Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File:                     3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier:          nlD3eLy86SRR4T2wQmQiP8rnJN1qKVI4Ttov9nwDzB0=
Subject key identifier:   D8:1F:15:72:28:FF:4B:F1:90:72:08:FB:90:DE:9B:49:58:C7:FA:1D
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer:       /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial:       0194BBCE5A03760C083849D291CC8A72E076
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number:          06DE
Signing time:             Fri 31 Jan 2025 10:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:50 +0000
Files and hashes:         1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: T8FiT9QEqIIq/5f9IBUYBZlOnAn23ybnJvsm5M5pqto=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:5a:03:76:0c:08:38:49:d2:91:cc:8a:72:e0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
        Validity
            Not Before: Jan 31 10:00:50 2025 GMT
            Not After : Feb  1 10:00:50 2025 GMT
        Subject: CN=d81f157228ff4bf1907208fb90de9b4958c7fa1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a2:22:4d:ee:93:74:38:a1:cf:55:44:af:4a:
                    a2:7b:4e:9d:97:6a:69:23:2a:07:d9:c9:ed:84:2b:
                    82:c0:7f:5e:bd:63:d3:cf:aa:ce:18:32:9e:80:40:
                    0f:78:b0:bf:6e:95:04:96:0c:9a:d1:eb:0e:6e:16:
                    3e:8b:96:47:6f:4f:a9:34:bb:ec:f3:7b:06:5d:1d:
                    37:5e:d6:1c:f0:6c:60:14:11:4a:f7:b7:25:60:21:
                    a7:54:c6:ab:52:ec:0a:18:59:d6:41:03:a3:d2:2e:
                    a2:94:21:77:c2:87:26:04:1f:e7:2d:44:e0:40:a1:
                    5f:3a:b0:8d:f2:c8:14:9d:2b:0b:19:dd:eb:a3:2d:
                    ca:86:d4:31:aa:93:7e:f4:49:63:e3:0e:2f:7a:b6:
                    4d:79:9a:bf:0f:3f:2e:59:51:f6:a0:d5:36:e4:50:
                    dd:17:1a:10:0d:82:1d:76:c6:7f:39:81:20:4a:ad:
                    03:eb:9b:28:9a:74:bc:69:8a:1f:a2:3e:de:6c:1c:
                    f3:eb:ad:1c:da:e6:8d:95:24:c3:ff:12:c1:25:63:
                    9a:01:47:14:05:78:f8:27:ef:04:7e:96:ed:a8:fe:
                    e1:22:16:0b:56:9f:6d:70:9e:2a:f6:f0:a4:4f:83:
                    f6:31:54:d7:a8:2c:41:54:01:49:7a:5a:30:bb:76:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1F:15:72:28:FF:4B:F1:90:72:08:FB:90:DE:9B:49:58:C7:FA:1D
            X509v3 Authority Key Identifier:
                keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:f4:87:b1:9b:dc:41:68:e6:02:aa:90:fc:14:84:40:6c:d0:
         53:9a:53:a5:7e:c0:12:16:4b:9f:d8:09:cb:6f:c9:dd:cf:e3:
         d4:b1:a3:71:7f:86:34:f7:c1:a9:15:41:22:00:c6:4c:04:ca:
         c6:76:c7:9f:d5:2e:90:36:22:f3:4b:2a:b2:c2:9e:c8:4b:d3:
         6f:a8:09:4e:41:ed:3d:b6:d0:47:c1:3b:db:37:f6:80:a6:be:
         8e:0c:15:ba:25:a1:9e:25:55:0c:ea:f0:98:6b:fd:70:2b:cf:
         0b:34:a2:25:80:9b:6f:a4:0e:a0:2d:24:f6:0d:ab:56:af:8e:
         f7:c9:97:ce:a6:50:2c:c7:7b:69:bf:36:d3:c5:20:15:fa:b6:
         85:b1:b9:d5:60:17:69:f4:4b:ca:46:32:b9:4e:ea:9f:d1:62:
         1a:7f:95:92:21:dd:a8:88:ab:e2:a1:7e:e6:42:40:b3:44:1d:
         63:e0:0d:8b:a8:cf:37:ba:4e:13:ce:70:ba:68:01:f0:c1:0c:
         4f:f4:5a:70:e3:5f:1c:63:e5:ca:a2:f2:3e:39:20:f8:e8:41:
         2c:3c:2a:d9:9e:a1:98:e3:17:83:31:51:da:e7:2d:95:19:e3:
         7b:93:f1:48:9c:c3:16:4b:4b:9b:25:3f:3c:79:cb:22:81:e8:
         ab:96:c7:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zloDdgwIOEnSkcyKcuB2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGJlMjUzNzU5NDIyNzZiMjY0NDA5N2RjM2Q1YTg3NWFm
YjhhZjEwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
EyhkODFmMTU3MjI4ZmY0YmYxOTA3MjA4ZmI5MGRlOWI0OTU4YzdmYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKIiTe6TdDihz1VEr0qie06dl2pp
IyoH2cnthCuCwH9evWPTz6rOGDKegEAPeLC/bpUElgya0esObhY+i5ZHb0+pNLvs
83sGXR03XtYc8GxgFBFK97clYCGnVMarUuwKGFnWQQOj0i6ilCF3wocmBB/nLUTg
QKFfOrCN8sgUnSsLGd3roy3KhtQxqpN+9Elj4w4verZNeZq/Dz8uWVH2oNU25FDd
FxoQDYIddsZ/OYEgSq0D65somnS8aYofoj7ebBzz660c2uaNlSTD/xLBJWOaAUcU
BXj4J+8EfpbtqP7hIhYLVp9tcJ4q9vCkT4P2MVTXqCxBVAFJelowu3ad4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgfFXIo/0vxkHII+5Dem0lYx/odMB8GA1UdIwQY
MBaAFNxL4lN1lCJ2smRAl9w9Woda+4rxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81M2QxMDAtOTk3Ni00OTRiLWFlMjEt
MGI4NTEwMzhhNWRlLzEvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81M2QxMDAtOTk3Ni00OTRiLWFlMjEtMGI4NTEwMzhhNWRl
LzEvM0V2aVUzV1VJbmF5WkVDWDNEMWFoMXI3aXZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPSHsZvc
QWjmAqqQ/BSEQGzQU5pTpX7AEhZLn9gJy2/J3c/j1LGjcX+GNPfBqRVBIgDGTATK
xnbHn9UukDYi80sqssKeyEvTb6gJTkHtPbbQR8E72zf2gKa+jgwVuiWhniVVDOrw
mGv9cCvPCzSiJYCbb6QOoC0k9g2rVq+O98mXzqZQLMd7ab8208UgFfq2hbG51WAX
afRLykYyuU7qn9FiGn+VkiHdqIir4qF+5kJAs0QdY+ANi6jPN7pOE85wumgB8MEM
T/RacONfHGPlyqLyPjkg+OhBLDwq2Z6hmOMXgzFR2uctlRnje5PxSJzDFktLmyU/
PHnLIoHoq5bHHA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:50:01 2025 by rpki-client