Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
File:                     4GMUdXVI8HToT68_y7e4LYLe8-U.mft (raw, json)
Hash identifier:          AmyGEikKOu9FmTHUGj6vks61nBuoDa9SkYAG1Jhgyac=
Subject key identifier:   F0:0F:69:BD:E8:B6:07:4B:92:0B:54:E4:62:1A:48:A7:CA:4A:CC:55
Authority key identifier: E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5
Certificate issuer:       /CN=e06314757548f074e84faf3fcbb7b82d82def3e5
Certificate serial:       0194BD176F0E7F1EA2CEA2597CD099ECF9F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 16:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:17 +0000
Files and hashes:         1: 4GMUdXVI8HToT68_y7e4LYLe8-U.crl (hash: OYQHbDRBxN7E9EXgbuVMMXjYhl1niEtJU+Xcvet/jgE=)
                          2: _uc6ePERzBPoPdpauMr-UXjyyZU.roa (hash: vCpgESgcY5qI/pPtl3hBvs20Co9NLRffYPoazf5J82E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:6f:0e:7f:1e:a2:ce:a2:59:7c:d0:99:ec:f9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e06314757548f074e84faf3fcbb7b82d82def3e5
        Validity
            Not Before: Jan 31 16:00:17 2025 GMT
            Not After : Feb  1 16:00:17 2025 GMT
        Subject: CN=f00f69bde8b6074b920b54e4621a48a7ca4acc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:c2:47:a9:d2:02:85:06:2a:03:96:44:49:
                    5a:2e:66:01:ac:91:64:25:ac:76:4d:ee:f6:25:83:
                    f9:4c:e4:a1:04:60:57:b9:6d:16:0d:ea:7b:38:c2:
                    75:db:60:fb:c0:ee:09:74:4f:85:76:0f:02:bb:78:
                    41:34:f0:2d:7a:2a:43:40:8a:5b:63:fa:48:d1:b4:
                    de:b8:6f:38:40:a2:52:29:17:53:f8:cb:cd:50:1a:
                    91:5f:e4:f8:d9:5f:c2:2a:3a:03:09:3f:c0:2d:80:
                    ee:0d:4e:16:84:d9:35:81:67:0b:1f:66:df:a4:7c:
                    fc:cf:78:ba:62:1b:c1:02:4f:f6:a6:be:a7:31:16:
                    8e:f4:37:18:8d:53:19:ec:9a:68:83:f8:b6:e4:d0:
                    9f:75:9a:50:6a:75:34:4b:fe:8f:de:39:c4:af:79:
                    89:98:e1:ab:0c:37:d7:a5:fb:88:3a:fa:0e:d8:65:
                    16:36:3b:52:8a:1b:c1:47:33:0d:b0:51:aa:7a:4c:
                    aa:00:cd:4b:47:ac:51:04:c7:1f:a5:d3:47:3c:a0:
                    39:c7:be:a6:58:a9:9b:aa:27:3b:f3:c1:b8:58:f6:
                    ab:60:b5:ec:fc:05:5a:53:15:71:c4:53:cd:78:72:
                    93:29:75:5c:90:a8:91:01:2e:46:2f:9c:fc:aa:5e:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:0F:69:BD:E8:B6:07:4B:92:0B:54:E4:62:1A:48:A7:CA:4A:CC:55
            X509v3 Authority Key Identifier:
                keyid:E0:63:14:75:75:48:F0:74:E8:4F:AF:3F:CB:B7:B8:2D:82:DE:F3:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GMUdXVI8HToT68_y7e4LYLe8-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/497ced-0526-4d3b-bd2b-80d21c20d918/1/4GMUdXVI8HToT68_y7e4LYLe8-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:0a:44:d6:df:b6:0e:08:17:11:ad:39:f5:2b:85:57:f8:
         ea:d9:87:90:57:b6:52:41:5a:f6:d4:5e:de:54:8b:5f:bb:0a:
         69:f2:53:9e:5f:60:0e:d3:d9:e3:50:15:59:fc:cb:fb:02:93:
         39:64:9f:a0:d7:44:f9:c9:09:a8:98:ca:9f:d3:4b:5a:ae:33:
         7b:a0:a4:0f:ed:ae:03:f2:52:fc:bd:c1:5d:13:cc:e3:24:01:
         18:2c:ba:5e:c2:4e:5a:22:b3:42:82:97:7b:7a:6b:ce:c5:81:
         02:d9:f3:a3:5b:4c:07:a6:89:16:9c:cd:31:1b:0b:5d:8e:84:
         c9:8f:25:26:11:44:d5:ff:15:b9:8f:e4:65:e7:e6:de:65:8b:
         8d:3c:4f:6a:6b:ea:ac:09:fc:25:8d:b8:67:d1:ed:e5:9e:92:
         f9:dc:17:32:14:e3:3b:56:43:cc:21:3e:a4:ff:b5:08:36:e9:
         f4:e4:cc:99:ad:42:6a:89:e1:16:45:cf:a6:2f:9a:57:6e:c5:
         07:26:49:64:b6:d2:9f:97:ed:69:1d:c7:8d:51:29:b2:6f:09:
         dd:d9:27:84:5b:eb:1d:9a:fb:09:10:33:90:15:6e:57:ab:89:
         5f:e4:80:90:09:5f:b9:52:f1:20:f5:a5:f5:bb:35:9b:a9:34:
         fa:32:86:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F28Ofx6izqJZfNCZ7PnyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjMxNDc1NzU0OGYwNzRlODRmYWYzZmNiYjdiODJkODJk
ZWYzZTUwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
EyhmMDBmNjliZGU4YjYwNzRiOTIwYjU0ZTQ2MjFhNDhhN2NhNGFjYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl/CR6nSAoUGKgOWRElaLmYBrJFk
Jax2Te72JYP5TOShBGBXuW0WDep7OMJ122D7wO4JdE+Fdg8Cu3hBNPAteipDQIpb
Y/pI0bTeuG84QKJSKRdT+MvNUBqRX+T42V/CKjoDCT/ALYDuDU4WhNk1gWcLH2bf
pHz8z3i6YhvBAk/2pr6nMRaO9DcYjVMZ7Jpog/i25NCfdZpQanU0S/6P3jnEr3mJ
mOGrDDfXpfuIOvoO2GUWNjtSihvBRzMNsFGqekyqAM1LR6xRBMcfpdNHPKA5x76m
WKmbqic788G4WParYLXs/AVaUxVxxFPNeHKTKXVckKiRAS5GL5z8ql7IEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAPab3otgdLkgtU5GIaSKfKSsxVMB8GA1UdIwQY
MBaAFOBjFHV1SPB06E+vP8u3uC2C3vPlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80OTdjZWQtMDUyNi00ZDNiLWJkMmIt
ODBkMjFjMjBkOTE4LzEvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80OTdjZWQtMDUyNi00ZDNiLWJkMmItODBkMjFjMjBkOTE4
LzEvNEdNVWRYVkk4SFRvVDY4X3k3ZTRMWUxlOC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd78KRNbf
tg4IFxGtOfUrhVf46tmHkFe2UkFa9tRe3lSLX7sKafJTnl9gDtPZ41AVWfzL+wKT
OWSfoNdE+ckJqJjKn9NLWq4ze6CkD+2uA/JS/L3BXRPM4yQBGCy6XsJOWiKzQoKX
e3przsWBAtnzo1tMB6aJFpzNMRsLXY6EyY8lJhFE1f8VuY/kZefm3mWLjTxPamvq
rAn8JY24Z9Ht5Z6S+dwXMhTjO1ZDzCE+pP+1CDbp9OTMma1CaonhFkXPpi+aV27F
ByZJZLbSn5ftaR3HjVEpsm8J3dknhFvrHZr7CRAzkBVuV6uJX+SAkAlfuVLxIPWl
9bs1m6k0+jKG0Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:27 2025 by rpki-client