Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
File:                     e9g2worwknoDVYYlrt9v14ekkFw.mft (raw, json)
Hash identifier:          /mR1e7GIjJugehWCcaueTxKQGHcP7L1h1AKU4Bnpd/Y=
Subject key identifier:   01:49:CF:52:D5:33:36:34:FA:21:A5:66:2B:8E:6D:AE:8C:C7:66:15
Authority key identifier: 7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C
Certificate issuer:       /CN=7bd836c28af0927a03558625aedf6fd787a4905c
Certificate serial:       0194BBCE9D3238147B8964624323155A5D44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft
Manifest number:          1364
Signing time:             Fri 31 Jan 2025 10:01:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:07 +0000
Files and hashes:         1: e9g2worwknoDVYYlrt9v14ekkFw.crl (hash: y0zw3MbtxpGtT/ceVwY9BcUw0ONHXWgOk2v7GIfcF7k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9d:32:38:14:7b:89:64:62:43:23:15:5a:5d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd836c28af0927a03558625aedf6fd787a4905c
        Validity
            Not Before: Jan 31 10:01:07 2025 GMT
            Not After : Feb  1 10:01:07 2025 GMT
        Subject: CN=0149cf52d5333634fa21a5662b8e6dae8cc76615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:6f:de:33:c1:7f:b8:87:50:3f:2a:71:d6:
                    54:a0:a8:c2:26:d0:dd:b6:ca:d9:27:a2:fb:01:fc:
                    c9:e7:ff:e9:cc:b0:e0:02:f4:91:95:8e:99:dc:aa:
                    60:5c:0e:49:82:95:23:05:b5:eb:f2:d7:16:4b:36:
                    38:12:1d:d5:f5:4c:aa:b7:93:43:37:dd:f2:94:9c:
                    c0:3d:23:45:b7:5d:78:2b:34:33:d1:61:7e:9d:49:
                    70:b1:0e:e4:bf:64:1c:a6:7f:7b:7a:5d:34:21:cf:
                    80:bf:42:42:9e:38:0b:5c:de:ed:3e:67:31:0f:d1:
                    58:d2:51:bc:49:14:3d:fe:64:67:0d:72:a9:e3:8e:
                    3f:ee:e6:ae:21:f3:a1:9f:9d:9a:51:aa:85:e3:f2:
                    c2:a6:de:b5:d3:b2:3e:59:ef:08:47:60:2a:41:3f:
                    e6:44:24:d0:2e:e3:ee:04:95:3b:f0:c3:08:a3:92:
                    37:b5:91:49:15:af:1e:78:38:09:7e:b0:25:cc:57:
                    a5:71:a9:30:25:74:ec:23:3e:06:df:6a:4a:b5:c6:
                    c7:3f:30:27:27:2d:8a:ec:ea:14:46:4f:98:ef:3d:
                    84:6d:52:5c:c5:78:cd:3a:15:08:5d:66:7f:96:3e:
                    0d:47:ab:12:28:b8:7b:ad:80:12:bb:55:13:09:b5:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:49:CF:52:D5:33:36:34:FA:21:A5:66:2B:8E:6D:AE:8C:C7:66:15
            X509v3 Authority Key Identifier:
                keyid:7B:D8:36:C2:8A:F0:92:7A:03:55:86:25:AE:DF:6F:D7:87:A4:90:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9g2worwknoDVYYlrt9v14ekkFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/df715b-79a6-44a9-ac97-adb314a5753c/1/e9g2worwknoDVYYlrt9v14ekkFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:14:ea:b8:bd:62:e3:84:a7:f4:28:5f:09:84:ee:85:68:
         76:7a:a9:06:a9:53:57:94:d0:81:17:6f:b0:70:48:d7:14:43:
         0f:64:91:fe:1e:dd:d0:7d:41:28:45:05:35:ec:6d:58:c7:30:
         70:60:c4:cf:75:7d:f7:e2:e1:d5:90:19:aa:41:a8:ec:f0:fd:
         f1:99:a2:19:ca:02:5b:5c:79:c3:e5:43:13:70:be:75:43:04:
         64:84:6a:0e:e4:36:37:fa:8c:38:28:7f:0b:c2:50:da:13:ad:
         fc:20:80:57:2b:33:8e:d9:33:f5:69:49:c5:b7:7e:e0:97:60:
         e9:75:d2:0a:18:84:d2:a5:69:2b:ff:23:c4:db:c8:00:b7:b0:
         1a:9a:24:fa:8e:c4:3c:21:16:b0:de:ef:c0:63:f7:cc:5e:1d:
         4b:5b:0a:40:79:9b:7c:7a:b2:5b:3a:b2:23:f2:c5:9f:70:71:
         ca:30:55:7c:36:1f:5f:f8:ea:64:09:cb:75:37:c0:f5:bf:c4:
         63:17:1e:95:2a:db:b2:4c:86:9e:92:01:8c:c2:76:b2:22:66:
         01:44:8d:4c:31:69:ac:be:15:a8:21:c2:b5:6b:fc:37:ce:47:
         d6:0b:1a:f9:93:2f:9a:f8:0c:b6:f9:fa:01:8e:e0:a8:aa:bd:
         7f:ed:cc:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zp0yOBR7iWRiQyMVWl1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiZDgzNmMyOGFmMDkyN2EwMzU1ODYyNWFlZGY2ZmQ3ODdh
NDkwNWMwHhcNMjUwMTMxMTAwMTA3WhcNMjUwMjAxMTAwMTA3WjAzMTEwLwYDVQQD
EygwMTQ5Y2Y1MmQ1MzMzNjM0ZmEyMWE1NjYyYjhlNmRhZThjYzc2NjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hJv3jPBf7iHUD8qcdZUoKjCJtDd
tsrZJ6L7AfzJ5//pzLDgAvSRlY6Z3KpgXA5JgpUjBbXr8tcWSzY4Eh3V9Uyqt5ND
N93ylJzAPSNFt114KzQz0WF+nUlwsQ7kv2Qcpn97el00Ic+Av0JCnjgLXN7tPmcx
D9FY0lG8SRQ9/mRnDXKp444/7uauIfOhn52aUaqF4/LCpt6107I+We8IR2AqQT/m
RCTQLuPuBJU78MMIo5I3tZFJFa8eeDgJfrAlzFelcakwJXTsIz4G32pKtcbHPzAn
Jy2K7OoURk+Y7z2EbVJcxXjNOhUIXWZ/lj4NR6sSKLh7rYASu1UTCbX8awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFJz1LVMzY0+iGlZiuOba6Mx2YVMB8GA1UdIwQY
MBaAFHvYNsKK8JJ6A1WGJa7fb9eHpJBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kZjcxNWItNzlhNi00NGE5LWFjOTct
YWRiMzE0YTU3NTNjLzEvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kZjcxNWItNzlhNi00NGE5LWFjOTctYWRiMzE0YTU3NTNj
LzEvZTlnMndvcndrbm9EVllZbHJ0OXYxNGVra0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRAU6ri9
YuOEp/QoXwmE7oVodnqpBqlTV5TQgRdvsHBI1xRDD2SR/h7d0H1BKEUFNextWMcw
cGDEz3V99+Lh1ZAZqkGo7PD98ZmiGcoCW1x5w+VDE3C+dUMEZIRqDuQ2N/qMOCh/
C8JQ2hOt/CCAVyszjtkz9WlJxbd+4Jdg6XXSChiE0qVpK/8jxNvIALewGpok+o7E
PCEWsN7vwGP3zF4dS1sKQHmbfHqyWzqyI/LFn3BxyjBVfDYfX/jqZAnLdTfA9b/E
YxcelSrbskyGnpIBjMJ2siJmAUSNTDFprL4VqCHCtWv8N85H1gsa+ZMvmvgMtvn6
AY7gqKq9f+3Mrg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:51 2025 by rpki-client