Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
File:                     ImidD5E9Kcxj1skmy0Yssn8YRAg.mft (raw, json)
Hash identifier:          iepXHLqplowIn3r+x7PTD+rr8qK0KkooG71R/mRo1bk=
Subject key identifier:   42:DD:BB:6B:C1:54:95:5C:36:41:0C:50:6D:62:2B:1A:3D:CC:8A:0A
Authority key identifier: 22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08
Certificate issuer:       /CN=22689d0f913d29cc63d6c926cb462cb27f184408
Certificate serial:       0194BBCE61F98AB08D8F278DE53BCE232EA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:00:52 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:52 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:52 +0000
Files and hashes:         1: ImidD5E9Kcxj1skmy0Yssn8YRAg.crl (hash: 7lu3w5Fymz8B7jJjaxyGkgntABxpMDU0LcCzk7xonzo=)
                          2: PnGxbbyenKRUkbRi2afvxfE-S9E.roa (hash: JW3Jf++XQ8LN1xPVRRNLBe2ZMK/kXqbkLdynsPQmUsw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:61:f9:8a:b0:8d:8f:27:8d:e5:3b:ce:23:2e:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22689d0f913d29cc63d6c926cb462cb27f184408
        Validity
            Not Before: Jan 31 10:00:52 2025 GMT
            Not After : Feb  1 10:00:52 2025 GMT
        Subject: CN=42ddbb6bc154955c36410c506d622b1a3dcc8a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:4e:ff:a3:96:27:4b:b4:b5:81:2c:06:e7:
                    bb:66:94:3f:65:59:2f:0c:65:6b:4e:48:06:c1:e0:
                    a7:80:e6:b2:df:4a:e6:e9:81:8d:77:70:a7:1b:a3:
                    be:6a:74:db:65:c8:bf:fe:0f:25:69:49:ac:e7:45:
                    68:b9:53:83:2b:62:30:57:77:97:1d:1a:26:03:43:
                    5e:5a:d8:44:25:9a:e3:be:af:2f:a8:68:af:e4:d0:
                    83:4f:9d:1c:7d:e6:1a:95:2f:83:e4:c8:94:fa:6b:
                    a7:74:40:4a:55:ef:4a:37:3f:34:36:32:24:9b:73:
                    da:0d:fd:3d:a7:1e:10:97:5b:9e:32:c9:54:4f:db:
                    0e:52:40:5f:c9:1d:4e:4d:f1:3e:e6:e2:0f:a4:e8:
                    71:6e:ac:5c:3c:3f:54:2b:b0:d2:8f:a4:8e:fe:22:
                    08:56:e7:3c:cd:5f:a8:6f:60:a4:18:60:82:4d:76:
                    dd:6a:33:9b:cc:43:b9:12:cb:86:d1:ba:19:df:13:
                    c3:2e:7a:d5:57:91:34:ad:49:7e:bd:89:91:97:ec:
                    62:e0:10:26:09:a7:f2:0b:e6:97:31:0f:f7:05:e3:
                    dd:61:31:6c:77:4a:2f:4e:99:1c:3d:59:55:4b:4e:
                    35:8b:e2:21:cb:1c:8a:d4:2d:77:59:5f:cd:e3:ed:
                    49:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DD:BB:6B:C1:54:95:5C:36:41:0C:50:6D:62:2B:1A:3D:CC:8A:0A
            X509v3 Authority Key Identifier:
                keyid:22:68:9D:0F:91:3D:29:CC:63:D6:C9:26:CB:46:2C:B2:7F:18:44:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImidD5E9Kcxj1skmy0Yssn8YRAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/043eee-3199-4f8e-b0a9-4ad852a12cd6/1/ImidD5E9Kcxj1skmy0Yssn8YRAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:ae:19:b0:e3:99:f0:06:8f:68:8a:d6:78:0c:4e:83:55:
         50:b6:4a:c9:e0:f2:8a:d2:65:90:b6:ac:79:ff:35:d6:a6:6d:
         43:74:77:ea:4e:f9:a7:78:93:50:d2:79:a0:02:83:e0:75:c6:
         11:48:e1:1e:17:56:10:58:0b:a6:00:c2:cc:91:79:5c:e5:f0:
         6b:e7:09:8a:a5:cf:90:04:45:87:8b:00:59:0c:80:86:81:2c:
         bd:5b:ee:10:45:d5:ae:ee:d4:2f:14:b7:f1:65:82:8c:c3:58:
         ec:fc:20:7c:68:c5:91:78:f7:f5:6d:f6:aa:ca:7c:b9:22:33:
         d4:a6:78:33:86:cf:ea:87:b4:dc:40:cc:e3:f4:98:46:b8:dd:
         06:15:81:76:77:8f:bd:de:5d:d8:af:3c:5e:a4:b0:db:03:e7:
         ef:df:f1:ea:89:24:a7:ea:d4:a6:bb:02:99:a8:18:86:d7:4c:
         dc:56:4c:bd:d4:59:38:6a:40:49:94:ba:db:e8:79:d2:80:25:
         b6:93:98:74:2a:66:30:ed:59:21:88:50:09:14:10:ce:9f:54:
         f2:08:bd:0b:57:c9:e4:a3:4c:6d:38:56:f8:67:ba:5b:dd:f2:
         cc:01:fe:f2:97:e9:bf:86:e8:e6:be:e3:8f:9d:d9:75:89:ef:
         c2:a7:7d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zmH5irCNjyeN5TvOIy6lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyNjg5ZDBmOTEzZDI5Y2M2M2Q2YzkyNmNiNDYyY2IyN2Yx
ODQ0MDgwHhcNMjUwMTMxMTAwMDUyWhcNMjUwMjAxMTAwMDUyWjAzMTEwLwYDVQQD
Eyg0MmRkYmI2YmMxNTQ5NTVjMzY0MTBjNTA2ZDYyMmIxYTNkY2M4YTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxShO/6OWJ0u0tYEsBue7ZpQ/ZVkv
DGVrTkgGweCngOay30rm6YGNd3CnG6O+anTbZci//g8laUms50VouVODK2IwV3eX
HRomA0NeWthEJZrjvq8vqGiv5NCDT50cfeYalS+D5MiU+mundEBKVe9KNz80NjIk
m3PaDf09px4Ql1ueMslUT9sOUkBfyR1OTfE+5uIPpOhxbqxcPD9UK7DSj6SO/iII
Vuc8zV+ob2CkGGCCTXbdajObzEO5EsuG0boZ3xPDLnrVV5E0rUl+vYmRl+xi4BAm
CafyC+aXMQ/3BePdYTFsd0ovTpkcPVlVS041i+IhyxyK1C13WV/N4+1JMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELdu2vBVJVcNkEMUG1iKxo9zIoKMB8GA1UdIwQY
MBaAFCJonQ+RPSnMY9bJJstGLLJ/GEQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTkt
NGFkODUyYTEyY2Q2LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wNDNlZWUtMzE5OS00ZjhlLWIwYTktNGFkODUyYTEyY2Q2
LzEvSW1pZEQ1RTlLY3hqMXNrbXkwWXNzbjhZUkFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJquGbDj
mfAGj2iK1ngMToNVULZKyeDyitJlkLasef811qZtQ3R36k75p3iTUNJ5oAKD4HXG
EUjhHhdWEFgLpgDCzJF5XOXwa+cJiqXPkARFh4sAWQyAhoEsvVvuEEXVru7ULxS3
8WWCjMNY7PwgfGjFkXj39W32qsp8uSIz1KZ4M4bP6oe03EDM4/SYRrjdBhWBdneP
vd5d2K88XqSw2wPn79/x6okkp+rUprsCmagYhtdM3FZMvdRZOGpASZS62+h50oAl
tpOYdCpmMO1ZIYhQCRQQzp9U8gi9C1fJ5KNMbThW+Ge6W93yzAH+8pfpv4bo5r7j
j53ZdYnvwqd9PA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:07 2025 by rpki-client