Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
File:                     Hrq0DWCBM83fdsO1pvgV34H7x90.mft (raw, json)
Hash identifier:          8OIo8FHsYFjrFcz/qqZ/LEa9Pi52x65+e/+rcKvpSlw=
Subject key identifier:   E8:D4:2B:5E:04:28:16:9F:35:D2:C4:5E:D3:76:49:CF:5C:34:61:ED
Authority key identifier: 1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD
Certificate issuer:       /CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
Certificate serial:       0195E00FAB61CFDFE34F390E876162925ECC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft
Manifest number:          0C
Signing time:             Sat 29 Mar 2025 04:01:18 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:18 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:18 +0000
Files and hashes:         1: Hrq0DWCBM83fdsO1pvgV34H7x90.crl (hash: Q0p7IhojJKuk8bWZXUCflmQUZdxr6OlersVVArj034A=)
                          2: dOirMHERf2S7XaVhDBj8pRwQyLU.roa (hash: RUHnPEXdDgz2x6FeuZ8yiEPV6rqAxw/OAxkwBlLK73U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:ab:61:cf:df:e3:4f:39:0e:87:61:62:92:5e:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ebab40d608133cddf76c3b5a6f815df81fbc7dd
        Validity
            Not Before: Mar 29 04:01:18 2025 GMT
            Not After : Mar 30 04:01:18 2025 GMT
        Subject: CN=e8d42b5e0428169f35d2c45ed37649cf5c3461ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:22:57:fc:1a:c8:53:2b:63:be:15:43:7d:
                    b0:8c:87:f2:86:a6:30:95:d6:ea:fd:d8:94:9e:26:
                    ec:2c:4e:70:dd:d7:41:47:c8:87:30:c4:10:b2:15:
                    c0:dc:51:9f:9a:03:3b:23:2e:f7:af:e0:a7:25:17:
                    76:9f:97:74:33:18:53:c9:78:d9:2b:e0:11:b3:65:
                    22:e2:69:6e:e2:70:2c:a5:e9:9d:e0:b7:25:bd:43:
                    f8:49:71:be:d5:b5:e2:5a:95:5f:6f:e6:56:e7:f5:
                    0d:ee:30:fd:9b:dd:82:31:0b:e1:1d:21:f8:3d:3b:
                    23:89:1a:4f:d4:5e:e2:da:43:9d:27:d9:1f:54:b2:
                    7b:f4:40:93:05:f6:c7:6c:3d:fd:0b:09:0c:96:87:
                    af:db:58:ae:27:bd:cb:36:7a:fe:f5:95:d0:cd:fa:
                    76:12:f2:8c:f7:5a:19:b2:eb:b6:6e:d0:2d:9b:a2:
                    27:b3:ba:29:8c:ce:23:dd:1a:f1:f3:63:3c:04:86:
                    c6:ee:6c:17:1a:51:27:fe:1f:d5:2e:76:87:2b:3d:
                    05:84:46:be:50:77:c2:c2:da:92:e9:2f:1f:01:98:
                    30:5c:2a:c4:b4:0c:af:9c:05:37:64:05:4b:cc:d1:
                    8a:6c:c2:9d:76:a0:17:6e:ab:24:6f:09:83:c1:7a:
                    d9:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D4:2B:5E:04:28:16:9F:35:D2:C4:5E:D3:76:49:CF:5C:34:61:ED
            X509v3 Authority Key Identifier:
                keyid:1E:BA:B4:0D:60:81:33:CD:DF:76:C3:B5:A6:F8:15:DF:81:FB:C7:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hrq0DWCBM83fdsO1pvgV34H7x90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/2b26af-e754-4080-9ec9-59f0f10b1d29/1/Hrq0DWCBM83fdsO1pvgV34H7x90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a3:7b:e6:30:94:c0:b2:92:57:be:46:23:49:46:f2:51:5c:
         b6:eb:1c:38:5b:82:17:d7:24:be:bc:01:38:68:09:9f:5c:48:
         55:f6:6a:d8:3a:91:58:b7:43:4a:4a:18:6a:eb:0e:51:15:de:
         41:ba:86:35:74:21:f8:ee:78:f1:73:a0:6a:82:ff:ac:5b:38:
         cb:f9:b3:ac:af:1f:27:f9:8b:70:4c:ba:06:b9:a8:9e:ad:0b:
         2f:fc:e2:fc:e1:99:4f:1b:a7:c5:df:98:22:4d:de:e9:5b:c4:
         df:e0:a8:4a:8f:7c:c0:1b:db:c2:56:be:80:37:3e:e1:b0:36:
         a2:54:0c:ed:9d:04:5d:12:bd:95:1a:f4:83:8d:c7:b1:5b:4a:
         9e:18:f9:38:67:48:c2:1d:c2:08:33:df:51:86:04:50:3e:4a:
         66:1e:68:03:a5:d1:a8:2d:86:f4:81:cc:38:62:33:6b:0c:77:
         af:6b:ee:fa:5a:5f:c2:11:66:1f:f3:e5:96:ed:fc:fd:62:63:
         be:be:ba:6f:14:ed:c6:5d:d9:00:b4:62:82:0a:e6:c2:53:a4:
         d4:4b:cb:17:6d:78:1e:da:89:1e:89:29:d7:cc:a9:97:98:4c:
         f7:bc:fa:54:36:e2:9b:09:c1:25:0f:d3:80:e1:63:f1:33:97:
         c8:4b:7f:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD6thz9/jTzkOh2Fikl7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYmFiNDBkNjA4MTMzY2RkZjc2YzNiNWE2ZjgxNWRmODFm
YmM3ZGQwHhcNMjUwMzI5MDQwMTE4WhcNMjUwMzMwMDQwMTE4WjAzMTEwLwYDVQQD
EyhlOGQ0MmI1ZTA0MjgxNjlmMzVkMmM0NWVkMzc2NDljZjVjMzQ2MWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmToiV/wayFMrY74VQ32wjIfyhqYw
ldbq/diUnibsLE5w3ddBR8iHMMQQshXA3FGfmgM7Iy73r+CnJRd2n5d0MxhTyXjZ
K+ARs2Ui4mlu4nAspemd4LclvUP4SXG+1bXiWpVfb+ZW5/UN7jD9m92CMQvhHSH4
PTsjiRpP1F7i2kOdJ9kfVLJ79ECTBfbHbD39CwkMloev21iuJ73LNnr+9ZXQzfp2
EvKM91oZsuu2btAtm6Ins7opjM4j3Rrx82M8BIbG7mwXGlEn/h/VLnaHKz0FhEa+
UHfCwtqS6S8fAZgwXCrEtAyvnAU3ZAVLzNGKbMKddqAXbqskbwmDwXrZvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjUK14EKBafNdLEXtN2Sc9cNGHtMB8GA1UdIwQY
MBaAFB66tA1ggTPN33bDtab4Fd+B+8fdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzkt
NTlmMGYxMGIxZDI5LzEvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yYjI2YWYtZTc1NC00MDgwLTllYzktNTlmMGYxMGIxZDI5
LzEvSHJxMERXQ0JNODNmZHNPMXB2Z1YzNEg3eDkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6N75jCU
wLKSV75GI0lG8lFctuscOFuCF9ckvrwBOGgJn1xIVfZq2DqRWLdDSkoYausOURXe
QbqGNXQh+O548XOgaoL/rFs4y/mzrK8fJ/mLcEy6Brmonq0LL/zi/OGZTxunxd+Y
Ik3e6VvE3+CoSo98wBvbwla+gDc+4bA2olQM7Z0EXRK9lRr0g43HsVtKnhj5OGdI
wh3CCDPfUYYEUD5KZh5oA6XRqC2G9IHMOGIzawx3r2vu+lpfwhFmH/Pllu38/WJj
vr66bxTtxl3ZALRiggrmwlOk1EvLF214HtqJHokp18ypl5hM97z6VDbimwnBJQ/T
gOFj8TOXyEt/6A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:54 2025 by rpki-client