Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
File:                     B6_c1el6wcECR5yVTV-SKxJsvBQ.mft (raw, json)
Hash identifier:          gXhEPHIhrpoJGshpSTcBzKYwYNmlDH8a4pqqofUtv3s=
Subject key identifier:   C8:4A:35:36:B8:4C:BE:3E:43:18:CF:71:4B:D2:6D:8E:76:5F:82:52
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       0194BC3C390EE3CB759D7982431C0D1F63DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
Manifest number:          43
Signing time:             Fri 31 Jan 2025 12:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:50 +0000
Files and hashes:         1: AkYoHCkYkqYJ4e6zgOpT_d4rAcc.roa (hash: DnY6vZRN7L3S7U3NUI/WYv9ICvZ75py/lkvoFGjOBWo=)
                          2: B6_c1el6wcECR5yVTV-SKxJsvBQ.crl (hash: r7dHX6CLwcn7a70c+h793i4WAAVzHsMjaVbilY/0+rA=)
                          3: K_uU63IUWkuBSdujRaZVJyYDuQA.roa (hash: c36gCPnGo7y/i+lTuAsqFsR3biz87ULqS+Id7LIKINM=)
                          4: OXvCW8MMgkF4QZALyfIeJNaaoXA.roa (hash: /PcXdkDQ/rrC5eLGBEhuLOwRqaBJEq8rOAtu2iNHHtg=)
                          5: QZFqMpUTlcgeboKANl58QufnsKQ.roa (hash: NRvFYfoNhNqi7BWM2zeDShfUo2m9RhNxfQeL6DGdAxA=)
                          6: mGMa2C8aCPNU340sWr4PKAqdH-s.roa (hash: XaeHxhEDCo5SHwBXvtj0lsgZdM6zqURunvIDevmiEQk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:39:0e:e3:cb:75:9d:79:82:43:1c:0d:1f:63:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Jan 31 12:00:50 2025 GMT
            Not After : Feb  1 12:00:50 2025 GMT
        Subject: CN=c84a3536b84cbe3e4318cf714bd26d8e765f8252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:fc:e1:a3:4e:79:7f:27:50:d8:51:6d:69:
                    56:69:13:4b:ec:74:e7:94:b7:9f:88:aa:f9:18:8e:
                    bf:6b:be:c4:e3:1c:1e:80:4a:5c:0b:df:04:4a:2f:
                    b5:49:4f:ee:e1:24:6f:fb:8a:33:42:78:9f:5a:40:
                    c9:97:1a:70:ea:d5:16:57:e8:d6:36:cc:57:bf:82:
                    28:f4:2a:ba:3b:b0:f6:38:3c:30:f2:b1:d3:bd:ea:
                    49:b4:44:40:fa:f8:59:a1:ac:a1:7d:59:f5:ed:fc:
                    ae:41:2e:68:99:08:51:85:a6:c6:f6:a4:4a:d2:22:
                    5b:4a:ff:2f:ad:e3:a6:82:26:36:90:13:53:57:10:
                    35:fd:08:50:8e:60:81:6c:18:1d:dc:e9:af:cb:65:
                    d0:60:da:d8:09:e1:93:80:6a:11:84:e0:2f:b3:38:
                    57:0a:8b:14:df:b5:db:8a:b0:ea:de:c5:51:a3:25:
                    ad:a6:a0:77:fa:49:30:85:c5:d2:4c:e9:4c:a0:1b:
                    c8:d8:c1:31:ed:9f:80:6f:f1:cf:b7:71:50:55:6b:
                    21:7c:c7:97:f8:4f:5b:b8:c2:c2:40:df:55:69:86:
                    1a:d9:0f:fe:1d:08:e4:bb:e1:64:b2:dd:23:dc:d0:
                    71:b8:74:ce:0e:a2:03:ee:26:24:c9:80:08:9d:07:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4A:35:36:B8:4C:BE:3E:43:18:CF:71:4B:D2:6D:8E:76:5F:82:52
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:02:20:36:90:20:79:2a:77:f9:5c:17:b6:42:ef:ff:bb:ac:
         2e:6f:51:c3:55:93:e3:9c:24:49:bb:89:ee:f8:88:3e:d6:d6:
         43:92:aa:29:be:83:c0:f1:e6:ad:15:7d:5f:d4:3d:b0:65:ec:
         66:30:53:0d:6a:81:1a:3d:39:00:f4:c3:e7:fe:c5:12:47:6c:
         67:62:9d:7d:81:62:b6:6b:e3:46:16:8c:1f:1d:a3:cc:de:61:
         4e:e4:16:79:0b:af:1d:5a:d4:18:65:27:ea:76:d6:d5:12:81:
         6c:bd:00:7a:57:8e:e5:ac:eb:85:70:23:c9:8f:6b:f9:66:98:
         ee:23:60:99:44:c9:b9:14:60:03:e1:1c:3c:50:3d:94:4f:2b:
         2d:5f:7f:63:95:ca:32:e9:fe:b5:a6:3e:35:8e:29:82:d7:5e:
         0b:92:52:1e:d5:82:42:0f:f8:a6:7c:b4:b5:66:fe:92:81:52:
         27:a5:c7:e6:47:7e:e0:48:e8:fa:1a:29:24:eb:cf:d5:33:8c:
         24:5d:b9:e3:6b:24:7d:cd:0b:3a:db:d2:20:91:61:1f:4e:47:
         fd:1d:79:0a:55:79:cd:99:49:3d:a7:79:cb:2c:0d:5b:88:b0:
         63:42:3d:72:08:48:40:9b:bc:4a:d2:40:14:3c:3d:72:86:64:
         7c:ab:85:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDkO48t1nXmCQxwNH2PaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YWZkY2Q1ZTk3YWMxYzEwMjQ3OWM5NTRkNWY5MjJiMTI2
Y2JjMTQwHhcNMjUwMTMxMTIwMDUwWhcNMjUwMjAxMTIwMDUwWjAzMTEwLwYDVQQD
EyhjODRhMzUzNmI4NGNiZTNlNDMxOGNmNzE0YmQyNmQ4ZTc2NWY4MjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvj84aNOeX8nUNhRbWlWaRNL7HTn
lLefiKr5GI6/a77E4xwegEpcC98ESi+1SU/u4SRv+4ozQnifWkDJlxpw6tUWV+jW
NsxXv4Io9Cq6O7D2ODww8rHTvepJtERA+vhZoayhfVn17fyuQS5omQhRhabG9qRK
0iJbSv8vreOmgiY2kBNTVxA1/QhQjmCBbBgd3Omvy2XQYNrYCeGTgGoRhOAvszhX
CosU37XbirDq3sVRoyWtpqB3+kkwhcXSTOlMoBvI2MEx7Z+Ab/HPt3FQVWshfMeX
+E9buMLCQN9VaYYa2Q/+HQjku+Fkst0j3NBxuHTODqID7iYkyYAInQfQ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhKNTa4TL4+QxjPcUvSbY52X4JSMB8GA1UdIwQY
MBaAFAev3NXpesHBAkeclU1fkisSbLwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEt
ZmY2ODUxNzc3MGU0LzEvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wZTI3NDQtZjY0Ni00NDI5LWEyNWEtZmY2ODUxNzc3MGU0
LzEvQjZfYzFlbDZ3Y0VDUjV5VlRWLVNLeEpzdkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQIgNpAg
eSp3+VwXtkLv/7usLm9Rw1WT45wkSbuJ7viIPtbWQ5KqKb6DwPHmrRV9X9Q9sGXs
ZjBTDWqBGj05APTD5/7FEkdsZ2KdfYFitmvjRhaMHx2jzN5hTuQWeQuvHVrUGGUn
6nbW1RKBbL0AeleO5azrhXAjyY9r+WaY7iNgmUTJuRRgA+EcPFA9lE8rLV9/Y5XK
Mun+taY+NY4pgtdeC5JSHtWCQg/4pny0tWb+koFSJ6XH5kd+4Ejo+hopJOvP1TOM
JF2542skfc0LOtvSIJFhH05H/R15ClV5zZlJPad5yywNW4iwY0I9cghIQJu8StJA
FDw9coZkfKuFVw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:14:38 2025 by rpki-client