Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          0U5IrQtHPRr0ly8R57Cvtdy1zsYINAk9X428jXa+360=
Subject key identifier:   DF:73:BD:2F:7B:E0:B1:D9:AF:F3:B6:BD:F7:77:58:34:6F:06:42:84
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       0194BCE0F13721EEE2F296BB1BBE4D043B01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          0BC0
Signing time:             Fri 31 Jan 2025 15:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:45 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: b2utou/AhTibOQOgCNbqRtD7FooYUeXDNgh2kLsftZk=)
                          2: c5yD0OO2hJCHbzdGNR8uwMLkI7Q.roa (hash: 6J584Pfcm2xEEOIgm8HDbt6jhB1m8yFiIXBl5VE/wrs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:f1:37:21:ee:e2:f2:96:bb:1b:be:4d:04:3b:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Jan 31 15:00:45 2025 GMT
            Not After : Feb  1 15:00:45 2025 GMT
        Subject: CN=df73bd2f7be0b1d9aff3b6bdf77758346f064284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:64:d4:0e:ff:31:89:be:2a:a6:18:04:10:d6:
                    6f:7b:84:d4:df:4e:f0:e9:5a:73:52:1b:a7:63:f9:
                    19:cb:c8:55:88:4d:8b:f5:41:cf:3d:98:33:3d:a3:
                    e9:97:cd:a9:78:cf:60:31:76:18:a6:59:cd:75:be:
                    23:ed:4d:9c:47:60:d4:22:8d:08:89:d1:01:16:4f:
                    48:a3:e1:06:32:e9:f9:56:fc:b8:bb:ed:cb:81:cd:
                    40:f8:1c:cf:d8:6f:a5:2b:f8:2c:70:59:96:eb:f2:
                    1d:29:57:23:74:3d:c0:e6:2c:4a:9c:43:f1:81:bb:
                    d3:af:92:27:53:44:c8:d6:0e:c4:8b:6b:f4:85:c5:
                    dc:f2:55:96:a3:69:29:ec:9a:ef:66:83:7a:cc:c1:
                    77:30:09:75:64:de:07:e1:93:00:e4:2c:48:f7:71:
                    76:52:74:bd:8b:cb:a7:57:ea:14:08:34:2d:b2:c0:
                    11:e9:7a:69:74:2d:f1:20:7a:84:04:88:dd:73:1a:
                    46:3a:f8:e0:66:ca:ea:66:14:7b:27:55:07:84:ea:
                    06:fa:17:43:c1:af:01:33:4c:ab:db:69:db:b5:cb:
                    7c:94:6e:f8:df:24:75:42:06:68:77:4e:4b:dd:e2:
                    78:49:c2:8a:e9:d2:07:3d:3f:15:51:a3:55:ba:cb:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:BD:2F:7B:E0:B1:D9:AF:F3:B6:BD:F7:77:58:34:6F:06:42:84
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:1d:9b:9e:f1:46:2e:c2:98:7c:f6:06:bb:66:48:99:de:f4:
         6f:9d:b9:85:85:45:9b:bc:30:0e:e9:33:52:e6:88:a2:6d:39:
         b0:e3:8b:ee:95:e9:1b:5a:31:33:26:72:92:6d:d9:a8:8c:d2:
         7c:35:01:a8:4f:9b:e0:fd:90:d2:28:e7:ca:35:2b:2b:70:aa:
         d2:38:bf:07:08:1f:e6:90:35:5f:a9:0b:e2:51:f2:c6:fc:bb:
         78:85:72:1a:e5:8c:12:27:8d:ad:64:40:83:11:0e:e9:69:e5:
         f3:94:59:ca:97:10:76:f8:7b:df:ca:e2:ad:de:e1:e5:77:06:
         52:25:d1:1e:ec:be:e7:03:8b:21:ef:e9:5c:12:33:c0:09:15:
         6d:92:87:fd:be:55:32:68:7c:f5:1b:bc:e7:d5:91:e5:f4:f0:
         7d:72:a5:8f:3f:b0:34:3a:42:29:95:99:ca:0e:b6:9d:4e:f1:
         a9:b0:aa:05:39:85:8c:ce:dc:92:d6:52:b1:e2:e8:c8:53:d4:
         de:87:8c:3c:af:b2:a1:1d:d5:e2:56:ad:20:0a:bf:bf:c8:78:
         b2:37:cb:c4:f7:ab:65:c0:8c:2b:bd:ea:48:e9:56:b7:1f:e3:
         26:d7:99:f3:71:ee:cd:c2:14:f3:9b:a9:33:86:3d:de:3f:31:
         b9:02:45:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84PE3Ie7i8pa7G75NBDsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi
NjkyMzgwHhcNMjUwMTMxMTUwMDQ1WhcNMjUwMjAxMTUwMDQ1WjAzMTEwLwYDVQQD
EyhkZjczYmQyZjdiZTBiMWQ5YWZmM2I2YmRmNzc3NTgzNDZmMDY0Mjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72TUDv8xib4qphgEENZve4TU307w
6VpzUhunY/kZy8hViE2L9UHPPZgzPaPpl82peM9gMXYYplnNdb4j7U2cR2DUIo0I
idEBFk9Io+EGMun5Vvy4u+3Lgc1A+BzP2G+lK/gscFmW6/IdKVcjdD3A5ixKnEPx
gbvTr5InU0TI1g7Ei2v0hcXc8lWWo2kp7JrvZoN6zMF3MAl1ZN4H4ZMA5CxI93F2
UnS9i8unV+oUCDQtssAR6XppdC3xIHqEBIjdcxpGOvjgZsrqZhR7J1UHhOoG+hdD
wa8BM0yr22nbtct8lG743yR1QgZod05L3eJ4ScKK6dIHPT8VUaNVussZ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9zvS974LHZr/O2vfd3WDRvBkKEMB8GA1UdIwQY
MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct
ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw
LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx2bnvFG
LsKYfPYGu2ZImd70b525hYVFm7wwDukzUuaIom05sOOL7pXpG1oxMyZykm3ZqIzS
fDUBqE+b4P2Q0ijnyjUrK3Cq0ji/Bwgf5pA1X6kL4lHyxvy7eIVyGuWMEieNrWRA
gxEO6Wnl85RZypcQdvh738rird7h5XcGUiXRHuy+5wOLIe/pXBIzwAkVbZKH/b5V
Mmh89Ru859WR5fTwfXKljz+wNDpCKZWZyg62nU7xqbCqBTmFjM7cktZSseLoyFPU
3oeMPK+yoR3V4latIAq/v8h4sjfLxPerZcCMK73qSOlWtx/jJteZ83HuzcIU85up
M4Y93j8xuQJF7g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:01 2025 by rpki-client