Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
File:                     skdjJsizNc1GFWo9VpBcbp0NhbU.mft (raw, json)
Hash identifier:          7TfC6oaTUKG7JY00frQoqE7+E9wBJygJVcMYZAGE0U4=
Subject key identifier:   79:6C:36:A8:A4:D3:74:5A:5E:BE:3A:B7:F2:85:AC:B9:E5:DA:41:33
Authority key identifier: B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5
Certificate issuer:       /CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
Certificate serial:       0194BC72950B3649320D9B0F01AC242B231A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft
Manifest number:          0324
Signing time:             Fri 31 Jan 2025 13:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:13 +0000
Files and hashes:         1: skdjJsizNc1GFWo9VpBcbp0NhbU.crl (hash: GAkvte+wriTbTLTXvB6myVJnHdA91rGFiPo8Dht5oK4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:95:0b:36:49:32:0d:9b:0f:01:ac:24:2b:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2476326c8b335cd46156a3d56905c6e9d0d85b5
        Validity
            Not Before: Jan 31 13:00:13 2025 GMT
            Not After : Feb  1 13:00:13 2025 GMT
        Subject: CN=796c36a8a4d3745a5ebe3ab7f285acb9e5da4133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:42:72:1e:27:a8:cf:12:e9:4d:44:ca:80:ee:
                    3d:03:34:f2:17:ed:83:58:c3:b9:2d:a1:00:b9:75:
                    5f:cb:7a:0b:c7:08:4f:5b:3e:7f:d1:4a:c8:b4:23:
                    98:bf:fc:b7:ab:64:30:13:31:1d:fe:e8:ef:aa:83:
                    af:5a:14:b2:fb:11:83:d9:20:f4:e8:2d:56:9a:07:
                    60:9d:55:48:e8:3f:05:b3:48:a7:18:22:f8:b2:50:
                    bc:2d:18:f2:61:86:fc:3a:d7:8a:7b:61:8c:02:18:
                    4f:32:dc:6f:00:4b:68:0c:6b:8d:34:51:94:f8:0c:
                    a2:2f:6f:6f:b5:c0:b7:5e:fd:ef:aa:b5:11:d8:c4:
                    e8:30:b8:50:48:b3:ea:a4:27:0d:14:c7:78:8b:e8:
                    3f:a8:7e:c3:17:d4:b4:be:14:88:5e:11:41:f5:5d:
                    ec:e7:06:01:34:00:45:83:7f:1d:8d:63:9f:66:5e:
                    9b:20:33:40:01:f6:1b:8a:9b:7b:1d:c9:9e:69:ca:
                    3a:18:26:d8:62:93:50:dc:2b:ef:82:e3:41:b4:3e:
                    98:25:3d:0f:53:0a:4f:4b:1a:c9:2c:d6:1e:e0:ad:
                    22:68:d8:cb:f5:7f:c2:c4:2f:66:07:1c:94:df:c4:
                    8c:69:47:b2:35:2c:77:b8:1b:0a:bf:41:f9:35:08:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6C:36:A8:A4:D3:74:5A:5E:BE:3A:B7:F2:85:AC:B9:E5:DA:41:33
            X509v3 Authority Key Identifier:
                keyid:B2:47:63:26:C8:B3:35:CD:46:15:6A:3D:56:90:5C:6E:9D:0D:85:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/skdjJsizNc1GFWo9VpBcbp0NhbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ebafee-8198-4d10-8936-f1a8881519b1/1/skdjJsizNc1GFWo9VpBcbp0NhbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:bc:e1:64:e6:6e:28:3e:71:09:b5:7a:f9:6b:60:9b:41:0c:
         ae:b9:5f:b4:2a:2a:c0:30:19:24:36:e3:31:83:f5:a5:c6:f1:
         84:fa:cd:5b:72:2d:ab:b4:0a:c2:70:c2:fe:35:c1:db:c8:dc:
         9e:6e:4f:79:06:72:ba:78:ec:cc:3d:40:d6:e0:76:70:7b:95:
         56:39:6d:19:6e:61:cd:42:b2:e1:f2:67:e1:12:fc:39:43:ad:
         cd:16:7a:b8:79:c3:1f:cb:c7:8a:91:7b:6d:b4:e5:84:de:34:
         d4:2f:06:7d:84:e2:c8:42:0a:02:6f:07:b0:e8:b0:b7:6e:de:
         ea:0e:48:e4:70:4c:bd:94:30:65:dc:94:e4:e6:01:b1:6a:9b:
         d8:de:4c:5e:96:cf:7a:c9:49:7b:69:98:b3:9a:db:db:5a:cf:
         f0:b8:70:84:a1:51:23:8d:c1:63:02:4d:36:e9:fc:f4:57:66:
         2f:35:b8:73:58:4e:29:55:03:69:6d:77:52:13:06:db:81:64:
         2b:bd:f2:4a:ae:f2:bc:24:de:ec:03:f2:a2:2e:06:12:35:93:
         37:83:31:fb:e1:67:51:7d:77:50:18:cf:1a:01:52:64:08:29:
         67:88:b1:07:bf:7a:81:13:57:92:8b:d8:06:16:a2:4d:b7:ee:
         55:cb:2a:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cpULNkkyDZsPAawkKyMaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNDc2MzI2YzhiMzM1Y2Q0NjE1NmEzZDU2OTA1YzZlOWQw
ZDg1YjUwHhcNMjUwMTMxMTMwMDEzWhcNMjUwMjAxMTMwMDEzWjAzMTEwLwYDVQQD
Eyg3OTZjMzZhOGE0ZDM3NDVhNWViZTNhYjdmMjg1YWNiOWU1ZGE0MTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUJyHieozxLpTUTKgO49AzTyF+2D
WMO5LaEAuXVfy3oLxwhPWz5/0UrItCOYv/y3q2QwEzEd/ujvqoOvWhSy+xGD2SD0
6C1WmgdgnVVI6D8Fs0inGCL4slC8LRjyYYb8OteKe2GMAhhPMtxvAEtoDGuNNFGU
+AyiL29vtcC3Xv3vqrUR2MToMLhQSLPqpCcNFMd4i+g/qH7DF9S0vhSIXhFB9V3s
5wYBNABFg38djWOfZl6bIDNAAfYbipt7Hcmeaco6GCbYYpNQ3CvvguNBtD6YJT0P
UwpPSxrJLNYe4K0iaNjL9X/CxC9mBxyU38SMaUeyNSx3uBsKv0H5NQiPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlsNqik03RaXr46t/KFrLnl2kEzMB8GA1UdIwQY
MBaAFLJHYybIszXNRhVqPVaQXG6dDYW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2tkakpzaXpOYzFHRldvOVZwQmNicDBOaGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYmFmZWUtODE5OC00ZDEwLTg5MzYt
ZjFhODg4MTUxOWIxLzEvc2tkakpzaXpOYzFHRldvOVZwQmNicDBOaGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYmFmZWUtODE5OC00ZDEwLTg5MzYtZjFhODg4MTUxOWIx
LzEvc2tkakpzaXpOYzFHRldvOVZwQmNicDBOaGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7zhZOZu
KD5xCbV6+Wtgm0EMrrlftCoqwDAZJDbjMYP1pcbxhPrNW3Itq7QKwnDC/jXB28jc
nm5PeQZyunjszD1A1uB2cHuVVjltGW5hzUKy4fJn4RL8OUOtzRZ6uHnDH8vHipF7
bbTlhN401C8GfYTiyEIKAm8HsOiwt27e6g5I5HBMvZQwZdyU5OYBsWqb2N5MXpbP
eslJe2mYs5rb21rP8LhwhKFRI43BYwJNNun89FdmLzW4c1hOKVUDaW13UhMG24Fk
K73ySq7yvCTe7APyoi4GEjWTN4Mx++FnUX13UBjPGgFSZAgpZ4ixB796gRNXkovY
BhaiTbfuVcsq+Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:43 2025 by rpki-client