Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
File:                     6sVEfAQxp17nu1lAohg8GEOOtrE.mft (raw, json)
Hash identifier:          WMny8Dece98gfpyCijZ4pydiZcOTXcMkLCtDAqymNs0=
Subject key identifier:   CB:4C:9F:61:C3:95:DE:54:E3:85:3B:4F:CB:0D:30:B4:06:3F:45:9D
Authority key identifier: EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1
Certificate issuer:       /CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
Certificate serial:       0194BD85A392A5B73F295765B18787160686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft
Manifest number:          038B
Signing time:             Fri 31 Jan 2025 18:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:39 +0000
Files and hashes:         1: 6sVEfAQxp17nu1lAohg8GEOOtrE.crl (hash: pOhwd8UwH6AK3gPSS+o/JL0Nwr6GiblV5Q1Rer3/noI=)
                          2: bZmXrqNyZ8AqEyFlE3XBS1-1gJo.roa (hash: aUsLyT1xm0BEqckeaf+LnCJ77YIIEkSZJAG2IbM/gAs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a3:92:a5:b7:3f:29:57:65:b1:87:87:16:06:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eac5447c0431a75ee7bb5940a2183c18438eb6b1
        Validity
            Not Before: Jan 31 18:00:39 2025 GMT
            Not After : Feb  1 18:00:39 2025 GMT
        Subject: CN=cb4c9f61c395de54e3853b4fcb0d30b4063f459d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8f:41:8b:ba:74:16:1b:a1:5b:c1:a3:1f:7f:
                    99:4d:9e:5d:da:83:c5:cf:b0:35:51:10:7c:bb:8c:
                    0c:e6:69:a2:cf:62:d7:1d:b5:58:ed:e6:8a:3b:30:
                    a9:b2:bf:be:b5:df:d2:f1:06:5f:45:81:d1:86:d8:
                    00:89:c2:89:ba:8f:2e:b0:ff:ff:d1:21:90:22:d7:
                    7d:fa:43:65:4a:62:83:0a:8d:65:e2:08:b0:fc:78:
                    dd:4f:16:54:58:15:95:50:4e:0e:fe:83:0e:40:37:
                    14:e6:bc:27:66:d8:8d:be:5f:2b:76:0e:a1:f6:75:
                    d7:9c:5c:94:32:26:e3:88:09:94:8e:b2:0d:6e:3d:
                    cc:c3:48:53:81:1f:b9:49:fe:5e:55:77:ac:80:7c:
                    b5:cd:9b:c4:e1:4e:56:53:04:32:0c:43:bd:c8:c4:
                    40:84:14:7e:21:17:5d:61:98:60:af:68:ed:66:0f:
                    d9:9e:27:69:01:cf:0d:6d:4b:59:19:86:d0:80:26:
                    45:06:8e:85:59:97:bf:f4:07:49:e6:70:f4:a0:c0:
                    27:d3:9c:ea:21:d3:aa:5d:67:39:2e:ee:de:da:ab:
                    f7:f6:fb:70:49:86:61:01:b8:f6:e0:8b:c0:74:14:
                    09:c9:b7:62:d9:a9:c2:31:92:74:85:ab:0c:37:0b:
                    c9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4C:9F:61:C3:95:DE:54:E3:85:3B:4F:CB:0D:30:B4:06:3F:45:9D
            X509v3 Authority Key Identifier:
                keyid:EA:C5:44:7C:04:31:A7:5E:E7:BB:59:40:A2:18:3C:18:43:8E:B6:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sVEfAQxp17nu1lAohg8GEOOtrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/77264e-4964-4f68-92e5-ffa4339bce4f/1/6sVEfAQxp17nu1lAohg8GEOOtrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:f1:ea:74:24:ec:e5:06:39:d4:61:02:e1:01:19:8a:a9:66:
         55:25:ee:af:7e:1d:bf:43:d0:43:f6:36:7b:ef:5f:71:aa:89:
         b6:6b:bb:44:fa:81:2a:0f:5b:5b:c9:cd:83:d8:bc:54:ab:5d:
         ce:51:42:12:3c:bd:82:d3:81:e3:fb:b0:a2:de:ae:4d:c3:d9:
         b6:b0:3a:45:83:e5:f2:14:03:4b:3b:7e:86:e4:09:ce:39:32:
         15:a7:89:dc:dc:2a:19:bc:b9:83:00:35:2f:bf:7b:9b:7a:51:
         e5:48:3d:ef:24:96:ab:e8:25:99:7b:3d:5b:c8:dd:68:95:a4:
         44:e0:e4:a3:c4:a9:55:93:6b:9b:44:66:a3:d3:15:cb:df:6a:
         84:a7:97:81:bb:7a:c5:0f:7f:6e:d7:e2:34:a1:fb:76:85:54:
         38:18:92:19:03:1e:8c:11:5a:7c:3d:80:01:9a:e7:ab:07:be:
         48:f8:eb:ee:92:38:c8:12:92:e8:9f:e6:82:4d:43:52:27:5d:
         46:de:6e:3c:f3:d3:81:2e:e4:d1:6f:72:98:06:1e:d2:8a:60:
         44:6d:11:2d:3b:3a:9d:5d:89:2b:6a:c4:89:8a:73:40:30:d5:
         69:a9:49:d1:4e:b1:a7:30:ef:08:a9:25:99:a5:bb:db:a7:a9:
         35:37:dd:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haOSpbc/KVdlsYeHFgaGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYzU0NDdjMDQzMWE3NWVlN2JiNTk0MGEyMTgzYzE4NDM4
ZWI2YjEwHhcNMjUwMTMxMTgwMDM5WhcNMjUwMjAxMTgwMDM5WjAzMTEwLwYDVQQD
EyhjYjRjOWY2MWMzOTVkZTU0ZTM4NTNiNGZjYjBkMzBiNDA2M2Y0NTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno9Bi7p0FhuhW8GjH3+ZTZ5d2oPF
z7A1URB8u4wM5mmiz2LXHbVY7eaKOzCpsr++td/S8QZfRYHRhtgAicKJuo8usP//
0SGQItd9+kNlSmKDCo1l4giw/HjdTxZUWBWVUE4O/oMOQDcU5rwnZtiNvl8rdg6h
9nXXnFyUMibjiAmUjrINbj3Mw0hTgR+5Sf5eVXesgHy1zZvE4U5WUwQyDEO9yMRA
hBR+IRddYZhgr2jtZg/ZnidpAc8NbUtZGYbQgCZFBo6FWZe/9AdJ5nD0oMAn05zq
IdOqXWc5Lu7e2qv39vtwSYZhAbj24IvAdBQJybdi2anCMZJ0hasMNwvJZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtMn2HDld5U44U7T8sNMLQGP0WdMB8GA1UdIwQY
MBaAFOrFRHwEMade57tZQKIYPBhDjraxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnNWRWZBUXhwMTdudTFsQW9oZzhHRU9PdHJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83NzI2NGUtNDk2NC00ZjY4LTkyZTUt
ZmZhNDMzOWJjZTRmLzEvNnNWRWZBUXhwMTdudTFsQW9oZzhHRU9PdHJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi83NzI2NGUtNDk2NC00ZjY4LTkyZTUtZmZhNDMzOWJjZTRm
LzEvNnNWRWZBUXhwMTdudTFsQW9oZzhHRU9PdHJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvHqdCTs
5QY51GEC4QEZiqlmVSXur34dv0PQQ/Y2e+9fcaqJtmu7RPqBKg9bW8nNg9i8VKtd
zlFCEjy9gtOB4/uwot6uTcPZtrA6RYPl8hQDSzt+huQJzjkyFaeJ3NwqGby5gwA1
L797m3pR5Ug97ySWq+glmXs9W8jdaJWkRODko8SpVZNrm0Rmo9MVy99qhKeXgbt6
xQ9/btfiNKH7doVUOBiSGQMejBFafD2AAZrnqwe+SPjr7pI4yBKS6J/mgk1DUidd
Rt5uPPPTgS7k0W9ymAYe0opgRG0RLTs6nV2JK2rEiYpzQDDVaalJ0U6xpzDvCKkl
maW726epNTfdRw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:29:54 2025 by rpki-client