Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
File:                     qGWA4YrW_43JQr6IPBbei3MflgU.mft (raw, json)
Hash identifier:          Jjo3lw1oNDL0GR1ICBT4gTEX8Jug1e9LtHeM89EvfNI=
Subject key identifier:   66:39:6E:AB:08:88:B0:CE:A2:3C:30:1F:6E:97:31:18:EA:E5:66:F5
Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05
Certificate issuer:       /CN=a86580e18ad6ff8dc942be883c16de8b731f9605
Certificate serial:       0194BD85A22632064463B2CF9D1C931AEC01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft
Manifest number:          143A
Signing time:             Fri 31 Jan 2025 18:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:39 +0000
Files and hashes:         1: 197pYnG46mucdaOjzAIW-0FvLzY.roa (hash: BR12QmTAjX/RgEKW95SxAOTfhAUiEU3sJOAlauFSs3o=)
                          2: IAgL9Rqsax5Ubj9r-wZ6tomx5l4.roa (hash: N26/KKGVSMUch7z4T5mn9MTk6NJ1368D+UG3bVNSWBA=)
                          3: kI95OqljvpuP19xNeatpCC78QL0.roa (hash: xeIJsQyiu78m/ov5MVv9GnNEdwzfiIiPyuIblum8QtY=)
                          4: kgbZgs6-Yl9779KCqxnYBmplLhc.roa (hash: qc6AvzGUC9pOX7uyW0pISf+jcmwsR8CrVQA4q8kjZA8=)
                          5: ma2RNCPOqKr6px7ttaC3OYadV5M.roa (hash: 4QXUUTopAIkZT+ngreE21xMHUG4bG/w+QgmObpcV9bI=)
                          6: qGWA4YrW_43JQr6IPBbei3MflgU.crl (hash: mXwQSjvTtI3koo688vfbg4X6n2GLp68s5mv2VIJL7u4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a2:26:32:06:44:63:b2:cf:9d:1c:93:1a:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605
        Validity
            Not Before: Jan 31 18:00:39 2025 GMT
            Not After : Feb  1 18:00:39 2025 GMT
        Subject: CN=66396eab0888b0cea23c301f6e973118eae566f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:65:bc:3b:f7:59:89:d3:a8:4d:e5:48:c7:
                    ec:35:2d:3c:57:27:6d:12:6a:f5:2c:5a:62:4a:66:
                    40:da:42:4d:02:0e:d2:87:ad:6f:0e:c2:9d:c5:45:
                    ff:d4:87:21:f7:e5:ac:b9:bb:17:70:07:8b:c9:56:
                    b5:1a:d9:54:21:ba:c0:db:d9:78:24:79:ed:c4:0d:
                    aa:49:49:40:73:fc:44:83:46:18:d7:58:86:58:fe:
                    d2:4c:17:14:d0:5d:80:b9:f4:e1:ee:7b:d8:7b:20:
                    d0:61:44:6e:e8:69:a0:9b:4f:fc:42:63:a8:d9:e8:
                    39:34:5e:2e:44:93:7f:42:c6:23:ae:eb:1f:3d:ac:
                    58:6b:06:ba:89:af:06:bb:37:fb:cb:3f:2f:b3:62:
                    e4:5d:cd:3a:4a:30:d1:ed:e5:77:27:79:53:20:ef:
                    e0:a6:29:e7:b8:5e:e4:4f:e1:a5:0c:a2:3e:19:4f:
                    7b:79:4b:bd:c9:7f:77:6a:20:f6:80:de:82:66:23:
                    09:0a:42:fa:76:14:e4:3a:5c:8c:e1:26:7b:a9:52:
                    b5:c4:d3:6b:d2:37:23:c8:aa:9f:b4:69:cf:dd:68:
                    75:c6:31:15:14:60:3a:16:8a:d0:a0:3b:73:6e:95:
                    86:62:d1:3a:20:6a:e8:fb:7e:c6:8b:44:f6:05:d3:
                    eb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:6E:AB:08:88:B0:CE:A2:3C:30:1F:6E:97:31:18:EA:E5:66:F5
            X509v3 Authority Key Identifier:
                keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1f:7c:d9:ac:6c:a6:c1:b5:02:75:ce:a8:db:d8:88:34:34:
         e4:ed:61:2c:1c:5f:cb:05:7b:9e:f1:0b:5e:6a:00:5b:0d:f3:
         83:d4:c7:4b:68:4f:9e:62:91:a8:e9:38:49:aa:77:f4:c7:df:
         56:cd:87:0e:a7:e4:25:5c:a3:06:b1:37:37:8a:8f:7d:01:35:
         c8:33:b5:85:b3:9d:19:07:a0:3f:5a:f0:2d:a6:25:4f:c4:84:
         00:bc:b8:0e:af:53:e8:c7:68:63:6d:0d:49:ee:17:65:54:44:
         c4:9d:b3:45:c5:c1:ec:34:dd:03:0f:d0:c6:dd:a6:66:3e:13:
         ed:58:ba:39:37:22:55:62:48:c2:a0:f4:4e:5f:27:73:09:53:
         66:98:b8:b3:db:86:76:c8:a1:14:9e:e6:f0:ed:8e:68:0a:53:
         99:23:2c:15:9f:d6:f8:4d:72:30:2e:c8:40:04:f0:84:25:1e:
         68:eb:3c:1b:9c:59:7a:eb:75:bb:b8:de:25:db:39:b8:44:a9:
         0d:9a:e6:50:84:75:fe:61:2f:bf:8b:a3:2e:34:89:70:86:38:
         96:0c:83:71:b0:78:a9:cc:5f:e9:2e:7d:bf:fc:a8:4c:d4:67:
         05:d1:74:44:d6:87:77:d2:44:08:9f:40:15:31:de:76:e4:52:
         cc:18:61:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haImMgZEY7LPnRyTGuwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx
Zjk2MDUwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
Eyg2NjM5NmVhYjA4ODhiMGNlYTIzYzMwMWY2ZTk3MzExOGVhZTU2NmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA1lvDv3WYnTqE3lSMfsNS08Vydt
Emr1LFpiSmZA2kJNAg7Sh61vDsKdxUX/1Ich9+WsubsXcAeLyVa1GtlUIbrA29l4
JHntxA2qSUlAc/xEg0YY11iGWP7STBcU0F2AufTh7nvYeyDQYURu6Gmgm0/8QmOo
2eg5NF4uRJN/QsYjrusfPaxYawa6ia8Guzf7yz8vs2LkXc06SjDR7eV3J3lTIO/g
pinnuF7kT+GlDKI+GU97eUu9yX93aiD2gN6CZiMJCkL6dhTkOlyM4SZ7qVK1xNNr
0jcjyKqftGnP3Wh1xjEVFGA6ForQoDtzbpWGYtE6IGro+37Gi0T2BdPrNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGY5bqsIiLDOojwwH26XMRjq5Wb1MB8GA1UdIwQY
MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt
MjM2ZTkyZmM2YTU5LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5
LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZR982axs
psG1AnXOqNvYiDQ05O1hLBxfywV7nvELXmoAWw3zg9THS2hPnmKRqOk4Sap39Mff
Vs2HDqfkJVyjBrE3N4qPfQE1yDO1hbOdGQegP1rwLaYlT8SEALy4Dq9T6MdoY20N
Se4XZVRExJ2zRcXB7DTdAw/Qxt2mZj4T7Vi6OTciVWJIwqD0Tl8ncwlTZpi4s9uG
dsihFJ7m8O2OaApTmSMsFZ/W+E1yMC7IQATwhCUeaOs8G5xZeut1u7jeJds5uESp
DZrmUIR1/mEvv4ujLjSJcIY4lgyDcbB4qcxf6S59v/yoTNRnBdF0RNaHd9JECJ9A
FTHeduRSzBhhyg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:17 2025 by rpki-client