Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
File:                     sUYBAoOoIC7qo_7zJTTj6X4EB54.mft (raw, json)
Hash identifier:          9gZQGHKN3FbusAgLJFcPiQPW1ldZInLChJDWoQ/Gw6k=
Subject key identifier:   4F:0E:15:FF:99:97:9B:67:0B:04:2E:85:FA:81:89:44:ED:A8:75:2D
Authority key identifier: B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E
Certificate issuer:       /CN=b146010283a8202eeaa3fef32534e3e97e04079e
Certificate serial:       0194BD175787B8BB104FEE37769292AF6FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 16:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:11 +0000
Files and hashes:         1: dvBncm1ioxMkZxfIwj8AHN_pV2o.roa (hash: trXkcGGpz9kCkLdcS7m7ANXF3QdwZlrIN5sw/IjjJ50=)
                          2: nDV5NLlAJlV7IXdCNRKuwhY8yIg.roa (hash: JCJGHbTjCnTmjbxULu8XX2HvkQESoAg0lhsxs56Srpg=)
                          3: sUYBAoOoIC7qo_7zJTTj6X4EB54.crl (hash: 6VVt+IB7zJV67zeJwCwQ3jqmvllX05hYaMnr18PUqqU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:57:87:b8:bb:10:4f:ee:37:76:92:92:af:6f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b146010283a8202eeaa3fef32534e3e97e04079e
        Validity
            Not Before: Jan 31 16:00:11 2025 GMT
            Not After : Feb  1 16:00:11 2025 GMT
        Subject: CN=4f0e15ff99979b670b042e85fa818944eda8752d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d3:58:5a:a3:68:61:60:0b:9c:56:ac:26:d8:
                    c5:26:be:60:ef:07:7e:fb:2e:5a:97:87:69:06:0a:
                    63:51:fe:9b:63:d5:65:f3:98:94:a6:98:9f:9c:25:
                    dd:35:61:7f:72:b8:40:7c:93:98:5a:94:bc:d7:c0:
                    a8:11:46:f8:a8:c2:33:f6:bc:05:d9:78:6c:d4:2f:
                    9b:87:0e:e4:61:f2:24:54:87:07:87:5d:f1:16:3c:
                    38:60:cf:2e:7e:d0:96:f3:b2:df:0d:12:5e:a5:3e:
                    d8:bf:de:90:61:87:0a:6e:0d:75:50:8b:73:d4:21:
                    18:11:f4:db:da:64:e4:b7:9e:3c:42:56:a7:20:fd:
                    fd:55:a0:d9:36:e2:73:1d:f8:2c:b4:cb:44:dc:7d:
                    aa:17:6d:5c:79:5f:6a:b1:8c:55:2a:ef:68:ae:58:
                    2f:0f:64:7f:62:53:87:c0:43:7d:c5:61:9c:b4:82:
                    ee:fa:13:64:c7:ff:ee:64:3b:8e:3e:ce:e5:08:ed:
                    b7:1f:4c:3f:8d:96:8e:1d:2c:67:51:ff:02:3d:cf:
                    bb:01:4f:ed:0d:0f:b9:1e:57:4b:ce:71:7c:f2:b2:
                    7f:37:60:df:bb:c4:09:2f:39:56:9d:43:50:d9:e3:
                    fa:1f:bc:9e:0f:d0:0c:6b:3e:44:6d:9f:8d:a2:d8:
                    84:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:15:FF:99:97:9B:67:0B:04:2E:85:FA:81:89:44:ED:A8:75:2D
            X509v3 Authority Key Identifier:
                keyid:B1:46:01:02:83:A8:20:2E:EA:A3:FE:F3:25:34:E3:E9:7E:04:07:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUYBAoOoIC7qo_7zJTTj6X4EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bac0b9-c99f-49bb-905b-c0307b0f62dc/1/sUYBAoOoIC7qo_7zJTTj6X4EB54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:82:0d:4f:c4:08:ec:e0:2b:70:1d:39:49:be:27:95:aa:a3:
         12:9f:5d:ff:8e:3b:83:ce:70:dd:95:28:99:1a:0b:a8:df:33:
         39:82:82:0d:24:ee:64:89:f8:8b:38:e3:58:ee:4e:2b:27:bb:
         a2:0c:1a:b1:a2:ee:b6:14:d0:9f:63:83:7d:b8:0f:d9:29:8b:
         c8:3d:c4:1c:98:4e:42:7e:7d:8d:6f:7e:10:4b:4f:2b:e7:59:
         ce:7c:10:91:b2:e1:6d:8f:aa:06:4e:23:ec:ed:dd:73:87:b2:
         5e:d1:6d:cb:79:ba:58:8b:65:5b:d7:df:e4:0e:ca:1f:27:63:
         4c:3c:a0:eb:b7:e2:f7:fc:d4:41:56:b4:d6:c7:10:84:a5:85:
         13:e4:75:80:ba:eb:ab:f6:97:47:36:23:bb:bd:15:72:7b:93:
         c7:d4:90:04:c7:df:71:5c:8b:32:cb:8e:a3:27:a9:25:f5:2a:
         84:b2:bf:a8:06:bc:ac:0f:d0:e8:1d:14:20:2b:dc:2b:00:78:
         30:e2:d1:6a:d0:c3:d6:e7:b3:d9:cc:f8:c8:07:37:ce:4b:58:
         84:ce:1e:8f:3b:ca:8f:2e:0d:54:76:5a:58:7e:b7:c2:e1:55:
         0a:2c:58:a3:a9:ba:16:13:12:fc:2b:90:0b:a9:31:12:c0:73:
         d2:c8:b0:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1eHuLsQT+43dpKSr2/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDYwMTAyODNhODIwMmVlYWEzZmVmMzI1MzRlM2U5N2Uw
NDA3OWUwHhcNMjUwMTMxMTYwMDExWhcNMjUwMjAxMTYwMDExWjAzMTEwLwYDVQQD
Eyg0ZjBlMTVmZjk5OTc5YjY3MGIwNDJlODVmYTgxODk0NGVkYTg3NTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNNYWqNoYWALnFasJtjFJr5g7wd+
+y5al4dpBgpjUf6bY9Vl85iUppifnCXdNWF/crhAfJOYWpS818CoEUb4qMIz9rwF
2Xhs1C+bhw7kYfIkVIcHh13xFjw4YM8uftCW87LfDRJepT7Yv96QYYcKbg11UItz
1CEYEfTb2mTkt548QlanIP39VaDZNuJzHfgstMtE3H2qF21ceV9qsYxVKu9orlgv
D2R/YlOHwEN9xWGctILu+hNkx//uZDuOPs7lCO23H0w/jZaOHSxnUf8CPc+7AU/t
DQ+5HldLznF88rJ/N2Dfu8QJLzlWnUNQ2eP6H7yeD9AMaz5EbZ+NotiE4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8OFf+Zl5tnCwQuhfqBiUTtqHUtMB8GA1UdIwQY
MBaAFLFGAQKDqCAu6qP+8yU04+l+BAeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWIt
YzAzMDdiMGY2MmRjLzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9iYWMwYjktYzk5Zi00OWJiLTkwNWItYzAzMDdiMGY2MmRj
LzEvc1VZQkFvT29JQzdxb183ekpUVGo2WDRFQjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoINT8QI
7OArcB05Sb4nlaqjEp9d/447g85w3ZUomRoLqN8zOYKCDSTuZIn4izjjWO5OKye7
ogwasaLuthTQn2ODfbgP2SmLyD3EHJhOQn59jW9+EEtPK+dZznwQkbLhbY+qBk4j
7O3dc4eyXtFty3m6WItlW9ff5A7KHydjTDyg67fi9/zUQVa01scQhKWFE+R1gLrr
q/aXRzYju70VcnuTx9SQBMffcVyLMsuOoyepJfUqhLK/qAa8rA/Q6B0UICvcKwB4
MOLRatDD1uez2cz4yAc3zktYhM4ejzvKjy4NVHZaWH63wuFVCixYo6m6FhMS/CuQ
C6kxEsBz0siwQQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:24 2025 by rpki-client