Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
File:                     ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft (raw, json)
Hash identifier:          Yat5pbr5QXG8lwgRmyXTfTJHSFRHWh06n+yKo8+YHOA=
Subject key identifier:   93:15:D4:C7:B5:DC:F6:14:DB:AD:46:09:FC:07:BC:DA:1B:8C:93:E7
Authority key identifier: 67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC
Certificate issuer:       /CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
Certificate serial:       0194BC04B41649B5DDC9B4DA74D8B064977D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft
Manifest number:          0F49
Signing time:             Fri 31 Jan 2025 11:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:12 +0000
Files and hashes:         1: 4nY9ANf4EVr4RYiqxYiIP5YrsGA.roa (hash: KpMPrAJwKfQpF/Ebmkogzzx0/khONPsTM4gj0VRrnV8=)
                          2: ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl (hash: 58qyF8vmGrcgjMoll1G0jbeeOeguLYMlsH+rxuXyYS0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:b4:16:49:b5:dd:c9:b4:da:74:d8:b0:64:97:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6713b9c04ca698c0b7fafd1d17fc068b7099f6ac
        Validity
            Not Before: Jan 31 11:00:12 2025 GMT
            Not After : Feb  1 11:00:12 2025 GMT
        Subject: CN=9315d4c7b5dcf614dbad4609fc07bcda1b8c93e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a2:6e:31:6f:57:a1:6c:1c:c2:fe:3d:33:6c:
                    b8:70:5f:07:ad:2e:29:8e:5b:10:2a:ba:48:80:6a:
                    8b:eb:45:04:f5:90:93:0a:15:62:1b:01:cd:75:60:
                    98:08:77:b6:f0:26:da:4d:b4:87:fd:d1:ad:de:64:
                    85:21:c5:6b:6a:9a:b7:f1:de:f9:2b:6f:5a:08:51:
                    67:a6:c9:53:d9:46:d1:bd:95:2f:14:7c:f8:2f:2c:
                    20:6e:ef:36:b8:bf:0a:b8:69:2c:bd:dc:58:c0:53:
                    5c:4d:e6:e1:58:25:74:1a:c7:6c:95:42:ec:91:6d:
                    e9:23:c7:3c:81:48:17:33:a0:24:7e:e2:ce:ae:d8:
                    54:19:84:20:90:52:d3:b4:08:77:9d:bd:40:9e:19:
                    de:07:3c:07:76:57:07:5e:c0:bd:7a:4e:cd:99:41:
                    c3:7d:d5:5f:9d:f5:3d:5b:ed:3b:6d:f2:80:2d:9b:
                    4d:21:4b:e0:99:41:b5:e2:42:5f:d1:49:a7:1b:a0:
                    f5:88:36:9e:6e:6e:19:6e:dd:5e:b6:08:0b:fc:ba:
                    40:1e:51:53:2b:02:45:ab:47:03:53:45:72:fd:92:
                    eb:2c:62:92:e0:0e:40:bb:1f:a6:e0:90:a0:bc:e9:
                    c1:a6:9e:af:d9:8f:67:5a:b2:cb:d7:53:5a:c4:74:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:D4:C7:B5:DC:F6:14:DB:AD:46:09:FC:07:BC:DA:1B:8C:93:E7
            X509v3 Authority Key Identifier:
                keyid:67:13:B9:C0:4C:A6:98:C0:B7:FA:FD:1D:17:FC:06:8B:70:99:F6:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/50f9e5-913c-4be6-9949-4c8ad7c46203/1/ZxO5wEymmMC3-v0dF_wGi3CZ9qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ce:c5:1e:55:66:0c:32:02:84:3b:15:5b:c8:41:28:2d:03:
         e0:4e:e5:09:10:1d:86:36:23:43:82:e0:19:94:22:22:b7:11:
         0c:8f:35:82:2b:6a:ea:5c:88:22:0f:08:03:c8:8d:e6:8a:30:
         1d:6b:54:1a:bf:69:4f:84:3d:f8:01:37:ac:f0:04:52:c5:1a:
         93:1c:a7:13:6e:b1:5a:cd:f3:8c:bc:72:d1:bf:fb:56:ec:2d:
         ac:8a:61:32:52:b1:a7:7c:c0:0a:e1:9d:63:36:68:1e:40:1a:
         70:4f:f9:0a:c1:e0:9e:a4:e3:c9:84:d3:14:c7:c4:20:4b:46:
         e7:20:a8:cf:ce:f4:95:ff:3b:0f:c3:bb:2f:b8:b0:ba:09:6c:
         a8:ea:a7:0e:d4:ad:c6:75:21:d5:a3:11:21:43:21:d6:56:15:
         b7:7b:46:8f:d7:ba:38:a8:5a:72:a5:19:ac:6e:a1:1d:de:df:
         eb:93:e4:30:f3:c1:80:5c:37:23:4d:eb:ab:3b:43:fe:50:a0:
         f1:e9:e3:7f:72:2d:c0:ca:92:a9:0d:ac:2c:81:6f:09:11:da:
         65:50:1e:7d:bc:6b:78:ac:0c:e6:f4:ca:c8:c5:c5:f6:dd:b1:
         ab:ac:de:9f:1e:68:41:50:6c:0b:b6:42:c3:1b:e2:56:ab:29:
         d6:ab:4c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLQWSbXdybTadNiwZJd9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MTNiOWMwNGNhNjk4YzBiN2ZhZmQxZDE3ZmMwNjhiNzA5
OWY2YWMwHhcNMjUwMTMxMTEwMDEyWhcNMjUwMjAxMTEwMDEyWjAzMTEwLwYDVQQD
Eyg5MzE1ZDRjN2I1ZGNmNjE0ZGJhZDQ2MDlmYzA3YmNkYTFiOGM5M2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKJuMW9XoWwcwv49M2y4cF8HrS4p
jlsQKrpIgGqL60UE9ZCTChViGwHNdWCYCHe28CbaTbSH/dGt3mSFIcVrapq38d75
K29aCFFnpslT2UbRvZUvFHz4Lywgbu82uL8KuGksvdxYwFNcTebhWCV0GsdslULs
kW3pI8c8gUgXM6AkfuLOrthUGYQgkFLTtAh3nb1AnhneBzwHdlcHXsC9ek7NmUHD
fdVfnfU9W+07bfKALZtNIUvgmUG14kJf0UmnG6D1iDaebm4Zbt1etggL/LpAHlFT
KwJFq0cDU0Vy/ZLrLGKS4A5Aux+m4JCgvOnBpp6v2Y9nWrLL11NaxHQR6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMV1Me13PYU261GCfwHvNobjJPnMB8GA1UdIwQY
MBaAFGcTucBMppjAt/r9HRf8BotwmfasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDkt
NGM4YWQ3YzQ2MjAzLzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81MGY5ZTUtOTEzYy00YmU2LTk5NDktNGM4YWQ3YzQ2MjAz
LzEvWnhPNXdFeW1tTUMzLXYwZEZfd0dpM0NaOXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADM7FHlVm
DDIChDsVW8hBKC0D4E7lCRAdhjYjQ4LgGZQiIrcRDI81gitq6lyIIg8IA8iN5oow
HWtUGr9pT4Q9+AE3rPAEUsUakxynE26xWs3zjLxy0b/7VuwtrIphMlKxp3zACuGd
YzZoHkAacE/5CsHgnqTjyYTTFMfEIEtG5yCoz870lf87D8O7L7iwuglsqOqnDtSt
xnUh1aMRIUMh1lYVt3tGj9e6OKhacqUZrG6hHd7f65PkMPPBgFw3I03rqztD/lCg
8enjf3ItwMqSqQ2sLIFvCRHaZVAefbxreKwM5vTKyMXF9t2xq6zenx5oQVBsC7ZC
wxviVqsp1qtMdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:52 2025 by rpki-client