Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File:                     kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier:          8FS1WUa93oE65YA9RvaQMtw/Wwn8jvaeOBVp2QE/S00=
Subject key identifier:   46:75:4E:0B:5C:4D:3C:47:03:60:EA:92:7D:70:2E:7A:6B:82:DC:A4
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer:       /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial:       0194BD175E2592037BDC25124872039B2A88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 16:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:12 +0000
Files and hashes:         1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: zoO4QhVlLOfOTygJL9a5OV23rFZ7PlOb5KYfL9s3PFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5e:25:92:03:7b:dc:25:12:48:72:03:9b:2a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
        Validity
            Not Before: Jan 31 16:00:12 2025 GMT
            Not After : Feb  1 16:00:12 2025 GMT
        Subject: CN=46754e0b5c4d3c470360ea927d702e7a6b82dca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:00:e5:ed:8c:1a:5b:71:ec:06:bd:f3:e6:
                    37:3d:d7:2c:76:56:ef:ab:7a:35:a5:3b:e0:70:af:
                    ae:03:1d:19:8c:aa:fe:be:bd:86:7e:be:dc:2e:ef:
                    83:03:76:c4:b3:ab:60:af:e9:3e:79:47:9b:2d:5c:
                    8c:43:71:bb:83:3c:2a:fb:ea:02:ff:5c:5c:4c:8f:
                    9f:2e:e0:22:d0:4f:7e:14:a4:12:84:97:87:8c:83:
                    20:dd:bb:79:4d:7a:ae:6b:4b:03:23:09:c3:7f:43:
                    05:52:19:d8:16:19:81:cf:a7:2e:03:58:e8:bc:63:
                    e0:6a:02:45:65:bd:70:e8:39:d1:a7:79:f0:77:c0:
                    f6:d0:1a:2d:0f:a9:39:2a:c2:a4:c1:eb:d3:11:01:
                    9b:28:a8:db:16:9e:1b:93:6f:a8:51:9e:cd:4b:33:
                    a6:ea:c0:52:31:eb:d7:ce:36:68:ea:48:0f:d3:1a:
                    33:04:f8:6d:1c:59:94:bb:35:5f:c2:e1:bf:06:de:
                    58:e7:d9:73:a3:c6:aa:dc:a1:2d:36:09:d6:16:cf:
                    99:b2:4a:fe:c0:3f:d4:ef:4a:bb:59:a9:32:3c:03:
                    a3:05:c3:5b:4d:a6:28:54:f8:d2:1f:0d:5a:d5:31:
                    30:35:98:58:76:ec:a9:2b:23:9f:3f:76:a0:10:20:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:75:4E:0B:5C:4D:3C:47:03:60:EA:92:7D:70:2E:7A:6B:82:DC:A4
            X509v3 Authority Key Identifier:
                keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:81:50:f0:76:37:62:1c:6e:73:ba:b5:90:71:b4:ce:77:44:
         15:e5:07:91:6b:aa:a1:14:c8:72:81:8c:76:55:ae:1e:5e:14:
         31:a4:cb:dc:00:a7:a6:7d:76:2a:36:ab:f5:09:b5:5f:b8:b2:
         dd:11:aa:b6:10:71:1d:d6:71:0a:38:14:c1:ea:c5:91:e0:34:
         f8:8f:40:b8:0c:ff:a7:c1:d1:3a:17:53:e4:c1:5f:56:b6:ce:
         21:9d:9b:13:ff:6b:c4:70:45:2c:8e:9c:da:58:92:d1:af:63:
         cc:ee:c3:cc:a5:c3:36:ee:35:50:38:a0:3a:75:c0:4e:56:d4:
         c4:20:a4:44:5f:be:e5:97:e2:c8:ec:1e:12:2d:d4:45:aa:6e:
         89:47:5b:65:c4:20:7c:76:0a:6b:89:f1:f0:54:db:3c:b1:05:
         34:4a:5a:e8:5f:c9:3f:8a:5c:51:d9:ec:71:6e:03:69:53:8a:
         48:2d:22:6e:75:a7:18:6f:30:fa:ff:18:d2:45:c6:fa:24:08:
         d6:d3:38:d0:fd:f6:13:28:47:cf:6c:08:8c:d8:1e:5c:c6:1f:
         85:a0:f3:1f:40:28:34:56:f6:3b:be:07:ac:84:e1:35:0e:ef:
         50:0c:93:e0:eb:b7:0e:d6:af:fd:e4:ba:39:e4:14:bd:52:b7:
         2a:04:8c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F14lkgN73CUSSHIDmyqIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZmVhYTMyYzRlMGUxOTcxYWQwZDU4YjE3MmNlZDE3MjEw
NTY4NWMwHhcNMjUwMTMxMTYwMDEyWhcNMjUwMjAxMTYwMDEyWjAzMTEwLwYDVQQD
Eyg0Njc1NGUwYjVjNGQzYzQ3MDM2MGVhOTI3ZDcwMmU3YTZiODJkY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx8A5e2MGltx7Aa98+Y3Pdcsdlbv
q3o1pTvgcK+uAx0ZjKr+vr2Gfr7cLu+DA3bEs6tgr+k+eUebLVyMQ3G7gzwq++oC
/1xcTI+fLuAi0E9+FKQShJeHjIMg3bt5TXqua0sDIwnDf0MFUhnYFhmBz6cuA1jo
vGPgagJFZb1w6DnRp3nwd8D20BotD6k5KsKkwevTEQGbKKjbFp4bk2+oUZ7NSzOm
6sBSMevXzjZo6kgP0xozBPhtHFmUuzVfwuG/Bt5Y59lzo8aq3KEtNgnWFs+Zskr+
wD/U70q7WakyPAOjBcNbTaYoVPjSHw1a1TEwNZhYduypKyOfP3agECAhTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEZ1TgtcTTxHA2Dqkn1wLnprgtykMB8GA1UdIwQY
MBaAFJL+qjLE4OGXGtDVixcs7RchBWhcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEt
MDVlYTIyZGRkNzIzLzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kZjc2ZWEtZjc1Zi00ZWYzLTgwNmEtMDVlYTIyZGRkNzIz
LzEva3Y2cU1zVGc0WmNhME5XTEZ5enRGeUVGYUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYFQ8HY3
Yhxuc7q1kHG0zndEFeUHkWuqoRTIcoGMdlWuHl4UMaTL3ACnpn12Kjar9Qm1X7iy
3RGqthBxHdZxCjgUwerFkeA0+I9AuAz/p8HROhdT5MFfVrbOIZ2bE/9rxHBFLI6c
2liS0a9jzO7DzKXDNu41UDigOnXATlbUxCCkRF++5ZfiyOweEi3URapuiUdbZcQg
fHYKa4nx8FTbPLEFNEpa6F/JP4pcUdnscW4DaVOKSC0ibnWnGG8w+v8Y0kXG+iQI
1tM40P32EyhHz2wIjNgeXMYfhaDzH0AoNFb2O74HrIThNQ7vUAyT4Ou3Dtav/eS6
OeQUvVK3KgSMMQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:18 2025 by rpki-client