Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
File:                     rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json)
Hash identifier:          xVkjUPw0IuXTR7LBFO+O3WfcXIkyngH9ZGnFLzP8IyY=
Subject key identifier:   6E:E0:2E:B1:83:3E:80:8E:06:51:16:54:78:98:D8:69:C3:A7:97:01
Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A
Certificate issuer:       /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
Certificate serial:       0194BBCDBEC7FE3EA7803BB54F9FA2DDB9C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 10:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:10 +0000
Files and hashes:         1: 04xKoR3HixjwEV_dOrG3hKpzMP4.roa (hash: XSQ1jLSVKuR/7tbazdYV2Fv1OeY0/BCC+/gGVvZRwVw=)
                          2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: hCEFRenuavgID8RKs1eSNPOQwgSxLkb1RasmQ9fWASM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:be:c7:fe:3e:a7:80:3b:b5:4f:9f:a2:dd:b9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a
        Validity
            Not Before: Jan 31 10:00:10 2025 GMT
            Not After : Feb  1 10:00:10 2025 GMT
        Subject: CN=6ee02eb1833e808e065116547898d869c3a79701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:22:58:3e:c3:35:8a:d7:50:2c:0b:f1:02:
                    34:90:4d:18:ce:0d:1a:04:e3:8e:71:5a:46:c0:58:
                    80:04:a1:10:b2:8c:69:47:f5:7f:ea:7a:df:bb:15:
                    17:88:89:d5:e6:11:14:fc:a0:e2:df:a7:5f:d3:f3:
                    13:53:f0:6e:b6:81:f0:98:77:bc:05:2c:82:b2:60:
                    db:c1:33:05:ab:cc:4c:fc:bf:1c:2b:7c:f5:73:49:
                    50:ee:8d:1e:c4:cb:b6:b6:cb:18:28:42:74:d3:89:
                    a5:b1:44:ac:8a:4f:7d:d8:0d:91:fd:f7:2c:fa:0c:
                    e5:57:f4:57:eb:68:94:d6:16:58:64:0b:b3:8e:b4:
                    69:db:f5:d6:1a:43:0a:a1:60:ee:a3:a1:0e:86:1c:
                    71:d8:dc:32:ae:8a:cf:4e:a0:e4:1e:27:c1:a5:d4:
                    8f:90:e8:10:a7:fc:2b:d8:c4:d4:34:a3:ab:cd:b4:
                    cf:46:4e:a2:40:9d:48:29:87:95:6b:2b:5a:74:b3:
                    d5:14:8e:bc:f2:54:96:7d:5a:a8:d1:0b:4d:d2:b7:
                    c7:8b:96:48:b9:ba:d4:0d:57:81:ef:0b:42:54:7d:
                    2e:68:84:f9:50:eb:ef:cc:52:cf:13:13:25:14:a9:
                    b0:a2:ec:0b:ce:f5:1e:6a:10:f4:50:f8:4d:3b:f3:
                    8a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E0:2E:B1:83:3E:80:8E:06:51:16:54:78:98:D8:69:C3:A7:97:01
            X509v3 Authority Key Identifier:
                keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:19:95:64:b8:7c:80:b1:d4:83:d2:df:be:bd:c3:a4:11:21:
         50:f4:65:04:57:2b:08:e2:b5:d2:aa:33:78:c0:e2:9e:4f:65:
         3d:8d:6e:7c:c8:4a:46:85:ad:6a:0c:5b:c6:80:86:0c:45:0c:
         fe:f8:6f:d0:3b:82:65:da:0f:57:2c:53:c3:89:69:24:df:31:
         21:0e:2c:88:33:9e:8f:01:16:b3:82:98:6b:dc:0f:bb:09:b3:
         91:21:6b:b7:91:f4:c9:ca:c7:a6:92:8f:65:c9:24:af:f6:e0:
         8c:1a:35:f7:68:5a:66:49:8d:0c:c5:c3:10:cc:bb:9f:f9:cb:
         06:7b:b7:69:60:17:9a:77:d7:bb:f9:f1:76:46:ba:8b:c8:2a:
         4b:3b:da:8d:86:77:a4:91:cc:ce:c3:f9:eb:63:f0:cb:66:fb:
         b2:8d:f4:35:8c:73:be:af:0f:ae:f7:ab:6b:48:74:f5:25:b2:
         69:1e:c5:cd:13:3a:b0:12:ac:71:f5:02:2f:1e:1d:00:58:b1:
         52:7c:40:10:07:25:17:d8:db:36:f3:82:a1:28:09:4e:63:3c:
         24:92:14:55:29:07:ce:f6:02:d2:02:5e:e6:c2:4a:ce:cb:58:
         0b:9a:fb:f0:6b:ec:33:f9:42:60:c0:58:f3:1d:c2:ef:a4:d1:
         c2:ac:46:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zb7H/j6ngDu1T5+i3bnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl
N2Y4NWEwHhcNMjUwMTMxMTAwMDEwWhcNMjUwMjAxMTAwMDEwWjAzMTEwLwYDVQQD
Eyg2ZWUwMmViMTgzM2U4MDhlMDY1MTE2NTQ3ODk4ZDg2OWMzYTc5NzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6UiWD7DNYrXUCwL8QI0kE0Yzg0a
BOOOcVpGwFiABKEQsoxpR/V/6nrfuxUXiInV5hEU/KDi36df0/MTU/ButoHwmHe8
BSyCsmDbwTMFq8xM/L8cK3z1c0lQ7o0exMu2tssYKEJ004mlsUSsik992A2R/fcs
+gzlV/RX62iU1hZYZAuzjrRp2/XWGkMKoWDuo6EOhhxx2NwyrorPTqDkHifBpdSP
kOgQp/wr2MTUNKOrzbTPRk6iQJ1IKYeVaytadLPVFI688lSWfVqo0QtN0rfHi5ZI
ubrUDVeB7wtCVH0uaIT5UOvvzFLPExMlFKmwouwLzvUeahD0UPhNO/OKUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG7gLrGDPoCOBlEWVHiY2GnDp5cBMB8GA1UdIwQY
MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt
YmIwNjcxZDhlYTMyLzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy
LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRmVZLh8
gLHUg9Lfvr3DpBEhUPRlBFcrCOK10qozeMDink9lPY1ufMhKRoWtagxbxoCGDEUM
/vhv0DuCZdoPVyxTw4lpJN8xIQ4siDOejwEWs4KYa9wPuwmzkSFrt5H0ycrHppKP
Zckkr/bgjBo192haZkmNDMXDEMy7n/nLBnu3aWAXmnfXu/nxdka6i8gqSzvajYZ3
pJHMzsP562Pwy2b7so30NYxzvq8Prvera0h09SWyaR7FzRM6sBKscfUCLx4dAFix
UnxAEAclF9jbNvOCoSgJTmM8JJIUVSkHzvYC0gJe5sJKzstYC5r78GvsM/lCYMBY
8x3C76TRwqxG0A==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:44 2025 by rpki-client