Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
File:                     mgGl7N4ueVkyWREG0II9DRVPcAI.mft (raw, json)
Hash identifier:          mDytb/ZN1IOPR+FYzz3167QFqMULaLJ/LrGsGi4Wx94=
Subject key identifier:   84:B4:70:4F:1F:6E:57:60:A9:CF:F1:9E:E6:61:F0:58:A4:0C:44:A9
Authority key identifier: 9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02
Certificate issuer:       /CN=9a01a5ecde2e795932591106d0823d0d154f7002
Certificate serial:       0194BBCE5E39B3457F53638FD59580694BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft
Manifest number:          0556
Signing time:             Fri 31 Jan 2025 10:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:51 +0000
Files and hashes:         1: mgGl7N4ueVkyWREG0II9DRVPcAI.crl (hash: WQ+JkzXjuHi4ymStrnJs8Rnv1Kw3f7T4skMU31fD3gE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:5e:39:b3:45:7f:53:63:8f:d5:95:80:69:4b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a01a5ecde2e795932591106d0823d0d154f7002
        Validity
            Not Before: Jan 31 10:00:51 2025 GMT
            Not After : Feb  1 10:00:51 2025 GMT
        Subject: CN=84b4704f1f6e5760a9cff19ee661f058a40c44a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:d7:45:11:cf:f6:7b:f2:99:72:71:eb:59:
                    db:d9:a8:88:85:f7:32:97:d1:df:65:ba:d1:f4:2a:
                    b7:56:ab:2b:3c:9d:1e:f8:52:7c:59:3e:99:ce:3a:
                    d5:35:4e:e1:33:d1:a6:dc:4a:43:e5:54:ee:2b:fc:
                    58:58:28:25:4a:4e:e5:55:82:ff:b2:ea:88:68:f3:
                    80:ed:4f:a4:9d:1a:79:a9:2e:5b:be:2f:9b:43:0e:
                    5b:ff:93:62:82:29:f7:d0:af:80:eb:19:6b:30:d6:
                    5e:50:d0:63:ee:9b:b7:fd:22:b5:53:eb:81:68:3b:
                    41:e7:46:8f:af:eb:5b:98:59:59:63:c3:9e:d8:6e:
                    7e:ee:89:95:ae:cc:b2:bd:60:37:8e:84:77:39:b1:
                    25:21:e4:c1:eb:01:90:3d:c3:ac:23:d5:29:9d:6f:
                    d0:dd:3e:0a:d1:ef:ba:aa:ec:e9:cd:8c:90:67:53:
                    f5:09:39:f8:ae:bb:47:80:db:be:ab:77:cd:c5:38:
                    9a:86:90:e7:fb:fd:84:cd:a0:65:20:26:1b:df:63:
                    00:be:17:07:db:b9:df:48:bf:22:1b:72:9a:8e:cc:
                    37:15:f5:1d:91:11:ac:1c:88:b5:df:02:2a:7b:b0:
                    a1:a3:c3:40:bd:9e:5e:59:61:4c:5b:ed:88:da:df:
                    5f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B4:70:4F:1F:6E:57:60:A9:CF:F1:9E:E6:61:F0:58:A4:0C:44:A9
            X509v3 Authority Key Identifier:
                keyid:9A:01:A5:EC:DE:2E:79:59:32:59:11:06:D0:82:3D:0D:15:4F:70:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgGl7N4ueVkyWREG0II9DRVPcAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/863c04-b07e-4c3a-9f45-fe2474d2f07c/1/mgGl7N4ueVkyWREG0II9DRVPcAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:86:80:0a:ff:58:81:b9:31:96:d7:d0:72:3a:36:e6:d8:da:
         af:06:bf:46:b3:42:5c:ce:9d:67:6a:73:9d:d3:bc:d2:81:9a:
         c5:b4:2c:08:6c:35:62:56:f5:0a:4b:94:12:0a:f8:d5:6f:47:
         a0:9f:d2:76:11:12:c4:72:52:13:22:8b:88:a0:12:87:f6:98:
         cc:0d:14:8b:e0:6c:9a:8c:29:96:77:d3:07:00:2a:15:6e:ca:
         b5:f5:28:c9:56:c9:4d:ed:e9:5b:66:76:fc:f5:63:86:44:18:
         37:26:35:b6:60:62:33:24:ec:7d:a8:dd:17:5b:8b:dc:eb:0b:
         7b:df:fd:55:c1:a6:1c:d6:e0:dd:c8:13:e3:95:39:29:c0:c6:
         88:dc:70:42:91:8f:ad:9d:9e:36:a3:11:8b:79:28:fc:c3:ed:
         4d:32:87:f9:16:dd:27:5c:66:26:af:8c:12:5f:e9:43:7d:a7:
         fd:17:70:e5:25:f6:2f:aa:1a:ec:99:fa:d2:9f:0f:ab:2d:02:
         87:11:db:96:de:ed:bb:0d:cb:89:1b:13:c1:45:8a:7a:54:5b:
         93:75:13:15:18:9b:87:9d:74:3e:61:10:3d:6b:b5:a5:94:17:
         1a:5a:42:f5:61:6c:56:28:f4:88:4a:d4:b5:3a:5d:93:9c:68:
         38:53:d0:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zl45s0V/U2OP1ZWAaUvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMDFhNWVjZGUyZTc5NTkzMjU5MTEwNmQwODIzZDBkMTU0
ZjcwMDIwHhcNMjUwMTMxMTAwMDUxWhcNMjUwMjAxMTAwMDUxWjAzMTEwLwYDVQQD
Eyg4NGI0NzA0ZjFmNmU1NzYwYTljZmYxOWVlNjYxZjA1OGE0MGM0NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArALXRRHP9nvymXJx61nb2aiIhfcy
l9HfZbrR9Cq3VqsrPJ0e+FJ8WT6ZzjrVNU7hM9Gm3EpD5VTuK/xYWCglSk7lVYL/
suqIaPOA7U+knRp5qS5bvi+bQw5b/5Nigin30K+A6xlrMNZeUNBj7pu3/SK1U+uB
aDtB50aPr+tbmFlZY8Oe2G5+7omVrsyyvWA3joR3ObElIeTB6wGQPcOsI9UpnW/Q
3T4K0e+6quzpzYyQZ1P1CTn4rrtHgNu+q3fNxTiahpDn+/2EzaBlICYb32MAvhcH
27nfSL8iG3Kajsw3FfUdkRGsHIi13wIqe7Cho8NAvZ5eWWFMW+2I2t9fvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIS0cE8fbldgqc/xnuZh8FikDESpMB8GA1UdIwQY
MBaAFJoBpezeLnlZMlkRBtCCPQ0VT3ACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84NjNjMDQtYjA3ZS00YzNhLTlmNDUt
ZmUyNDc0ZDJmMDdjLzEvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84NjNjMDQtYjA3ZS00YzNhLTlmNDUtZmUyNDc0ZDJmMDdj
LzEvbWdHbDdONHVlVmt5V1JFRzBJSTlEUlZQY0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4aACv9Y
gbkxltfQcjo25tjarwa/RrNCXM6dZ2pzndO80oGaxbQsCGw1Ylb1CkuUEgr41W9H
oJ/SdhESxHJSEyKLiKASh/aYzA0Ui+BsmowplnfTBwAqFW7KtfUoyVbJTe3pW2Z2
/PVjhkQYNyY1tmBiMyTsfajdF1uL3OsLe9/9VcGmHNbg3cgT45U5KcDGiNxwQpGP
rZ2eNqMRi3ko/MPtTTKH+RbdJ1xmJq+MEl/pQ32n/Rdw5SX2L6oa7Jn60p8Pqy0C
hxHblt7tuw3LiRsTwUWKelRbk3UTFRibh510PmEQPWu1pZQXGlpC9WFsVij0iErU
tTpdk5xoOFPQpg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:29:32 2025 by rpki-client