Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
File:                     GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft (raw, json)
Hash identifier:          itzZeHuOYVEi6XMRiK4LitMyjr6c9wdP67RfigdBEP0=
Subject key identifier:   8A:FB:27:0F:FD:98:3E:78:65:6A:0E:B8:D0:8A:F2:04:27:0A:30:10
Authority key identifier: 18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23
Certificate issuer:       /CN=188ed4884f111939ca6c7f0f34b2792b39b93423
Certificate serial:       0194BBCE8507BA1995F460F93EDA7412AE07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft
Manifest number:          13BC
Signing time:             Fri 31 Jan 2025 10:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:01 +0000
Files and hashes:         1: GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl (hash: PEvqGb0shWsbYx4DqJ1AuVYggJI65LpReK3PPCe3Owo=)
                          2: n3bBKfncJSw0BedT5BmrufOi-w4.roa (hash: payevUddDm69dVPoygf/tnvW3ppO/jdm5/2U7r6MPRg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:85:07:ba:19:95:f4:60:f9:3e:da:74:12:ae:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188ed4884f111939ca6c7f0f34b2792b39b93423
        Validity
            Not Before: Jan 31 10:01:01 2025 GMT
            Not After : Feb  1 10:01:01 2025 GMT
        Subject: CN=8afb270ffd983e78656a0eb8d08af204270a3010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:50:c8:b2:e6:fb:e2:98:4c:40:66:73:35:24:
                    a0:7c:5d:9b:33:82:b2:23:51:66:c0:b0:30:13:9e:
                    21:96:6d:8f:a4:9f:f9:97:1f:9d:72:14:af:37:01:
                    00:9b:ca:cd:a1:24:2e:cc:1b:51:77:2a:4e:2b:97:
                    0b:1f:71:be:e8:d2:5f:0a:1a:8a:4c:b9:29:b5:42:
                    fa:e6:a0:78:f8:40:24:1c:3f:d2:cb:fa:9e:d4:9c:
                    80:e3:d8:d3:89:c3:ff:bc:9a:ba:cc:1e:14:75:97:
                    1f:52:bc:92:f3:d3:18:a0:bd:c7:c3:01:40:71:eb:
                    48:d8:2a:d8:fb:a4:77:ef:98:f7:cf:98:bd:09:3c:
                    7b:29:82:6f:6b:b4:64:d0:f2:35:ab:c6:ad:63:0e:
                    1f:53:1a:93:ec:d3:84:34:d9:68:7c:02:42:fe:7d:
                    0d:ee:53:07:d6:bb:71:a6:ae:f1:21:e7:77:c7:62:
                    8f:c5:59:ea:56:56:36:01:58:3a:fc:88:e4:5e:58:
                    67:4a:e5:82:cb:92:02:59:20:9c:25:01:25:25:56:
                    90:94:1d:5c:8e:a0:f6:e7:ee:2c:d4:27:59:d7:1d:
                    74:f1:66:f9:f9:e8:50:cd:af:6b:b4:aa:1e:4f:df:
                    40:c4:c2:a1:eb:f0:5d:d0:b4:6e:c9:d1:13:7b:78:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FB:27:0F:FD:98:3E:78:65:6A:0E:B8:D0:8A:F2:04:27:0A:30:10
            X509v3 Authority Key Identifier:
                keyid:18:8E:D4:88:4F:11:19:39:CA:6C:7F:0F:34:B2:79:2B:39:B9:34:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b88532-9974-4612-94c4-5e0777b04049/1/GI7UiE8RGTnKbH8PNLJ5Kzm5NCM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a4:48:e2:09:5a:6c:45:69:ac:c7:70:8c:34:db:a9:b1:0d:
         29:f8:59:f4:02:ce:32:1e:6b:48:8f:09:07:0c:a4:fe:31:d4:
         c8:ce:b8:b5:20:06:54:c4:f6:0a:32:73:29:76:39:7d:15:41:
         bb:1d:b3:76:26:ec:5a:5d:74:71:97:03:af:4f:6a:03:a0:c4:
         95:9d:d9:fc:99:1d:cd:4b:46:fc:2f:0d:fb:9b:fb:80:fc:b4:
         cf:2e:03:7c:5b:c7:c7:28:21:e6:4d:f1:12:4a:20:47:74:4c:
         00:8b:8a:5a:72:ad:82:04:6f:aa:4f:1b:3c:f2:da:5e:d9:7e:
         80:94:63:c1:a8:07:02:aa:05:f8:a3:bf:f4:56:27:ce:89:1a:
         5e:57:e0:e9:eb:eb:03:e9:d5:48:5e:a9:a1:1c:b1:30:4d:36:
         df:12:90:bd:cb:77:59:64:9f:bf:be:84:c3:b5:68:d4:04:d5:
         c8:6a:db:ff:09:9c:c8:4f:c7:a3:9d:bb:05:ca:46:e6:f9:19:
         1e:39:a6:b1:7a:0e:48:f7:c4:23:c1:bb:64:6a:b0:73:b5:a4:
         95:a5:c6:d9:4b:8c:af:56:b1:e1:5a:cd:00:86:07:ec:74:0e:
         75:de:d7:c8:cb:c8:8b:f5:2a:0c:30:3a:9d:3d:56:5c:54:a2:
         f5:c5:26:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoUHuhmV9GD5Ptp0Eq4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGVkNDg4NGYxMTE5MzljYTZjN2YwZjM0YjI3OTJiMzli
OTM0MjMwHhcNMjUwMTMxMTAwMTAxWhcNMjUwMjAxMTAwMTAxWjAzMTEwLwYDVQQD
Eyg4YWZiMjcwZmZkOTgzZTc4NjU2YTBlYjhkMDhhZjIwNDI3MGEzMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklDIsub74phMQGZzNSSgfF2bM4Ky
I1FmwLAwE54hlm2PpJ/5lx+dchSvNwEAm8rNoSQuzBtRdypOK5cLH3G+6NJfChqK
TLkptUL65qB4+EAkHD/Sy/qe1JyA49jTicP/vJq6zB4UdZcfUryS89MYoL3HwwFA
cetI2CrY+6R375j3z5i9CTx7KYJva7Rk0PI1q8atYw4fUxqT7NOENNlofAJC/n0N
7lMH1rtxpq7xIed3x2KPxVnqVlY2AVg6/IjkXlhnSuWCy5ICWSCcJQElJVaQlB1c
jqD25+4s1CdZ1x108Wb5+ehQza9rtKoeT99AxMKh6/Bd0LRuydETe3ji2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIr7Jw/9mD54ZWoOuNCK8gQnCjAQMB8GA1UdIwQY
MBaAFBiO1IhPERk5ymx/DzSyeSs5uTQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQt
NWUwNzc3YjA0MDQ5LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iODg1MzItOTk3NC00NjEyLTk0YzQtNWUwNzc3YjA0MDQ5
LzEvR0k3VWlFOFJHVG5LYkg4UE5MSjVLem01TkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaRI4gla
bEVprMdwjDTbqbENKfhZ9ALOMh5rSI8JBwyk/jHUyM64tSAGVMT2CjJzKXY5fRVB
ux2zdibsWl10cZcDr09qA6DElZ3Z/JkdzUtG/C8N+5v7gPy0zy4DfFvHxygh5k3x
EkogR3RMAIuKWnKtggRvqk8bPPLaXtl+gJRjwagHAqoF+KO/9FYnzokaXlfg6evr
A+nVSF6poRyxME023xKQvct3WWSfv76Ew7Vo1ATVyGrb/wmcyE/Ho527BcpG5vkZ
HjmmsXoOSPfEI8G7ZGqwc7WklaXG2UuMr1ax4VrNAIYH7HQOdd7XyMvIi/UqDDA6
nT1WXFSi9cUmxw==
-----END CERTIFICATE-----
Generated at Thu May 1 06:24:57 2025 by rpki-client