Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/c91347-8cdd-4d19-b088-971af0ab5323/1/pXOcJXSbDHpTjHFQzZJWVZIsft8.mft
File:                     pXOcJXSbDHpTjHFQzZJWVZIsft8.mft (raw, json)
Hash identifier:          G54RcvuDv8LdNquTJnSAzrj711QwzHtBHb5RF40Pnrc=
Subject key identifier:   B3:77:57:79:1C:4F:2F:8E:45:AF:1D:1E:C8:A1:B2:1D:5B:5E:5C:4C
Authority key identifier: A5:73:9C:25:74:9B:0C:7A:53:8C:71:50:CD:92:56:55:92:2C:7E:DF
Certificate issuer:       /CN=a5739c25749b0c7a538c7150cd925655922c7edf
Certificate serial:       0184ADC40FCECD35F47072645E09194206DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXOcJXSbDHpTjHFQzZJWVZIsft8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/c91347-8cdd-4d19-b088-971af0ab5323/1/pXOcJXSbDHpTjHFQzZJWVZIsft8.mft
Manifest number:          0A60
Signing time:             Fri 25 Nov 2022 07:50:18 +0000
Manifest this update:     Fri 25 Nov 2022 07:50:18 +0000
Manifest next update:     Sat 26 Nov 2022 07:50:18 +0000
Files and hashes:         1: pXOcJXSbDHpTjHFQzZJWVZIsft8.crl (hash: Jz4X2eN4QnxCPi5VNQULC7jL8CUnIS3hmQPjXjsamq8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:ad:c4:0f:ce:cd:35:f4:70:72:64:5e:09:19:42:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5739c25749b0c7a538c7150cd925655922c7edf
        Validity
            Not Before: Nov 25 07:50:18 2022 GMT
            Not After : Nov 26 07:50:18 2022 GMT
        Subject: CN=b37757791c4f2f8e45af1d1ec8a1b21d5b5e5c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d2:8c:aa:5d:1d:a1:49:41:cb:4c:62:f7:ae:
                    05:2f:03:a8:83:e3:7f:80:d0:2c:c5:70:95:14:52:
                    c2:09:59:02:63:cb:0a:e8:20:f3:dc:c3:f9:75:99:
                    76:fc:e8:d0:88:04:78:40:c5:b5:6b:bb:bc:bb:7d:
                    21:7b:42:9b:6f:f5:9b:4d:93:99:10:b2:55:a2:c5:
                    e9:66:5b:ff:fe:5b:f1:46:8a:14:4f:cf:fe:f7:c9:
                    20:5f:aa:8b:65:7d:fb:be:9e:62:ef:12:ff:a6:33:
                    64:40:9a:32:37:32:90:8c:10:fe:19:52:26:44:ee:
                    41:75:e0:9b:b9:31:32:7b:35:51:50:8d:dc:b4:58:
                    a0:91:4f:dd:64:cf:ef:04:33:a9:1d:51:25:c9:05:
                    c2:ea:a9:c1:70:07:06:06:5b:d7:a6:0c:a1:5e:2f:
                    41:db:92:b9:be:7e:57:9f:e5:7d:2d:86:30:d0:8b:
                    17:25:0d:37:e1:f9:2b:ec:a0:19:b0:55:b5:a9:bc:
                    e0:6c:42:1f:2e:54:82:0b:6a:9b:59:b4:ef:39:6e:
                    ad:ed:43:1f:8b:48:04:b0:f4:df:af:6a:22:f4:21:
                    24:5c:33:cb:0b:2c:ef:86:b9:b8:ef:ac:b5:1c:4d:
                    f0:29:f5:ae:5e:44:0d:c7:df:15:5a:7e:4c:85:18:
                    c0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:77:57:79:1C:4F:2F:8E:45:AF:1D:1E:C8:A1:B2:1D:5B:5E:5C:4C
            X509v3 Authority Key Identifier:
                keyid:A5:73:9C:25:74:9B:0C:7A:53:8C:71:50:CD:92:56:55:92:2C:7E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXOcJXSbDHpTjHFQzZJWVZIsft8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c91347-8cdd-4d19-b088-971af0ab5323/1/pXOcJXSbDHpTjHFQzZJWVZIsft8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/c91347-8cdd-4d19-b088-971af0ab5323/1/pXOcJXSbDHpTjHFQzZJWVZIsft8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:50:40:69:2f:3e:13:20:89:54:d7:bc:eb:68:1a:1c:ae:
         e1:1f:91:8d:8a:6b:09:d3:1b:a6:0a:d1:2c:8a:08:46:93:10:
         ce:5c:ea:22:1a:e6:c2:c0:7c:1e:ff:e3:dd:37:dd:df:8e:72:
         96:2b:ae:e1:8c:ee:9e:25:14:fd:14:dd:46:5b:b1:06:5c:91:
         de:77:58:0f:ba:3d:0d:da:b8:83:12:42:a7:a4:ed:19:21:be:
         bb:76:5a:ce:dc:94:b2:0c:30:1d:53:b4:8f:73:71:7f:3f:af:
         d6:0b:20:a7:b1:c5:56:ef:33:b6:29:c5:67:96:58:a8:77:b2:
         a2:22:3b:ac:59:e2:a4:e8:2c:a7:44:df:ef:4e:ba:63:2c:f0:
         39:43:4a:72:69:b5:6c:93:36:96:59:58:ca:e9:71:8f:ef:d8:
         83:52:7f:c2:87:69:53:fc:46:bb:30:69:cf:48:19:dc:04:6e:
         88:87:52:8c:43:cc:96:53:59:24:41:b5:8e:9c:7a:36:86:42:
         22:2c:34:30:f0:46:38:5f:ff:b2:48:cb:27:38:4d:bb:2d:cf:
         4a:4d:8e:4b:c4:7a:a2:57:0a:55:ca:d4:fa:e1:fb:60:09:0a:
         a7:60:12:14:9d:a7:80:1b:63:12:1a:a0:da:b4:41:90:89:b2:
         db:4d:cb:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYStxA/OzTX0cHJkXgkZQgbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzM5YzI1NzQ5YjBjN2E1MzhjNzE1MGNkOTI1NjU1OTIy
YzdlZGYwHhcNMjIxMTI1MDc1MDE4WhcNMjIxMTI2MDc1MDE4WjAzMTEwLwYDVQQD
EyhiMzc3NTc3OTFjNGYyZjhlNDVhZjFkMWVjOGExYjIxZDViNWU1YzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdKMql0doUlBy0xi964FLwOog+N/
gNAsxXCVFFLCCVkCY8sK6CDz3MP5dZl2/OjQiAR4QMW1a7u8u30he0Kbb/WbTZOZ
ELJVosXpZlv//lvxRooUT8/+98kgX6qLZX37vp5i7xL/pjNkQJoyNzKQjBD+GVIm
RO5BdeCbuTEyezVRUI3ctFigkU/dZM/vBDOpHVElyQXC6qnBcAcGBlvXpgyhXi9B
25K5vn5Xn+V9LYYw0IsXJQ034fkr7KAZsFW1qbzgbEIfLlSCC2qbWbTvOW6t7UMf
i0gEsPTfr2oi9CEkXDPLCyzvhrm476y1HE3wKfWuXkQNx98VWn5MhRjAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLN3V3kcTy+ORa8dHsihsh1bXlxMMB8GA1UdIwQY
MBaAFKVznCV0mwx6U4xxUM2SVlWSLH7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhPY0pYU2JESHBUakhGUXpaSldWWklzZnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jOTEzNDctOGNkZC00ZDE5LWIwODgt
OTcxYWYwYWI1MzIzLzEvcFhPY0pYU2JESHBUakhGUXpaSldWWklzZnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jOTEzNDctOGNkZC00ZDE5LWIwODgtOTcxYWYwYWI1MzIz
LzEvcFhPY0pYU2JESHBUakhGUXpaSldWWklzZnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7xQQGkv
PhMgiVTXvOtoGhyu4R+RjYprCdMbpgrRLIoIRpMQzlzqIhrmwsB8Hv/j3Tfd345y
liuu4YzuniUU/RTdRluxBlyR3ndYD7o9Ddq4gxJCp6TtGSG+u3ZaztyUsgwwHVO0
j3Nxfz+v1gsgp7HFVu8ztinFZ5ZYqHeyoiI7rFnipOgsp0Tf7066YyzwOUNKcmm1
bJM2lllYyulxj+/Yg1J/wodpU/xGuzBpz0gZ3ARuiIdSjEPMllNZJEG1jpx6NoZC
Iiw0MPBGOF//skjLJzhNuy3PSk2OS8R6olcKVcrU+uH7YAkKp2ASFJ2ngBtjEhqg
2rRBkImy203LLA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:48 2025 by rpki-client