Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
File:                     gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft (raw, json)
Hash identifier:          4xeJ3rg8cR4b9hBVXe27NpEek91LdmWYycGuEKFJUcU=
Subject key identifier:   03:9F:A2:6D:69:A1:95:02:66:1C:15:DE:3D:E6:A7:FE:FF:12:B3:2D
Authority key identifier: 81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7
Certificate issuer:       /CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
Certificate serial:       0193BE2CCFCEE3F48DFB0DEB01AA2E7D861B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft
Manifest number:          10D2
Signing time:             Fri 13 Dec 2024 04:00:28 +0000
Manifest this update:     Fri 13 Dec 2024 04:00:28 +0000
Manifest next update:     Sat 14 Dec 2024 04:00:28 +0000
Files and hashes:         1: 74dE9K-1t7X3osXGKKA2Yrz9m1Q.roa (hash: +G3AnBpHm48/4REveTmD9LZAmJDRxkhRBo5R9LKaPpA=)
                          2: gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl (hash: GGfmxIVcAhQuviFchx0t4zUlR1e8AXchvfPZ66dNyPM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:be:2c:cf:ce:e3:f4:8d:fb:0d:eb:01:aa:2e:7d:86:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818d5373ace1d4c67809263a0d24f358cf56d9b7
        Validity
            Not Before: Dec 13 04:00:28 2024 GMT
            Not After : Dec 14 04:00:28 2024 GMT
        Subject: CN=039fa26d69a19502661c15de3de6a7feff12b32d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:5d:05:36:6e:fc:67:2a:25:02:6c:74:ca:6e:
                    0d:13:60:ba:aa:4a:f4:b3:ab:8b:5b:cd:2d:b5:c0:
                    af:46:4d:fd:44:ad:09:ce:32:5d:13:25:2a:2e:0d:
                    f9:db:3a:31:2d:13:c4:cb:58:21:d2:72:6b:1b:f5:
                    6b:93:98:cc:08:8a:78:d7:fb:8c:67:2c:ad:21:9d:
                    b8:54:cc:32:d9:e8:cc:6d:00:0d:f6:22:50:02:76:
                    a6:7e:b1:5b:17:2b:18:b5:ea:99:34:de:97:4b:2a:
                    04:da:6e:1d:d1:7b:46:80:a5:cd:41:29:ff:9f:d0:
                    19:e0:82:94:14:7b:bd:2a:de:44:0c:fd:08:6c:37:
                    ac:c8:69:d2:ba:5d:a3:f2:f5:dd:1b:f4:57:12:e5:
                    e9:ef:6e:6e:08:cb:ef:6d:6e:1a:57:ac:a2:d3:4c:
                    89:96:02:33:ff:47:32:dd:57:f0:eb:36:7f:08:59:
                    1d:4f:1c:de:1d:fb:00:52:b9:38:e1:9e:5c:74:8c:
                    db:30:21:2d:e8:1f:57:94:80:c4:05:9b:75:90:04:
                    c5:8b:65:7c:1e:a6:07:60:fd:d7:f1:5d:00:76:40:
                    4a:fe:a1:26:ec:85:2c:76:48:b4:36:7c:61:c9:f5:
                    1f:c4:43:e8:05:c9:b6:40:57:ea:ec:b3:46:7d:14:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9F:A2:6D:69:A1:95:02:66:1C:15:DE:3D:E6:A7:FE:FF:12:B3:2D
            X509v3 Authority Key Identifier:
                keyid:81:8D:53:73:AC:E1:D4:C6:78:09:26:3A:0D:24:F3:58:CF:56:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c2e5ef-ae02-42e3-a44a-372cc78ef7a7/1/gY1Tc6zh1MZ4CSY6DSTzWM9W2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:28:6d:90:8d:63:d5:10:46:98:72:da:c7:09:63:86:1a:bb:
         95:50:22:04:f0:c2:25:d6:64:63:78:e0:18:c1:4f:04:73:42:
         0a:1d:a0:3e:b5:6a:c1:fb:ee:99:80:ad:d3:7c:e8:0f:ae:cf:
         e0:22:3c:7f:fe:ea:43:91:d4:67:79:34:49:cb:0f:78:9c:f6:
         74:a1:cb:b6:c5:c5:b7:bb:5d:6e:12:4e:fd:c9:bf:18:61:0d:
         37:63:4f:66:a5:0b:83:68:43:0e:70:07:0c:98:05:fc:fb:d7:
         dd:1e:64:df:bf:30:55:8e:ce:6b:ac:52:de:c2:f5:c3:16:5e:
         6d:43:a6:b7:c9:8d:63:ba:61:04:18:53:47:a5:de:92:da:09:
         f2:01:09:23:ec:70:b7:fc:3d:ba:f3:67:a7:3c:93:d2:84:35:
         27:85:1f:93:d4:46:45:dd:d0:85:b6:7f:e1:50:48:91:2b:3b:
         84:35:fd:4f:68:c6:cd:b3:66:0f:a3:f6:b5:10:3c:76:99:6a:
         f5:a6:00:6f:7f:21:6c:d8:0e:7b:18:17:43:9a:da:73:ac:c7:
         e0:ed:44:d2:fd:74:a1:f8:d5:1f:b5:3f:71:86:5f:5e:f9:e2:
         08:ac:fa:3a:ba:fb:e1:dc:97:8e:7d:b3:47:40:6b:73:e0:c1:
         17:c3:43:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZO+LM/O4/SN+w3rAaoufYYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOGQ1MzczYWNlMWQ0YzY3ODA5MjYzYTBkMjRmMzU4Y2Y1
NmQ5YjcwHhcNMjQxMjEzMDQwMDI4WhcNMjQxMjE0MDQwMDI4WjAzMTEwLwYDVQQD
EygwMzlmYTI2ZDY5YTE5NTAyNjYxYzE1ZGUzZGU2YTdmZWZmMTJiMzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8l0FNm78ZyolAmx0ym4NE2C6qkr0
s6uLW80ttcCvRk39RK0JzjJdEyUqLg352zoxLRPEy1gh0nJrG/Vrk5jMCIp41/uM
ZyytIZ24VMwy2ejMbQAN9iJQAnamfrFbFysYteqZNN6XSyoE2m4d0XtGgKXNQSn/
n9AZ4IKUFHu9Kt5EDP0IbDesyGnSul2j8vXdG/RXEuXp725uCMvvbW4aV6yi00yJ
lgIz/0cy3Vfw6zZ/CFkdTxzeHfsAUrk44Z5cdIzbMCEt6B9XlIDEBZt1kATFi2V8
HqYHYP3X8V0AdkBK/qEm7IUsdki0NnxhyfUfxEPoBcm2QFfq7LNGfRTwawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOfom1poZUCZhwV3j3mp/7/ErMtMB8GA1UdIwQY
MBaAFIGNU3Os4dTGeAkmOg0k81jPVtm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1kxVGM2emgxTVo0Q1NZNkRTVHpXTTlXMmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jMmU1ZWYtYWUwMi00MmUzLWE0NGEt
MzcyY2M3OGVmN2E3LzEvZ1kxVGM2emgxTVo0Q1NZNkRTVHpXTTlXMmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jMmU1ZWYtYWUwMi00MmUzLWE0NGEtMzcyY2M3OGVmN2E3
LzEvZ1kxVGM2emgxTVo0Q1NZNkRTVHpXTTlXMmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyhtkI1j
1RBGmHLaxwljhhq7lVAiBPDCJdZkY3jgGMFPBHNCCh2gPrVqwfvumYCt03zoD67P
4CI8f/7qQ5HUZ3k0ScsPeJz2dKHLtsXFt7tdbhJO/cm/GGENN2NPZqULg2hDDnAH
DJgF/PvX3R5k378wVY7Oa6xS3sL1wxZebUOmt8mNY7phBBhTR6XektoJ8gEJI+xw
t/w9uvNnpzyT0oQ1J4Ufk9RGRd3QhbZ/4VBIkSs7hDX9T2jGzbNmD6P2tRA8dplq
9aYAb38hbNgOexgXQ5rac6zH4O1E0v10ofjVH7U/cYZfXvniCKz6Orr74dyXjn2z
R0Brc+DBF8NDsQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:26 2025 by rpki-client