Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
File:                     _zFJJHOnjG_p9Tn5-n0iUlYKK34.mft (raw, json)
Hash identifier:          GGA7OPDIxsQmIfRHLiXuxdz7EmXadqZYX77rPBux46M=
Subject key identifier:   29:1A:C5:D1:E2:63:E5:9F:37:1C:44:1C:DB:AD:E1:48:3F:BD:60:E7
Authority key identifier: FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E
Certificate issuer:       /CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
Certificate serial:       0194BC3BFB6E0B2EFE008771B677A57E2985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft
Manifest number:          13EF
Signing time:             Fri 31 Jan 2025 12:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:35 +0000
Files and hashes:         1: 9qi9h0f9RsAWpZuFc_s4Cmk2M0A.roa (hash: b6ycNMYfYTSq+8wwlth6XhXq2jeSDZcud5rVJF56Fyg=)
                          2: D-zKhuWPkxLy8zaYbK0D0Frw7ec.roa (hash: w8bSqTQlhfxtATfQh4eWS/eZa2u3cEwYUnWnj6COmyg=)
                          3: F_cRK7_FuJ1SOPF-eStGPWamodQ.roa (hash: bwgPCaYQdCUVOLDgCvOHRKGxaq7IRtIbjKPrwDwOiGI=)
                          4: JaFKfYKslg0WUVhBG8hHu6LqTvw.roa (hash: 4GgDdTVxQxqewTP0EOz1RIPWIQ2EEWazgc1qxopxzyA=)
                          5: NiD2SDjoMC5kCqhJ0LqUs7rzMnw.roa (hash: 9+KHXzf6QQ6hX/XBCMhmaRntprEYELpBh7Oa+Qw01T4=)
                          6: U6O4fPn6akIpWmgc4yJT0O6kLpo.roa (hash: yofA2VyhfSO3CESlgcLfFamVAKarRdUA7fzOcVSh6T0=)
                          7: _zFJJHOnjG_p9Tn5-n0iUlYKK34.crl (hash: pC9WOyZbaIJnSfbDLo978mMnSPrD91RDw0hL4VFhSI8=)
                          8: ktD6AyHksOCblKN9a3qVRt27m9o.roa (hash: V5QNEtlJtM9vZYXeCjRbhyFbWnet1Vj6bUBis/VvlnY=)
                          9: u3VJR1_M7JzYx842qLGTM0en5V0.roa (hash: qbP/xDwKS1NUr1YSZhW1L+ZrVrT39XIk/W4+EAm8kOI=)
                          10: y4Nw6VYuIuUZOv6I685fKqZhbWQ.roa (hash: JM0RAslsFdrhEKUBmY+ywDM/Jo6q24Igd7pWLFOkC9Q=)
                          11: y59FYS6lZrG-f16cItpm531MOXQ.roa (hash: m/cQn2JcKJOMV46aRM88IL5ucBeWO1CQAwW+N3Yj5A4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:fb:6e:0b:2e:fe:00:87:71:b6:77:a5:7e:29:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff31492473a78c6fe9f539f9fa7d2252560a2b7e
        Validity
            Not Before: Jan 31 12:00:35 2025 GMT
            Not After : Feb  1 12:00:35 2025 GMT
        Subject: CN=291ac5d1e263e59f371c441cdbade1483fbd60e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:fa:43:32:03:62:b5:50:dd:39:f7:e1:80:
                    1d:5c:5f:fd:5c:f3:14:4a:6e:22:7a:88:3d:da:1f:
                    32:91:b7:c5:68:b3:e2:74:97:31:da:b5:b3:fa:1a:
                    d3:8a:17:c2:76:c6:83:de:f2:28:21:97:79:da:21:
                    ac:ee:37:87:ec:4b:26:99:c6:91:5b:b2:79:52:da:
                    ff:e1:d0:9c:c8:8b:24:fb:c7:69:c0:40:09:04:9a:
                    e8:a0:ad:6a:06:23:83:c9:a2:48:09:e7:69:ec:cf:
                    06:d9:70:3e:d9:f7:b1:32:7d:d8:af:c8:41:f1:09:
                    05:aa:cc:b9:ac:ea:7b:21:b5:5b:71:43:88:78:72:
                    4b:c7:9d:01:ea:16:90:2b:2e:af:25:1a:64:d0:ff:
                    ba:4b:4a:ad:2f:cd:03:c5:f6:d2:7f:0a:d0:79:f6:
                    2e:a2:65:0c:d1:f2:19:d1:1e:2e:3b:67:08:9a:a0:
                    89:e3:6f:14:73:ed:2c:a7:f2:36:e2:42:b6:27:1a:
                    fa:4f:95:7f:5d:2f:35:6d:f0:b0:0d:ef:6d:cf:c5:
                    a5:b6:75:27:8c:e0:74:d1:9d:f2:31:ea:d4:78:d6:
                    e0:c1:55:00:7c:a9:02:21:df:31:05:10:29:90:de:
                    de:b0:3a:00:db:da:fe:90:ce:3d:b3:3e:b8:2b:b1:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:C5:D1:E2:63:E5:9F:37:1C:44:1C:DB:AD:E1:48:3F:BD:60:E7
            X509v3 Authority Key Identifier:
                keyid:FF:31:49:24:73:A7:8C:6F:E9:F5:39:F9:FA:7D:22:52:56:0A:2B:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zFJJHOnjG_p9Tn5-n0iUlYKK34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/1b4105-3471-4592-bf07-73fd3bc19aa7/1/_zFJJHOnjG_p9Tn5-n0iUlYKK34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:b9:d2:a3:3c:3c:35:c3:95:d7:40:0e:51:cc:d6:0a:15:8e:
         0d:b6:2d:47:e4:fb:8b:89:2f:9c:0d:7d:56:ec:c4:c8:14:97:
         24:cf:f6:44:68:3c:bd:4a:95:cd:0c:40:0d:4b:44:5c:9e:1a:
         d1:6d:93:42:55:d2:0b:78:99:ca:29:7d:45:fb:67:05:5b:9a:
         86:62:48:f7:7a:64:79:ad:52:f0:c4:37:73:f8:1b:22:5a:9a:
         7a:46:d7:84:8c:7a:4b:c3:d1:33:83:00:e8:cf:1b:c0:59:32:
         f3:6b:24:29:61:c8:fb:da:b2:12:71:9f:fe:91:e4:0c:33:bd:
         25:4f:fc:8e:41:6b:05:d2:49:e1:99:e8:d3:38:5e:60:1b:7a:
         77:8f:3b:81:81:08:82:65:73:68:89:62:a9:4f:c1:03:41:24:
         a1:da:4b:2f:b5:bf:fb:95:99:64:8e:fd:81:8d:81:8e:88:88:
         b7:0b:0c:d7:58:77:bd:f4:99:71:8a:17:46:92:46:ea:f0:3c:
         57:ed:8a:b1:cd:77:42:bd:32:f5:a8:cb:a3:33:7c:17:df:50:
         ab:38:a7:c9:de:67:03:db:1e:e4:c0:37:cc:d9:fd:2b:dd:cb:
         cc:47:f0:ec:ec:e4:c9:92:5b:b8:c1:c6:5c:0c:47:fe:33:80:
         79:7d:bc:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O/tuCy7+AIdxtnelfimFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzE0OTI0NzNhNzhjNmZlOWY1MzlmOWZhN2QyMjUyNTYw
YTJiN2UwHhcNMjUwMTMxMTIwMDM1WhcNMjUwMjAxMTIwMDM1WjAzMTEwLwYDVQQD
EygyOTFhYzVkMWUyNjNlNTlmMzcxYzQ0MWNkYmFkZTE0ODNmYmQ2MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkz6QzIDYrVQ3Tn34YAdXF/9XPMU
Sm4ieog92h8ykbfFaLPidJcx2rWz+hrTihfCdsaD3vIoIZd52iGs7jeH7EsmmcaR
W7J5Utr/4dCcyIsk+8dpwEAJBJrooK1qBiODyaJICedp7M8G2XA+2fexMn3Yr8hB
8QkFqsy5rOp7IbVbcUOIeHJLx50B6haQKy6vJRpk0P+6S0qtL80DxfbSfwrQefYu
omUM0fIZ0R4uO2cImqCJ428Uc+0sp/I24kK2Jxr6T5V/XS81bfCwDe9tz8WltnUn
jOB00Z3yMerUeNbgwVUAfKkCId8xBRApkN7esDoA29r+kM49sz64K7H5WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCkaxdHiY+WfNxxEHNut4Ug/vWDnMB8GA1UdIwQY
MBaAFP8xSSRzp4xv6fU5+fp9IlJWCit+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDct
NzNmZDNiYzE5YWE3LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8xYjQxMDUtMzQ3MS00NTkyLWJmMDctNzNmZDNiYzE5YWE3
LzEvX3pGSkpIT25qR19wOVRuNS1uMGlVbFlLSzM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrnSozw8
NcOV10AOUczWChWODbYtR+T7i4kvnA19VuzEyBSXJM/2RGg8vUqVzQxADUtEXJ4a
0W2TQlXSC3iZyil9RftnBVuahmJI93pkea1S8MQ3c/gbIlqaekbXhIx6S8PRM4MA
6M8bwFky82skKWHI+9qyEnGf/pHkDDO9JU/8jkFrBdJJ4Zno0zheYBt6d487gYEI
gmVzaIliqU/BA0EkodpLL7W/+5WZZI79gY2BjoiItwsM11h3vfSZcYoXRpJG6vA8
V+2Ksc13Qr0y9ajLozN8F99Qqzinyd5nA9se5MA3zNn9K93LzEfw7OzkyZJbuMHG
XAxH/jOAeX28kg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:18 2025 by rpki-client