Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
File:                     A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft (raw, json)
Hash identifier:          AOyK2Cc8rXRIE1m/eNJNqU4cQfyXtlvbU9gt6HlhIhk=
Subject key identifier:   3E:59:DE:BB:A4:FA:8D:F6:3B:54:4A:CA:25:AA:3F:84:D2:E7:38:27
Authority key identifier: 03:74:64:80:36:83:B1:23:16:0D:1B:94:7C:17:C2:BF:C4:0E:D0:A7
Certificate issuer:       /CN=037464803683b123160d1b947c17c2bfc40ed0a7
Certificate serial:       0194BD17F538E3E5FCB8B59A412E32DCBAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft
Manifest number:          0351
Signing time:             Fri 31 Jan 2025 16:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:51 +0000
Files and hashes:         1: A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl (hash: BTRIxjnrhCYCjgyK+0hIv/GmayZ8oyUEakR8kf/dAyg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:f5:38:e3:e5:fc:b8:b5:9a:41:2e:32:dc:ba:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037464803683b123160d1b947c17c2bfc40ed0a7
        Validity
            Not Before: Jan 31 16:00:51 2025 GMT
            Not After : Feb  1 16:00:51 2025 GMT
        Subject: CN=3e59debba4fa8df63b544aca25aa3f84d2e73827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:c3:8d:97:1a:a5:08:d6:c8:78:9a:0c:26:
                    ad:1c:e9:15:f9:77:f1:f1:67:85:64:18:7f:97:ab:
                    c2:e8:3d:39:c7:f8:1d:2d:bc:63:f3:53:b7:dc:11:
                    e0:e8:62:b4:9a:00:ce:c7:53:17:16:10:15:76:b3:
                    be:1f:12:59:e9:4f:25:d8:8f:e1:88:85:74:ef:c1:
                    5f:ba:44:b0:34:01:fd:89:9b:14:dd:4e:2e:26:38:
                    06:9a:f3:e1:15:76:08:41:4c:a5:f1:50:97:63:8c:
                    dc:7d:34:e8:aa:5a:73:65:30:78:c5:12:97:30:5f:
                    ad:4b:bb:7e:a5:7f:e1:21:90:82:0e:d3:0c:f9:06:
                    e5:dd:9b:90:11:ca:26:fe:da:06:0e:6e:fc:ec:5f:
                    4e:36:28:a4:ee:26:ee:f9:86:93:82:b2:3b:0f:b3:
                    e4:43:88:54:d4:27:1a:fe:04:bf:5b:1a:af:24:a8:
                    78:4f:b6:6d:ab:82:3c:77:38:cd:99:ad:a9:08:7e:
                    b6:7b:4a:3a:47:ba:b2:31:97:b3:ec:c2:f0:fc:4c:
                    46:e1:67:01:44:ae:c1:81:cf:a3:9a:0f:99:ac:24:
                    5d:d0:de:03:7b:13:1d:72:ae:a5:cf:e4:2e:bc:dc:
                    47:05:8b:91:01:30:ff:6c:3c:9b:63:aa:c9:9f:eb:
                    25:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:59:DE:BB:A4:FA:8D:F6:3B:54:4A:CA:25:AA:3F:84:D2:E7:38:27
            X509v3 Authority Key Identifier:
                keyid:03:74:64:80:36:83:B1:23:16:0D:1B:94:7C:17:C2:BF:C4:0E:D0:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c067fa-40df-4991-96dd-8ad159fc5f57/1/A3RkgDaDsSMWDRuUfBfCv8QO0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d5:1b:eb:0e:be:8b:3c:0f:22:a8:af:d9:e2:9b:eb:af:4e:
         de:01:c7:43:53:25:a9:af:6c:60:c9:54:30:37:30:c8:db:26:
         64:a0:07:74:2c:17:3c:02:e8:4e:94:43:92:62:41:db:b6:27:
         c8:1f:17:bc:ca:53:95:04:44:c0:b8:bb:6c:15:19:8d:ec:b0:
         d0:45:e9:e8:53:ff:cc:de:7e:2f:97:71:54:20:6a:4a:db:7a:
         8d:0a:f4:11:8f:a6:45:20:8f:eb:e1:47:0b:f4:59:c8:7e:94:
         c9:fb:2a:0f:b2:e7:1f:9d:da:34:9b:07:13:73:0b:13:ef:4e:
         c6:4e:9b:20:e7:65:be:7d:28:04:f4:e9:b8:51:9b:bc:fc:d2:
         ed:e7:ea:47:29:f2:fd:35:be:0c:7c:38:66:61:d6:a7:1f:61:
         dc:73:9a:2c:f5:59:aa:42:e1:2a:f0:a6:50:b6:06:59:01:c7:
         39:99:1c:e9:e2:31:9a:62:b9:76:44:11:6f:6d:e2:44:64:f9:
         51:e3:4e:4e:24:3f:ea:d5:1c:50:43:b2:e6:90:ab:b1:2a:61:
         1d:8d:2c:bc:a5:b5:39:e3:4c:79:f2:3f:41:74:0b:a8:7f:c2:
         66:2c:05:58:d7:20:8d:6c:15:46:0e:e2:23:2b:a6:f0:94:fb:
         e1:34:61:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/U44+X8uLWaQS4y3LqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNzQ2NDgwMzY4M2IxMjMxNjBkMWI5NDdjMTdjMmJmYzQw
ZWQwYTcwHhcNMjUwMTMxMTYwMDUxWhcNMjUwMjAxMTYwMDUxWjAzMTEwLwYDVQQD
EygzZTU5ZGViYmE0ZmE4ZGY2M2I1NDRhY2EyNWFhM2Y4NGQyZTczODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gXDjZcapQjWyHiaDCatHOkV+Xfx
8WeFZBh/l6vC6D05x/gdLbxj81O33BHg6GK0mgDOx1MXFhAVdrO+HxJZ6U8l2I/h
iIV078FfukSwNAH9iZsU3U4uJjgGmvPhFXYIQUyl8VCXY4zcfTToqlpzZTB4xRKX
MF+tS7t+pX/hIZCCDtMM+Qbl3ZuQEcom/toGDm787F9ONiik7ibu+YaTgrI7D7Pk
Q4hU1Cca/gS/WxqvJKh4T7Ztq4I8dzjNma2pCH62e0o6R7qyMZez7MLw/ExG4WcB
RK7Bgc+jmg+ZrCRd0N4DexMdcq6lz+QuvNxHBYuRATD/bDybY6rJn+slGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5Z3ruk+o32O1RKyiWqP4TS5zgnMB8GA1UdIwQY
MBaAFAN0ZIA2g7EjFg0blHwXwr/EDtCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTNSa2dEYURzU01XRFJ1VWZCZkN2OFFPMEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jMDY3ZmEtNDBkZi00OTkxLTk2ZGQt
OGFkMTU5ZmM1ZjU3LzEvQTNSa2dEYURzU01XRFJ1VWZCZkN2OFFPMEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jMDY3ZmEtNDBkZi00OTkxLTk2ZGQtOGFkMTU5ZmM1ZjU3
LzEvQTNSa2dEYURzU01XRFJ1VWZCZkN2OFFPMEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdUb6w6+
izwPIqiv2eKb669O3gHHQ1Mlqa9sYMlUMDcwyNsmZKAHdCwXPALoTpRDkmJB27Yn
yB8XvMpTlQREwLi7bBUZjeyw0EXp6FP/zN5+L5dxVCBqStt6jQr0EY+mRSCP6+FH
C/RZyH6UyfsqD7LnH53aNJsHE3MLE+9Oxk6bIOdlvn0oBPTpuFGbvPzS7efqRyny
/TW+DHw4ZmHWpx9h3HOaLPVZqkLhKvCmULYGWQHHOZkc6eIxmmK5dkQRb23iRGT5
UeNOTiQ/6tUcUEOy5pCrsSphHY0svKW1OeNMefI/QXQLqH/CZiwFWNcgjWwVRg7i
Iyum8JT74TRhkQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:35 2025 by rpki-client