Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
File:                     Tb6Htwra566IC0Zwv6B46QmE1mA.mft (raw, json)
Hash identifier:          aJSqT2xbIzu04miqO/+vdtpkf86nSEjx8pSzkWtE6U0=
Subject key identifier:   4E:FC:8B:33:A1:81:09:F7:06:B5:8F:AB:59:10:BB:A5:5A:0D:D5:AB
Authority key identifier: 4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60
Certificate issuer:       /CN=4dbe87b70adae7ae880b4670bfa078e90984d660
Certificate serial:       0194BCAA1D88613CD974F1E7C856EF82AC97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft
Manifest number:          0E51
Signing time:             Fri 31 Jan 2025 14:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:52 +0000
Files and hashes:         1: Tb6Htwra566IC0Zwv6B46QmE1mA.crl (hash: hd7d1oO3qr2su3TiB8+L42SoxHpFx+DzIM4WIYqmw4M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:1d:88:61:3c:d9:74:f1:e7:c8:56:ef:82:ac:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe87b70adae7ae880b4670bfa078e90984d660
        Validity
            Not Before: Jan 31 14:00:52 2025 GMT
            Not After : Feb  1 14:00:52 2025 GMT
        Subject: CN=4efc8b33a18109f706b58fab5910bba55a0dd5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:94:f6:03:38:e4:7d:67:d7:d7:7b:06:a7:54:
                    7d:14:04:00:78:44:69:36:9a:0b:86:9b:61:41:a5:
                    05:ea:86:e9:7e:3e:4f:a3:9f:c3:09:d0:1f:b9:55:
                    8b:22:c9:be:dd:85:9e:a5:37:69:ed:ed:44:f4:fa:
                    61:0a:5c:31:cc:e4:83:cf:64:37:08:3a:f0:9f:44:
                    32:bb:ee:9a:8f:c1:9b:19:9b:5b:fd:92:f8:2b:10:
                    24:54:3a:37:a3:8c:bc:17:ea:54:91:c3:01:3f:a3:
                    a9:0b:d4:34:49:9c:a2:cb:0c:8e:ec:6d:17:d9:74:
                    46:09:6c:eb:56:92:de:6f:9a:66:3d:ab:96:9f:38:
                    90:3b:31:96:26:ea:0f:1e:05:a5:b8:f7:f1:f3:b4:
                    dd:ed:8a:49:16:ff:33:26:39:a0:f5:ba:84:37:64:
                    fb:c9:e6:b7:d6:35:01:c9:b7:43:e2:65:7c:e0:13:
                    7a:c5:f4:16:89:a5:9c:5a:8b:30:ec:83:24:78:8f:
                    15:64:48:ba:4d:c4:ce:f8:a1:2b:af:8e:b3:98:f3:
                    91:3c:83:75:b5:5b:d9:d2:9f:29:ea:ce:1c:14:f9:
                    c8:76:88:af:6f:37:a0:a0:79:1e:e5:f3:02:7d:f6:
                    b0:b9:20:bd:14:9a:41:77:fd:32:09:8a:34:82:15:
                    ec:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FC:8B:33:A1:81:09:F7:06:B5:8F:AB:59:10:BB:A5:5A:0D:D5:AB
            X509v3 Authority Key Identifier:
                keyid:4D:BE:87:B7:0A:DA:E7:AE:88:0B:46:70:BF:A0:78:E9:09:84:D6:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb6Htwra566IC0Zwv6B46QmE1mA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37d3ee-640f-471f-a9b7-ac5a297f9ba4/1/Tb6Htwra566IC0Zwv6B46QmE1mA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:8a:60:6d:41:b3:c8:ef:76:d7:92:84:94:d1:0e:81:0a:a4:
         1d:3e:7a:6b:1f:2b:24:d3:8a:b4:4c:69:ac:27:2d:63:9f:cf:
         37:a5:53:97:6e:3a:f1:f9:7d:10:13:b4:ac:07:93:40:f5:55:
         b8:87:1c:d6:0b:b1:3c:dd:bd:2c:54:bc:a7:28:93:90:99:ce:
         da:d9:07:47:7e:39:6c:54:8a:29:63:a0:b4:da:77:22:dd:34:
         87:70:30:5d:dc:46:50:ec:fe:6e:73:d6:72:77:1f:47:51:eb:
         1f:68:38:61:24:10:c8:0a:36:9b:79:b7:df:bf:88:29:68:e6:
         9c:1b:8a:05:eb:3c:76:0c:54:45:42:c6:4d:67:4e:ef:92:ae:
         d4:23:b4:41:55:12:ea:88:01:fd:eb:88:52:e6:47:61:e4:21:
         75:a7:3f:19:d9:33:73:a8:b4:7a:45:b2:71:f0:ab:3d:e3:f7:
         af:cf:1b:06:55:ae:a1:1c:6f:42:f1:28:90:62:c6:8d:cb:3b:
         77:53:41:51:09:fd:d3:31:45:5e:81:fe:66:47:7c:66:9f:99:
         f3:da:b7:4a:7b:3a:92:7c:08:53:be:80:39:17:b2:3e:71:9c:
         83:dd:1b:84:c4:d3:38:8f:1a:64:2b:b0:a9:d9:ee:e0:6d:70:
         cb:79:f2:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh2IYTzZdPHnyFbvgqyXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYmU4N2I3MGFkYWU3YWU4ODBiNDY3MGJmYTA3OGU5MDk4
NGQ2NjAwHhcNMjUwMTMxMTQwMDUyWhcNMjUwMjAxMTQwMDUyWjAzMTEwLwYDVQQD
Eyg0ZWZjOGIzM2ExODEwOWY3MDZiNThmYWI1OTEwYmJhNTVhMGRkNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pT2AzjkfWfX13sGp1R9FAQAeERp
NpoLhpthQaUF6obpfj5Po5/DCdAfuVWLIsm+3YWepTdp7e1E9PphClwxzOSDz2Q3
CDrwn0Qyu+6aj8GbGZtb/ZL4KxAkVDo3o4y8F+pUkcMBP6OpC9Q0SZyiywyO7G0X
2XRGCWzrVpLeb5pmPauWnziQOzGWJuoPHgWluPfx87Td7YpJFv8zJjmg9bqEN2T7
yea31jUBybdD4mV84BN6xfQWiaWcWosw7IMkeI8VZEi6TcTO+KErr46zmPORPIN1
tVvZ0p8p6s4cFPnIdoivbzegoHke5fMCffawuSC9FJpBd/0yCYo0ghXs3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE78izOhgQn3BrWPq1kQu6VaDdWrMB8GA1UdIwQY
MBaAFE2+h7cK2ueuiAtGcL+geOkJhNZgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5Yjct
YWM1YTI5N2Y5YmE0LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8zN2QzZWUtNjQwZi00NzFmLWE5YjctYWM1YTI5N2Y5YmE0
LzEvVGI2SHR3cmE1NjZJQzBad3Y2QjQ2UW1FMW1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4pgbUGz
yO9215KElNEOgQqkHT56ax8rJNOKtExprCctY5/PN6VTl2468fl9EBO0rAeTQPVV
uIcc1guxPN29LFS8pyiTkJnO2tkHR345bFSKKWOgtNp3It00h3AwXdxGUOz+bnPW
cncfR1HrH2g4YSQQyAo2m3m337+IKWjmnBuKBes8dgxURULGTWdO75Ku1CO0QVUS
6ogB/euIUuZHYeQhdac/Gdkzc6i0ekWycfCrPeP3r88bBlWuoRxvQvEokGLGjcs7
d1NBUQn90zFFXoH+Zkd8Zp+Z89q3Sns6knwIU76AOReyPnGcg90bhMTTOI8aZCuw
qdnu4G1wy3nyNw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:22:59 2025 by rpki-client