Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
File:                     an0UIH91yLFYDbJ_defD_bH_hgw.mft (raw, json)
Hash identifier:          wR79SJyJg+ClMoiCImfeqh/HTQcE0QC8DFkZ/ZYmBSc=
Subject key identifier:   C9:A6:54:37:56:6A:F7:65:45:FB:6E:C2:9E:8B:14:22:71:66:49:6E
Authority key identifier: 6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C
Certificate issuer:       /CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
Certificate serial:       0194BC72B05A2B3FE93370561FE59266AB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft
Manifest number:          06B9
Signing time:             Fri 31 Jan 2025 13:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:20 +0000
Files and hashes:         1: an0UIH91yLFYDbJ_defD_bH_hgw.crl (hash: QgK2KE7/9VGiRUTyx603lJz6Fjm9vgSFajopkBJnwu8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:b0:5a:2b:3f:e9:33:70:56:1f:e5:92:66:ab:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a7d14207f75c8b1580db27f75e7c3fdb1ff860c
        Validity
            Not Before: Jan 31 13:00:20 2025 GMT
            Not After : Feb  1 13:00:20 2025 GMT
        Subject: CN=c9a65437566af76545fb6ec29e8b14227166496e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:97:3e:3e:2f:38:45:00:de:33:66:02:a5:87:
                    ab:72:6e:c6:89:14:14:2b:84:07:a6:c6:ba:25:f4:
                    27:93:7c:34:0a:5b:83:88:e7:fb:f9:25:60:36:e4:
                    61:d8:6d:7b:6a:19:e3:a3:de:59:10:88:82:c0:a2:
                    fe:d5:5b:28:41:b7:56:95:81:52:61:74:35:da:e6:
                    f0:ff:af:66:77:96:59:bf:d5:b0:c5:b5:53:48:a8:
                    0e:98:7d:64:c1:8e:ad:77:d1:3f:2f:7d:1a:fe:37:
                    dd:72:25:26:53:da:4e:c6:18:fd:d2:2d:e2:f0:87:
                    76:67:d4:e2:56:ef:4c:eb:e3:61:3c:7d:b2:e6:55:
                    ad:a7:70:fb:fd:80:41:07:c6:17:ae:e2:fd:24:8b:
                    05:3b:fc:ea:96:c0:38:c0:4c:92:ca:a7:6b:ed:5e:
                    4f:60:0c:02:e4:fb:36:c4:dd:eb:66:79:67:f3:38:
                    12:36:71:76:af:95:c8:d6:52:01:16:fc:3b:6b:bc:
                    4d:62:82:08:c3:e1:5a:c2:bd:6c:bb:57:f9:1d:da:
                    8c:b2:e8:1c:dc:f5:63:b8:b8:80:78:90:46:64:ae:
                    21:dd:a4:1c:9c:a4:83:27:e8:14:1b:e3:bc:aa:1c:
                    33:9e:81:19:f5:7f:8d:88:01:7d:fd:f5:29:09:1a:
                    02:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A6:54:37:56:6A:F7:65:45:FB:6E:C2:9E:8B:14:22:71:66:49:6E
            X509v3 Authority Key Identifier:
                keyid:6A:7D:14:20:7F:75:C8:B1:58:0D:B2:7F:75:E7:C3:FD:B1:FF:86:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/an0UIH91yLFYDbJ_defD_bH_hgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/4e6a3b-ff31-47c9-97b1-beaa73710a65/1/an0UIH91yLFYDbJ_defD_bH_hgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:79:eb:b6:0b:5d:8f:dc:a1:87:29:95:f7:de:da:77:07:83:
         72:82:be:d6:65:e5:09:41:3a:4b:37:b4:f7:b1:2c:b9:b6:93:
         4c:59:79:ce:8a:8b:9e:50:29:87:11:26:7e:ca:6a:a8:0e:78:
         02:50:70:49:14:dc:7a:37:0a:32:96:72:fe:6b:38:c5:0f:35:
         e4:a1:9f:16:9e:26:8d:db:a6:09:74:fa:54:af:ef:c2:da:d9:
         da:72:8c:9f:76:e5:fe:9f:e7:50:fa:3a:1a:b1:27:7b:14:34:
         21:37:bb:9b:cb:7f:98:e4:e6:e0:28:57:b2:f1:a6:5d:a6:6f:
         c7:14:c1:45:26:d6:5e:50:fc:d4:64:a5:2d:30:48:ae:90:ca:
         5f:6f:ee:88:10:88:6b:fc:a3:71:ec:11:55:fb:b8:6e:ff:f1:
         8c:52:d3:84:e3:08:3f:d9:f1:36:a1:cb:82:9f:d3:3a:de:50:
         bc:54:f2:79:a9:aa:cb:c1:e0:f3:04:6d:67:3c:57:69:1a:f5:
         f4:94:0e:6f:6f:73:d4:5d:1f:55:08:f1:91:f4:72:08:68:e6:
         a8:70:ad:14:10:fb:1d:0d:98:79:1f:af:e7:54:25:72:76:ba:
         dc:31:42:75:f4:cc:e1:d6:68:1a:b1:01:ec:3a:dd:75:0d:fd:
         2a:18:eb:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8crBaKz/pM3BWH+WSZqtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhN2QxNDIwN2Y3NWM4YjE1ODBkYjI3Zjc1ZTdjM2ZkYjFm
Zjg2MGMwHhcNMjUwMTMxMTMwMDIwWhcNMjUwMjAxMTMwMDIwWjAzMTEwLwYDVQQD
EyhjOWE2NTQzNzU2NmFmNzY1NDVmYjZlYzI5ZThiMTQyMjcxNjY0OTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Jc+Pi84RQDeM2YCpYercm7GiRQU
K4QHpsa6JfQnk3w0CluDiOf7+SVgNuRh2G17ahnjo95ZEIiCwKL+1VsoQbdWlYFS
YXQ12ubw/69md5ZZv9WwxbVTSKgOmH1kwY6td9E/L30a/jfdciUmU9pOxhj90i3i
8Id2Z9TiVu9M6+NhPH2y5lWtp3D7/YBBB8YXruL9JIsFO/zqlsA4wEySyqdr7V5P
YAwC5Ps2xN3rZnln8zgSNnF2r5XI1lIBFvw7a7xNYoIIw+Fawr1su1f5HdqMsugc
3PVjuLiAeJBGZK4h3aQcnKSDJ+gUG+O8qhwznoEZ9X+NiAF9/fUpCRoCJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmmVDdWavdlRftuwp6LFCJxZkluMB8GA1UdIwQY
MBaAFGp9FCB/dcixWA2yf3Xnw/2x/4YMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC80ZTZhM2ItZmYzMS00N2M5LTk3YjEt
YmVhYTczNzEwYTY1LzEvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC80ZTZhM2ItZmYzMS00N2M5LTk3YjEtYmVhYTczNzEwYTY1
LzEvYW4wVUlIOTF5TEZZRGJKX2RlZkRfYkhfaGd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunnrtgtd
j9yhhymV997adweDcoK+1mXlCUE6Sze097EsubaTTFl5zoqLnlAphxEmfspqqA54
AlBwSRTcejcKMpZy/ms4xQ815KGfFp4mjdumCXT6VK/vwtrZ2nKMn3bl/p/nUPo6
GrEnexQ0ITe7m8t/mOTm4ChXsvGmXaZvxxTBRSbWXlD81GSlLTBIrpDKX2/uiBCI
a/yjcewRVfu4bv/xjFLThOMIP9nxNqHLgp/TOt5QvFTyeamqy8Hg8wRtZzxXaRr1
9JQOb29z1F0fVQjxkfRyCGjmqHCtFBD7HQ2YeR+v51Qlcna63DFCdfTM4dZoGrEB
7DrddQ39KhjrrA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:45 2025 by rpki-client