Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
File:                     Ol1KMpcC4smDHNNiYru3-nuX3jc.mft (raw, json)
Hash identifier:          UewsnV5qoJ1DQ0gMTW7pyHP9g7+C+PhO8mmXUw+0P9U=
Subject key identifier:   9B:DF:4A:75:CC:F0:4D:33:D7:F3:89:DC:8E:51:A7:0E:75:B7:32:4E
Authority key identifier: 3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37
Certificate issuer:       /CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
Certificate serial:       0194BBCDB5F29D830C403CE3A00CE3DEA02F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft
Manifest number:          049F
Signing time:             Fri 31 Jan 2025 10:00:08 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:08 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:08 +0000
Files and hashes:         1: 8w-emkXV3mI78HaDrtYjSaJ4uvs.roa (hash: UguZNtdmoMKuTfuNCkr9dLxX2oEt7raXUr+3iy0x1NM=)
                          2: Ol1KMpcC4smDHNNiYru3-nuX3jc.crl (hash: PYXSp74q/JQ12KXO/EcAx2C+tYuRwgGOkmt4wmgvlrk=)
                          3: X8OWy_CudyYOwEZJyz8iEHhHQsw.roa (hash: iEIWS88ZnTp53mvoQ1MLrckBofmSI+Ddk/R1LQUc7Y8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:b5:f2:9d:83:0c:40:3c:e3:a0:0c:e3:de:a0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a5d4a329702e2c9831cd36262bbb7fa7b97de37
        Validity
            Not Before: Jan 31 10:00:08 2025 GMT
            Not After : Feb  1 10:00:08 2025 GMT
        Subject: CN=9bdf4a75ccf04d33d7f389dc8e51a70e75b7324e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:95:d8:5d:0e:7f:ab:97:a9:38:1f:41:3d:
                    9f:66:0f:fb:35:1b:63:2a:6f:06:b6:85:11:64:87:
                    b3:92:8a:e4:62:0b:ab:0d:32:61:ed:59:8b:8e:f8:
                    7f:e8:43:db:8c:99:64:e6:28:28:17:5e:c5:53:a3:
                    eb:cc:25:f6:89:6d:32:c0:a0:24:a2:56:b1:90:d8:
                    63:c2:1c:a8:a5:a3:5e:e5:55:04:3d:cf:5a:88:c5:
                    4c:3e:8d:b8:5e:10:25:3c:cb:41:16:ca:a0:75:4b:
                    d1:ab:4f:45:2c:34:46:fc:a9:28:91:f3:e1:2c:a8:
                    f7:fb:9c:61:6b:8e:86:a2:9d:34:2c:a0:31:03:b1:
                    56:e0:d1:54:6f:9e:84:cc:9e:69:0f:5a:32:8d:5f:
                    93:f2:9f:15:51:57:40:0d:b1:bd:2c:0c:69:87:1e:
                    ca:cc:e9:64:cb:d2:87:fd:87:cc:e6:d6:79:0b:99:
                    ca:0b:b7:2d:f8:50:48:8c:bf:78:54:1c:bc:c3:c7:
                    08:62:ed:7e:26:48:78:e2:53:55:93:2b:20:26:47:
                    ff:fd:4c:21:6f:dd:64:4f:5a:fe:dd:e8:af:df:5f:
                    eb:a9:5e:7b:e4:9a:69:ac:1b:5a:3e:dc:97:1a:b6:
                    c0:93:3b:11:d1:f2:2b:d7:83:ea:c4:ea:83:f7:d5:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:4A:75:CC:F0:4D:33:D7:F3:89:DC:8E:51:A7:0E:75:B7:32:4E
            X509v3 Authority Key Identifier:
                keyid:3A:5D:4A:32:97:02:E2:C9:83:1C:D3:62:62:BB:B7:FA:7B:97:DE:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol1KMpcC4smDHNNiYru3-nuX3jc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/4bd661-9b0c-4560-b1d1-2cea8e153632/1/Ol1KMpcC4smDHNNiYru3-nuX3jc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:cb:fb:02:b3:18:a2:83:ca:0d:73:4a:d7:c5:d3:4a:41:23:
         bb:27:2a:77:81:7a:f7:c9:c5:59:ad:cc:1f:4d:e4:3b:53:14:
         72:a0:c2:34:ed:ff:45:cc:62:b1:44:b8:1c:33:4a:cb:9a:af:
         52:91:92:4a:5a:ec:2d:a2:23:ec:bd:17:d9:ee:dd:3f:48:40:
         6a:36:2c:68:78:38:62:51:e5:b1:ef:ce:45:7a:54:53:e2:52:
         fc:94:e3:3b:42:15:77:4e:12:92:79:23:e9:3c:58:09:27:91:
         3a:5f:9a:78:df:8c:13:d0:90:68:1b:f3:9f:f7:8e:f6:84:7e:
         89:66:e3:a4:36:46:9d:77:d9:a7:cd:1c:d6:22:94:f2:1a:37:
         89:b8:55:84:a2:f2:d5:76:0d:e8:a8:60:40:d7:5d:c0:8b:30:
         86:de:f6:43:c7:39:d5:c1:15:c6:38:cd:ab:c8:c4:9e:60:07:
         b8:30:60:c9:6f:ef:ab:e1:75:a9:22:29:d1:71:41:b5:0e:cf:
         7b:bc:a7:be:4f:21:1b:fe:22:42:ef:31:25:e5:d4:a6:aa:a6:
         34:db:99:24:b3:b9:b0:ef:97:d4:a5:ee:a3:0a:74:b9:19:d8:
         f3:ee:4c:0c:b4:f2:a1:05:d2:80:22:c1:6b:9c:56:da:c5:26:
         ea:b4:42:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zbXynYMMQDzjoAzj3qAvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNWQ0YTMyOTcwMmUyYzk4MzFjZDM2MjYyYmJiN2ZhN2I5
N2RlMzcwHhcNMjUwMTMxMTAwMDA4WhcNMjUwMjAxMTAwMDA4WjAzMTEwLwYDVQQD
Eyg5YmRmNGE3NWNjZjA0ZDMzZDdmMzg5ZGM4ZTUxYTcwZTc1YjczMjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbuV2F0Of6uXqTgfQT2fZg/7NRtj
Km8GtoURZIezkorkYgurDTJh7VmLjvh/6EPbjJlk5igoF17FU6PrzCX2iW0ywKAk
olaxkNhjwhyopaNe5VUEPc9aiMVMPo24XhAlPMtBFsqgdUvRq09FLDRG/KkokfPh
LKj3+5xha46Gop00LKAxA7FW4NFUb56EzJ5pD1oyjV+T8p8VUVdADbG9LAxphx7K
zOlky9KH/YfM5tZ5C5nKC7ct+FBIjL94VBy8w8cIYu1+Jkh44lNVkysgJkf//Uwh
b91kT1r+3eiv31/rqV575JpprBtaPtyXGrbAkzsR0fIr14PqxOqD99WC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvfSnXM8E0z1/OJ3I5Rpw51tzJOMB8GA1UdIwQY
MBaAFDpdSjKXAuLJgxzTYmK7t/p7l943MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEt
MmNlYThlMTUzNjMyLzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80YmQ2NjEtOWIwYy00NTYwLWIxZDEtMmNlYThlMTUzNjMy
LzEvT2wxS01wY0M0c21ESE5OaVlydTMtbnVYM2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMv7ArMY
ooPKDXNK18XTSkEjuycqd4F698nFWa3MH03kO1MUcqDCNO3/RcxisUS4HDNKy5qv
UpGSSlrsLaIj7L0X2e7dP0hAajYsaHg4YlHlse/ORXpUU+JS/JTjO0IVd04Sknkj
6TxYCSeROl+aeN+ME9CQaBvzn/eO9oR+iWbjpDZGnXfZp80c1iKU8ho3ibhVhKLy
1XYN6KhgQNddwIswht72Q8c51cEVxjjNq8jEnmAHuDBgyW/vq+F1qSIp0XFBtQ7P
e7ynvk8hG/4iQu8xJeXUpqqmNNuZJLO5sO+X1KXuowp0uRnY8+5MDLTyoQXSgCLB
a5xW2sUm6rRCQw==
-----END CERTIFICATE-----
Generated at Thu May 1 08:43:15 2025 by rpki-client