Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier:          AXMmllDG7Ebe+MeUDr1BXNTXKfsXV81kXdkCaEFRYLI=
Subject key identifier:   0C:01:D6:17:74:28:88:6E:8D:22:05:C3:08:AC:4B:1D:B7:83:3B:16
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       0194BD1807E9C0032D5FC0E7457D7DA1811B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number:          12FC
Signing time:             Fri 31 Jan 2025 16:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:56 +0000
Files and hashes:         1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: U1cCiBxNg8woT7/L09+XQFWTMurT0PBEOG+JKCYjv8k=)
                          2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
                          3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:18:07:e9:c0:03:2d:5f:c0:e7:45:7d:7d:a1:81:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Jan 31 16:00:56 2025 GMT
            Not After : Feb  1 16:00:56 2025 GMT
        Subject: CN=0c01d6177428886e8d2205c308ac4b1db7833b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:9e:a1:3b:bb:a9:9e:9e:07:b0:c6:53:9e:
                    fb:af:9f:d6:a4:c5:6f:fe:8e:78:8f:07:7f:a8:54:
                    6b:98:6a:d9:7d:1b:cb:e5:07:fc:d9:3a:ce:d5:79:
                    26:a2:c8:c8:5b:bc:e1:fd:79:7c:9d:eb:ae:ec:7a:
                    1f:41:a2:bb:22:1f:b7:1c:49:0f:03:d1:37:c2:6a:
                    d8:44:85:35:50:66:2e:dc:a5:f5:15:5c:4b:19:81:
                    89:fb:0a:fd:5d:68:e2:d4:6d:c3:2b:77:98:ff:3f:
                    bd:ff:7c:72:b8:51:07:6c:b3:76:39:4b:8d:9a:77:
                    80:52:72:dc:4f:fc:31:0d:8e:1a:65:be:7b:f2:24:
                    68:d4:82:d6:d9:04:9c:81:02:31:0c:7c:10:a3:05:
                    82:06:c4:0b:7a:ab:06:69:7a:34:f0:70:33:e7:1b:
                    dd:e4:1a:51:fc:f9:30:9e:93:ee:90:0b:53:33:71:
                    f3:dc:2b:42:49:9f:f1:17:eb:61:bd:03:fb:14:bc:
                    d6:d8:30:63:8a:78:d3:c0:d8:b5:91:a6:47:31:bb:
                    d9:70:48:e0:15:fe:c1:9a:3d:86:a2:2b:14:39:60:
                    af:a2:6f:b1:e2:7c:6c:bd:29:67:34:d5:86:ed:ac:
                    8d:9c:e7:97:8a:6a:95:99:5d:58:06:1a:01:e6:23:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:D6:17:74:28:88:6E:8D:22:05:C3:08:AC:4B:1D:B7:83:3B:16
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:3c:7f:ff:4c:b3:5a:60:49:9b:61:a3:87:e3:06:a3:6b:
         2b:bd:42:1c:a1:a9:67:42:3e:f4:84:f7:07:4f:5e:28:47:99:
         a4:bb:9a:95:67:fb:c6:47:06:55:b1:a0:d2:fb:2d:a4:f9:64:
         e0:a2:df:28:07:64:3f:22:c0:e8:5a:b2:fa:fd:de:88:2d:bd:
         97:6e:29:ab:a9:3b:d7:63:b4:53:c8:18:1e:cb:f4:11:69:cc:
         b3:bc:7e:a6:00:94:af:4f:21:3f:92:c9:02:9a:cb:3a:9a:a5:
         78:b6:f3:f9:b7:98:e6:cd:92:73:90:11:b4:04:a6:30:b0:31:
         85:07:6e:7a:1b:4e:1b:18:27:c1:00:74:ad:64:35:03:e6:27:
         cf:8c:89:2e:a2:ed:85:6e:48:66:bb:eb:59:2f:8d:ca:3e:d8:
         32:1a:b0:4f:a9:c8:d6:21:fc:0c:85:98:84:a4:ff:89:08:47:
         6e:9b:e9:0a:e6:f2:95:be:52:96:c4:17:70:4e:f0:09:8c:8c:
         0e:90:5e:73:fc:97:b1:57:e1:bc:f3:03:ea:00:f4:68:35:5d:
         cf:88:f6:cd:56:5b:39:55:3c:b9:1c:28:3e:ad:64:21:f3:8a:
         46:50:40:38:13:1c:10:e9:4d:cd:87:c9:be:6f:16:74:4c:52:
         fc:3e:f5:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9GAfpwAMtX8DnRX19oYEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzgwNzQyNmE3NDg3YTA4NDRmZGY0ZDdhNTJmMGZiOTBi
ZGI3ZDMwHhcNMjUwMTMxMTYwMDU2WhcNMjUwMjAxMTYwMDU2WjAzMTEwLwYDVQQD
EygwYzAxZDYxNzc0Mjg4ODZlOGQyMjA1YzMwOGFjNGIxZGI3ODMzYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDKeoTu7qZ6eB7DGU577r5/WpMVv
/o54jwd/qFRrmGrZfRvL5Qf82TrO1XkmosjIW7zh/Xl8neuu7HofQaK7Ih+3HEkP
A9E3wmrYRIU1UGYu3KX1FVxLGYGJ+wr9XWji1G3DK3eY/z+9/3xyuFEHbLN2OUuN
mneAUnLcT/wxDY4aZb578iRo1ILW2QScgQIxDHwQowWCBsQLeqsGaXo08HAz5xvd
5BpR/PkwnpPukAtTM3Hz3CtCSZ/xF+thvQP7FLzW2DBjinjTwNi1kaZHMbvZcEjg
Ff7Bmj2GoisUOWCvom+x4nxsvSlnNNWG7ayNnOeXimqVmV1YBhoB5iPqUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwB1hd0KIhujSIFwwisSx23gzsWMB8GA1UdIwQY
MBaAFOM4B0JqdIeghE/fTXpS8PuQvbfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xNzUwYmQtNDdkNi00NTA1LWFiMDUt
ODI4MTk3NjM0OTc2LzEvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xNzUwYmQtNDdkNi00NTA1LWFiMDUtODI4MTk3NjM0OTc2
LzEvNHpnSFFtcDBoNkNFVDk5TmVsTHctNUM5dDlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0w8f/9M
s1pgSZtho4fjBqNrK71CHKGpZ0I+9IT3B09eKEeZpLualWf7xkcGVbGg0vstpPlk
4KLfKAdkPyLA6Fqy+v3eiC29l24pq6k712O0U8gYHsv0EWnMs7x+pgCUr08hP5LJ
AprLOpqleLbz+beY5s2Sc5ARtASmMLAxhQduehtOGxgnwQB0rWQ1A+Ynz4yJLqLt
hW5IZrvrWS+Nyj7YMhqwT6nI1iH8DIWYhKT/iQhHbpvpCubylb5SlsQXcE7wCYyM
DpBec/yXsVfhvPMD6gD0aDVdz4j2zVZbOVU8uRwoPq1kIfOKRlBAOBMcEOlNzYfJ
vm8WdExS/D715w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:38:23 2025 by rpki-client