Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File:                     4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier:          kxIuekjriXiYBq2iR09ihdr9CaSjHZGdoRWQgbBoue8=
Subject key identifier:   9B:2F:8B:68:9D:D9:AE:58:2A:FE:F1:16:65:BF:DD:32:54:6C:60:BF
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer:       /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial:       0194BCAA09F2556699FDCE8A3B1C60F90EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number:          037F
Signing time:             Fri 31 Jan 2025 14:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:47 +0000
Files and hashes:         1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: 92YKwO5nQrDZjz74eO+FZuA74ipphI9KByTlYdtcf+A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:09:f2:55:66:99:fd:ce:8a:3b:1c:60:f9:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
        Validity
            Not Before: Jan 31 14:00:47 2025 GMT
            Not After : Feb  1 14:00:47 2025 GMT
        Subject: CN=9b2f8b689dd9ae582afef11665bfdd32546c60bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2f:f1:41:51:b9:9a:66:b9:cb:0d:3e:00:42:
                    e2:48:7c:19:f3:d6:2f:88:df:9a:b7:33:d2:04:56:
                    d0:86:89:74:9f:73:56:d4:8b:65:7f:ae:c9:8b:40:
                    b5:1a:20:53:85:3e:9e:08:6d:fb:c7:55:9c:3a:5d:
                    6f:56:f8:9c:52:83:e1:b7:8d:a3:58:8c:dc:14:ed:
                    dc:61:61:3f:04:49:68:4c:ea:bc:e2:5f:0f:8a:3a:
                    83:21:2d:7a:fd:1a:f7:76:b8:46:71:fe:4d:02:4c:
                    a4:f9:46:09:ad:0b:6a:40:70:2a:4a:3a:6b:ad:49:
                    d3:a6:2c:f2:cc:2a:17:5f:3b:e2:a0:19:41:e0:31:
                    de:1e:79:a8:63:ea:fb:65:ed:7c:ea:86:06:5e:0c:
                    c1:97:31:f6:e2:6d:fe:43:55:c1:c9:1e:a4:7b:e8:
                    6d:c3:ee:73:42:5f:f2:05:bd:7b:a6:e9:5d:c3:0e:
                    b0:4f:7d:9f:ea:2c:92:a9:26:89:2c:e4:69:bf:79:
                    a9:6c:22:2b:be:35:ab:ba:f4:aa:fd:f7:b3:20:d7:
                    43:a3:68:8f:08:1a:74:7a:b7:2b:a4:94:1b:ca:4a:
                    fe:90:b1:27:6e:32:51:39:8e:1f:e7:54:a7:84:c9:
                    de:2b:68:fe:bb:14:28:7f:2c:ac:ba:db:09:b3:a7:
                    0b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:2F:8B:68:9D:D9:AE:58:2A:FE:F1:16:65:BF:DD:32:54:6C:60:BF
            X509v3 Authority Key Identifier:
                keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:cf:3d:1b:44:cd:b4:23:96:57:52:ec:61:9d:7a:58:a6:d6:
         e4:eb:9e:dc:5a:5b:10:b9:7b:f4:9c:7a:85:79:05:ac:12:a7:
         7d:36:f7:5d:41:de:13:ee:04:43:0e:18:60:21:ba:29:bf:fd:
         07:88:bc:05:c6:ed:ca:d8:d7:55:fd:86:0d:d5:31:a5:9a:33:
         f4:6f:c5:fc:ef:9e:62:27:4f:4f:0e:5c:af:29:f7:cd:aa:a4:
         85:02:9d:34:af:e6:9c:d0:e9:3e:e8:dc:4d:e6:8c:54:11:c8:
         2e:fa:f7:1f:a8:bd:60:9c:67:96:79:a4:aa:60:62:8e:a8:8d:
         64:b3:63:41:c1:f3:d2:3e:b8:59:af:7f:e4:93:a1:ca:0a:81:
         8f:11:09:7a:a8:9e:05:80:ab:21:01:a4:f1:25:8e:3c:7f:62:
         f8:f9:24:ba:40:d7:a1:75:e2:d9:f8:8c:a4:c1:3a:27:d9:85:
         88:00:5d:15:0c:9a:53:13:7c:44:e1:52:2c:da:c7:da:75:fb:
         37:a9:fd:42:3e:cb:cd:5f:0f:5d:ac:77:4d:59:36:73:c1:a9:
         86:ce:63:4b:40:08:ef:14:84:9e:61:a9:22:5c:f4:db:12:69:
         a5:f2:aa:41:49:a3:06:11:1e:bb:0c:22:86:0f:53:80:ea:54:
         1c:95:ad:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qgnyVWaZ/c6KOxxg+Q7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyN2UxZGQwNzQ2NjI3ODAzNmJhNWNkOTQzZDdiMGUwMjFj
Zjg2MjgwHhcNMjUwMTMxMTQwMDQ3WhcNMjUwMjAxMTQwMDQ3WjAzMTEwLwYDVQQD
Eyg5YjJmOGI2ODlkZDlhZTU4MmFmZWYxMTY2NWJmZGQzMjU0NmM2MGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5C/xQVG5mma5yw0+AELiSHwZ89Yv
iN+atzPSBFbQhol0n3NW1Itlf67Ji0C1GiBThT6eCG37x1WcOl1vVvicUoPht42j
WIzcFO3cYWE/BEloTOq84l8PijqDIS16/Rr3drhGcf5NAkyk+UYJrQtqQHAqSjpr
rUnTpizyzCoXXzvioBlB4DHeHnmoY+r7Ze186oYGXgzBlzH24m3+Q1XByR6ke+ht
w+5zQl/yBb17puldww6wT32f6iySqSaJLORpv3mpbCIrvjWruvSq/fezINdDo2iP
CBp0ercrpJQbykr+kLEnbjJROY4f51SnhMneK2j+uxQofyysutsJs6cLzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsvi2id2a5YKv7xFmW/3TJUbGC/MB8GA1UdIwQY
MBaAFOJ+HdB0ZieANrpc2UPXsOAhz4YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDIt
NWVjMzM2YmY3NDNiLzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9hZTBkOGItNDg1Ny00YmE3LWIzNDItNWVjMzM2YmY3NDNi
LzEvNG40ZDBIUm1KNEEydWx6WlE5ZXc0Q0hQaGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG889G0TN
tCOWV1LsYZ16WKbW5Oue3FpbELl79Jx6hXkFrBKnfTb3XUHeE+4EQw4YYCG6Kb/9
B4i8BcbtytjXVf2GDdUxpZoz9G/F/O+eYidPTw5cryn3zaqkhQKdNK/mnNDpPujc
TeaMVBHILvr3H6i9YJxnlnmkqmBijqiNZLNjQcHz0j64Wa9/5JOhygqBjxEJeqie
BYCrIQGk8SWOPH9i+PkkukDXoXXi2fiMpME6J9mFiABdFQyaUxN8ROFSLNrH2nX7
N6n9Qj7LzV8PXax3TVk2c8Gphs5jS0AI7xSEnmGpIlz02xJppfKqQUmjBhEeuwwi
hg9TgOpUHJWteg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:45 2025 by rpki-client