Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File:                     7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier:          Uv06SyTcDi+n5RT6Thd73c6xW3kblKBcxnbN1iFK3wE=
Subject key identifier:   97:C4:8B:54:8C:CD:44:DA:0C:35:88:DF:7A:B0:EB:99:A8:61:42:6F
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer:       /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial:       0194BBCEA8002BFC26107CD24899F9C25962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number:          0CEC
Signing time:             Fri 31 Jan 2025 10:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:10 +0000
Files and hashes:         1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: NUq18aJ7Uo7SS+XhQ88X9KnfHO054m8VidItmWhd2Ac=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a8:00:2b:fc:26:10:7c:d2:48:99:f9:c2:59:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
        Validity
            Not Before: Jan 31 10:01:10 2025 GMT
            Not After : Feb  1 10:01:10 2025 GMT
        Subject: CN=97c48b548ccd44da0c3588df7ab0eb99a861426f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:01:9f:80:f4:35:75:44:43:b2:93:18:56:88:
                    b5:da:16:33:be:44:6b:d8:b8:70:4a:52:99:5d:10:
                    27:26:b4:ff:93:47:71:04:e8:c7:a3:47:70:91:9a:
                    3a:ed:6d:9c:dd:62:9d:0a:90:f1:a4:22:04:cc:34:
                    ca:f7:77:da:d5:f8:df:fc:ca:f9:4d:60:75:1e:89:
                    27:e7:07:08:7b:79:51:d2:6f:65:3a:61:23:f6:e2:
                    0d:37:06:ad:ea:42:1d:79:e9:ca:62:b1:b7:55:1d:
                    0f:ae:57:28:d7:a5:59:6d:b0:29:53:68:7a:95:44:
                    a6:8f:ae:2b:a6:fd:82:8e:93:73:43:3e:2d:c3:ac:
                    1a:e1:cd:21:01:7f:20:bc:64:1d:05:dc:6b:01:68:
                    a2:41:9a:a9:fb:c5:f4:69:95:aa:41:c6:f5:bc:e9:
                    9b:9d:27:ea:bd:73:8a:0d:86:f4:8d:0d:0d:59:9f:
                    12:23:e3:21:e5:90:a0:2f:b0:6e:4e:d1:c2:4c:e0:
                    43:f0:e6:57:8d:80:b0:21:d7:a6:b6:3e:64:db:d5:
                    dd:52:25:7a:8c:c4:1c:a9:19:72:45:42:d3:e9:f2:
                    0d:97:53:c9:b3:35:15:99:db:6a:52:3a:82:e1:26:
                    e8:f0:75:3e:73:b0:c2:93:10:29:8c:3e:98:14:80:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C4:8B:54:8C:CD:44:DA:0C:35:88:DF:7A:B0:EB:99:A8:61:42:6F
            X509v3 Authority Key Identifier:
                keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:44:3c:1d:84:12:42:8a:c8:35:7c:bd:71:cd:af:71:6f:a7:
         42:90:25:e7:00:ca:62:1c:5c:6c:88:83:89:40:f4:f0:b9:c1:
         75:80:49:9a:dc:47:5c:cd:e5:94:d1:61:e2:b4:d3:b1:98:bc:
         0a:6f:57:c8:81:c8:0e:db:ca:42:c9:4f:f6:47:8d:56:2e:9f:
         cc:10:54:00:51:08:02:44:df:59:9f:18:e0:0c:b5:98:fb:18:
         ce:cc:36:96:36:e6:5b:7b:8b:d6:a2:db:27:34:ca:13:84:41:
         57:98:dd:38:a1:95:4c:4a:72:d8:b5:37:8d:ae:e5:00:b2:25:
         35:84:21:74:d8:96:7a:12:8e:f6:df:21:9e:b4:d9:6d:fc:1f:
         15:27:34:c6:ab:e7:fd:fb:ff:15:53:63:ef:5d:24:5d:9c:d2:
         cf:2f:d5:eb:35:b5:a1:6a:2c:91:e4:71:e9:ca:c2:61:7c:c4:
         cb:13:13:cf:73:b1:37:6c:d1:6e:17:c4:7f:4d:e0:7c:fa:7e:
         3b:bc:b4:09:74:d0:16:5d:67:e4:b8:50:a3:81:1d:27:10:6a:
         56:86:dd:b6:63:27:00:cd:4c:a6:bd:61:d5:e0:68:b0:24:d0:
         53:03:00:64:7b:7d:ee:f0:ba:84:41:fe:ab:7d:48:89:d0:f2:
         a3:94:c0:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqgAK/wmEHzSSJn5wlliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzBjNWQ4NjdkZTIwMGYwMTQ4NmIxYTg4MGE5NGI4NDk1
ZDcyMjAwHhcNMjUwMTMxMTAwMTEwWhcNMjUwMjAxMTAwMTEwWjAzMTEwLwYDVQQD
Eyg5N2M0OGI1NDhjY2Q0NGRhMGMzNTg4ZGY3YWIwZWI5OWE4NjE0MjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AGfgPQ1dURDspMYVoi12hYzvkRr
2LhwSlKZXRAnJrT/k0dxBOjHo0dwkZo67W2c3WKdCpDxpCIEzDTK93fa1fjf/Mr5
TWB1Hokn5wcIe3lR0m9lOmEj9uINNwat6kIdeenKYrG3VR0Prlco16VZbbApU2h6
lUSmj64rpv2CjpNzQz4tw6wa4c0hAX8gvGQdBdxrAWiiQZqp+8X0aZWqQcb1vOmb
nSfqvXOKDYb0jQ0NWZ8SI+Mh5ZCgL7BuTtHCTOBD8OZXjYCwIdemtj5k29XdUiV6
jMQcqRlyRULT6fINl1PJszUVmdtqUjqC4Sbo8HU+c7DCkxApjD6YFIDkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfEi1SMzUTaDDWI33qw65moYUJvMB8GA1UdIwQY
MBaAFOxwxdhn3iAPAUhrGogKlLhJXXIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQt
YzVhZDE1M2MyZDQ2LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZWY1NGMtYjAzNC00OWU2LThkYTQtYzVhZDE1M2MyZDQ2
LzEvN0hERjJHZmVJQThCU0dzYWlBcVV1RWxkY2lBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckQ8HYQS
QorINXy9cc2vcW+nQpAl5wDKYhxcbIiDiUD08LnBdYBJmtxHXM3llNFh4rTTsZi8
Cm9XyIHIDtvKQslP9keNVi6fzBBUAFEIAkTfWZ8Y4Ay1mPsYzsw2ljbmW3uL1qLb
JzTKE4RBV5jdOKGVTEpy2LU3ja7lALIlNYQhdNiWehKO9t8hnrTZbfwfFSc0xqvn
/fv/FVNj710kXZzSzy/V6zW1oWoskeRx6crCYXzEyxMTz3OxN2zRbhfEf03gfPp+
O7y0CXTQFl1n5LhQo4EdJxBqVobdtmMnAM1Mpr1h1eBosCTQUwMAZHt97vC6hEH+
q31IidDyo5TA3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:35 2025 by rpki-client