Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File:                     7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier:          2OGyTPsho8kTMS1pt7RUFq44FsT5M5zzgkapAc+iDoY=
Subject key identifier:   66:57:D5:0D:B3:B3:65:FA:28:76:1F:E3:A7:B2:1C:D3:FA:B8:87:22
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer:       /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial:       0194BD174E99AA2233C8D093644A5FF18975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number:          07
Signing time:             Fri 31 Jan 2025 16:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:08 +0000
Files and hashes:         1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: 7HRpBuhFMiPis3/eabo1aY8XC2MPTRD3vT3RXvWi49w=)
                          2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:4e:99:aa:22:33:c8:d0:93:64:4a:5f:f1:89:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
        Validity
            Not Before: Jan 31 16:00:08 2025 GMT
            Not After : Feb  1 16:00:08 2025 GMT
        Subject: CN=6657d50db3b365fa28761fe3a7b21cd3fab88722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:43:4f:62:3e:1e:0a:bf:27:11:11:36:6d:ee:
                    0d:a3:71:3e:fe:bf:64:53:0b:38:4d:0c:ae:b4:bf:
                    ed:e0:42:45:dd:79:2f:84:d0:6c:3b:b0:31:72:81:
                    4b:5b:0d:49:9e:7d:0d:cf:41:0e:2c:ea:d1:80:ba:
                    51:c2:a9:86:e0:52:f3:f1:80:b7:8b:80:7d:0d:07:
                    1d:4b:9a:5d:75:5d:1b:d4:fc:0a:b4:2f:6e:63:00:
                    23:2b:b4:c5:c9:b0:bb:b3:81:c3:7b:b1:f4:33:82:
                    18:35:59:e6:7b:fe:e7:10:e7:c1:2e:c0:0d:ec:ba:
                    45:bf:ec:f3:ec:15:b0:9e:1f:53:b2:78:6f:44:17:
                    21:d8:0f:f3:a3:cd:84:61:da:8e:0a:cb:da:eb:1d:
                    d1:04:ed:98:2c:30:6c:5e:f8:f6:65:69:5c:b7:c5:
                    14:a1:16:8e:d9:2d:da:78:1a:b9:f9:7e:b5:20:4c:
                    90:3c:3e:81:5a:59:ec:63:e7:de:09:61:bd:da:11:
                    d4:5c:c7:ed:26:18:2c:ec:47:fe:37:30:38:99:7e:
                    e8:9a:30:b4:f9:30:71:0a:0d:8c:48:9c:28:2a:62:
                    09:89:3c:84:aa:00:75:4b:a1:5a:db:bc:31:40:71:
                    8a:96:af:32:bc:48:54:57:d4:af:de:6f:39:b2:95:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:57:D5:0D:B3:B3:65:FA:28:76:1F:E3:A7:B2:1C:D3:FA:B8:87:22
            X509v3 Authority Key Identifier:
                keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:70:71:46:af:99:c0:ea:f2:22:88:95:2a:3a:2b:86:b0:97:
         c5:d0:f3:14:49:01:73:7c:96:cf:c8:51:46:fd:11:37:f4:da:
         2e:57:e6:6f:cb:ef:f5:57:f0:da:5d:74:bb:63:39:0f:ca:33:
         41:0f:68:97:8b:30:19:66:ec:9a:43:54:44:73:4e:8d:ec:43:
         03:99:4a:0e:07:33:0f:ae:1a:de:04:39:dd:1b:b6:c4:d7:b7:
         57:5f:6c:f9:3f:36:72:b0:9c:a0:b0:4e:af:68:5a:cc:da:ce:
         3c:65:91:16:88:c2:37:8b:c1:49:9d:63:a1:c8:a3:07:4e:e4:
         97:3d:a7:80:d9:4f:da:85:68:ff:43:a4:c7:23:cc:dd:5d:cf:
         a0:b8:a1:67:59:0a:ab:51:9d:85:56:ce:76:97:3d:b6:bb:01:
         e2:f8:fb:d2:08:94:66:58:ca:6f:79:30:9d:b0:58:2e:86:de:
         2c:be:38:09:5d:ee:47:cf:f3:23:e7:4a:85:a4:19:03:d0:5a:
         c8:64:20:0a:ee:62:87:44:96:af:e1:64:f1:d6:a2:dd:19:27:
         d5:73:aa:48:a1:14:b5:b5:0e:1a:f2:c4:ef:60:30:6d:49:16:
         53:82:bd:3a:7b:9e:14:e1:d2:75:7f:76:58:2a:d2:0c:00:c6:
         c2:f1:65:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F06ZqiIzyNCTZEpf8Yl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1
NTg2Y2EwHhcNMjUwMTMxMTYwMDA4WhcNMjUwMjAxMTYwMDA4WjAzMTEwLwYDVQQD
Eyg2NjU3ZDUwZGIzYjM2NWZhMjg3NjFmZTNhN2IyMWNkM2ZhYjg4NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUNPYj4eCr8nERE2be4No3E+/r9k
Uws4TQyutL/t4EJF3XkvhNBsO7AxcoFLWw1Jnn0Nz0EOLOrRgLpRwqmG4FLz8YC3
i4B9DQcdS5pddV0b1PwKtC9uYwAjK7TFybC7s4HDe7H0M4IYNVnme/7nEOfBLsAN
7LpFv+zz7BWwnh9TsnhvRBch2A/zo82EYdqOCsva6x3RBO2YLDBsXvj2ZWlct8UU
oRaO2S3aeBq5+X61IEyQPD6BWlnsY+feCWG92hHUXMftJhgs7Ef+NzA4mX7omjC0
+TBxCg2MSJwoKmIJiTyEqgB1S6Fa27wxQHGKlq8yvEhUV9Sv3m85spWTKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZX1Q2zs2X6KHYf46eyHNP6uIciMB8GA1UdIwQY
MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct
NTZjMzYyNGI4YjFiLzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi
LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnBxRq+Z
wOryIoiVKjorhrCXxdDzFEkBc3yWz8hRRv0RN/TaLlfmb8vv9Vfw2l10u2M5D8oz
QQ9ol4swGWbsmkNURHNOjexDA5lKDgczD64a3gQ53Ru2xNe3V19s+T82crCcoLBO
r2hazNrOPGWRFojCN4vBSZ1jocijB07klz2ngNlP2oVo/0OkxyPM3V3PoLihZ1kK
q1GdhVbOdpc9trsB4vj70giUZljKb3kwnbBYLobeLL44CV3uR8/zI+dKhaQZA9Ba
yGQgCu5ih0SWr+Fk8dai3Rkn1XOqSKEUtbUOGvLE72AwbUkWU4K9OnueFOHSdX92
WCrSDADGwvFlfA==
-----END CERTIFICATE-----
Generated at Thu May 1 15:05:09 2025 by rpki-client