Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
File:                     eDdfthaLNUhBuR0wX50M3AyxUB0.mft (raw, json)
Hash identifier:          AHKeu8vJ2YqqxufOg0rNniRjHeKZ3q3kIYqD73avSRo=
Subject key identifier:   CF:F8:27:F2:4A:5B:11:7A:03:DD:0D:96:91:62:06:57:34:88:AE:3E
Authority key identifier: 78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D
Certificate issuer:       /CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
Certificate serial:       0194BD4E59138341AB1044DCC4347E1ABE05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 17:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:15 +0000
Files and hashes:         1: eDdfthaLNUhBuR0wX50M3AyxUB0.crl (hash: ZrxwUZ3qk0Xi3gZ6F9Wr9tWLE+NPuP7iE80pTH6zoAM=)
                          2: yISIjc9YgTnf71Z4E-nlNbitu7U.roa (hash: LtZh6f0jmex3FPPUw/azkOX7onGzwYw39L6cN+bX6NE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:59:13:83:41:ab:10:44:dc:c4:34:7e:1a:be:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78375fb6168b354841b91d305f9d0cdc0cb1501d
        Validity
            Not Before: Jan 31 17:00:15 2025 GMT
            Not After : Feb  1 17:00:15 2025 GMT
        Subject: CN=cff827f24a5b117a03dd0d96916206573488ae3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:d1:e2:1d:69:72:73:e6:35:e3:dd:b3:18:
                    7d:db:5e:8d:5f:43:57:7a:e0:51:86:43:3f:4c:85:
                    3d:d8:7e:e1:4a:ea:04:85:f6:b1:9e:9d:53:08:c3:
                    1a:23:d4:f3:16:52:4f:80:fb:7d:24:b8:2b:a5:fa:
                    8d:b0:96:15:48:61:e0:bf:a0:42:f3:01:60:fc:e6:
                    ad:6a:6c:45:80:08:eb:19:25:27:35:9e:90:c9:96:
                    47:50:0a:d6:f4:f4:6b:ac:c3:85:b2:2c:63:d4:51:
                    07:cc:fe:2c:32:72:fd:aa:5c:81:c8:3c:55:b1:ad:
                    5a:3c:79:b3:9f:6e:52:21:f6:1e:4b:68:ca:ff:1b:
                    eb:22:f7:4f:e7:d5:73:82:bf:bb:d5:7c:60:ce:7d:
                    54:9b:d0:db:15:63:96:64:51:0b:8c:dc:b0:2f:4d:
                    b0:d8:93:1a:e6:10:8f:b2:35:b1:7a:78:e8:95:66:
                    2e:fc:27:ac:ec:bd:07:ad:31:73:f4:30:78:2d:55:
                    55:11:10:fe:9c:63:f1:0d:fd:e6:de:78:9d:ce:ca:
                    10:91:59:14:38:b4:16:7f:f5:eb:b6:5c:7a:dd:66:
                    9a:31:05:75:c4:7b:5f:48:61:65:85:74:bd:5d:d7:
                    3e:5e:f7:9a:26:29:6c:f4:27:3b:10:a7:7d:40:94:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F8:27:F2:4A:5B:11:7A:03:DD:0D:96:91:62:06:57:34:88:AE:3E
            X509v3 Authority Key Identifier:
                keyid:78:37:5F:B6:16:8B:35:48:41:B9:1D:30:5F:9D:0C:DC:0C:B1:50:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDdfthaLNUhBuR0wX50M3AyxUB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b58bbe-b50f-4857-871c-1c0e31de31c7/1/eDdfthaLNUhBuR0wX50M3AyxUB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:ec:77:61:56:a4:74:4a:3c:22:ff:5b:f2:62:e4:16:0f:
         e6:a6:60:d8:a4:64:ae:82:d4:6f:d1:2e:eb:11:65:fc:18:38:
         5e:d5:83:ab:f0:db:a2:d1:16:b8:b1:d7:f7:23:6f:c2:61:36:
         e3:c2:87:cb:c3:c0:dc:6b:f1:6e:38:46:d5:05:17:8d:f6:b9:
         6c:4a:f6:98:ce:4b:71:6e:0b:19:82:bf:65:ca:c3:cb:39:5c:
         ea:f3:35:66:98:21:76:ce:b6:70:db:25:04:7f:10:b2:5b:c8:
         45:87:97:c3:3e:48:04:9e:d3:de:4f:7c:79:fc:2b:90:1c:80:
         f8:24:02:f1:e5:da:55:07:9e:ec:c5:63:22:a1:6a:9f:b1:ec:
         7d:21:4d:d0:4f:cf:ba:27:0d:42:ec:ee:12:a3:6c:f7:06:ab:
         d8:f9:1d:f1:e8:27:db:0f:5d:14:b2:0a:62:3b:c0:b5:c3:4d:
         03:9a:26:31:10:7c:70:e6:42:69:7b:71:78:d5:6d:eb:1c:f5:
         60:8f:0c:91:bf:17:ea:85:8a:15:3b:15:8d:56:50:f1:e6:84:
         04:3b:06:ed:8d:f2:8c:01:72:30:cb:cb:2e:98:08:ea:a0:fc:
         bb:a1:62:24:52:9f:63:6a:1d:27:f5:55:4a:b6:ac:e4:a9:7c:
         0a:8f:27:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TlkTg0GrEETcxDR+Gr4FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4Mzc1ZmI2MTY4YjM1NDg0MWI5MWQzMDVmOWQwY2RjMGNi
MTUwMWQwHhcNMjUwMTMxMTcwMDE1WhcNMjUwMjAxMTcwMDE1WjAzMTEwLwYDVQQD
EyhjZmY4MjdmMjRhNWIxMTdhMDNkZDBkOTY5MTYyMDY1NzM0ODhhZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudbR4h1pcnPmNePdsxh9216NX0NX
euBRhkM/TIU92H7hSuoEhfaxnp1TCMMaI9TzFlJPgPt9JLgrpfqNsJYVSGHgv6BC
8wFg/OatamxFgAjrGSUnNZ6QyZZHUArW9PRrrMOFsixj1FEHzP4sMnL9qlyByDxV
sa1aPHmzn25SIfYeS2jK/xvrIvdP59Vzgr+71Xxgzn1Um9DbFWOWZFELjNywL02w
2JMa5hCPsjWxenjolWYu/Ces7L0HrTFz9DB4LVVVERD+nGPxDf3m3nidzsoQkVkU
OLQWf/Xrtlx63WaaMQV1xHtfSGFlhXS9Xdc+XveaJils9Cc7EKd9QJTVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/4J/JKWxF6A90NlpFiBlc0iK4+MB8GA1UdIwQY
MBaAFHg3X7YWizVIQbkdMF+dDNwMsVAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMt
MWMwZTMxZGUzMWM3LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iNThiYmUtYjUwZi00ODU3LTg3MWMtMWMwZTMxZGUzMWM3
LzEvZURkZnRoYUxOVWhCdVIwd1g1ME0zQXl4VUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJPDsd2FW
pHRKPCL/W/Ji5BYP5qZg2KRkroLUb9Eu6xFl/Bg4XtWDq/DbotEWuLHX9yNvwmE2
48KHy8PA3GvxbjhG1QUXjfa5bEr2mM5LcW4LGYK/ZcrDyzlc6vM1Zpghds62cNsl
BH8QslvIRYeXwz5IBJ7T3k98efwrkByA+CQC8eXaVQee7MVjIqFqn7HsfSFN0E/P
uicNQuzuEqNs9war2Pkd8egn2w9dFLIKYjvAtcNNA5omMRB8cOZCaXtxeNVt6xz1
YI8Mkb8X6oWKFTsVjVZQ8eaEBDsG7Y3yjAFyMMvLLpgI6qD8u6FiJFKfY2odJ/VV
Sras5Kl8Co8ngQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:26 2025 by rpki-client