Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
File:                     4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft (raw, json)
Hash identifier:          KK+PdrMNnNTLzZZjNvrQwsPVLYD0PrKCl9E+nPsnN6Q=
Subject key identifier:   DA:90:4F:AC:82:84:F0:01:6C:30:05:2B:68:54:FB:8D:C8:B2:AF:AE
Authority key identifier: E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41
Certificate issuer:       /CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
Certificate serial:       01942261F7B4C1FE18ADDE056859DCF9497F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft
Manifest number:          0297
Signing time:             Wed 01 Jan 2025 15:00:33 +0000
Manifest this update:     Wed 01 Jan 2025 15:00:33 +0000
Manifest next update:     Thu 02 Jan 2025 15:00:33 +0000
Files and hashes:         1: 4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl (hash: 9mNaUEnktBcNBMd59jbK3CbZR/NGbR9OJRhiuHEDx78=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:22:61:f7:b4:c1:fe:18:ad:de:05:68:59:dc:f9:49:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1c166b506a3ab7128e17f2afe11e22eca09f341
        Validity
            Not Before: Jan  1 15:00:33 2025 GMT
            Not After : Jan  2 15:00:33 2025 GMT
        Subject: CN=da904fac8284f0016c30052b6854fb8dc8b2afae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:88:ea:b4:26:eb:05:27:a7:7e:2b:13:ae:81:
                    08:77:80:72:0e:c6:1e:99:46:0f:e3:92:12:7c:3c:
                    78:44:5f:04:bc:fb:38:7d:22:c3:e7:2f:ff:cf:48:
                    09:d4:38:bb:9b:a6:77:c1:9d:92:cf:6e:1b:02:2d:
                    14:86:26:61:1e:b4:8e:b0:00:91:6b:45:b4:c0:58:
                    da:87:df:53:bb:43:b6:06:b7:10:2d:22:16:d4:58:
                    56:a2:b4:ec:c0:4d:8c:7c:89:7e:5b:0a:24:0c:a7:
                    7b:f0:2c:44:e8:59:9d:86:90:87:37:71:55:29:5f:
                    d4:d1:83:df:74:b9:98:b5:94:46:18:1f:e6:16:b4:
                    e0:64:0d:85:a7:1e:30:70:55:4e:99:c6:41:08:9b:
                    28:a4:c2:30:b7:eb:4c:5d:c7:af:ac:1e:73:d5:89:
                    dc:5d:7d:84:b3:79:6d:03:78:d5:d9:3d:fc:22:df:
                    eb:83:68:96:74:20:5f:38:9d:d0:cb:90:a6:52:c4:
                    24:c4:71:99:ef:db:c2:5a:a2:40:fc:f9:22:52:ec:
                    b1:75:cb:28:10:47:30:74:02:27:33:51:03:75:cf:
                    40:31:ba:fd:31:62:3e:54:35:89:3f:9e:2a:57:72:
                    b6:0c:40:5a:48:3e:ac:88:c7:63:2a:a1:a2:5b:e5:
                    dd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:90:4F:AC:82:84:F0:01:6C:30:05:2B:68:54:FB:8D:C8:B2:AF:AE
            X509v3 Authority Key Identifier:
                keyid:E1:C1:66:B5:06:A3:AB:71:28:E1:7F:2A:FE:11:E2:2E:CA:09:F3:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cFmtQajq3Eo4X8q_hHiLsoJ80E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/37133f-c704-40d1-a606-fdb60b122fad/1/4cFmtQajq3Eo4X8q_hHiLsoJ80E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0d:6e:54:34:fc:7e:4f:cb:ae:48:1f:a2:42:21:1b:ca:46:
         6a:4f:2a:7b:2e:49:d0:a2:64:1e:e9:35:90:cb:f6:18:f4:24:
         e4:28:7b:64:bd:4a:28:cf:53:64:fd:9b:eb:a9:0d:50:2f:4b:
         f7:d0:d7:03:67:d3:ab:9b:9f:3f:d5:37:4e:45:da:9c:2c:24:
         69:3a:44:19:d5:fd:63:96:94:3c:7c:c8:25:38:d7:ab:16:50:
         38:e1:15:ce:33:29:bb:ad:f9:c6:e1:cd:d7:31:b5:b6:93:ea:
         aa:01:c5:0f:a7:47:e5:c8:f8:4e:68:a2:4f:04:45:08:77:6c:
         92:64:3f:80:48:3b:19:78:81:a6:57:6a:80:52:c3:4d:53:8c:
         d9:e0:ff:3f:ea:cf:a4:33:8e:28:84:bd:fd:f2:89:9a:ac:d6:
         a0:0c:16:b0:e3:12:0a:f3:8c:ec:68:fd:1c:b0:92:89:5b:8a:
         c6:cc:6c:ee:05:d0:dd:93:dc:60:ac:f0:4d:96:19:c3:0b:4a:
         ad:0c:36:30:e2:cc:c1:a1:f7:97:c4:07:e4:1b:d8:1d:d7:6c:
         9c:6a:33:7d:ac:06:df:ee:60:12:86:5c:be:35:b6:2f:e1:12:
         7d:96:a4:7b:ab:d0:6c:c5:f2:05:62:85:06:55:54:a6:8d:b2:
         8b:8f:4d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQiYfe0wf4Yrd4FaFnc+Ul/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxYzE2NmI1MDZhM2FiNzEyOGUxN2YyYWZlMTFlMjJlY2Ew
OWYzNDEwHhcNMjUwMTAxMTUwMDMzWhcNMjUwMTAyMTUwMDMzWjAzMTEwLwYDVQQD
EyhkYTkwNGZhYzgyODRmMDAxNmMzMDA1MmI2ODU0ZmI4ZGM4YjJhZmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YjqtCbrBSenfisTroEId4ByDsYe
mUYP45ISfDx4RF8EvPs4fSLD5y//z0gJ1Di7m6Z3wZ2Sz24bAi0UhiZhHrSOsACR
a0W0wFjah99Tu0O2BrcQLSIW1FhWorTswE2MfIl+WwokDKd78CxE6FmdhpCHN3FV
KV/U0YPfdLmYtZRGGB/mFrTgZA2Fpx4wcFVOmcZBCJsopMIwt+tMXcevrB5z1Ync
XX2Es3ltA3jV2T38It/rg2iWdCBfOJ3Qy5CmUsQkxHGZ79vCWqJA/PkiUuyxdcso
EEcwdAInM1EDdc9AMbr9MWI+VDWJP54qV3K2DEBaSD6siMdjKqGiW+Xd8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqQT6yChPABbDAFK2hU+43Isq+uMB8GA1UdIwQY
MBaAFOHBZrUGo6txKOF/Kv4R4i7KCfNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNGbXRRYWpxM0VvNFg4cV9oSGlMc29KODBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zNzEzM2YtYzcwNC00MGQxLWE2MDYt
ZmRiNjBiMTIyZmFkLzEvNGNGbXRRYWpxM0VvNFg4cV9oSGlMc29KODBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zNzEzM2YtYzcwNC00MGQxLWE2MDYtZmRiNjBiMTIyZmFk
LzEvNGNGbXRRYWpxM0VvNFg4cV9oSGlMc29KODBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALw1uVDT8
fk/LrkgfokIhG8pGak8qey5J0KJkHuk1kMv2GPQk5Ch7ZL1KKM9TZP2b66kNUC9L
99DXA2fTq5ufP9U3TkXanCwkaTpEGdX9Y5aUPHzIJTjXqxZQOOEVzjMpu635xuHN
1zG1tpPqqgHFD6dH5cj4TmiiTwRFCHdskmQ/gEg7GXiBpldqgFLDTVOM2eD/P+rP
pDOOKIS9/fKJmqzWoAwWsOMSCvOM7Gj9HLCSiVuKxsxs7gXQ3ZPcYKzwTZYZwwtK
rQw2MOLMwaH3l8QH5BvYHddsnGozfawG3+5gEoZcvjW2L+ESfZake6vQbMXyBWKF
BlVUpo2yi49Nvg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:19:28 2025 by rpki-client