Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
File:                     NnBwsWnRGpYpEATjAA-bBNThEtM.mft (raw, json)
Hash identifier:          6zv6pdQ6YIqdZ3bGPdw9uOcA5/KNz5HDzP0PR/6ggJ4=
Subject key identifier:   02:1C:63:E1:8A:A6:04:14:AD:8A:C8:14:4C:05:AA:39:4F:64:3C:97
Authority key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Certificate issuer:       /CN=367070b169d11a96291004e3000f9b04d4e112d3
Certificate serial:       0194BBCDCBE798CD0157CFB8CA943A288162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
Manifest number:          050F
Signing time:             Fri 31 Jan 2025 10:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:13 +0000
Files and hashes:         1: NnBwsWnRGpYpEATjAA-bBNThEtM.crl (hash: iZYo9+t1SnNtpUafbEXENYboV7CerExgHYubbz7e0fU=)
                          2: dVmeU4wC0TgcJ1mLjCj6WUgRoKU.roa (hash: Tr7wmryEwMRa1UVn0iohUCcmRld2nTxoTKpz/4davog=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:cb:e7:98:cd:01:57:cf:b8:ca:94:3a:28:81:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367070b169d11a96291004e3000f9b04d4e112d3
        Validity
            Not Before: Jan 31 10:00:13 2025 GMT
            Not After : Feb  1 10:00:13 2025 GMT
        Subject: CN=021c63e18aa60414ad8ac8144c05aa394f643c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:92:77:77:cc:b2:57:7d:7e:b8:44:84:24:
                    92:30:32:44:2d:1e:c5:7c:b6:4a:33:6b:bb:26:80:
                    e7:70:e9:1f:af:57:df:ad:b9:ba:d8:bb:6f:ed:c0:
                    8f:34:26:09:7d:13:f2:aa:59:7a:80:c5:ec:6b:47:
                    9d:ab:63:3d:7b:d0:ed:28:c8:7a:e7:87:2c:79:ae:
                    1b:4d:1b:8f:71:42:48:b6:bf:35:3a:6f:fe:5d:15:
                    0c:88:44:df:2b:1b:c8:43:aa:66:98:72:16:5b:3b:
                    d3:7d:24:42:79:3f:b3:dc:d9:40:0e:9d:7a:f2:06:
                    2b:c1:53:bb:8d:94:97:0f:0d:d4:73:06:4b:c3:9c:
                    95:3a:16:9f:95:ec:a4:88:f5:4a:33:3e:d6:69:b6:
                    92:4f:68:5d:b3:cc:96:65:2e:a4:d5:54:bd:d3:c7:
                    de:e8:61:d5:2a:44:bd:84:4d:4c:25:0f:29:a1:b1:
                    06:07:d4:72:75:2b:1d:f8:9a:83:9f:d1:87:22:ea:
                    2f:ec:1a:70:75:de:38:9f:ae:18:be:eb:28:d6:0c:
                    b9:b0:4e:69:67:e6:6f:91:96:59:b4:13:1d:4e:36:
                    09:e7:03:3a:e9:d6:81:39:35:2c:f4:f9:2c:09:9c:
                    52:83:c8:05:29:34:61:f8:2b:c9:de:3e:54:9d:0a:
                    08:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1C:63:E1:8A:A6:04:14:AD:8A:C8:14:4C:05:AA:39:4F:64:3C:97
            X509v3 Authority Key Identifier:
                keyid:36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:21:f5:3d:61:33:e6:5c:6f:2b:23:51:1c:26:f2:40:88:cb:
         21:72:75:c6:31:8c:cb:3b:81:3a:fd:bb:93:87:11:61:20:68:
         e7:15:d4:3a:f2:42:66:8b:11:6d:f5:54:b0:2d:12:1e:31:1c:
         77:e3:44:77:09:0b:a2:54:00:5b:b1:5e:56:8c:6c:70:5e:b3:
         16:c0:e1:be:25:2b:db:bf:33:58:88:ea:12:ae:77:f6:b4:38:
         9f:e1:2c:fc:85:d3:21:fb:5f:4a:70:bb:ee:f4:94:6d:a0:e4:
         5a:57:2e:c4:7e:07:09:c5:3e:26:96:06:1c:e9:dd:f6:79:a0:
         88:ef:d6:fb:ac:47:01:82:7c:46:20:44:45:e8:53:a0:e2:31:
         59:b7:99:ed:e7:ba:dd:da:b5:12:96:a5:d4:fd:62:77:c4:32:
         13:c5:26:16:ea:25:71:2b:3a:a0:e5:76:23:3e:76:aa:7b:c4:
         9e:db:5e:65:67:4d:5e:e6:08:d2:9d:80:2e:39:84:1b:25:db:
         09:86:35:44:f3:2d:87:62:32:1d:32:ec:b0:59:e6:e4:8d:4c:
         1c:6e:17:49:99:09:51:00:6c:ae:33:55:23:89:ab:44:8d:6d:
         ea:48:1a:b7:ce:bc:bb:52:a3:9d:71:ee:64:6b:84:bb:38:d6:
         35:c6:b4:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcvnmM0BV8+4ypQ6KIFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzA3MGIxNjlkMTFhOTYyOTEwMDRlMzAwMGY5YjA0ZDRl
MTEyZDMwHhcNMjUwMTMxMTAwMDEzWhcNMjUwMjAxMTAwMDEzWjAzMTEwLwYDVQQD
EygwMjFjNjNlMThhYTYwNDE0YWQ4YWM4MTQ0YzA1YWEzOTRmNjQzYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLCSd3fMsld9frhEhCSSMDJELR7F
fLZKM2u7JoDncOkfr1ffrbm62Ltv7cCPNCYJfRPyqll6gMXsa0edq2M9e9DtKMh6
54csea4bTRuPcUJItr81Om/+XRUMiETfKxvIQ6pmmHIWWzvTfSRCeT+z3NlADp16
8gYrwVO7jZSXDw3UcwZLw5yVOhafleykiPVKMz7WabaST2hds8yWZS6k1VS908fe
6GHVKkS9hE1MJQ8pobEGB9RydSsd+JqDn9GHIuov7Bpwdd44n64Yvuso1gy5sE5p
Z+ZvkZZZtBMdTjYJ5wM66daBOTUs9PksCZxSg8gFKTRh+CvJ3j5UnQoIsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIcY+GKpgQUrYrIFEwFqjlPZDyXMB8GA1UdIwQY
MBaAFDZwcLFp0RqWKRAE4wAPmwTU4RLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUt
YTU4OTljZWU2NTVmLzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9iMTE5ODAtMWY3Yi00ZWU3LWE4OGUtYTU4OTljZWU2NTVm
LzEvTm5Cd3NXblJHcFlwRUFUakFBLWJCTlRoRXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByH1PWEz
5lxvKyNRHCbyQIjLIXJ1xjGMyzuBOv27k4cRYSBo5xXUOvJCZosRbfVUsC0SHjEc
d+NEdwkLolQAW7FeVoxscF6zFsDhviUr278zWIjqEq539rQ4n+Es/IXTIftfSnC7
7vSUbaDkWlcuxH4HCcU+JpYGHOnd9nmgiO/W+6xHAYJ8RiBERehToOIxWbeZ7ee6
3dq1Epal1P1id8QyE8UmFuolcSs6oOV2Iz52qnvEntteZWdNXuYI0p2ALjmEGyXb
CYY1RPMth2IyHTLssFnm5I1MHG4XSZkJUQBsrjNVI4mrRI1t6kgat868u1KjnXHu
ZGuEuzjWNca0Ww==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:22 2025 by rpki-client