Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
File:                     o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft (raw, json)
Hash identifier:          BMMPfV1kxtZnicCtlh2GcQc8gJakH5D6JceizJisFf0=
Subject key identifier:   A3:F3:D9:5A:BD:42:03:60:3D:CA:4B:9D:27:3C:E6:E8:DD:90:D7:02
Authority key identifier: A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A
Certificate issuer:       /CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
Certificate serial:       0194BCA9DBFA11E7B99E65FC9C084426BD12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 14:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:35 +0000
Files and hashes:         1: o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl (hash: HSnwi0hwP9vS93ljAH6elC1Fy/sEmxIdb4lSdfBSO+g=)
                          2: wO1GQo2rZB8lJtoeHMT1KMwKgpU.roa (hash: Yu5YmfTpsDZhYHP86sXXckUGP6eYuQx5xxwIw0mjX4w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:db:fa:11:e7:b9:9e:65:fc:9c:08:44:26:bd:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6ed87b669d05b420df5aa9a6132ea6fb51a5a
        Validity
            Not Before: Jan 31 14:00:35 2025 GMT
            Not After : Feb  1 14:00:35 2025 GMT
        Subject: CN=a3f3d95abd4203603dca4b9d273ce6e8dd90d702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:74:c9:eb:74:a1:3f:76:1c:f5:21:ca:41:
                    a3:a5:9d:8a:19:82:3c:13:8e:ab:8c:88:86:48:d6:
                    25:87:ef:0c:33:c6:52:09:b9:c6:b7:66:0f:a6:01:
                    9b:07:62:57:26:9a:1c:a4:fb:aa:a2:c7:77:7d:2f:
                    23:4f:0f:f7:5d:1f:40:01:0d:d0:4a:e7:68:20:f0:
                    53:94:7e:fe:20:68:e4:ff:f7:34:27:f0:23:84:5b:
                    48:5f:3d:85:74:0b:53:a3:39:e4:ae:2e:17:b8:d5:
                    73:59:d3:bc:72:2e:91:c3:45:55:f9:e4:cd:58:4d:
                    62:fb:9a:be:99:99:e2:63:42:7e:b4:c9:d9:24:81:
                    8c:ce:e7:c3:67:6e:81:f2:f2:42:78:64:eb:7a:0d:
                    6f:4b:06:84:3b:f3:6e:f9:92:ed:ad:66:5d:99:f5:
                    87:bf:a9:8e:db:fa:b5:6d:7a:de:ce:9e:54:7a:b2:
                    6d:63:d3:ff:b9:6e:ba:fd:16:2d:22:48:74:48:bc:
                    cc:03:02:c8:b5:4b:a2:24:6d:53:54:3a:a7:a6:69:
                    f3:ae:7a:96:97:0a:23:9c:1e:73:78:12:94:2f:8f:
                    3d:f5:92:31:98:7a:da:6f:5b:e6:0e:1c:c4:8c:8a:
                    8e:88:10:df:20:55:ef:1a:c3:4d:4a:42:3a:38:57:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F3:D9:5A:BD:42:03:60:3D:CA:4B:9D:27:3C:E6:E8:DD:90:D7:02
            X509v3 Authority Key Identifier:
                keyid:A3:E6:ED:87:B6:69:D0:5B:42:0D:F5:AA:9A:61:32:EA:6F:B5:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-bth7Zp0FtCDfWqmmEy6m-1Glo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/814cef-d825-487a-98ec-7b8ea0f83081/1/o-bth7Zp0FtCDfWqmmEy6m-1Glo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:62:be:d6:6d:4b:40:47:97:f3:fb:3c:91:d3:90:14:b4:09:
         63:a8:61:04:9d:31:e4:99:d0:83:3a:e9:b6:1d:0a:3a:5f:51:
         89:bf:34:44:2d:f8:f7:8a:10:38:ab:c5:dd:19:32:2f:ce:9d:
         3a:c2:0f:3b:c1:03:b0:80:e1:28:51:fb:11:e9:f8:6e:5e:cf:
         cd:89:e6:31:7d:89:0e:6e:fa:9b:3e:e1:e5:46:7a:af:42:09:
         71:c5:0c:0f:3b:3d:56:87:83:81:91:98:19:8d:ed:0d:9c:59:
         08:c0:37:e9:0b:75:be:81:53:88:1a:c9:07:02:b2:76:2c:2d:
         9a:ea:91:a2:6a:f2:12:b5:ef:4a:ec:ce:5d:33:40:b5:60:a8:
         7f:55:b0:01:e6:f9:38:ec:f1:eb:bb:0f:78:c6:7a:e0:5c:eb:
         33:b4:c6:98:4e:01:60:53:7b:56:b8:f6:37:70:e0:82:d5:52:
         11:f4:3a:d9:4e:1f:61:88:8b:c6:bd:e3:38:b1:1b:4a:8d:23:
         bd:85:96:21:6d:0d:09:56:62:aa:6c:ac:d7:d0:a2:96:04:ad:
         23:11:12:ba:41:db:d5:59:f8:0c:88:83:ff:99:08:fb:f3:32:
         0c:24:2b:70:40:67:09:e4:c2:8e:ae:95:23:4a:19:f5:77:5d:
         7d:fe:49:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdv6Eee5nmX8nAhEJr0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTZlZDg3YjY2OWQwNWI0MjBkZjVhYTlhNjEzMmVhNmZi
NTFhNWEwHhcNMjUwMTMxMTQwMDM1WhcNMjUwMjAxMTQwMDM1WjAzMTEwLwYDVQQD
EyhhM2YzZDk1YWJkNDIwMzYwM2RjYTRiOWQyNzNjZTZlOGRkOTBkNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp310yet0oT92HPUhykGjpZ2KGYI8
E46rjIiGSNYlh+8MM8ZSCbnGt2YPpgGbB2JXJpocpPuqosd3fS8jTw/3XR9AAQ3Q
SudoIPBTlH7+IGjk//c0J/AjhFtIXz2FdAtToznkri4XuNVzWdO8ci6Rw0VV+eTN
WE1i+5q+mZniY0J+tMnZJIGMzufDZ26B8vJCeGTreg1vSwaEO/Nu+ZLtrWZdmfWH
v6mO2/q1bXrezp5UerJtY9P/uW66/RYtIkh0SLzMAwLItUuiJG1TVDqnpmnzrnqW
lwojnB5zeBKUL4899ZIxmHrab1vmDhzEjIqOiBDfIFXvGsNNSkI6OFedSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPz2Vq9QgNgPcpLnSc85ujdkNcCMB8GA1UdIwQY
MBaAFKPm7Ye2adBbQg31qpphMupvtRpaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMt
N2I4ZWEwZjgzMDgxLzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS84MTRjZWYtZDgyNS00ODdhLTk4ZWMtN2I4ZWEwZjgzMDgx
LzEvby1idGg3WnAwRnRDRGZXcW1tRXk2bS0xR2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmK+1m1L
QEeX8/s8kdOQFLQJY6hhBJ0x5JnQgzrpth0KOl9Rib80RC3494oQOKvF3RkyL86d
OsIPO8EDsIDhKFH7Een4bl7PzYnmMX2JDm76mz7h5UZ6r0IJccUMDzs9VoeDgZGY
GY3tDZxZCMA36Qt1voFTiBrJBwKydiwtmuqRomryErXvSuzOXTNAtWCof1WwAeb5
OOzx67sPeMZ64FzrM7TGmE4BYFN7Vrj2N3DggtVSEfQ62U4fYYiLxr3jOLEbSo0j
vYWWIW0NCVZiqmys19CilgStIxESukHb1Vn4DIiD/5kI+/MyDCQrcEBnCeTCjq6V
I0oZ9Xddff5JIA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:32 2025 by rpki-client