Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
File:                     ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft (raw, json)
Hash identifier:          Xxxv7+84TGm3Sy0T1EXn9ulhU7YoZLypD0G4DctCmWc=
Subject key identifier:   01:C2:A9:3D:16:7E:DD:FC:2F:F5:DB:37:16:EA:BD:EA:E9:A1:78:64
Authority key identifier: A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5
Certificate issuer:       /CN=a233a6af5f688432879c7e0c0772cddd8f176db5
Certificate serial:       0194BD17D670718E071D67B6DFF52E0E5EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 16:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:43 +0000
Files and hashes:         1: ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl (hash: WNtnwrudaqGgT6thmCGjQXXSZpV/O7nk6cuwiaVSmoM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d6:70:71:8e:07:1d:67:b6:df:f5:2e:0e:5e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a233a6af5f688432879c7e0c0772cddd8f176db5
        Validity
            Not Before: Jan 31 16:00:43 2025 GMT
            Not After : Feb  1 16:00:43 2025 GMT
        Subject: CN=01c2a93d167eddfc2ff5db3716eabdeae9a17864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:44:84:61:59:7e:0b:1b:70:fc:d9:89:c2:
                    66:8a:64:08:81:ba:d1:7a:ac:ff:cd:38:be:8d:b8:
                    c9:e8:ac:ea:d2:f2:a6:aa:f5:8a:25:8e:20:14:d9:
                    bb:97:59:10:91:6f:73:cc:4c:01:82:f2:88:95:13:
                    b2:b6:6f:76:a1:de:7f:60:d2:88:ea:41:94:87:49:
                    a4:e7:86:63:42:34:94:08:27:49:be:f8:59:6c:bb:
                    21:64:9c:ac:00:05:e0:f0:0b:26:a8:07:49:9f:7b:
                    f6:37:3b:ce:bf:96:fd:fa:7e:3c:b9:cd:8c:00:5c:
                    e5:87:e1:3c:eb:3b:67:41:b7:ad:ae:4c:dc:94:7f:
                    9b:29:f7:61:c2:f8:c1:e4:39:1f:36:54:a8:be:96:
                    59:55:84:91:6d:76:e0:09:d0:73:23:af:f0:b1:ea:
                    38:8e:9a:49:19:91:28:a8:06:d9:da:99:7d:62:47:
                    42:21:f6:de:13:65:c6:0e:f4:03:62:f2:7f:95:ef:
                    9f:d4:ab:5b:dc:15:b3:40:6c:df:fa:41:61:e4:6e:
                    de:9c:a0:d7:6e:65:cb:6a:36:f7:93:94:7a:5c:a1:
                    1a:c1:0a:ba:89:31:d4:9b:b3:42:59:a9:e8:1e:a4:
                    c2:a8:d9:e8:ff:1d:90:43:03:9b:8a:ab:bc:18:82:
                    82:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C2:A9:3D:16:7E:DD:FC:2F:F5:DB:37:16:EA:BD:EA:E9:A1:78:64
            X509v3 Authority Key Identifier:
                keyid:A2:33:A6:AF:5F:68:84:32:87:9C:7E:0C:07:72:CD:DD:8F:17:6D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojOmr19ohDKHnH4MB3LN3Y8XbbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/54d38e-c90b-4b71-b71a-3e424056948f/1/ojOmr19ohDKHnH4MB3LN3Y8XbbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:46:14:39:8a:d8:dd:bc:09:43:bb:b2:38:da:19:05:89:
         d5:a3:8e:84:5c:ab:01:19:f3:26:d6:c5:4f:70:1e:b1:71:1d:
         72:d8:7b:ef:91:1d:c4:25:f8:b9:2c:b7:15:a4:41:c7:50:58:
         73:1a:cf:58:19:62:b7:58:28:51:9f:84:89:d0:b9:17:b7:73:
         b0:96:20:b7:3f:26:d8:4b:cb:83:de:fa:67:dd:ff:bf:b4:d5:
         3d:fd:8c:82:0d:a9:a9:12:05:b4:af:1a:6f:de:52:35:25:6d:
         a2:58:c0:ba:50:b5:db:02:63:1f:0d:63:52:d8:59:46:53:d2:
         47:38:c1:d7:f6:95:68:df:a0:a9:53:6d:f8:a9:08:46:86:68:
         2d:32:47:79:e6:f8:ba:e4:e5:c5:a1:39:a6:02:75:e8:00:54:
         80:a3:1d:29:1b:d6:bd:33:43:04:e4:98:56:e2:30:23:46:5e:
         46:56:bb:5b:66:78:9a:35:bd:0a:12:54:55:85:8d:5b:d7:97:
         86:a4:8e:16:5a:c6:41:1b:54:07:01:80:48:e1:b7:fe:26:a1:
         a8:b0:68:03:59:70:eb:2d:47:7f:08:6f:68:2e:6b:10:7f:e5:
         f8:32:8e:36:21:f9:bd:5e:3b:e2:32:59:11:3d:29:fe:b8:56:
         1c:81:43:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9ZwcY4HHWe23/UuDl68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzNhNmFmNWY2ODg0MzI4NzljN2UwYzA3NzJjZGRkOGYx
NzZkYjUwHhcNMjUwMTMxMTYwMDQzWhcNMjUwMjAxMTYwMDQzWjAzMTEwLwYDVQQD
EygwMWMyYTkzZDE2N2VkZGZjMmZmNWRiMzcxNmVhYmRlYWU5YTE3ODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzdEhGFZfgsbcPzZicJmimQIgbrR
eqz/zTi+jbjJ6Kzq0vKmqvWKJY4gFNm7l1kQkW9zzEwBgvKIlROytm92od5/YNKI
6kGUh0mk54ZjQjSUCCdJvvhZbLshZJysAAXg8AsmqAdJn3v2NzvOv5b9+n48uc2M
AFzlh+E86ztnQbetrkzclH+bKfdhwvjB5DkfNlSovpZZVYSRbXbgCdBzI6/wseo4
jppJGZEoqAbZ2pl9YkdCIfbeE2XGDvQDYvJ/le+f1Ktb3BWzQGzf+kFh5G7enKDX
bmXLajb3k5R6XKEawQq6iTHUm7NCWanoHqTCqNno/x2QQwObiqu8GIKC/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHCqT0Wft38L/XbNxbqverpoXhkMB8GA1UdIwQY
MBaAFKIzpq9faIQyh5x+DAdyzd2PF221MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEt
M2U0MjQwNTY5NDhmLzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81NGQzOGUtYzkwYi00YjcxLWI3MWEtM2U0MjQwNTY5NDhm
LzEvb2pPbXIxOW9oREtIbkg0TUIzTE4zWThYYmJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA+xGFDmK
2N28CUO7sjjaGQWJ1aOOhFyrARnzJtbFT3AesXEdcth775EdxCX4uSy3FaRBx1BY
cxrPWBlit1goUZ+EidC5F7dzsJYgtz8m2EvLg976Z93/v7TVPf2Mgg2pqRIFtK8a
b95SNSVtoljAulC12wJjHw1jUthZRlPSRzjB1/aVaN+gqVNt+KkIRoZoLTJHeeb4
uuTlxaE5pgJ16ABUgKMdKRvWvTNDBOSYVuIwI0ZeRla7W2Z4mjW9ChJUVYWNW9eX
hqSOFlrGQRtUBwGASOG3/iahqLBoA1lw6y1HfwhvaC5rEH/l+DKONiH5vV474jJZ
ET0p/rhWHIFDcw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:53:57 2025 by rpki-client