Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
File:                     sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft (raw, json)
Hash identifier:          xePmW6KIZXXj/bnMzNlBY7SA/TqeSgJl2QmEmEg6h3Y=
Subject key identifier:   86:45:62:76:D6:02:5E:4C:7D:C1:6C:5D:DA:7B:F0:05:B1:E2:25:E3
Authority key identifier: B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30
Certificate issuer:       /CN=b24d588df20b32db9787d77864394cd7a66d4030
Certificate serial:       0194BD4E502FE8462FDB5CCA6E50C6C18CF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft
Manifest number:          130F
Signing time:             Fri 31 Jan 2025 17:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:13 +0000
Files and hashes:         1: YAynT2rFqTF7GPjWR_vJKmQMToY.roa (hash: Nj9HjgClC5YboiO8+CeqUE2/z4iqwPpiEtBTjxVCiAo=)
                          2: sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl (hash: 0ovQHEEvquqcPi+D+DxXT3fQR+44WSGVg/03jiEalW4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:50:2f:e8:46:2f:db:5c:ca:6e:50:c6:c1:8c:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24d588df20b32db9787d77864394cd7a66d4030
        Validity
            Not Before: Jan 31 17:00:13 2025 GMT
            Not After : Feb  1 17:00:13 2025 GMT
        Subject: CN=86456276d6025e4c7dc16c5dda7bf005b1e225e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:b8:a2:2b:1a:aa:a8:91:6d:7c:5b:97:ba:
                    06:80:97:f0:fd:15:d0:f1:11:00:c3:a0:59:cc:17:
                    f8:a8:32:d7:bb:03:71:24:33:4e:0a:4d:bd:47:d1:
                    3d:89:b5:bf:2d:a0:42:93:06:66:db:a7:bf:56:8f:
                    58:9a:4d:90:94:e7:ae:5e:8e:f3:bd:47:69:b6:d1:
                    32:4c:a7:37:1b:64:48:2d:70:3e:36:79:28:cd:4b:
                    a2:27:c9:04:5e:77:aa:6d:c5:a3:89:8d:c6:a0:9b:
                    2c:b6:ad:71:a5:db:7e:f8:18:a8:c2:b6:16:f6:c7:
                    3e:50:5d:d0:97:a3:bd:76:75:ab:b2:de:39:07:36:
                    9d:58:3f:ce:28:ed:ff:0c:6c:6b:cc:3f:42:cd:68:
                    ef:ea:bb:da:c3:75:6c:50:22:a3:b5:f4:8e:be:f2:
                    20:ce:d4:7b:40:e9:c5:e5:7b:e1:66:e8:cc:61:05:
                    68:13:0b:79:6f:90:0f:fb:9d:4e:57:b8:12:ae:b6:
                    5a:1e:9a:98:e9:78:b6:4f:91:ef:ab:a5:7e:78:4d:
                    e9:c8:fa:e7:89:e8:65:70:02:74:d9:69:8d:63:4e:
                    16:cc:33:d4:e3:d9:d3:c9:52:4c:b9:8f:5d:42:22:
                    55:00:03:48:b8:e9:be:05:b5:c4:f0:58:93:be:6e:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:45:62:76:D6:02:5E:4C:7D:C1:6C:5D:DA:7B:F0:05:B1:E2:25:E3
            X509v3 Authority Key Identifier:
                keyid:B2:4D:58:8D:F2:0B:32:DB:97:87:D7:78:64:39:4C:D7:A6:6D:40:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk1YjfILMtuXh9d4ZDlM16ZtQDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bd2d39-15e6-4640-ad08-d7b64b7cc583/1/sk1YjfILMtuXh9d4ZDlM16ZtQDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:1f:51:6e:1d:f8:a2:8b:f0:a2:6c:1b:b6:7c:2f:0b:9f:
         8f:c2:a7:15:dc:ff:c9:ff:24:7e:4f:a7:a4:1d:7e:44:1e:0e:
         9d:21:ef:42:a2:5d:0c:6a:23:da:ff:b0:66:04:fc:83:4c:7d:
         9a:0d:9e:3f:5f:f1:be:36:bc:9a:9a:5f:61:b9:69:5c:86:86:
         21:09:b8:e0:b5:9c:87:c2:20:e8:14:a9:75:ae:8f:fb:26:a1:
         0a:73:96:14:2b:49:d9:e3:aa:c3:a4:e4:44:e2:1a:e7:ff:ab:
         4a:9c:8b:2c:f2:89:65:02:7e:e5:e0:f6:51:bf:de:fc:bb:d1:
         de:6a:39:96:e0:b1:06:5f:57:c9:06:e6:a6:0d:2c:97:9d:88:
         6a:ab:b8:9d:40:50:a8:06:37:ba:ba:24:49:ea:90:46:06:29:
         5e:5c:7a:54:31:2f:63:14:63:75:15:d4:ee:96:34:e6:47:66:
         fb:3a:26:7c:64:ec:5e:b8:5b:f5:41:b5:44:e4:65:bb:e7:eb:
         44:2e:04:7d:b9:ee:d8:ce:de:5a:e8:7d:88:52:29:68:df:5c:
         29:98:67:ae:c5:d8:c5:7e:db:1d:73:41:fb:06:66:7f:ba:5b:
         fa:72:d7:63:76:2b:fa:1a:76:8a:1d:bb:e9:85:50:81:51:77:
         f5:c5:62:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlAv6EYv21zKblDGwYz2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNGQ1ODhkZjIwYjMyZGI5Nzg3ZDc3ODY0Mzk0Y2Q3YTY2
ZDQwMzAwHhcNMjUwMTMxMTcwMDEzWhcNMjUwMjAxMTcwMDEzWjAzMTEwLwYDVQQD
Eyg4NjQ1NjI3NmQ2MDI1ZTRjN2RjMTZjNWRkYTdiZjAwNWIxZTIyNWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs64oisaqqiRbXxbl7oGgJfw/RXQ
8REAw6BZzBf4qDLXuwNxJDNOCk29R9E9ibW/LaBCkwZm26e/Vo9Ymk2QlOeuXo7z
vUdpttEyTKc3G2RILXA+NnkozUuiJ8kEXneqbcWjiY3GoJsstq1xpdt++BiowrYW
9sc+UF3Ql6O9dnWrst45BzadWD/OKO3/DGxrzD9CzWjv6rvaw3VsUCKjtfSOvvIg
ztR7QOnF5XvhZujMYQVoEwt5b5AP+51OV7gSrrZaHpqY6Xi2T5Hvq6V+eE3pyPrn
iehlcAJ02WmNY04WzDPU49nTyVJMuY9dQiJVAANIuOm+BbXE8FiTvm57jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZFYnbWAl5MfcFsXdp78AWx4iXjMB8GA1UdIwQY
MBaAFLJNWI3yCzLbl4fXeGQ5TNembUAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgt
ZDdiNjRiN2NjNTgzLzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9iZDJkMzktMTVlNi00NjQwLWFkMDgtZDdiNjRiN2NjNTgz
LzEvc2sxWWpmSUxNdHVYaDlkNFpEbE0xNlp0UURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1cfUW4d
+KKL8KJsG7Z8Lwufj8KnFdz/yf8kfk+npB1+RB4OnSHvQqJdDGoj2v+wZgT8g0x9
mg2eP1/xvja8mppfYblpXIaGIQm44LWch8Ig6BSpda6P+yahCnOWFCtJ2eOqw6Tk
ROIa5/+rSpyLLPKJZQJ+5eD2Ub/e/LvR3mo5luCxBl9XyQbmpg0sl52Iaqu4nUBQ
qAY3urokSeqQRgYpXlx6VDEvYxRjdRXU7pY05kdm+zomfGTsXrhb9UG1RORlu+fr
RC4Efbnu2M7eWuh9iFIpaN9cKZhnrsXYxX7bHXNB+wZmf7pb+nLXY3Yr+hp2ih27
6YVQgVF39cVi7w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:43 2025 by rpki-client