Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
File:                     OWN43jPRC4yw-AhitkkaTenP_N8.mft (raw, json)
Hash identifier:          FPYu0UN/lY8t+YuTjdcXFHCsFFzKK+eYlhrhW9r5hh8=
Subject key identifier:   D3:52:38:98:62:9A:22:6C:4D:C3:3E:E1:5A:D2:39:E2:A4:92:EF:B8
Authority key identifier: 39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF
Certificate issuer:       /CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
Certificate serial:       0194BCA9CF83581C34C66054C573B2E5A697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft
Manifest number:          03AF
Signing time:             Fri 31 Jan 2025 14:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:32 +0000
Files and hashes:         1: OWN43jPRC4yw-AhitkkaTenP_N8.crl (hash: NCQcsAWkK8b6ZEcVAwUPvdg4DqgNfJ7Mn92vQcg+/Dg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:cf:83:58:1c:34:c6:60:54:c5:73:b2:e5:a6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=396378de33d10b8cb0f80862b6491a4de9cffcdf
        Validity
            Not Before: Jan 31 14:00:32 2025 GMT
            Not After : Feb  1 14:00:32 2025 GMT
        Subject: CN=d3523898629a226c4dc33ee15ad239e2a492efb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:56:3e:94:91:69:ab:75:bb:fc:7d:d3:42:b3:
                    ba:1e:df:a5:8c:0e:78:37:b2:ba:99:9b:08:f1:f8:
                    d5:10:ee:22:79:53:33:e3:a7:b2:67:5d:7f:dd:63:
                    0d:fb:55:3a:50:a8:cb:8f:80:69:38:7f:6f:14:9f:
                    68:2d:69:e9:46:98:93:6b:ed:e0:c5:6c:be:5d:e1:
                    9b:33:2f:dc:d4:22:b1:1a:9a:42:16:55:62:78:6e:
                    8a:e3:3a:74:19:fe:a5:09:51:8e:00:86:a1:a9:df:
                    42:fc:e8:7a:aa:34:0c:66:f4:e7:ab:ab:80:07:ff:
                    9d:a4:49:ee:4b:c5:79:d0:0b:0e:d6:fb:e0:04:8c:
                    1a:4f:3f:05:30:13:ee:3b:b4:ad:75:8f:5a:b4:a9:
                    29:c5:63:67:39:1f:e1:09:ab:02:5f:16:76:b2:26:
                    35:06:6f:79:0c:4f:9d:17:f0:a4:ca:37:96:ed:6a:
                    05:e5:32:e8:4b:6e:5b:ac:d8:89:dc:cb:4f:62:ab:
                    a4:a7:92:77:f4:c8:de:13:98:7e:6b:d9:ca:5d:3f:
                    9d:76:bb:c8:0f:ca:9d:53:b0:76:42:18:00:16:ce:
                    2c:19:9e:9f:44:fb:74:9a:3a:e5:cd:bc:24:26:55:
                    0a:a3:20:47:fe:60:60:d6:ca:84:76:37:b2:c0:be:
                    8e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:52:38:98:62:9A:22:6C:4D:C3:3E:E1:5A:D2:39:E2:A4:92:EF:B8
            X509v3 Authority Key Identifier:
                keyid:39:63:78:DE:33:D1:0B:8C:B0:F8:08:62:B6:49:1A:4D:E9:CF:FC:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWN43jPRC4yw-AhitkkaTenP_N8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f756cf-0628-4f72-a117-bbe073bf6a64/1/OWN43jPRC4yw-AhitkkaTenP_N8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d2:3b:f7:df:71:55:96:02:d9:7d:68:10:5d:40:37:bd:8b:
         ff:d2:55:ec:9f:53:39:44:67:82:bd:09:f3:45:0a:4c:ad:e0:
         b0:5e:e3:89:04:75:55:ef:ad:63:0b:f1:56:64:8b:1d:ad:01:
         cd:5a:a3:b0:92:be:9e:88:4f:a5:5f:5c:35:4e:72:d2:73:5c:
         3c:33:ed:b7:87:ba:17:d2:02:1a:8c:a2:86:31:ef:ae:4c:b6:
         d0:0b:c5:b5:59:ec:8f:e7:8e:9c:cf:4b:26:91:15:98:70:a4:
         11:5d:00:49:7a:07:33:4c:01:a9:dd:27:6d:7f:b5:d1:ec:c9:
         b7:96:05:74:12:57:7c:5a:3d:0d:b0:76:c3:cc:5a:e6:46:95:
         0f:e0:10:85:f3:4a:32:3c:c1:23:52:5b:90:f8:4c:36:9b:a2:
         ac:2e:5d:52:58:e9:16:4e:3b:41:f9:0b:50:ae:76:44:cc:93:
         b7:72:3e:1a:ff:82:93:92:b0:37:bd:2d:fa:8d:f6:22:af:41:
         e4:34:d5:83:19:56:f5:ca:2e:4e:79:95:70:b1:1c:27:8f:d9:
         94:73:e5:c6:77:65:4f:10:eb:22:ba:63:c9:ef:31:3c:90:6a:
         2f:d3:a1:a8:39:18:fb:40:aa:b9:2b:00:cf:b2:b5:38:b0:0c:
         c5:7e:18:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qc+DWBw0xmBUxXOy5aaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjM3OGRlMzNkMTBiOGNiMGY4MDg2MmI2NDkxYTRkZTlj
ZmZjZGYwHhcNMjUwMTMxMTQwMDMyWhcNMjUwMjAxMTQwMDMyWjAzMTEwLwYDVQQD
EyhkMzUyMzg5ODYyOWEyMjZjNGRjMzNlZTE1YWQyMzllMmE0OTJlZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VY+lJFpq3W7/H3TQrO6Ht+ljA54
N7K6mZsI8fjVEO4ieVMz46eyZ11/3WMN+1U6UKjLj4BpOH9vFJ9oLWnpRpiTa+3g
xWy+XeGbMy/c1CKxGppCFlVieG6K4zp0Gf6lCVGOAIahqd9C/Oh6qjQMZvTnq6uA
B/+dpEnuS8V50AsO1vvgBIwaTz8FMBPuO7StdY9atKkpxWNnOR/hCasCXxZ2siY1
Bm95DE+dF/CkyjeW7WoF5TLoS25brNiJ3MtPYqukp5J39MjeE5h+a9nKXT+ddrvI
D8qdU7B2QhgAFs4sGZ6fRPt0mjrlzbwkJlUKoyBH/mBg1sqEdjeywL6O8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNSOJhimiJsTcM+4VrSOeKkku+4MB8GA1UdIwQY
MBaAFDljeN4z0QuMsPgIYrZJGk3pz/zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTct
YmJlMDczYmY2YTY0LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNzU2Y2YtMDYyOC00ZjcyLWExMTctYmJlMDczYmY2YTY0
LzEvT1dONDNqUFJDNHl3LUFoaXRra2FUZW5QX044LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATNI7999x
VZYC2X1oEF1AN72L/9JV7J9TOURngr0J80UKTK3gsF7jiQR1Ve+tYwvxVmSLHa0B
zVqjsJK+nohPpV9cNU5y0nNcPDPtt4e6F9ICGoyihjHvrky20AvFtVnsj+eOnM9L
JpEVmHCkEV0ASXoHM0wBqd0nbX+10ezJt5YFdBJXfFo9DbB2w8xa5kaVD+AQhfNK
MjzBI1JbkPhMNpuirC5dUljpFk47QfkLUK52RMyTt3I+Gv+Ck5KwN70t+o32Iq9B
5DTVgxlW9couTnmVcLEcJ4/ZlHPlxndlTxDrIrpjye8xPJBqL9OhqDkY+0CquSsA
z7K1OLAMxX4Y9w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:57 2025 by rpki-client