Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
File:                     IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft (raw, json)
Hash identifier:          mxspobuDETvViz8JGC4AxrIrLSkAVWIG28JVsSTT+XU=
Subject key identifier:   FC:2C:05:4C:AA:A4:93:5A:1B:42:94:4F:2F:F4:BB:9B:54:CE:3C:8A
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Certificate issuer:       /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial:       0194BC3C05591A5799B3DB1D6FA45F99EAF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl (hash: aTpDkaW/T0VARtQfmN86uqNg8oKsTI84l4ES0wOZnug=)
                          2: mcM8_9lyrTG-MMDFjvFoLzh0EcU.roa (hash: wA7gawHVSiIwq+RZjpXudHmsZpXyv8YQLjD76SZRvpI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:05:59:1a:57:99:b3:db:1d:6f:a4:5f:99:ea:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=fc2c054caaa4935a1b42944f2ff4bb9b54ce3c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:4f:71:20:d9:10:4d:9c:48:63:1a:b9:19:
                    7f:01:79:96:70:a4:8b:f6:23:51:ee:12:bb:a3:b7:
                    7a:b1:42:49:34:2a:cf:04:ce:87:3a:00:d1:18:33:
                    55:90:25:5b:14:fd:60:dc:f6:69:c3:ae:7b:28:c4:
                    29:a3:15:f3:1a:1a:fe:3d:86:09:9a:4f:aa:3e:f8:
                    fb:d0:72:a0:85:61:26:50:35:b3:9c:56:70:6f:89:
                    be:74:c2:da:d5:1c:a6:df:f2:1b:26:dd:d7:f8:ae:
                    ed:df:fb:5a:4d:ea:e4:3d:c2:36:b3:07:47:43:9b:
                    a6:c5:85:53:c5:5a:4b:9a:79:54:0b:e4:7b:18:a0:
                    10:76:d7:3c:5d:40:28:88:3f:5e:b9:5c:a7:60:ef:
                    c8:98:3f:c5:4b:05:bb:ab:b1:e4:39:90:84:11:a5:
                    d4:85:c6:f4:73:c3:72:09:3a:b2:94:c0:a1:59:28:
                    1f:81:2f:a7:ee:3b:1c:1e:4d:1d:2e:67:fa:2e:e1:
                    12:82:ec:1c:ee:7e:49:82:a8:34:35:e0:54:c3:d8:
                    24:f2:1a:6b:ea:17:77:65:8c:3b:63:96:43:bc:7d:
                    ec:d3:41:c2:16:ae:d5:f8:4d:ea:a8:57:9e:f2:35:
                    36:8d:f2:c2:5a:aa:ea:da:d1:45:0d:b7:ea:07:71:
                    eb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2C:05:4C:AA:A4:93:5A:1B:42:94:4F:2F:F4:BB:9B:54:CE:3C:8A
            X509v3 Authority Key Identifier:
                keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:48:91:ba:1d:e4:40:08:f6:f2:0c:c3:c7:5d:22:7e:cf:
         74:62:7a:6f:27:02:bf:ee:9f:40:4e:ec:e3:36:dc:18:50:4b:
         2a:af:9e:3f:53:71:d8:58:d0:e7:23:ff:b3:01:f0:b7:70:90:
         13:b6:83:07:70:6e:0d:59:46:0e:c7:af:0e:8f:22:0b:a4:9f:
         c5:09:ed:b5:b6:7d:b5:17:cb:25:0c:4d:2d:65:75:5a:5f:f9:
         95:b0:ae:1d:12:f8:f9:10:8c:8b:78:60:da:d6:4b:6e:b0:f7:
         e2:82:02:c8:c1:b9:46:05:10:5e:b4:01:62:97:84:af:79:dc:
         5a:36:ca:8f:1c:76:9d:e8:e9:12:91:81:1c:a9:52:2a:92:ce:
         9b:24:0a:8b:4c:ae:b9:c2:0a:4d:4c:1b:f7:d4:52:be:dd:2b:
         c1:fa:6f:86:04:9a:1f:7a:15:da:e7:81:97:c4:e5:f0:ff:84:
         77:90:20:7c:1f:f2:26:be:8f:04:33:31:f4:93:76:7e:38:d8:
         ed:1e:85:01:30:03:13:dd:bf:99:a1:6d:7b:d7:f7:1d:4f:1f:
         e5:d1:41:14:0a:bb:7c:ab:cf:81:b8:5b:a1:25:d3:3a:32:91:
         b2:79:c9:d8:fb:2e:c8:4c:fe:fb:a1:78:bd:f6:01:d0:bd:d1:
         3f:1a:97:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAVZGleZs9sdb6RfmeryMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxOTg4NWVhMDIwZTY1MDA2MzE0ZWU5NDgwZGVmM2IzZWZj
MDM5ZTMwHhcNMjUwMTMxMTIwMDM3WhcNMjUwMjAxMTIwMDM3WjAzMTEwLwYDVQQD
EyhmYzJjMDU0Y2FhYTQ5MzVhMWI0Mjk0NGYyZmY0YmI5YjU0Y2UzYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApT9PcSDZEE2cSGMauRl/AXmWcKSL
9iNR7hK7o7d6sUJJNCrPBM6HOgDRGDNVkCVbFP1g3PZpw657KMQpoxXzGhr+PYYJ
mk+qPvj70HKghWEmUDWznFZwb4m+dMLa1Rym3/IbJt3X+K7t3/taTerkPcI2swdH
Q5umxYVTxVpLmnlUC+R7GKAQdtc8XUAoiD9euVynYO/ImD/FSwW7q7HkOZCEEaXU
hcb0c8NyCTqylMChWSgfgS+n7jscHk0dLmf6LuESguwc7n5Jgqg0NeBUw9gk8hpr
6hd3ZYw7Y5ZDvH3s00HCFq7V+E3qqFee8jU2jfLCWqrq2tFFDbfqB3HrgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPwsBUyqpJNaG0KUTy/0u5tUzjyKMB8GA1UdIwQY
MBaAFCGYheoCDmUAYxTulIDe87PvwDnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2Mt
ZmZjMDI1ODMxZjRmLzEvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mZTA0YWMtYTE5MC00ODA0LTkxM2MtZmZjMDI1ODMxZjRm
LzEvSVppRjZnSU9aUUJqRk82VWdON3pzLV9BT2VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+NIkbod
5EAI9vIMw8ddIn7PdGJ6bycCv+6fQE7s4zbcGFBLKq+eP1Nx2FjQ5yP/swHwt3CQ
E7aDB3BuDVlGDsevDo8iC6SfxQnttbZ9tRfLJQxNLWV1Wl/5lbCuHRL4+RCMi3hg
2tZLbrD34oICyMG5RgUQXrQBYpeEr3ncWjbKjxx2nejpEpGBHKlSKpLOmyQKi0yu
ucIKTUwb99RSvt0rwfpvhgSaH3oV2ueBl8Tl8P+Ed5AgfB/yJr6PBDMx9JN2fjjY
7R6FATADE92/maFte9f3HU8f5dFBFAq7fKvPgbhboSXTOjKRsnnJ2PsuyEz++6F4
vfYB0L3RPxqXaA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:01 2025 by rpki-client