Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
File:                     9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json)
Hash identifier:          1/ceJwvG5bcrgI3YySaJ1sDPlpjV/mwbRwPqmbisUqQ=
Subject key identifier:   17:8F:17:A3:75:E1:3C:00:73:13:13:9B:40:6A:7E:9A:35:A2:30:25
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Certificate issuer:       /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial:       0194BC04F42A3296129CE50C863008218753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
Manifest number:          78
Signing time:             Fri 31 Jan 2025 11:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:28 +0000
Files and hashes:         1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: REDpmVBovwmHTVt+WNF0TGUktBFHv4fe2GjW5asWaSg=)
                          2: Oa9LsMPKbG6aASCQoEwRN7kKYK4.roa (hash: Pw17YPc4vy9Z5t/JIPzjeYGs6qX3rfu7GNC8UJfrzuc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f4:2a:32:96:12:9c:e5:0c:86:30:08:21:87:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
        Validity
            Not Before: Jan 31 11:00:28 2025 GMT
            Not After : Feb  1 11:00:28 2025 GMT
        Subject: CN=178f17a375e13c007313139b406a7e9a35a23025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:31:73:56:d8:e5:04:00:3d:67:db:7e:35:
                    03:26:56:4a:3f:16:f4:a4:75:ca:d7:0f:84:5b:f4:
                    47:7a:ce:a0:da:b0:bf:0d:4d:fa:10:7d:a9:45:a8:
                    a7:68:5b:6f:4d:1d:7d:33:3c:28:71:cb:0c:81:0c:
                    0b:42:27:83:2e:4e:a4:df:52:85:3a:77:90:6a:55:
                    33:c4:4d:ca:8b:1c:78:4c:fc:82:36:31:58:65:71:
                    5a:1b:58:63:48:23:45:82:c4:55:a8:3a:8a:6c:86:
                    90:b1:7a:65:ec:79:52:c7:41:9c:ee:b1:43:19:a8:
                    c7:10:08:92:e3:17:eb:58:d1:95:3a:2b:29:21:a9:
                    75:6b:07:74:2c:c5:13:7b:db:f0:53:3e:26:5b:71:
                    f1:cb:9b:b3:28:fa:84:90:78:23:9e:71:53:9a:de:
                    d4:38:21:e6:ba:d6:cd:55:56:1d:cf:27:6e:92:6e:
                    2a:f0:50:75:b7:e9:f9:4b:13:ba:fd:c3:54:bd:07:
                    8b:9d:2e:21:d0:be:48:3d:07:0f:ea:2f:06:8d:af:
                    6c:de:b0:5a:35:30:f0:06:99:1e:b2:29:3e:08:f8:
                    08:b6:79:63:d4:d1:c3:7b:01:d8:1a:91:03:75:47:
                    ef:7f:fd:06:90:00:7d:6c:67:74:16:81:a8:b3:cd:
                    0c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8F:17:A3:75:E1:3C:00:73:13:13:9B:40:6A:7E:9A:35:A2:30:25
            X509v3 Authority Key Identifier:
                keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:90:20:21:e3:64:cb:5f:99:23:af:0c:07:f2:f3:67:5d:56:
         3a:49:c0:a6:75:8b:8c:f6:8c:bf:9e:8f:47:f9:65:09:b6:a4:
         05:85:0a:d5:87:1b:32:91:71:87:82:74:96:48:75:52:c6:bd:
         aa:12:2d:3f:5a:ea:2f:5d:6d:82:2b:c1:02:e1:75:6d:5f:dc:
         45:42:b6:9f:78:1e:33:15:3a:f7:04:a5:e5:8a:ad:ef:7f:9b:
         22:41:91:29:08:b3:8a:28:74:db:20:5f:f4:72:f6:99:19:6a:
         1e:ca:4a:f4:48:50:64:4a:5c:e2:69:d8:07:2a:01:6b:60:5a:
         42:37:e2:92:f9:fa:b6:43:eb:e2:a7:b9:38:23:16:c0:9f:ab:
         1e:ab:5e:28:dd:72:63:37:6f:d6:73:27:4a:a7:20:db:63:2d:
         62:92:e8:f6:09:b9:4b:0e:4e:1c:ef:2f:e6:d6:19:bb:e4:d8:
         e5:0b:bf:8a:40:df:71:3e:81:47:64:12:67:4a:01:a2:8f:6e:
         32:00:be:97:73:36:04:2d:a6:fb:72:52:0c:51:74:08:cf:ef:
         ba:c3:f0:d0:c0:9c:22:5f:e1:45:69:84:2f:cc:56:37:44:00:
         e9:2e:42:20:96:46:59:62:97:c9:44:bd:d6:1b:de:d3:cc:70:
         a9:6b:1c:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPQqMpYSnOUMhjAIIYdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2
OTUzMmEwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EygxNzhmMTdhMzc1ZTEzYzAwNzMxMzEzOWI0MDZhN2U5YTM1YTIzMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAungxc1bY5QQAPWfbfjUDJlZKPxb0
pHXK1w+EW/RHes6g2rC/DU36EH2pRainaFtvTR19MzwoccsMgQwLQieDLk6k31KF
OneQalUzxE3Kixx4TPyCNjFYZXFaG1hjSCNFgsRVqDqKbIaQsXpl7HlSx0Gc7rFD
GajHEAiS4xfrWNGVOispIal1awd0LMUTe9vwUz4mW3Hxy5uzKPqEkHgjnnFTmt7U
OCHmutbNVVYdzydukm4q8FB1t+n5SxO6/cNUvQeLnS4h0L5IPQcP6i8Gja9s3rBa
NTDwBpkesik+CPgItnlj1NHDewHYGpEDdUfvf/0GkAB9bGd0FoGos80MBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBePF6N14TwAcxMTm0Bqfpo1ojAlMB8GA1UdIwQY
MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt
MmJjMWFlM2RiZGJlLzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl
LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5AgIeNk
y1+ZI68MB/LzZ11WOknApnWLjPaMv56PR/llCbakBYUK1YcbMpFxh4J0lkh1Usa9
qhItP1rqL11tgivBAuF1bV/cRUK2n3geMxU69wSl5Yqt73+bIkGRKQiziih02yBf
9HL2mRlqHspK9EhQZEpc4mnYByoBa2BaQjfikvn6tkPr4qe5OCMWwJ+rHqteKN1y
Yzdv1nMnSqcg22MtYpLo9gm5Sw5OHO8v5tYZu+TY5Qu/ikDfcT6BR2QSZ0oBoo9u
MgC+l3M2BC2m+3JSDFF0CM/vusPw0MCcIl/hRWmEL8xWN0QA6S5CIJZGWWKXyUS9
1hve08xwqWscEw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:09 2025 by rpki-client