Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
File:                     pDCUIgOqL405Co2uULhamEUE_Zw.mft (raw, json)
Hash identifier:          yMACzaGdEY128CMjS5ImPcmylljlO3FsZ6dGQnsir78=
Subject key identifier:   4B:40:84:49:FF:99:D3:A2:77:41:96:18:95:16:0C:AB:2C:5F:1B:BA
Authority key identifier: A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C
Certificate issuer:       /CN=a430942203aa2f8d390a8dae50b85a984504fd9c
Certificate serial:       0194BD17E05519752563B50D467E56C7A203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft
Manifest number:          0E26
Signing time:             Fri 31 Jan 2025 16:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:46 +0000
Files and hashes:         1: mxHqegiIzk-5yKnAa0W9InQ8xh8.roa (hash: 1T8S7F5C1unZ11xq+jwLnSOyvWawPuJqcLvoyNmvP44=)
                          2: pDCUIgOqL405Co2uULhamEUE_Zw.crl (hash: zg6ptQQcsDXjcxDOqA20NBt6AEhentE43MvLLLG2+l4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e0:55:19:75:25:63:b5:0d:46:7e:56:c7:a2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a430942203aa2f8d390a8dae50b85a984504fd9c
        Validity
            Not Before: Jan 31 16:00:46 2025 GMT
            Not After : Feb  1 16:00:46 2025 GMT
        Subject: CN=4b408449ff99d3a27741961895160cab2c5f1bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:79:0a:fd:2a:13:7c:f6:53:e1:c3:39:ec:
                    00:15:00:1f:38:44:5a:22:99:7e:14:7c:89:90:10:
                    f0:0d:64:f3:6c:60:8f:82:7e:33:e0:78:21:39:24:
                    fb:6e:9f:8b:1e:11:dc:0b:19:b6:8d:05:f7:e7:5b:
                    9b:21:50:c4:8a:d9:1b:da:53:86:ac:85:21:fd:f2:
                    df:c6:e7:d0:99:51:f4:99:d7:e1:58:da:b1:77:2c:
                    ba:d3:ab:e7:f4:d9:f7:be:de:af:5d:c6:52:16:64:
                    86:2f:3f:ed:9e:f9:7f:4c:ff:fa:bd:fc:48:d3:5d:
                    8a:cc:92:5f:95:05:ca:35:c6:76:02:43:f5:17:73:
                    be:be:7a:0a:6b:69:b8:0e:ba:d8:fb:5e:db:98:89:
                    bb:8a:97:95:2c:bd:06:39:71:a2:fa:8e:83:de:67:
                    e9:f9:0e:0c:ab:36:d2:13:37:a5:cb:e6:63:2d:a3:
                    a3:2d:1a:72:19:a0:97:bb:44:b0:be:f6:dd:e9:5e:
                    f9:3c:a2:f1:86:ad:08:05:26:ad:8e:f9:41:48:8f:
                    c1:22:43:ac:f2:ad:1d:c9:03:95:f2:1f:f4:be:f9:
                    cb:01:47:4e:78:2d:a9:84:ad:9e:24:e3:cb:a4:ad:
                    1d:bb:dd:4a:d3:0a:98:f5:e7:54:85:12:51:57:9d:
                    5e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:40:84:49:FF:99:D3:A2:77:41:96:18:95:16:0C:AB:2C:5F:1B:BA
            X509v3 Authority Key Identifier:
                keyid:A4:30:94:22:03:AA:2F:8D:39:0A:8D:AE:50:B8:5A:98:45:04:FD:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDCUIgOqL405Co2uULhamEUE_Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/c52953-f96d-4e4c-8ddb-1bf0f7b4df30/1/pDCUIgOqL405Co2uULhamEUE_Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cb:93:f3:38:f2:a2:40:3b:50:54:c4:20:cb:19:0f:07:7a:
         1f:77:4f:22:e6:6f:d3:4e:b8:7d:65:6f:29:4b:1a:66:f8:cb:
         93:d7:d6:a5:3b:79:df:f4:12:cc:a2:67:de:a8:b0:59:6d:d4:
         84:29:0d:12:4a:b1:c7:3a:ab:30:35:55:73:de:9d:b2:82:e2:
         c3:d6:7a:28:94:4b:1d:2d:90:35:4b:c9:02:0f:55:59:32:cb:
         fa:42:0e:6d:fa:00:e5:d0:c9:20:04:b4:c9:4a:02:88:de:d2:
         6e:7b:e1:6a:f5:38:8c:98:4f:83:c2:c5:fd:c0:41:43:a4:61:
         91:89:4b:f7:cd:fc:1e:11:32:29:db:53:2e:8d:2c:21:86:b2:
         c2:ba:ce:2c:33:35:f3:55:e8:a0:2f:4a:c0:61:a1:d5:53:df:
         21:20:1f:28:9e:c5:a9:80:d3:9f:e1:31:d8:c0:1d:0a:97:66:
         b5:12:a3:47:5e:31:cf:f3:79:28:27:3f:82:2c:73:91:67:5f:
         c0:29:e3:0e:23:21:27:6b:2c:6c:c1:f4:1d:14:d0:a7:9a:19:
         d8:bc:92:b0:6b:2e:a9:d0:1c:f3:e4:96:ba:d1:62:ca:c5:ce:
         a1:95:fb:d8:20:66:2f:0d:5e:41:21:ad:28:91:91:98:aa:bf:
         14:a5:46:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+BVGXUlY7UNRn5Wx6IDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzA5NDIyMDNhYTJmOGQzOTBhOGRhZTUwYjg1YTk4NDUw
NGZkOWMwHhcNMjUwMTMxMTYwMDQ2WhcNMjUwMjAxMTYwMDQ2WjAzMTEwLwYDVQQD
Eyg0YjQwODQ0OWZmOTlkM2EyNzc0MTk2MTg5NTE2MGNhYjJjNWYxYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDt5Cv0qE3z2U+HDOewAFQAfOERa
Ipl+FHyJkBDwDWTzbGCPgn4z4HghOST7bp+LHhHcCxm2jQX351ubIVDEitkb2lOG
rIUh/fLfxufQmVH0mdfhWNqxdyy606vn9Nn3vt6vXcZSFmSGLz/tnvl/TP/6vfxI
012KzJJflQXKNcZ2AkP1F3O+vnoKa2m4DrrY+17bmIm7ipeVLL0GOXGi+o6D3mfp
+Q4MqzbSEzely+ZjLaOjLRpyGaCXu0Swvvbd6V75PKLxhq0IBSatjvlBSI/BIkOs
8q0dyQOV8h/0vvnLAUdOeC2phK2eJOPLpK0du91K0wqY9edUhRJRV51eRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtAhEn/mdOid0GWGJUWDKssXxu6MB8GA1UdIwQY
MBaAFKQwlCIDqi+NOQqNrlC4WphFBP2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGIt
MWJmMGY3YjRkZjMwLzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9jNTI5NTMtZjk2ZC00ZTRjLThkZGItMWJmMGY3YjRkZjMw
LzEvcERDVUlnT3FMNDA1Q28ydVVMaGFtRVVFX1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8uT8zjy
okA7UFTEIMsZDwd6H3dPIuZv0064fWVvKUsaZvjLk9fWpTt53/QSzKJn3qiwWW3U
hCkNEkqxxzqrMDVVc96dsoLiw9Z6KJRLHS2QNUvJAg9VWTLL+kIObfoA5dDJIAS0
yUoCiN7SbnvhavU4jJhPg8LF/cBBQ6RhkYlL9838HhEyKdtTLo0sIYaywrrOLDM1
81XooC9KwGGh1VPfISAfKJ7FqYDTn+Ex2MAdCpdmtRKjR14xz/N5KCc/gixzkWdf
wCnjDiMhJ2ssbMH0HRTQp5oZ2LySsGsuqdAc8+SWutFiysXOoZX72CBmLw1eQSGt
KJGRmKq/FKVGmg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:20 2025 by rpki-client