Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft
File:                     vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft (raw, json)
Hash identifier:          huruel/P9822ceMgsH4Ii9OXfb5MTYuAJVBBQ4300PM=
Subject key identifier:   7A:34:B3:1B:53:C2:B7:0E:57:D3:F1:6B:6C:E6:7D:BD:59:CE:9A:44
Authority key identifier: BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF
Certificate issuer:       /CN=bcc36b3a0a55beb529e407328588963d86786cbf
Certificate serial:       018C1E2C20324E269E2C60378ACDFB5BD2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft
Manifest number:          0FB3
Signing time:             Thu 30 Nov 2023 03:00:57 +0000
Manifest this update:     Thu 30 Nov 2023 03:00:57 +0000
Manifest next update:     Fri 01 Dec 2023 03:00:57 +0000
Files and hashes:         1: NK8dWYEqf4mfaRsSLoAhw_K_VMQ.roa (hash: PpTsFXyPAx2/0cDgsbtqOTvYmg7zHWuiEC3dAJdVypE=)
                          2: vMNrOgpVvrUp5AcyhYiWPYZ4bL8.crl (hash: q+nK/erak9ZJ2LpgQP5JpQKvaGW6mIrT2oav/vF5p5I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1e:2c:20:32:4e:26:9e:2c:60:37:8a:cd:fb:5b:d2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc36b3a0a55beb529e407328588963d86786cbf
        Validity
            Not Before: Nov 30 03:00:57 2023 GMT
            Not After : Dec  1 03:00:57 2023 GMT
        Subject: CN=7a34b31b53c2b70e57d3f16b6ce67dbd59ce9a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:98:ea:2d:5a:4c:3c:cb:e6:45:f9:68:37:d6:
                    42:42:d4:43:28:77:84:54:65:b0:80:7d:2d:fb:82:
                    1f:71:78:97:41:59:eb:d8:13:d3:8a:a4:0d:59:ff:
                    e2:86:91:ac:21:6f:ae:bf:7f:97:0c:86:53:fe:83:
                    af:9f:3f:0e:0a:7f:c9:fc:5c:6d:3e:dd:0b:d6:fd:
                    21:30:64:8e:77:cc:4f:4b:f1:6a:33:05:3f:b9:db:
                    c6:1c:ad:52:cb:72:c9:52:31:3e:17:8e:72:a3:f7:
                    66:31:8f:e3:8d:9f:5f:68:eb:76:64:a0:ff:4f:45:
                    97:af:5c:1b:31:f4:11:62:72:fd:fb:a5:78:ff:37:
                    0e:2e:a4:a2:51:7e:94:27:29:de:12:84:6d:5d:37:
                    54:02:2a:bc:c7:a6:6d:8d:97:cb:4c:84:c7:5f:81:
                    f3:60:55:5c:36:b0:b7:8d:fc:b9:32:77:2a:a0:0f:
                    3f:a6:b8:d7:74:38:5c:e8:95:24:b0:64:83:54:e5:
                    61:a7:21:48:a9:c4:ec:d7:85:1b:f2:7a:18:e5:4d:
                    e2:a3:38:21:05:36:92:19:f6:12:1b:82:62:15:db:
                    51:6e:d4:03:2c:d7:82:3c:c0:24:12:57:2e:80:ff:
                    80:89:ec:df:90:ce:c5:98:7d:7d:28:ef:05:bf:fe:
                    d9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:34:B3:1B:53:C2:B7:0E:57:D3:F1:6B:6C:E6:7D:BD:59:CE:9A:44
            X509v3 Authority Key Identifier:
                keyid:BC:C3:6B:3A:0A:55:BE:B5:29:E4:07:32:85:88:96:3D:86:78:6C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7c3cec-c7d2-45cb-b72c-26ccfcc744e5/1/vMNrOgpVvrUp5AcyhYiWPYZ4bL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b0:80:a3:f0:a0:29:38:70:e8:93:36:bc:bc:7e:26:fd:06:
         4f:8f:e6:0e:32:ea:42:a5:c1:1b:d2:7a:7a:2a:57:5c:6f:bf:
         29:e8:7b:f8:35:e5:f9:d5:bc:16:4b:21:51:37:20:48:9d:a6:
         38:71:a2:1e:72:f9:6d:7b:55:7a:b4:1f:5d:47:17:ec:d6:aa:
         a0:aa:d6:d7:c3:6a:d7:44:c8:57:d4:73:4a:2b:e3:6f:f6:8f:
         b7:83:5e:7d:38:79:8b:1a:a1:f4:b3:89:26:4d:01:02:8a:d7:
         72:35:e0:4c:d7:d3:d1:16:76:e9:dc:b9:bb:84:2b:8c:81:c8:
         1f:c5:37:4d:8d:b9:78:ae:71:ad:37:af:f7:cf:50:65:fe:a6:
         4c:ce:41:fd:87:7c:47:06:98:67:d7:4b:80:69:74:d2:1a:3b:
         7f:a8:d1:b4:66:ea:50:d7:53:3f:e4:4f:e4:bc:3d:11:cd:c3:
         d7:4f:03:75:ae:f8:35:65:c1:91:61:15:1d:dc:e6:ed:83:40:
         d6:08:e8:23:57:7e:7d:ca:ca:44:46:17:87:11:4c:e5:37:9f:
         a6:91:0a:ac:19:49:cd:6b:b2:9a:fe:72:ba:d8:9b:c9:72:95:
         86:31:b7:3a:a4:c2:6e:a5:c3:fb:6a:93:be:42:f9:07:9f:ee:
         64:ba:84:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYweLCAyTiaeLGA3is37W9LEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzM2YjNhMGE1NWJlYjUyOWU0MDczMjg1ODg5NjNkODY3
ODZjYmYwHhcNMjMxMTMwMDMwMDU3WhcNMjMxMjAxMDMwMDU3WjAzMTEwLwYDVQQD
Eyg3YTM0YjMxYjUzYzJiNzBlNTdkM2YxNmI2Y2U2N2RiZDU5Y2U5YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZjqLVpMPMvmRfloN9ZCQtRDKHeE
VGWwgH0t+4IfcXiXQVnr2BPTiqQNWf/ihpGsIW+uv3+XDIZT/oOvnz8OCn/J/Fxt
Pt0L1v0hMGSOd8xPS/FqMwU/udvGHK1Sy3LJUjE+F45yo/dmMY/jjZ9faOt2ZKD/
T0WXr1wbMfQRYnL9+6V4/zcOLqSiUX6UJyneEoRtXTdUAiq8x6ZtjZfLTITHX4Hz
YFVcNrC3jfy5MncqoA8/prjXdDhc6JUksGSDVOVhpyFIqcTs14Ub8noY5U3iozgh
BTaSGfYSG4JiFdtRbtQDLNeCPMAkElcugP+AiezfkM7FmH19KO8Fv/7Z1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHo0sxtTwrcOV9Pxa2zmfb1ZzppEMB8GA1UdIwQY
MBaAFLzDazoKVb61KeQHMoWIlj2GeGy/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1Ock9ncFZ2clVwNUFjeWhZaVdQWVo0Ykw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83YzNjZWMtYzdkMi00NWNiLWI3MmMt
MjZjY2ZjYzc0NGU1LzEvdk1Ock9ncFZ2clVwNUFjeWhZaVdQWVo0Ykw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83YzNjZWMtYzdkMi00NWNiLWI3MmMtMjZjY2ZjYzc0NGU1
LzEvdk1Ock9ncFZ2clVwNUFjeWhZaVdQWVo0Ykw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7CAo/Cg
KThw6JM2vLx+Jv0GT4/mDjLqQqXBG9J6eipXXG+/Keh7+DXl+dW8FkshUTcgSJ2m
OHGiHnL5bXtVerQfXUcX7NaqoKrW18Nq10TIV9RzSivjb/aPt4NefTh5ixqh9LOJ
Jk0BAorXcjXgTNfT0RZ26dy5u4QrjIHIH8U3TY25eK5xrTev989QZf6mTM5B/Yd8
RwaYZ9dLgGl00ho7f6jRtGbqUNdTP+RP5Lw9Ec3D108Dda74NWXBkWEVHdzm7YNA
1gjoI1d+fcrKREYXhxFM5TefppEKrBlJzWuymv5yutibyXKVhjG3OqTCbqXD+2qT
vkL5B5/uZLqExA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:28 2025 by rpki-client