Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/D1Am6U_gWY9-tvRiNqY5fmLwHnw.mft
File:                     D1Am6U_gWY9-tvRiNqY5fmLwHnw.mft (raw, json)
Hash identifier:          GgTTX5uzXxAWPpYobF+ZVzd+xRVcXFAtVChFux2mjaw=
Subject key identifier:   61:EB:DF:DE:89:3E:F8:78:18:86:00:A3:67:C2:46:17:AD:DF:0C:A7
Authority key identifier: 0F:50:26:E9:4F:E0:59:8F:7E:B6:F4:62:36:A6:39:7E:62:F0:1E:7C
Certificate issuer:       /CN=0f5026e94fe0598f7eb6f46236a6397e62f01e7c
Certificate serial:       0194BCE0EEAC1390F233FD3F8FAE34877223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1Am6U_gWY9-tvRiNqY5fmLwHnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/D1Am6U_gWY9-tvRiNqY5fmLwHnw.mft
Manifest number:          0890
Signing time:             Fri 31 Jan 2025 15:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:45 +0000
Files and hashes:         1: 1yx8ZT8Y1d5r_-FpZlprZ5zJuIU.roa (hash: p25iqv/NH8pOTiePKYso3BpGfEuMvTA3vOU3ceA7nsE=)
                          2: D1Am6U_gWY9-tvRiNqY5fmLwHnw.crl (hash: DYV5qsaB3Lre2251MwxKc4mtpI19y7DZwpBTybglWoQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ee:ac:13:90:f2:33:fd:3f:8f:ae:34:87:72:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5026e94fe0598f7eb6f46236a6397e62f01e7c
        Validity
            Not Before: Jan 31 15:00:45 2025 GMT
            Not After : Feb  1 15:00:45 2025 GMT
        Subject: CN=61ebdfde893ef878188600a367c24617addf0ca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b2:f5:fa:e6:45:9e:c0:17:bf:d1:94:9b:9f:
                    3f:85:d7:0d:d8:dd:03:89:cc:48:8a:bd:dc:09:47:
                    1c:42:d6:4f:8c:0a:8f:cc:d3:68:04:9a:da:b5:85:
                    03:56:1e:62:cc:d1:2c:c4:43:aa:ec:9c:c2:00:72:
                    b7:32:a2:e8:06:bd:a6:0a:e2:2c:de:72:80:8e:c0:
                    7c:d4:4a:1b:2e:65:93:e6:ce:86:2a:65:36:37:a8:
                    70:bb:55:18:90:5b:ab:72:4c:ca:a0:44:5d:ec:38:
                    6d:8a:2b:fd:52:cd:a4:81:88:ce:90:29:5c:a7:17:
                    72:88:68:f6:9c:2f:3f:50:99:6d:17:15:f0:aa:d7:
                    b8:ec:28:51:35:51:26:0d:af:e7:e5:55:f3:04:ae:
                    a2:bf:3c:eb:40:c8:bc:d3:bb:35:70:92:e5:c2:d5:
                    88:a9:33:6f:dc:02:5d:0b:01:ff:59:1e:b9:05:05:
                    3f:fc:63:94:ed:ee:f9:83:00:9d:92:b3:5b:c3:5d:
                    79:12:ec:dd:57:29:8d:2c:61:d6:18:96:35:1c:46:
                    15:45:84:df:50:a1:b9:fd:f5:4b:37:ee:ec:dc:5c:
                    6d:f6:86:ea:33:45:7b:26:9f:80:58:5d:30:8b:d9:
                    8b:aa:19:bb:ea:60:63:95:7d:2a:fe:c1:90:89:de:
                    54:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:DF:DE:89:3E:F8:78:18:86:00:A3:67:C2:46:17:AD:DF:0C:A7
            X509v3 Authority Key Identifier:
                keyid:0F:50:26:E9:4F:E0:59:8F:7E:B6:F4:62:36:A6:39:7E:62:F0:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Am6U_gWY9-tvRiNqY5fmLwHnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/D1Am6U_gWY9-tvRiNqY5fmLwHnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/37cb9c-220a-45e4-8d66-c71aa1b1d6e2/1/D1Am6U_gWY9-tvRiNqY5fmLwHnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:4e:cc:4b:da:b4:1d:17:4b:1f:d9:8c:66:0f:8f:5d:8f:1d:
         8b:ef:36:d0:57:73:8b:bd:0e:cf:30:46:a0:50:1f:7d:4f:ff:
         d4:1d:7e:7d:b5:f3:6b:42:76:2b:20:f8:90:da:51:2d:c2:57:
         80:5e:9d:fc:ee:97:4c:c2:9c:c9:d3:c5:c5:fd:88:50:fe:92:
         00:a4:3f:98:aa:67:df:10:67:bf:bc:91:87:e5:c7:25:13:55:
         f5:c3:15:fb:30:4b:f1:cc:e3:70:e7:e4:8a:f0:fe:e0:5c:b1:
         20:70:c4:f4:3e:d7:ea:5f:1d:0e:6e:cb:88:4b:a9:b8:4d:9e:
         b4:fe:54:3c:9b:a8:3c:ca:7a:91:f1:a1:d7:2e:c7:bb:32:ba:
         81:16:a4:6c:fa:7d:aa:4c:73:bf:5c:78:fb:06:b7:0a:19:18:
         f1:54:7c:ae:ba:13:eb:95:83:43:74:23:14:ae:47:69:aa:05:
         cb:12:8b:19:df:82:7f:47:a2:78:3f:29:7e:b9:91:95:aa:18:
         47:09:80:a1:a6:3e:5f:68:23:8b:13:96:1e:07:78:99:8f:32:
         43:30:b6:b7:52:96:ca:ea:6c:9f:18:b5:2b:ee:d0:94:f6:82:
         7f:4e:29:36:e2:24:fa:2a:8e:cc:ed:83:23:23:0b:70:e9:e6:
         03:33:7b:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84O6sE5DyM/0/j640h3IjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNTAyNmU5NGZlMDU5OGY3ZWI2ZjQ2MjM2YTYzOTdlNjJm
MDFlN2MwHhcNMjUwMTMxMTUwMDQ1WhcNMjUwMjAxMTUwMDQ1WjAzMTEwLwYDVQQD
Eyg2MWViZGZkZTg5M2VmODc4MTg4NjAwYTM2N2MyNDYxN2FkZGYwY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LL1+uZFnsAXv9GUm58/hdcN2N0D
icxIir3cCUccQtZPjAqPzNNoBJratYUDVh5izNEsxEOq7JzCAHK3MqLoBr2mCuIs
3nKAjsB81EobLmWT5s6GKmU2N6hwu1UYkFurckzKoERd7Dhtiiv9Us2kgYjOkClc
pxdyiGj2nC8/UJltFxXwqte47ChRNVEmDa/n5VXzBK6ivzzrQMi807s1cJLlwtWI
qTNv3AJdCwH/WR65BQU//GOU7e75gwCdkrNbw115EuzdVymNLGHWGJY1HEYVRYTf
UKG5/fVLN+7s3Fxt9obqM0V7Jp+AWF0wi9mLqhm76mBjlX0q/sGQid5U6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHr396JPvh4GIYAo2fCRhet3wynMB8GA1UdIwQY
MBaAFA9QJulP4FmPfrb0YjamOX5i8B58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFBbTZVX2dXWTktdHZSaU5xWTVmbUx3SG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zN2NiOWMtMjIwYS00NWU0LThkNjYt
YzcxYWExYjFkNmUyLzEvRDFBbTZVX2dXWTktdHZSaU5xWTVmbUx3SG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zN2NiOWMtMjIwYS00NWU0LThkNjYtYzcxYWExYjFkNmUy
LzEvRDFBbTZVX2dXWTktdHZSaU5xWTVmbUx3SG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ07MS9q0
HRdLH9mMZg+PXY8di+820Fdzi70OzzBGoFAffU//1B1+fbXza0J2KyD4kNpRLcJX
gF6d/O6XTMKcydPFxf2IUP6SAKQ/mKpn3xBnv7yRh+XHJRNV9cMV+zBL8czjcOfk
ivD+4FyxIHDE9D7X6l8dDm7LiEupuE2etP5UPJuoPMp6kfGh1y7HuzK6gRakbPp9
qkxzv1x4+wa3ChkY8VR8rroT65WDQ3QjFK5HaaoFyxKLGd+Cf0eieD8pfrmRlaoY
RwmAoaY+X2gjixOWHgd4mY8yQzC2t1KWyupsnxi1K+7QlPaCf04pNuIk+iqOzO2D
IyMLcOnmAzN7WQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:34 2025 by rpki-client