Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
File:                     pqqcrek75rp8irsyODGAdjF9YH0.mft (raw, json)
Hash identifier:          xNBazA13JGDHrlCvtYrFlN07bBivFiHpPZigkUzsdrQ=
Subject key identifier:   9B:04:F9:DD:AA:DA:48:94:22:0D:ED:22:28:98:4F:97:12:4D:BE:02
Authority key identifier: A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D
Certificate issuer:       /CN=a6aa9cade93be6ba7c8abb3238318076317d607d
Certificate serial:       0194BD85B5FF4219BF21BF379A050BE7C36C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft
Manifest number:          0B43
Signing time:             Fri 31 Jan 2025 18:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:44 +0000
Files and hashes:         1: TMmJu3XrH94K6DReVYderjXkE0g.roa (hash: qAa5DF+M+UAhzMJIlXWt+Au239+GUy9x5c4+iXPb3rs=)
                          2: nYLCUns63cZuZFbRrNTh_iPTHeI.roa (hash: R8X8f7SwmJ+Hj5ZUdFxUc0RL5ORl09Pnre0z0BbiobI=)
                          3: pqqcrek75rp8irsyODGAdjF9YH0.crl (hash: CgeBlRrU2F6C+g/GlwozscWwfd4uxyAQeGGLH8/6IHk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b5:ff:42:19:bf:21:bf:37:9a:05:0b:e7:c3:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6aa9cade93be6ba7c8abb3238318076317d607d
        Validity
            Not Before: Jan 31 18:00:44 2025 GMT
            Not After : Feb  1 18:00:44 2025 GMT
        Subject: CN=9b04f9ddaada4894220ded2228984f97124dbe02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:13:7d:0e:e4:24:aa:3d:c2:4e:70:41:f7:46:
                    45:0d:bd:28:cd:78:9d:f2:22:4a:c9:9f:38:f2:7d:
                    43:da:48:55:72:3c:fc:71:84:56:6c:5b:25:35:ad:
                    36:73:4b:7e:87:e4:5e:6d:8e:ee:bc:06:f0:21:be:
                    51:05:cb:ff:7a:bf:4f:65:d5:76:b9:6b:95:3b:20:
                    d1:7f:e3:f0:be:c0:0e:8a:2a:bd:ce:31:a0:08:da:
                    35:54:c4:41:de:6b:3b:96:4e:ab:5d:fa:0d:d0:66:
                    96:92:35:f2:2e:76:f7:0c:df:89:2c:1e:b2:cc:82:
                    50:22:84:ef:05:cc:8b:df:94:f9:6d:b7:a8:60:9b:
                    3d:f1:fd:73:37:e2:a5:04:99:ce:a3:cf:72:66:da:
                    3a:1f:81:0e:cc:ec:34:85:22:35:05:ad:a3:78:44:
                    9f:af:3e:d1:54:4b:1a:e6:28:ae:b2:c8:55:b3:fe:
                    9f:b5:70:fe:60:86:d9:11:ca:b0:4c:5c:a7:73:74:
                    cc:53:ee:60:27:6c:50:73:4c:b2:8f:65:e1:29:03:
                    a8:16:af:e8:40:5e:8d:65:65:79:92:ed:8d:7e:af:
                    65:43:2b:cc:ac:bb:08:05:6e:93:59:1a:fc:11:25:
                    ee:7c:ec:37:e0:76:0c:21:9c:d9:a8:0c:2e:04:fb:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:04:F9:DD:AA:DA:48:94:22:0D:ED:22:28:98:4F:97:12:4D:BE:02
            X509v3 Authority Key Identifier:
                keyid:A6:AA:9C:AD:E9:3B:E6:BA:7C:8A:BB:32:38:31:80:76:31:7D:60:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqqcrek75rp8irsyODGAdjF9YH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a970c6-c118-452e-a56f-ec467fa8636e/1/pqqcrek75rp8irsyODGAdjF9YH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0b:8c:ce:fa:86:55:b9:35:4d:41:a6:f0:7c:d3:6f:6f:1f:
         fb:d1:ab:56:65:cd:87:0c:2e:75:fd:06:4a:de:47:20:8d:bf:
         c1:0b:6d:5c:8c:27:0b:ca:88:12:7a:5d:3d:65:46:22:0b:82:
         43:b5:bd:8e:52:3c:eb:28:74:17:a4:96:0e:b4:83:cb:06:dd:
         a7:1e:c8:e0:09:53:0d:47:96:05:e7:f7:a2:24:33:34:45:65:
         aa:9b:74:ee:0e:04:6c:d5:4c:26:ab:c4:47:51:d4:97:22:54:
         aa:fd:c8:4b:3b:47:15:83:4b:08:19:63:43:db:d3:95:36:17:
         91:05:c0:13:a5:65:ec:aa:29:5b:40:01:b1:c2:62:86:18:c3:
         65:41:96:65:45:e9:20:db:46:af:3c:1a:25:51:17:a8:3b:15:
         0b:6b:dd:1f:b5:e0:86:39:f4:7f:b2:58:42:63:f6:3e:45:04:
         51:fd:7d:f8:0b:99:89:3f:6e:99:d6:ab:9b:20:7d:41:bd:a8:
         9a:76:9d:8b:2b:b4:0e:bd:79:33:45:9b:35:bc:63:92:d6:32:
         f5:90:9c:e9:bf:7c:50:9e:9e:31:ce:c0:27:3c:d4:8d:97:0d:
         5d:1d:62:9f:62:77:ef:22:ff:01:00:eb:69:b0:a0:ad:60:80:
         f3:ce:7c:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbX/Qhm/Ib83mgUL58NsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWE5Y2FkZTkzYmU2YmE3YzhhYmIzMjM4MzE4MDc2MzE3
ZDYwN2QwHhcNMjUwMTMxMTgwMDQ0WhcNMjUwMjAxMTgwMDQ0WjAzMTEwLwYDVQQD
Eyg5YjA0ZjlkZGFhZGE0ODk0MjIwZGVkMjIyODk4NGY5NzEyNGRiZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBN9DuQkqj3CTnBB90ZFDb0ozXid
8iJKyZ848n1D2khVcjz8cYRWbFslNa02c0t+h+RebY7uvAbwIb5RBcv/er9PZdV2
uWuVOyDRf+PwvsAOiiq9zjGgCNo1VMRB3ms7lk6rXfoN0GaWkjXyLnb3DN+JLB6y
zIJQIoTvBcyL35T5bbeoYJs98f1zN+KlBJnOo89yZto6H4EOzOw0hSI1Ba2jeESf
rz7RVEsa5iiusshVs/6ftXD+YIbZEcqwTFync3TMU+5gJ2xQc0yyj2XhKQOoFq/o
QF6NZWV5ku2Nfq9lQyvMrLsIBW6TWRr8ESXufOw34HYMIZzZqAwuBPvJuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsE+d2q2kiUIg3tIiiYT5cSTb4CMB8GA1UdIwQY
MBaAFKaqnK3pO+a6fIq7MjgxgHYxfWB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYt
ZWM0NjdmYTg2MzZlLzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hOTcwYzYtYzExOC00NTJlLWE1NmYtZWM0NjdmYTg2MzZl
LzEvcHFxY3Jlazc1cnA4aXJzeU9ER0FkakY5WUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwuMzvqG
Vbk1TUGm8HzTb28f+9GrVmXNhwwudf0GSt5HII2/wQttXIwnC8qIEnpdPWVGIguC
Q7W9jlI86yh0F6SWDrSDywbdpx7I4AlTDUeWBef3oiQzNEVlqpt07g4EbNVMJqvE
R1HUlyJUqv3ISztHFYNLCBljQ9vTlTYXkQXAE6Vl7KopW0ABscJihhjDZUGWZUXp
INtGrzwaJVEXqDsVC2vdH7Xghjn0f7JYQmP2PkUEUf19+AuZiT9umdarmyB9Qb2o
mnadiyu0Dr15M0WbNbxjktYy9ZCc6b98UJ6eMc7AJzzUjZcNXR1in2J37yL/AQDr
abCgrWCA8858WA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:36:01 2025 by rpki-client