Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
File:                     1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json)
Hash identifier:          bDATnbPMxHqmugY0uPs0FLjaVVpJcjvjStPTxImNLck=
Subject key identifier:   0C:68:54:8F:96:2A:F1:50:84:E7:9D:9F:9A:E1:9A:61:70:FF:C0:29
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Certificate issuer:       /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial:       0195E1598F365E9C4675DFBC3112515E0876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
Manifest number:          03C6
Signing time:             Sat 29 Mar 2025 10:01:37 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:37 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:37 +0000
Files and hashes:         1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: DH5Agt4IZ54DfamaPormmiysAttOedySRKM/Iy8NWtc=)
                          2: 9QHkwH3XoDFhii5_H5-wevfnn0w.roa (hash: vBY1ZnWKVkF95bYClA+BXEDvlx1Nx1rI/kqfnvMGLFw=)
                          3: NHqj8wB10WSekKQpmh-HseccI8I.roa (hash: L+izevOgWXTJAUEusaUxSyDXId3hMIswTW9GC9CMwnw=)
                          4: VDPu88hH8S8YAOXUCG9WApGM4Ak.roa (hash: 4CZLCtvGc/kQTFKa66ISm8BXViC73GORAMW68kpOvho=)
                          5: oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa (hash: AjGNR5wRMBSzjpjmL0iwZdQfVi3IKmsNzSO+kwX6G8E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:8f:36:5e:9c:46:75:df:bc:31:12:51:5e:08:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
        Validity
            Not Before: Mar 29 10:01:37 2025 GMT
            Not After : Mar 30 10:01:37 2025 GMT
        Subject: CN=0c68548f962af15084e79d9f9ae19a6170ffc029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:31:c0:23:4d:9b:bd:51:f6:c9:0b:c5:a5:
                    88:5e:31:44:19:38:79:ac:7f:39:f7:4b:70:95:48:
                    e6:ae:28:4d:c5:b6:33:a8:1c:d1:22:d2:7e:ec:aa:
                    47:8a:1a:b0:19:01:91:89:86:b1:1a:9d:28:08:06:
                    16:8f:a4:90:5b:6e:2e:71:21:a5:12:d6:69:7d:94:
                    4c:55:31:1a:e7:8e:ae:b5:2a:50:4b:0a:92:ec:68:
                    a0:ae:f0:5c:dd:a8:d0:14:38:88:e7:07:e2:5a:66:
                    6b:64:4b:bf:0d:58:57:d9:1f:9b:72:40:20:a4:6f:
                    86:db:3d:d7:25:fb:9f:ef:74:6a:e9:69:64:98:14:
                    aa:66:65:ea:45:91:0c:e1:a9:b0:c2:37:14:28:8f:
                    bd:3f:c1:18:50:31:46:e6:e4:c3:14:e9:a0:5e:22:
                    e8:9b:d5:ae:0c:e3:cb:3a:05:ba:34:c9:9f:d2:7a:
                    2f:5a:6e:58:92:ec:39:23:96:a6:4b:3b:52:29:69:
                    d4:cf:5b:bd:cd:bc:2e:65:85:fc:e2:8f:f5:6b:95:
                    ff:fc:da:88:f7:88:8a:34:a2:1b:0d:93:68:3f:29:
                    16:1e:e7:2d:7a:7a:37:e6:a4:04:e5:e8:fd:88:19:
                    f0:4a:b4:c4:a2:18:06:26:ba:4a:02:fa:cf:9a:0f:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:68:54:8F:96:2A:F1:50:84:E7:9D:9F:9A:E1:9A:61:70:FF:C0:29
            X509v3 Authority Key Identifier:
                keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:97:4b:63:d8:23:c3:65:f7:64:d2:06:fd:f7:6f:3d:f9:
         b8:79:57:95:8e:e4:db:7d:e4:e9:4f:71:c8:fd:25:37:51:50:
         65:73:2b:8f:f7:a2:ad:67:c3:f8:b6:a4:2e:0e:07:3c:c4:f3:
         4c:4f:0b:a0:48:f8:5e:96:6b:3b:28:52:a1:22:e7:13:69:11:
         4c:6e:03:6f:fc:35:48:8a:05:28:2d:28:30:23:fb:d0:08:c4:
         ae:1b:c6:37:93:78:6c:7f:e8:f1:25:4c:c0:03:bf:1d:08:11:
         d1:e5:12:8f:75:29:5e:95:54:35:2f:cf:52:e7:0d:04:5d:76:
         f8:09:bc:8d:6c:1a:c5:ef:55:62:56:99:3e:b9:0f:df:f8:c4:
         eb:f6:10:9a:60:1f:91:74:3a:68:94:e6:db:10:5e:a1:c4:0d:
         a2:95:70:78:12:c7:5f:c2:b4:98:72:1e:8b:40:1e:dd:38:6c:
         b6:67:e0:82:07:b0:4f:1e:15:70:fc:6a:79:0b:e7:d4:2e:91:
         24:2f:b9:d0:4d:27:36:13:1e:d0:56:55:24:da:db:38:dc:26:
         98:af:92:0c:68:97:6f:cc:59:97:c5:36:64:60:60:6b:73:60:
         94:76:1a:39:93:ea:42:e5:a3:45:0c:df:e8:49:29:6e:c5:42:
         d0:d8:12:04
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZXhWY82XpxGdd+8MRJRXgh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZTAwYWJlMTg0YTYyNWI3NmY4ZDFmYmNlZWY4MTdhYWY3
MTQxNWIwHhcNMjUwMzI5MTAwMTM3WhcNMjUwMzMwMTAwMTM3WjAzMTEwLwYDVQQD
EygwYzY4NTQ4Zjk2MmFmMTUwODRlNzlkOWY5YWUxOWE2MTcwZmZjMDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlMxwCNNm71R9skLxaWIXjFEGTh5
rH8590twlUjmrihNxbYzqBzRItJ+7KpHihqwGQGRiYaxGp0oCAYWj6SQW24ucSGl
EtZpfZRMVTEa546utSpQSwqS7GigrvBc3ajQFDiI5wfiWmZrZEu/DVhX2R+bckAg
pG+G2z3XJfuf73Rq6WlkmBSqZmXqRZEM4amwwjcUKI+9P8EYUDFG5uTDFOmgXiLo
m9WuDOPLOgW6NMmf0novWm5Ykuw5I5amSztSKWnUz1u9zbwuZYX84o/1a5X//NqI
94iKNKIbDZNoPykWHucteno35qQE5ej9iBnwSrTEohgGJrpKAvrPmg8X3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAxoVI+WKvFQhOedn5rhmmFw/8ApMB8GA1UdIwQY
MBaAFPngCr4YSmJbdvjR+87vgXqvcUFbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1lQUt2aGhLWWx0Mi1OSDd6dS1CZXE5eFFWcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcw
LTU4YjY0ZDU1N2MwYy8xLzEtZUFLdmhoS1lsdDItTkg3enUtQmVxOXhRVnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlmLzhhMzIyZi1kYzI4LTQyMmYtYjU3MC01OGI2NGQ1NTdj
MGMvMS8xLWVBS3ZoaEtZbHQyLU5IN3p1LUJlcTl4UVZzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJqX
S2PYI8Nl92TSBv33bz35uHlXlY7k233k6U9xyP0lN1FQZXMrj/eirWfD+LakLg4H
PMTzTE8LoEj4XpZrOyhSoSLnE2kRTG4Db/w1SIoFKC0oMCP70AjErhvGN5N4bH/o
8SVMwAO/HQgR0eUSj3UpXpVUNS/PUucNBF12+Am8jWwaxe9VYlaZPrkP3/jE6/YQ
mmAfkXQ6aJTm2xBeocQNopVweBLHX8K0mHIei0Ae3ThstmfgggewTx4VcPxqeQvn
1C6RJC+50E0nNhMe0FZVJNrbONwmmK+SDGiXb8xZl8U2ZGBga3NglHYaOZPqQuWj
RQzf6EkpbsVC0NgSBA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:26:18 2025 by rpki-client