0/9xTAbE
EB4UbUlO0sKt9UkfhP5GktN/6au8/FZnRVsz3BUlIztOaACvSIylu3qDLaP4+Cr9
s6IdAJJKiu71Xg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:29 2025 by rpki-client