Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          XkRjTzrMLLynyRK59BVf78fyWZdrRXbAhzgC1sbw6hs=
Subject key identifier:   8C:01:5E:89:87:7F:64:2A:7A:C5:28:FB:86:29:48:15:54:9E:7E:19
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       0194BC3C20A25B0348766CBD1988104F9A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          016B
Signing time:             Fri 31 Jan 2025 12:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:44 +0000
Files and hashes:         1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: eItRvNzQdyJIguIwW1307zWXwvvnyI3EpifdlJ2UpPA=)
                          2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:20:a2:5b:03:48:76:6c:bd:19:88:10:4f:9a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Jan 31 12:00:44 2025 GMT
            Not After : Feb  1 12:00:44 2025 GMT
        Subject: CN=8c015e89877f642a7ac528fb86294815549e7e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:c1:c1:6b:c7:39:5c:e3:c0:2b:85:28:68:
                    48:97:4d:af:4f:14:91:4c:29:fc:84:44:57:fc:94:
                    a2:50:91:9a:e9:17:bb:3e:d9:71:b9:77:1e:07:86:
                    36:cb:a9:28:8b:6e:91:30:f5:85:5e:a6:5a:4c:97:
                    26:eb:b3:42:8c:a3:2d:ca:c6:9a:d8:dc:f3:60:d4:
                    ee:05:55:12:35:c1:a1:85:e4:f9:a7:c7:c2:4d:b5:
                    2a:78:a6:67:fa:13:0d:96:2a:b2:ff:8d:1d:ec:48:
                    16:8f:41:a7:ea:ed:26:4f:74:4f:a1:f2:a0:57:6a:
                    54:86:86:5e:19:52:8d:8c:95:29:09:da:48:37:a3:
                    68:0f:8f:b9:4a:a3:e9:0e:83:55:36:3a:6e:5c:94:
                    78:48:a0:e3:e4:d8:89:53:6f:9c:23:62:85:d8:66:
                    dc:33:7c:ba:8d:f9:7d:84:f6:ad:64:ce:2e:7d:e1:
                    ab:f5:35:ec:c3:be:fe:f9:e1:20:b3:99:d6:5b:a2:
                    21:7d:bc:12:9b:78:50:97:90:da:f1:7b:13:f3:0c:
                    95:50:3f:e8:8f:10:a8:be:8f:d0:3b:5e:7e:0e:20:
                    10:93:57:6f:e8:06:73:6e:0b:c2:96:32:48:cb:a1:
                    a6:28:6c:1b:97:8f:ea:83:9c:d8:8d:49:05:b4:c7:
                    67:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:01:5E:89:87:7F:64:2A:7A:C5:28:FB:86:29:48:15:54:9E:7E:19
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:d2:ac:b1:88:4d:c0:48:c7:54:49:2a:06:29:96:d6:81:
         e2:f8:16:2a:8f:dd:95:3b:da:88:50:df:fd:85:28:87:18:b9:
         a0:6e:bd:93:4f:5e:10:e9:52:2c:52:88:41:df:74:1d:94:65:
         14:5f:00:f1:54:00:fb:c1:2d:03:ac:15:74:73:c3:e8:22:97:
         87:8b:42:1e:5b:86:50:73:97:40:9a:af:b7:fe:39:4b:ed:16:
         07:69:ca:e0:2a:6a:49:5c:aa:c6:ff:8f:97:0f:8b:68:13:a8:
         39:2d:b5:40:f7:65:a1:a9:05:af:2d:41:41:24:2d:e8:4d:01:
         05:a5:d3:04:62:d1:a7:3e:0d:66:dd:0b:fa:9b:ed:65:de:9d:
         96:5d:f6:41:30:73:95:1d:11:16:c6:ba:78:f8:2c:c2:b9:f9:
         45:ac:a7:fc:83:e4:0c:35:0b:af:b1:d0:62:d8:eb:b1:db:ee:
         e1:6b:5b:0f:51:ce:a9:34:26:3d:cc:96:f2:cb:cd:3b:70:79:
         13:eb:8a:0f:a6:ec:cf:09:5d:87:29:c6:75:7b:29:64:54:2f:
         56:fa:56:7f:c6:97:14:af:20:70:bc:69:b0:84:a0:ff:1f:5e:
         c0:41:8f:d2:74:e5:f5:1f:86:37:28:54:8d:4e:1a:76:01:bd:
         a1:02:1b:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCCiWwNIdmy9GYgQT5pBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTNkNjNiNGE1YjQwNGI1ZmY4M2NiZjJiMTUyNWEzMDQ3
N2Y2NWMwHhcNMjUwMTMxMTIwMDQ0WhcNMjUwMjAxMTIwMDQ0WjAzMTEwLwYDVQQD
Eyg4YzAxNWU4OTg3N2Y2NDJhN2FjNTI4ZmI4NjI5NDgxNTU0OWU3ZTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF/BwWvHOVzjwCuFKGhIl02vTxSR
TCn8hERX/JSiUJGa6Re7PtlxuXceB4Y2y6koi26RMPWFXqZaTJcm67NCjKMtysaa
2NzzYNTuBVUSNcGhheT5p8fCTbUqeKZn+hMNliqy/40d7EgWj0Gn6u0mT3RPofKg
V2pUhoZeGVKNjJUpCdpIN6NoD4+5SqPpDoNVNjpuXJR4SKDj5NiJU2+cI2KF2Gbc
M3y6jfl9hPatZM4ufeGr9TXsw77++eEgs5nWW6IhfbwSm3hQl5Da8XsT8wyVUD/o
jxCovo/QO15+DiAQk1dv6AZzbgvCljJIy6GmKGwbl4/qg5zYjUkFtMdnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwBXomHf2QqesUo+4YpSBVUnn4ZMB8GA1UdIwQY
MBaAFH/j1jtKW0BLX/g8vysVJaMEd/ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMt
MmNiN2EzYjZlNDJmLzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMtMmNiN2EzYjZlNDJm
LzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5HSrLGI
TcBIx1RJKgYpltaB4vgWKo/dlTvaiFDf/YUohxi5oG69k09eEOlSLFKIQd90HZRl
FF8A8VQA+8EtA6wVdHPD6CKXh4tCHluGUHOXQJqvt/45S+0WB2nK4CpqSVyqxv+P
lw+LaBOoOS21QPdloakFry1BQSQt6E0BBaXTBGLRpz4NZt0L+pvtZd6dll32QTBz
lR0RFsa6ePgswrn5Rayn/IPkDDULr7HQYtjrsdvu4WtbD1HOqTQmPcyW8svNO3B5
E+uKD6bszwldhynGdXspZFQvVvpWf8aXFK8gcLxpsISg/x9ewEGP0nTl9R+GNyhU
jU4adgG9oQIbGw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:41 2025 by rpki-client