Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/5eb97d-3a91-404e-8647-98116832534f/1/evimAeJ01T7L8YEVFk3z3kspH_U.mft
File:                     evimAeJ01T7L8YEVFk3z3kspH_U.mft (raw, json)
Hash identifier:          o3oZp9K2a/Rj/R+RcJTvYiQvEfZSlaRPAQgwSPgLhfE=
Subject key identifier:   A8:ED:16:76:B8:A6:4A:CD:21:21:F1:F9:A2:11:EE:0B:82:CE:4E:47
Authority key identifier: 7A:F8:A6:01:E2:74:D5:3E:CB:F1:81:15:16:4D:F3:DE:4B:29:1F:F5
Certificate issuer:       /CN=7af8a601e274d53ecbf18115164df3de4b291ff5
Certificate serial:       0193CE4610F77041FA3F6117CBB8CD11C284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evimAeJ01T7L8YEVFk3z3kspH_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/5eb97d-3a91-404e-8647-98116832534f/1/evimAeJ01T7L8YEVFk3z3kspH_U.mft
Manifest number:          13AE
Signing time:             Mon 16 Dec 2024 07:01:58 +0000
Manifest this update:     Mon 16 Dec 2024 07:01:58 +0000
Manifest next update:     Tue 17 Dec 2024 07:01:58 +0000
Files and hashes:         1: Oi74nVoeTFOlMPiB_SLOj-QlGlc.roa (hash: BKeUqSb1QfZsk1AGqgdYMIXNTk3tZZXuGQTvQ+/fdRc=)
                          2: evimAeJ01T7L8YEVFk3z3kspH_U.crl (hash: WjI/7TvjGEeKYh8l8bah44pcfjP6h1q7i0PpdqIUT1E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ce:46:10:f7:70:41:fa:3f:61:17:cb:b8:cd:11:c2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af8a601e274d53ecbf18115164df3de4b291ff5
        Validity
            Not Before: Dec 16 07:01:58 2024 GMT
            Not After : Dec 17 07:01:58 2024 GMT
        Subject: CN=a8ed1676b8a64acd2121f1f9a211ee0b82ce4e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:de:64:df:96:b5:c1:eb:02:fd:d0:00:0f:c2:
                    b2:53:26:ef:84:96:8d:91:b4:a4:e3:3e:87:59:02:
                    8e:fc:e4:f1:15:f7:86:82:b1:0a:76:97:93:6c:22:
                    1b:50:39:8b:d8:ce:b7:89:9c:42:4b:5c:cb:b5:30:
                    fd:e0:69:d8:e4:79:dc:fc:50:6d:f1:8a:0c:bf:fa:
                    80:61:d5:b6:24:fd:21:5f:42:e2:2b:88:4a:0c:12:
                    ff:2e:0f:5b:8e:d0:29:3c:a3:b0:6c:42:a6:de:59:
                    46:73:74:ba:64:fd:90:d4:37:d2:78:4a:d6:1f:10:
                    e9:36:2d:08:6e:8b:c2:46:80:12:03:59:05:c9:b1:
                    fe:fa:ae:06:33:db:98:ad:dc:03:89:12:ab:05:fd:
                    7c:f6:b7:79:27:9d:3a:d0:f8:f3:66:40:28:d4:ff:
                    a4:2d:d5:66:33:d6:e7:85:5e:74:a8:50:2e:c9:db:
                    8d:df:7f:5a:ab:e6:5d:b6:a9:71:90:a0:31:2a:5f:
                    cc:f8:93:42:89:44:b6:5e:fd:ee:c9:6c:38:cd:b5:
                    37:4c:25:3d:2c:88:c7:21:75:9c:b1:a2:e4:49:e5:
                    c2:32:41:a6:82:1f:bf:34:7e:56:7b:b4:de:70:88:
                    39:33:e0:8e:b5:1b:b8:33:fa:fe:0d:9a:64:41:e9:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:ED:16:76:B8:A6:4A:CD:21:21:F1:F9:A2:11:EE:0B:82:CE:4E:47
            X509v3 Authority Key Identifier:
                keyid:7A:F8:A6:01:E2:74:D5:3E:CB:F1:81:15:16:4D:F3:DE:4B:29:1F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evimAeJ01T7L8YEVFk3z3kspH_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5eb97d-3a91-404e-8647-98116832534f/1/evimAeJ01T7L8YEVFk3z3kspH_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/5eb97d-3a91-404e-8647-98116832534f/1/evimAeJ01T7L8YEVFk3z3kspH_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:32:29:8c:02:ed:8f:3f:9f:eb:4f:2c:51:75:98:3f:c1:9d:
         2b:52:d3:d9:c7:77:ca:cc:7a:a0:23:e6:96:df:b9:2b:01:25:
         a9:90:a5:74:a2:46:ca:f4:d6:b9:7f:3a:82:83:65:6d:ed:fd:
         35:97:7a:4f:42:40:03:eb:24:c2:1e:0d:d9:05:23:fe:68:cc:
         9c:1b:78:60:1f:70:e6:55:10:1c:86:3d:0e:b1:7f:42:d4:a4:
         50:02:9b:f3:c4:4e:32:10:9d:e6:fd:72:99:fb:a5:ce:66:62:
         b6:4b:8f:a6:a3:44:f8:58:c6:ce:d0:a1:47:67:ea:fd:6d:e3:
         9d:f8:c8:a1:0d:4a:bb:cc:1a:54:fc:4f:39:70:02:c4:a8:99:
         6d:38:79:f6:00:f0:4f:57:98:c1:4a:77:de:c8:4a:ad:ff:70:
         74:40:d0:a9:3c:df:de:87:2b:f0:37:ed:f4:bd:f8:84:7d:66:
         e7:46:96:6c:47:27:2e:d6:cc:01:d4:ad:ac:ce:38:de:ea:0d:
         49:7d:fe:cc:08:0a:62:1f:a8:12:f4:50:d3:43:c6:5a:5c:5f:
         ba:8a:18:bb:2a:07:d9:aa:b7:bd:d1:f1:08:96:a0:46:55:a7:
         33:74:a2:5e:9c:c0:cf:6a:72:fd:83:60:ce:4b:25:ca:03:c9:
         f7:46:2b:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPORhD3cEH6P2EXy7jNEcKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjhhNjAxZTI3NGQ1M2VjYmYxODExNTE2NGRmM2RlNGIy
OTFmZjUwHhcNMjQxMjE2MDcwMTU4WhcNMjQxMjE3MDcwMTU4WjAzMTEwLwYDVQQD
EyhhOGVkMTY3NmI4YTY0YWNkMjEyMWYxZjlhMjExZWUwYjgyY2U0ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm95k35a1wesC/dAAD8KyUybvhJaN
kbSk4z6HWQKO/OTxFfeGgrEKdpeTbCIbUDmL2M63iZxCS1zLtTD94GnY5Hnc/FBt
8YoMv/qAYdW2JP0hX0LiK4hKDBL/Lg9bjtApPKOwbEKm3llGc3S6ZP2Q1DfSeErW
HxDpNi0IbovCRoASA1kFybH++q4GM9uYrdwDiRKrBf189rd5J5060PjzZkAo1P+k
LdVmM9bnhV50qFAuyduN339aq+ZdtqlxkKAxKl/M+JNCiUS2Xv3uyWw4zbU3TCU9
LIjHIXWcsaLkSeXCMkGmgh+/NH5We7TecIg5M+COtRu4M/r+DZpkQenw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjtFna4pkrNISHx+aIR7guCzk5HMB8GA1UdIwQY
MBaAFHr4pgHidNU+y/GBFRZN895LKR/1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZpbUFlSjAxVDdMOFlFVkZrM3oza3NwSF9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny81ZWI5N2QtM2E5MS00MDRlLTg2NDct
OTgxMTY4MzI1MzRmLzEvZXZpbUFlSjAxVDdMOFlFVkZrM3oza3NwSF9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny81ZWI5N2QtM2E5MS00MDRlLTg2NDctOTgxMTY4MzI1MzRm
LzEvZXZpbUFlSjAxVDdMOFlFVkZrM3oza3NwSF9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaDIpjALt
jz+f608sUXWYP8GdK1LT2cd3ysx6oCPmlt+5KwElqZCldKJGyvTWuX86goNlbe39
NZd6T0JAA+skwh4N2QUj/mjMnBt4YB9w5lUQHIY9DrF/QtSkUAKb88ROMhCd5v1y
mfulzmZitkuPpqNE+FjGztChR2fq/W3jnfjIoQ1Ku8waVPxPOXACxKiZbTh59gDw
T1eYwUp33shKrf9wdEDQqTzf3ocr8Dft9L34hH1m50aWbEcnLtbMAdStrM443uoN
SX3+zAgKYh+oEvRQ00PGWlxfuooYuyoH2aq3vdHxCJagRlWnM3SiXpzAz2py/YNg
zkslygPJ90Yr9w==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:35 2025 by rpki-client