Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File:                     14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier:          dzqzPJfc4cUG1is7fu5j0ZLn2Ff0fLHSuPgsxfAKPww=
Subject key identifier:   7E:F8:90:86:B1:88:ED:59:57:97:48:9C:97:54:4C:05:03:0C:9D:D3
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer:       /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial:       0194BC3C04C2149573F12277610D68C47763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number:          1162
Signing time:             Fri 31 Jan 2025 12:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:37 +0000
Files and hashes:         1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: oBwXGBnRZxO30ggbmZnz/PqgVCEwKK+E9yWVnv7s8v4=)
                          2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:04:c2:14:95:73:f1:22:77:61:0d:68:c4:77:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
        Validity
            Not Before: Jan 31 12:00:37 2025 GMT
            Not After : Feb  1 12:00:37 2025 GMT
        Subject: CN=7ef89086b188ed595797489c97544c05030c9dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d7:2d:2e:4b:76:39:9b:14:7d:1a:fc:93:4b:
                    5b:2d:ee:e1:60:ae:21:1e:1a:90:88:00:e5:08:8a:
                    9f:23:55:12:3e:54:27:36:96:ea:89:b8:48:a7:96:
                    63:0b:29:1c:25:a6:01:72:64:09:3f:11:9a:e7:97:
                    18:9f:37:d3:71:cb:f4:e8:e9:5c:59:e6:1e:a5:9a:
                    da:ef:94:a7:23:3b:59:7e:93:84:58:a8:59:91:4a:
                    aa:26:8b:24:aa:cf:9b:de:f0:25:5f:aa:ac:69:d8:
                    f3:7e:43:3d:28:8e:47:de:3c:cf:4c:b0:fc:39:ab:
                    cf:ba:31:d8:aa:48:c3:41:a5:ec:3c:90:ee:ed:b4:
                    5a:d6:56:7a:a4:8e:1b:52:8e:03:45:dc:dd:61:4e:
                    25:8d:24:4b:ac:bf:83:13:6e:0b:18:17:58:c8:00:
                    65:eb:19:e3:d2:5f:e6:d7:63:09:31:7c:99:ed:d5:
                    9e:0b:dc:73:98:52:a4:7f:aa:c8:b4:dc:72:bd:44:
                    c8:1f:37:62:6e:2b:06:c2:f5:97:9c:a1:69:9f:6b:
                    7f:af:4e:9a:55:ff:53:4d:f7:a8:63:79:e0:93:16:
                    19:11:7b:ad:28:57:7e:b1:47:9d:c9:0b:0a:0c:77:
                    ef:67:02:a7:eb:25:11:c2:ef:8d:77:30:eb:99:2b:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F8:90:86:B1:88:ED:59:57:97:48:9C:97:54:4C:05:03:0C:9D:D3
            X509v3 Authority Key Identifier:
                keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:70:b2:14:42:61:0d:55:b3:be:e9:d3:22:91:4d:d3:df:
         25:80:93:54:3b:88:f4:f8:60:75:07:f8:5c:ff:8b:62:4f:5f:
         34:5a:ce:02:a7:4e:60:7c:91:76:94:79:7b:a3:b4:85:c7:a2:
         a0:86:00:63:f5:db:5e:0b:19:8f:6f:5a:17:84:45:27:2a:7a:
         06:38:c7:54:26:22:57:05:9c:30:ea:85:ca:b9:8c:5e:c7:13:
         9a:e2:1d:51:60:44:de:61:f9:7f:83:81:86:6e:36:da:ac:7b:
         e3:08:e1:76:1d:43:18:5d:07:5f:62:8b:75:f8:f0:55:b5:f8:
         f5:97:dd:f9:b5:2e:a4:d0:3e:c3:ba:9d:69:d3:cd:4e:7b:86:
         85:1b:0d:4f:72:40:87:44:90:16:a0:f4:b6:ac:0b:c8:b6:ea:
         0f:0f:b4:ef:8d:03:0e:43:b4:7e:b3:f3:54:b9:86:3b:73:fa:
         ba:28:91:1f:31:28:d2:2d:08:b9:3c:6f:b8:0d:a2:d7:27:7d:
         da:be:23:e8:93:f7:0c:52:a3:a2:66:78:11:b7:e2:4a:78:d4:
         f3:6b:f6:04:b1:a9:10:c7:90:46:a0:0f:f7:af:32:44:32:0c:
         13:cf:a1:bc:e0:68:63:21:d2:40:f1:b3:39:a9:d6:84:6a:f1:
         e6:d0:03:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PATCFJVz8SJ3YQ1oxHdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODA1ZTFjZmZjMTM5MmU3ZDE3NjhmOGYwNTU0YTFjN2Y2
MzQ0YWQwHhcNMjUwMTMxMTIwMDM3WhcNMjUwMjAxMTIwMDM3WjAzMTEwLwYDVQQD
Eyg3ZWY4OTA4NmIxODhlZDU5NTc5NzQ4OWM5NzU0NGMwNTAzMGM5ZGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodctLkt2OZsUfRr8k0tbLe7hYK4h
HhqQiADlCIqfI1USPlQnNpbqibhIp5ZjCykcJaYBcmQJPxGa55cYnzfTccv06Olc
WeYepZra75SnIztZfpOEWKhZkUqqJoskqs+b3vAlX6qsadjzfkM9KI5H3jzPTLD8
OavPujHYqkjDQaXsPJDu7bRa1lZ6pI4bUo4DRdzdYU4ljSRLrL+DE24LGBdYyABl
6xnj0l/m12MJMXyZ7dWeC9xzmFKkf6rItNxyvUTIHzdibisGwvWXnKFpn2t/r06a
Vf9TTfeoY3ngkxYZEXutKFd+sUedyQsKDHfvZwKn6yURwu+NdzDrmSuEDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH74kIaxiO1ZV5dInJdUTAUDDJ3TMB8GA1UdIwQY
MBaAFNeAXhz/wTkufRdo+PBVShx/Y0StMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUt
MjI1NGJjMmNhNmMwLzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80YTNkOGEtNTI5ZC00ZDkxLTlmMjUtMjI1NGJjMmNhNmMw
LzEvMTRCZUhQX0JPUzU5RjJqNDhGVktISDlqUkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHdwshRC
YQ1Vs77p0yKRTdPfJYCTVDuI9PhgdQf4XP+LYk9fNFrOAqdOYHyRdpR5e6O0hcei
oIYAY/XbXgsZj29aF4RFJyp6BjjHVCYiVwWcMOqFyrmMXscTmuIdUWBE3mH5f4OB
hm422qx74wjhdh1DGF0HX2KLdfjwVbX49Zfd+bUupNA+w7qdadPNTnuGhRsNT3JA
h0SQFqD0tqwLyLbqDw+0740DDkO0frPzVLmGO3P6uiiRHzEo0i0IuTxvuA2i1yd9
2r4j6JP3DFKjomZ4EbfiSnjU82v2BLGpEMeQRqAP968yRDIME8+hvOBoYyHSQPGz
OanWhGrx5tADbA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:17 2025 by rpki-client