Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File:                     RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier:          y4BwXnELxt7cPXey+J1e1WPqp4aSFIF6MbcfY7USwF8=
Subject key identifier:   E5:1B:91:DB:19:99:99:ED:EB:42:58:A2:38:C6:57:E8:11:1D:29:04
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer:       /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial:       0194BCA9D2E7E1777C3BE6F58D9B8D424BAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number:          0E25
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: mSz3Wm4xQecwfJ6zqfmy0CyhLOv1dQqcf1Q2t3oledA=)
                          2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d2:e7:e1:77:7c:3b:e6:f5:8d:9b:8d:42:4b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=e51b91db199999edeb4258a238c657e8111d2904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:31:34:51:95:82:7d:8f:34:94:cf:c9:5d:
                    4e:74:ca:6f:3e:3c:b9:da:f0:02:3f:fa:f2:a1:d1:
                    f7:2f:d3:6f:df:34:2e:55:d1:df:a9:4d:48:2d:1c:
                    f5:b0:73:2c:10:ff:1d:13:01:a6:49:16:1d:6a:95:
                    95:0b:22:25:cf:fb:e6:f9:e3:c2:e4:7e:86:21:fc:
                    56:3a:ef:8b:9a:8a:23:d2:61:37:1d:d7:c3:7e:73:
                    55:5a:85:42:ab:3c:37:ea:ef:cf:20:cd:3f:6e:32:
                    2a:46:36:e6:eb:87:d7:1e:f9:99:75:85:9b:c2:2b:
                    8e:39:20:a7:d8:0f:bf:78:f6:f6:f2:56:b9:2c:c9:
                    20:96:e5:4b:65:dc:3c:49:a8:3e:0a:ab:5e:a0:26:
                    84:79:7a:b4:e2:64:36:68:75:0b:4e:74:ca:4d:6c:
                    77:85:67:79:79:a9:6c:63:0c:b7:26:d7:02:49:30:
                    1e:ce:ce:88:09:0d:cf:8d:c9:f0:f0:e6:89:25:a7:
                    8b:43:22:cb:ab:69:49:46:88:d4:4c:b8:20:b2:80:
                    d8:21:dd:29:e4:1d:0b:d8:ec:fd:aa:65:dc:0d:c3:
                    f3:fd:f1:65:ba:b3:53:48:70:df:fe:6f:13:bc:14:
                    2a:cd:87:4f:09:9c:b0:e0:b0:46:ad:2b:a1:7c:ee:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1B:91:DB:19:99:99:ED:EB:42:58:A2:38:C6:57:E8:11:1D:29:04
            X509v3 Authority Key Identifier:
                keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:6e:b8:da:06:4a:3e:cd:c2:07:b8:e5:2c:85:c1:59:0c:5b:
         90:0a:4c:79:50:5c:5c:94:37:08:a9:83:ea:b6:f6:3e:52:ea:
         35:44:fa:67:1e:25:1f:13:9b:da:18:6b:bd:30:c1:62:40:65:
         5a:e2:3a:c0:ad:7c:76:f5:52:ec:b4:8c:f1:d4:9a:4c:d8:74:
         b1:35:22:fa:7a:c8:00:ff:15:c6:b7:a2:96:dc:73:4b:a5:68:
         9a:50:23:df:0a:a2:2b:ab:cb:a9:3c:04:28:4f:ce:2c:b3:40:
         89:ad:1a:08:9d:d1:30:66:f1:57:f7:06:81:2a:57:32:b1:b4:
         ce:56:c5:60:7f:2e:5d:88:33:34:62:03:61:05:a4:48:82:3a:
         5d:48:f0:58:53:47:4e:1c:a0:5d:11:73:e1:ca:7a:81:7a:74:
         81:5a:3a:9a:19:4f:16:b9:01:23:88:57:10:de:4c:99:62:2e:
         07:b5:fa:83:b2:c0:90:bd:77:f4:57:88:6a:ae:e9:e2:90:59:
         c9:7f:d3:b8:c3:07:14:54:46:a7:5a:4d:ab:35:d7:f9:ae:e2:
         8c:15:75:ef:14:53:13:ac:1c:97:ec:33:35:34:50:f7:da:a1:
         6c:6d:f6:85:e1:bf:ac:52:4d:31:8c:54:01:fd:a0:a3:0d:38:
         e8:32:96:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdLn4Xd8O+b1jZuNQkusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZjNmOWI0MWY0NWEwZjk3YjJhNmE4MTFjYTY3YTA0MDJh
MDQ3N2YwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
EyhlNTFiOTFkYjE5OTk5OWVkZWI0MjU4YTIzOGM2NTdlODExMWQyOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j4xNFGVgn2PNJTPyV1OdMpvPjy5
2vACP/ryodH3L9Nv3zQuVdHfqU1ILRz1sHMsEP8dEwGmSRYdapWVCyIlz/vm+ePC
5H6GIfxWOu+Lmooj0mE3HdfDfnNVWoVCqzw36u/PIM0/bjIqRjbm64fXHvmZdYWb
wiuOOSCn2A+/ePb28la5LMkgluVLZdw8Sag+CqteoCaEeXq04mQ2aHULTnTKTWx3
hWd5ealsYwy3JtcCSTAezs6ICQ3Pjcnw8OaJJaeLQyLLq2lJRojUTLggsoDYId0p
5B0L2Oz9qmXcDcPz/fFlurNTSHDf/m8TvBQqzYdPCZyw4LBGrSuhfO4WuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUbkdsZmZnt60JYojjGV+gRHSkEMB8GA1UdIwQY
MBaAFEbz+bQfRaD5eypqgRymegQCoEd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAt
OTk2MzI2Y2E3ZGQ2LzEvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yNWRhYTQtZjdmYS00MGZhLTkyNTAtOTk2MzI2Y2E3ZGQ2
LzEvUnZQNXRCOUZvUGw3S21xQkhLWjZCQUtnUjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmW642gZK
Ps3CB7jlLIXBWQxbkApMeVBcXJQ3CKmD6rb2PlLqNUT6Zx4lHxOb2hhrvTDBYkBl
WuI6wK18dvVS7LSM8dSaTNh0sTUi+nrIAP8VxreiltxzS6VomlAj3wqiK6vLqTwE
KE/OLLNAia0aCJ3RMGbxV/cGgSpXMrG0zlbFYH8uXYgzNGIDYQWkSII6XUjwWFNH
ThygXRFz4cp6gXp0gVo6mhlPFrkBI4hXEN5MmWIuB7X6g7LAkL139FeIaq7p4pBZ
yX/TuMMHFFRGp1pNqzXX+a7ijBV17xRTE6wcl+wzNTRQ99qhbG32heG/rFJNMYxU
Af2gow046DKWHw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:07:46 2025 by rpki-client