Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
File:                     8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft (raw, json)
Hash identifier:          xR5int7SzwRJnV88suh+2j28sDHjct8jzfGX9qu4oK4=
Subject key identifier:   6C:48:97:45:F3:96:DE:AE:91:4C:E4:A6:70:C1:AF:09:A9:14:37:B9
Authority key identifier: F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA
Certificate issuer:       /CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
Certificate serial:       0194BCA9D3D12E908A8E209AD09FE1991944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: 8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl (hash: 0LPuIfMsXMcLBdgKiUgrWsQ17ZtZQO7v3x27DYv5RQs=)
                          2: HCmwt2WAK-H7WYTy1icgaTefv78.roa (hash: +bS4/m9dhw+Ug0oj+WLZYyQxSyPJBlp+QZfTQscGHe8=)
                          3: Haz2dutrUVMMKz8DWDpTMKU7v-M.roa (hash: UYJn16zkfgLSDIIDhGPHhj8L2SfoMr/Jiya6AdzxVHU=)
                          4: lTV0wmQBB48Ktr0Vf2ykH7NjIHY.roa (hash: bq6a+K+pPXFxcaKzeiruinFGWe/rm0xE/5P0J11lvFE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d3:d1:2e:90:8a:8e:20:9a:d0:9f:e1:99:19:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26920bbd7fb70ef5dbcf2d0fea202bd95765eba
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=6c489745f396deae914ce4a670c1af09a91437b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2c:b0:c9:cc:19:3a:e6:c1:18:24:99:66:7f:
                    7b:9b:03:de:31:cc:0f:3a:2b:08:4d:70:b9:76:59:
                    66:55:1c:0c:e5:13:7b:80:a5:10:31:73:6a:07:29:
                    3e:f0:30:96:81:24:4d:92:aa:c8:ba:cd:79:f0:0b:
                    54:d9:aa:7b:d1:0c:72:32:31:b2:fc:d7:d0:61:29:
                    37:06:3f:99:9d:f0:71:2b:ee:9e:b5:88:ad:8c:a2:
                    4d:5a:c9:43:a0:58:71:a4:81:54:87:b0:81:2b:04:
                    17:51:f8:d6:ed:f0:f4:b5:14:01:81:c5:12:24:45:
                    cd:e6:a9:06:2b:44:89:3b:24:ec:37:67:58:22:49:
                    bb:25:14:aa:5a:f9:22:b6:7b:8f:aa:54:57:0d:05:
                    9b:4d:78:87:49:b3:8c:e3:15:55:54:4a:1a:54:fe:
                    f1:78:07:96:9d:63:59:5a:98:80:d6:48:f9:fa:29:
                    ce:5a:bf:b9:ab:d7:fe:17:cb:9f:29:c4:c4:2b:6f:
                    15:8c:fe:8b:92:1f:87:08:1e:9a:4b:17:4f:52:a1:
                    37:b4:e4:b5:7a:2e:58:16:e5:46:e5:78:84:d9:1f:
                    dd:86:81:81:83:09:29:bb:e1:d9:50:2b:8f:9e:21:
                    93:b9:6e:fb:9b:18:9f:6f:2d:7c:71:c1:e8:80:51:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:48:97:45:F3:96:DE:AE:91:4C:E4:A6:70:C1:AF:09:A9:14:37:B9
            X509v3 Authority Key Identifier:
                keyid:F2:69:20:BB:D7:FB:70:EF:5D:BC:F2:D0:FE:A2:02:BD:95:76:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkgu9f7cO9dvPLQ_qICvZV2Xro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a18a97-8fc7-4955-87af-0bcfc532933c/1/8mkgu9f7cO9dvPLQ_qICvZV2Xro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a5:97:a3:dd:cd:3e:d4:db:14:9e:c9:b6:22:67:5c:41:e0:
         07:f3:cf:c0:25:d1:98:49:38:b1:1c:dc:34:55:7e:29:34:3d:
         e9:33:0b:53:0b:45:c4:e9:a3:98:b3:d8:98:75:bb:50:34:01:
         b3:a8:b2:39:e2:c2:83:bb:df:c7:6c:1f:3d:ca:74:1e:3c:77:
         20:2e:02:31:09:8a:26:ac:8c:67:c4:94:34:f7:7b:50:39:bd:
         ba:8e:2f:c8:f5:f1:fb:8d:29:e3:d9:f0:fb:5c:2b:59:3b:b7:
         96:bf:65:ae:ad:96:9b:18:f4:d5:69:3d:9a:a4:85:7f:80:0c:
         fe:3e:e5:cc:85:d6:be:fd:bb:db:86:47:e8:39:ed:3a:30:57:
         65:06:e5:37:69:b6:3a:00:25:cb:fd:2f:2b:cc:22:d4:23:ed:
         3d:e1:c2:4d:c8:91:5d:90:6e:e9:6b:31:70:2e:df:6c:e5:b7:
         b7:b7:88:af:33:49:b7:64:07:59:14:6d:60:4a:5c:5c:74:8d:
         87:f3:1e:c8:4f:8c:48:7f:d0:28:39:48:0f:71:d9:86:fe:4d:
         d4:2b:7a:61:78:50:5c:04:36:f9:a1:ad:ff:c4:2c:25:90:3f:
         03:f3:80:cb:f1:85:e4:21:6f:20:0f:ac:93:f7:37:4a:12:19:
         d8:5f:7c:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdPRLpCKjiCa0J/hmRlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkyMGJiZDdmYjcwZWY1ZGJjZjJkMGZlYTIwMmJkOTU3
NjVlYmEwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
Eyg2YzQ4OTc0NWYzOTZkZWFlOTE0Y2U0YTY3MGMxYWYwOWE5MTQzN2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSywycwZOubBGCSZZn97mwPeMcwP
OisITXC5dllmVRwM5RN7gKUQMXNqByk+8DCWgSRNkqrIus158AtU2ap70QxyMjGy
/NfQYSk3Bj+ZnfBxK+6etYitjKJNWslDoFhxpIFUh7CBKwQXUfjW7fD0tRQBgcUS
JEXN5qkGK0SJOyTsN2dYIkm7JRSqWvkitnuPqlRXDQWbTXiHSbOM4xVVVEoaVP7x
eAeWnWNZWpiA1kj5+inOWr+5q9f+F8ufKcTEK28VjP6Lkh+HCB6aSxdPUqE3tOS1
ei5YFuVG5XiE2R/dhoGBgwkpu+HZUCuPniGTuW77mxifby18ccHogFFS+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxIl0Xzlt6ukUzkpnDBrwmpFDe5MB8GA1UdIwQY
MBaAFPJpILvX+3DvXbzy0P6iAr2Vdl66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYt
MGJjZmM1MzI5MzNjLzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9hMThhOTctOGZjNy00OTU1LTg3YWYtMGJjZmM1MzI5MzNj
LzEvOG1rZ3U5ZjdjTzlkdlBMUV9xSUN2WlYyWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKWXo93N
PtTbFJ7JtiJnXEHgB/PPwCXRmEk4sRzcNFV+KTQ96TMLUwtFxOmjmLPYmHW7UDQB
s6iyOeLCg7vfx2wfPcp0Hjx3IC4CMQmKJqyMZ8SUNPd7UDm9uo4vyPXx+40p49nw
+1wrWTu3lr9lrq2Wmxj01Wk9mqSFf4AM/j7lzIXWvv2724ZH6DntOjBXZQblN2m2
OgAly/0vK8wi1CPtPeHCTciRXZBu6WsxcC7fbOW3t7eIrzNJt2QHWRRtYEpcXHSN
h/MeyE+MSH/QKDlID3HZhv5N1Ct6YXhQXAQ2+aGt/8QsJZA/A/OAy/GF5CFvIA+s
k/c3ShIZ2F98+g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:39 2025 by rpki-client