Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
File:                     x1VwJGd3DtabNnt3u-ZAvG20FT4.mft (raw, json)
Hash identifier:          M1CrbBXNJ/uWCgvsHR0HeRK+4DSmFYwmFonfFG1IGf8=
Subject key identifier:   CC:0D:28:F9:8D:31:F1:4A:55:88:58:C9:17:C8:9E:63:EB:FD:40:B5
Authority key identifier: C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E
Certificate issuer:       /CN=c755702467770ed69b367b77bbe640bc6db4153e
Certificate serial:       0194BD4EAF618C8F24A1C58DE95BB91F844E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft
Manifest number:          0E14
Signing time:             Fri 31 Jan 2025 17:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:37 +0000
Files and hashes:         1: 2SsMWwH_IGwdnd7LhSNqJwAgI4A.roa (hash: AGrNlZnlxAW4bfumNQKlJoJZWyB67h/pf8s3KTKUzE0=)
                          2: Cujb_JMNRpBWUMNsYDzUM07sX9g.roa (hash: aPQ30rk20GzKKIz2rCdqmpPV4nPvHBgzWHC/g71TaJY=)
                          3: ER1ViB51eK3GNYidlFyIU5pz7pA.roa (hash: LuGe00nbcrMZ8l+kp9f/ed4A210HJbkXpcki+PgU3DU=)
                          4: PkKwn16bpB0gLF9vU4EldEuV1BU.roa (hash: fP4l1zoE5N82M/LmyMEfGwuK+f6miXD04jLXzvpdlzg=)
                          5: Ylbq5ntwI4lobnJRn4w_8RBAWYU.roa (hash: EjqMbrULb7iRN3e+HzHVHj0EJ4f37rSShZWRA2TwvuI=)
                          6: bg0w0DPxuyGh5PKBC5lIXdwm3EY.roa (hash: B4U/d8xwzXF5+8shclwMswe7rUu/cS9QkWoCnLKd0HU=)
                          7: lEb1Jsw-Dtu5xLjUafsCpP2d3SQ.roa (hash: QTd8eFyxLptYQFcQvp6p0JN6N3jGTLG71RFCqk6mZlI=)
                          8: x1VwJGd3DtabNnt3u-ZAvG20FT4.crl (hash: OCxo2CbfG6TZl72XXSjJo8W/WyP8Ux5xpphxnukMFHU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:af:61:8c:8f:24:a1:c5:8d:e9:5b:b9:1f:84:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c755702467770ed69b367b77bbe640bc6db4153e
        Validity
            Not Before: Jan 31 17:00:37 2025 GMT
            Not After : Feb  1 17:00:37 2025 GMT
        Subject: CN=cc0d28f98d31f14a558858c917c89e63ebfd40b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:88:05:8c:5b:21:1d:65:1f:3d:02:85:b0:
                    c1:e1:3f:07:6e:f2:10:55:aa:40:80:a7:7e:0d:25:
                    1c:c0:9a:15:b4:50:fe:de:00:58:be:a3:bc:c3:4c:
                    b9:fe:88:11:7c:da:59:76:8a:5c:eb:4f:40:07:c4:
                    5a:b0:5b:29:1d:09:b4:67:1c:6a:ac:59:9b:87:2b:
                    73:c5:5e:2f:1d:9e:68:9c:24:7b:39:78:2b:13:02:
                    dc:60:61:46:f7:48:c4:86:ae:49:72:b7:fe:73:7d:
                    7a:45:47:0f:b1:ac:84:84:33:5b:bd:b4:0c:a0:57:
                    a7:d7:07:82:26:26:a0:66:29:e9:d6:bd:84:a7:71:
                    cc:a1:d3:49:86:e5:0d:9f:ad:47:7c:d4:c9:91:1f:
                    ff:3d:fb:1f:04:5f:d7:66:5b:eb:9f:5e:9f:7e:20:
                    e5:14:8a:77:52:f4:e8:8d:25:b7:7e:9a:13:e9:3e:
                    fb:02:b3:4f:63:15:10:c0:b4:1c:59:2f:55:2f:b9:
                    0e:34:5f:96:4a:0f:0e:dc:2a:e2:88:63:c2:70:b4:
                    a8:86:25:b5:3b:af:b2:f6:1b:bd:25:f1:85:93:d5:
                    79:4a:82:c2:87:8a:97:ff:2b:40:84:91:53:09:22:
                    03:6c:f1:85:21:fa:1c:4e:f2:c2:66:3d:0c:d8:8e:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0D:28:F9:8D:31:F1:4A:55:88:58:C9:17:C8:9E:63:EB:FD:40:B5
            X509v3 Authority Key Identifier:
                keyid:C7:55:70:24:67:77:0E:D6:9B:36:7B:77:BB:E6:40:BC:6D:B4:15:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1VwJGd3DtabNnt3u-ZAvG20FT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/243f91-8747-4981-9cbf-1d373499924e/1/x1VwJGd3DtabNnt3u-ZAvG20FT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5c:3c:c7:2f:84:af:b1:3b:03:00:32:08:5c:1d:47:76:f2:
         88:26:95:5e:ed:98:56:c9:19:23:cb:f4:16:aa:cd:1d:00:fc:
         29:76:dc:04:33:f8:1a:7f:d9:30:7d:17:90:c3:c5:96:17:ed:
         5b:13:75:27:e9:14:3e:ef:90:d8:ca:3b:a1:fd:33:c9:ab:0e:
         97:72:66:0e:41:fb:3c:4a:7d:d6:77:e4:96:3a:b0:32:e5:ba:
         90:cc:e2:35:2d:80:17:6d:ae:5b:ce:c3:4c:f2:85:a1:31:99:
         57:5e:d9:29:e7:ed:d2:a9:c6:c1:bb:3f:11:9a:99:8e:21:b6:
         cb:e9:52:9e:52:ac:cf:77:db:83:1d:d9:2b:8e:dd:52:47:ed:
         80:b1:59:db:47:da:31:4f:35:cd:82:d5:cf:e1:e0:aa:69:30:
         a3:76:a8:d4:7a:dd:b9:84:8d:e7:e0:4a:8c:77:8c:d4:4c:55:
         90:84:a8:fa:63:91:12:e4:7f:b6:2b:db:00:49:db:0e:4a:79:
         d5:5a:47:a3:b3:6e:89:ee:3b:42:8d:2d:0e:25:79:90:17:f5:
         a3:ed:40:c5:52:67:ae:60:46:45:11:d9:24:6d:e2:76:88:49:
         1a:16:bf:3b:41:88:ed:72:3c:9f:c1:27:dc:70:cb:e0:38:d5:
         d2:1c:cc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tq9hjI8kocWN6Vu5H4ROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTU3MDI0Njc3NzBlZDY5YjM2N2I3N2JiZTY0MGJjNmRi
NDE1M2UwHhcNMjUwMTMxMTcwMDM3WhcNMjUwMjAxMTcwMDM3WjAzMTEwLwYDVQQD
EyhjYzBkMjhmOThkMzFmMTRhNTU4ODU4YzkxN2M4OWU2M2ViZmQ0MGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWuIBYxbIR1lHz0ChbDB4T8HbvIQ
VapAgKd+DSUcwJoVtFD+3gBYvqO8w0y5/ogRfNpZdopc609AB8RasFspHQm0Zxxq
rFmbhytzxV4vHZ5onCR7OXgrEwLcYGFG90jEhq5Jcrf+c316RUcPsayEhDNbvbQM
oFen1weCJiagZinp1r2Ep3HModNJhuUNn61HfNTJkR//PfsfBF/XZlvrn16ffiDl
FIp3UvTojSW3fpoT6T77ArNPYxUQwLQcWS9VL7kONF+WSg8O3CriiGPCcLSohiW1
O6+y9hu9JfGFk9V5SoLCh4qX/ytAhJFTCSIDbPGFIfocTvLCZj0M2I45HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwNKPmNMfFKVYhYyRfInmPr/UC1MB8GA1UdIwQY
MBaAFMdVcCRndw7WmzZ7d7vmQLxttBU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYt
MWQzNzM0OTk5MjRlLzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yNDNmOTEtODc0Ny00OTgxLTljYmYtMWQzNzM0OTk5MjRl
LzEveDFWd0pHZDNEdGFiTm50M3UtWkF2RzIwRlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlw8xy+E
r7E7AwAyCFwdR3byiCaVXu2YVskZI8v0FqrNHQD8KXbcBDP4Gn/ZMH0XkMPFlhft
WxN1J+kUPu+Q2Mo7of0zyasOl3JmDkH7PEp91nfkljqwMuW6kMziNS2AF22uW87D
TPKFoTGZV17ZKeft0qnGwbs/EZqZjiG2y+lSnlKsz3fbgx3ZK47dUkftgLFZ20fa
MU81zYLVz+Hgqmkwo3ao1HrduYSN5+BKjHeM1ExVkISo+mOREuR/tivbAEnbDkp5
1VpHo7Nuie47Qo0tDiV5kBf1o+1AxVJnrmBGRRHZJG3idohJGha/O0GI7XI8n8En
3HDL4DjV0hzMgw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client