Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/mL-A7vDFktW_t4YmI8O8Zwr2WQk.mft
File:                     mL-A7vDFktW_t4YmI8O8Zwr2WQk.mft (raw, json)
Hash identifier:          m9h1N9L8+L23T6H07Hf6EBdbSq2JLxzbBEtHr+BYpww=
Subject key identifier:   D0:36:FA:C6:EF:72:93:77:56:E5:15:74:49:69:0E:6A:2E:57:F9:94
Authority key identifier: 98:BF:80:EE:F0:C5:92:D5:BF:B7:86:26:23:C3:BC:67:0A:F6:59:09
Certificate issuer:       /CN=98bf80eef0c592d5bfb7862623c3bc670af65909
Certificate serial:       01858035EA420E79E753F0E29FA3C0EE4FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mL-A7vDFktW_t4YmI8O8Zwr2WQk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/mL-A7vDFktW_t4YmI8O8Zwr2WQk.mft
Manifest number:          0897
Signing time:             Thu 05 Jan 2023 04:34:54 +0000
Manifest this update:     Thu 05 Jan 2023 04:34:54 +0000
Manifest next update:     Fri 06 Jan 2023 04:34:54 +0000
Files and hashes:         1: 54vV0mVBMwv6D8gfJ8Xvkvv_J54.roa (hash: LdT2pkgO1B72aA56kmjLSxEb4CTleEYXlMvyy1ZBKmk=)
                          2: mL-A7vDFktW_t4YmI8O8Zwr2WQk.crl (hash: iXyAwhhJWYeOGYEtTt1B3HI4EfifvUVFSWocAS/YU+o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:80:35:ea:42:0e:79:e7:53:f0:e2:9f:a3:c0:ee:4f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98bf80eef0c592d5bfb7862623c3bc670af65909
        Validity
            Not Before: Jan  5 04:34:54 2023 GMT
            Not After : Jan  6 04:34:54 2023 GMT
        Subject: CN=d036fac6ef72937756e5157449690e6a2e57f994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:75:a1:73:c9:b3:54:04:37:b0:c7:ad:51:
                    06:b7:b2:38:bd:ac:2f:3d:a2:ae:90:2b:0f:28:0e:
                    bf:59:8f:c5:d9:7b:f5:fb:9c:b1:7a:cb:22:28:03:
                    6d:9d:f2:c2:08:62:19:e5:35:11:b7:13:ec:a8:05:
                    05:27:d3:1c:55:9c:09:8c:be:bf:ad:40:71:48:96:
                    31:45:de:af:b3:61:f6:f1:f7:8e:31:d9:1b:18:2a:
                    5d:5f:4a:cd:2d:24:8d:f1:47:15:70:92:56:1e:9b:
                    9c:89:8d:50:89:a6:68:0f:6b:6b:d0:15:70:a0:e8:
                    95:b9:38:0f:23:5f:c0:80:6a:43:f3:99:5f:71:ac:
                    c5:cc:42:4a:9f:73:8e:d6:20:d7:15:5a:81:03:98:
                    2f:0c:7a:a0:96:13:93:65:9a:48:87:5b:7b:d6:bf:
                    30:51:41:17:6c:e4:03:b8:fc:9e:14:d4:da:03:31:
                    f0:4e:f4:d7:36:5c:3a:e5:87:83:8b:b3:5f:97:7c:
                    04:cb:f6:45:4b:ce:9b:fa:1a:20:b5:08:d3:35:23:
                    9b:5e:8b:28:1b:0d:21:3a:bf:07:f8:f3:cd:46:0e:
                    30:0c:7d:69:d3:c7:3f:40:68:36:3e:7f:d8:02:22:
                    ae:4b:ba:dc:4d:93:0e:36:c1:3d:5f:fc:66:7f:22:
                    dd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:FA:C6:EF:72:93:77:56:E5:15:74:49:69:0E:6A:2E:57:F9:94
            X509v3 Authority Key Identifier:
                keyid:98:BF:80:EE:F0:C5:92:D5:BF:B7:86:26:23:C3:BC:67:0A:F6:59:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mL-A7vDFktW_t4YmI8O8Zwr2WQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/mL-A7vDFktW_t4YmI8O8Zwr2WQk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/57dd9b-d715-47fc-8c14-0ef4236d1193/1/mL-A7vDFktW_t4YmI8O8Zwr2WQk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:99:1a:19:98:38:ac:a2:1b:a1:b5:f6:c7:68:70:71:28:25:
         64:5c:e4:f1:ac:b6:4d:8f:e5:ab:50:31:66:32:e3:a0:18:ab:
         48:03:fe:a4:9b:27:0a:9a:a2:5a:e9:5f:80:a2:b0:de:13:f4:
         9f:51:f0:f8:ba:ca:94:68:13:43:b9:27:3e:e0:ac:6a:49:8a:
         7a:31:b5:e9:2b:15:55:7c:d0:be:95:67:55:3e:ae:a3:6b:8a:
         8a:87:22:19:9a:a6:3f:6d:69:0d:a0:c1:66:8a:ef:90:de:00:
         57:21:79:0a:42:34:e0:1c:71:46:7e:86:74:6e:3e:c0:42:ae:
         95:32:2b:f2:8d:1b:5a:60:db:8d:9a:77:54:0b:69:8a:e4:f1:
         c0:df:8a:c4:6a:14:6b:49:05:0e:dd:a4:66:3b:4d:c6:e5:45:
         2c:73:19:3a:14:51:0f:62:84:60:33:da:94:e1:d5:ff:b9:0f:
         9e:2f:90:6c:69:6d:df:1a:43:c6:da:f0:71:04:56:39:1e:32:
         03:86:8c:33:39:b4:75:94:94:df:3d:97:2a:1f:3f:01:48:34:
         78:29:56:d9:eb:88:b9:b4:5e:6b:33:0a:35:eb:bb:93:2d:7d:
         e2:7d:25:e2:d5:ca:8c:5d:ce:af:2c:a4:2e:07:10:77:2f:d0:
         9e:e5:33:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYWANepCDnnnU/Din6PA7k+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YmY4MGVlZjBjNTkyZDViZmI3ODYyNjIzYzNiYzY3MGFm
NjU5MDkwHhcNMjMwMTA1MDQzNDU0WhcNMjMwMTA2MDQzNDU0WjAzMTEwLwYDVQQD
EyhkMDM2ZmFjNmVmNzI5Mzc3NTZlNTE1NzQ0OTY5MGU2YTJlNTdmOTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlal1oXPJs1QEN7DHrVEGt7I4vawv
PaKukCsPKA6/WY/F2Xv1+5yxessiKANtnfLCCGIZ5TURtxPsqAUFJ9McVZwJjL6/
rUBxSJYxRd6vs2H28feOMdkbGCpdX0rNLSSN8UcVcJJWHpuciY1QiaZoD2tr0BVw
oOiVuTgPI1/AgGpD85lfcazFzEJKn3OO1iDXFVqBA5gvDHqglhOTZZpIh1t71r8w
UUEXbOQDuPyeFNTaAzHwTvTXNlw65YeDi7Nfl3wEy/ZFS86b+hogtQjTNSObXoso
Gw0hOr8H+PPNRg4wDH1p08c/QGg2Pn/YAiKuS7rcTZMONsE9X/xmfyLd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNA2+sbvcpN3VuUVdElpDmouV/mUMB8GA1UdIwQY
MBaAFJi/gO7wxZLVv7eGJiPDvGcK9lkJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUwtQTd2REZrdFdfdDRZbUk4Tzhad3IyV1FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS81N2RkOWItZDcxNS00N2ZjLThjMTQt
MGVmNDIzNmQxMTkzLzEvbUwtQTd2REZrdFdfdDRZbUk4Tzhad3IyV1FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS81N2RkOWItZDcxNS00N2ZjLThjMTQtMGVmNDIzNmQxMTkz
LzEvbUwtQTd2REZrdFdfdDRZbUk4Tzhad3IyV1FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5kaGZg4
rKIbobX2x2hwcSglZFzk8ay2TY/lq1AxZjLjoBirSAP+pJsnCpqiWulfgKKw3hP0
n1Hw+LrKlGgTQ7knPuCsakmKejG16SsVVXzQvpVnVT6uo2uKiociGZqmP21pDaDB
ZorvkN4AVyF5CkI04BxxRn6GdG4+wEKulTIr8o0bWmDbjZp3VAtpiuTxwN+KxGoU
a0kFDt2kZjtNxuVFLHMZOhRRD2KEYDPalOHV/7kPni+QbGlt3xpDxtrwcQRWOR4y
A4aMMzm0dZSU3z2XKh8/AUg0eClW2euIubReazMKNeu7ky194n0l4tXKjF3Oryyk
LgcQdy/QnuUzKA==
-----END CERTIFICATE-----
Generated at Tue Apr 22 04:03:50 2025 by rpki-client