Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
File:                     GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft (raw, json)
Hash identifier:          hdX41YFzaz1TwJvJyL4PldU91MZ1vFtJe94QWhsYq4M=
Subject key identifier:   7F:5D:B3:59:FD:3E:03:8E:51:7B:03:16:8F:B6:42:63:DB:AE:C5:4C
Authority key identifier: 18:3C:DF:52:2C:02:E1:E7:14:27:F8:51:61:99:82:E2:DD:28:39:77
Certificate issuer:       /CN=183cdf522c02e1e71427f851619982e2dd283977
Certificate serial:       019569D4293CB5149D7574B31C0FF3D0E4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft
Manifest number:          03D0
Signing time:             Thu 06 Mar 2025 05:01:06 +0000
Manifest this update:     Thu 06 Mar 2025 05:01:06 +0000
Manifest next update:     Fri 07 Mar 2025 05:01:06 +0000
Files and hashes:         1: GDzfUiwC4ecUJ_hRYZmC4t0oOXc.crl (hash: I0MsvxomZB3fNULJsf2WHA1bBKmgRg8qChJYRaRcXWw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:69:d4:29:3c:b5:14:9d:75:74:b3:1c:0f:f3:d0:e4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=183cdf522c02e1e71427f851619982e2dd283977
        Validity
            Not Before: Mar  6 05:01:06 2025 GMT
            Not After : Mar  7 05:01:06 2025 GMT
        Subject: CN=7f5db359fd3e038e517b03168fb64263dbaec54c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:27:4c:be:8e:04:47:61:e8:8a:d9:cb:95:
                    91:60:0f:d4:20:6d:2e:af:c9:67:3a:bc:37:69:4f:
                    2f:56:38:15:2a:98:2d:fe:8e:a7:26:5a:ec:45:55:
                    3a:3c:66:86:39:4a:bf:be:84:56:13:23:ba:a5:dd:
                    c2:42:42:99:e4:3b:c3:e1:f8:c1:4b:6e:5e:71:49:
                    16:e2:5a:a5:11:01:0b:ba:6c:01:dc:3d:aa:dc:2d:
                    ac:e4:f8:e9:5f:29:11:07:38:7a:b1:8c:a7:e6:1f:
                    df:bd:71:ec:91:9b:65:0b:a0:25:75:56:b3:51:9c:
                    8a:e8:3a:e2:f1:bb:8d:48:27:6e:59:51:88:14:0d:
                    c4:23:b7:89:5f:20:ac:2a:6b:8b:4b:52:c1:7b:7e:
                    56:5c:e9:73:41:c7:37:f8:da:d0:20:21:14:4b:f8:
                    b3:b2:e2:09:4d:92:28:49:19:06:26:78:83:61:31:
                    62:12:d5:56:a8:94:37:ff:3d:2f:ba:ec:9f:1d:de:
                    82:4b:b6:a0:15:43:a6:66:71:c5:85:34:93:6e:37:
                    a6:43:95:f5:6a:33:00:32:dd:c0:6a:3d:97:38:18:
                    ec:36:a4:ab:f7:d0:42:25:0c:80:7f:7c:e7:84:aa:
                    b8:2b:92:a1:0b:7e:19:ea:0e:8e:32:0b:8d:20:26:
                    d1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:B3:59:FD:3E:03:8E:51:7B:03:16:8F:B6:42:63:DB:AE:C5:4C
            X509v3 Authority Key Identifier:
                keyid:18:3C:DF:52:2C:02:E1:E7:14:27:F8:51:61:99:82:E2:DD:28:39:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e09471-49bd-4f5b-ba1b-fe6cb0ab0751/1/GDzfUiwC4ecUJ_hRYZmC4t0oOXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:e8:f0:fa:a2:f4:38:d6:c1:a7:50:76:3a:1b:1a:a1:12:cf:
         84:e4:aa:6d:e2:b2:54:99:3b:3d:9f:9b:95:dd:e4:c5:56:d7:
         20:97:cb:8a:ed:fa:57:65:55:53:c4:f5:5f:8f:ea:c9:a7:5a:
         38:fd:37:41:9e:2e:b5:b5:7e:c6:a8:b9:25:ad:81:1c:7a:e0:
         34:b0:b9:e8:9a:60:61:9d:6a:3a:ad:18:5d:fc:d5:a3:d7:01:
         4b:00:ec:1c:30:6f:4c:1a:04:d0:d6:76:9d:39:84:2d:7f:7c:
         a9:d0:85:c6:54:a5:10:9d:06:84:45:f3:7b:b6:59:04:e4:00:
         28:8b:d1:19:d6:68:c9:ca:9e:9a:13:91:0d:bd:e9:09:01:cd:
         bc:7e:e7:43:40:bd:90:35:b6:de:b2:69:77:52:b9:0b:bb:e1:
         36:cb:ab:32:5c:4e:7d:9b:26:28:76:8c:da:df:fa:da:47:ef:
         35:bd:21:fa:9f:79:55:f5:42:74:0e:80:80:df:42:00:ff:91:
         fa:7b:c5:58:70:6d:fd:e9:39:e4:9c:b6:c3:c3:a5:0b:11:b2:
         e3:fd:be:26:a5:de:ed:3f:a6:e4:31:04:44:95:78:27:cc:2a:
         7a:b2:a9:9f:0b:37:31:10:be:3f:4b:3e:c4:e6:87:bf:fe:3d:
         96:db:ee:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZVp1Ck8tRSddXSzHA/z0OTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4M2NkZjUyMmMwMmUxZTcxNDI3Zjg1MTYxOTk4MmUyZGQy
ODM5NzcwHhcNMjUwMzA2MDUwMTA2WhcNMjUwMzA3MDUwMTA2WjAzMTEwLwYDVQQD
Eyg3ZjVkYjM1OWZkM2UwMzhlNTE3YjAzMTY4ZmI2NDI2M2RiYWVjNTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaYnTL6OBEdh6IrZy5WRYA/UIG0u
r8lnOrw3aU8vVjgVKpgt/o6nJlrsRVU6PGaGOUq/voRWEyO6pd3CQkKZ5DvD4fjB
S25ecUkW4lqlEQELumwB3D2q3C2s5PjpXykRBzh6sYyn5h/fvXHskZtlC6AldVaz
UZyK6Dri8buNSCduWVGIFA3EI7eJXyCsKmuLS1LBe35WXOlzQcc3+NrQICEUS/iz
suIJTZIoSRkGJniDYTFiEtVWqJQ3/z0vuuyfHd6CS7agFUOmZnHFhTSTbjemQ5X1
ajMAMt3Aaj2XOBjsNqSr99BCJQyAf3znhKq4K5KhC34Z6g6OMguNICbRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9ds1n9PgOOUXsDFo+2QmPbrsVMMB8GA1UdIwQY
MBaAFBg831IsAuHnFCf4UWGZguLdKDl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0R6ZlVpd0M0ZWNVSl9oUllabUM0dDBvT1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lMDk0NzEtNDliZC00ZjViLWJhMWIt
ZmU2Y2IwYWIwNzUxLzEvR0R6ZlVpd0M0ZWNVSl9oUllabUM0dDBvT1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lMDk0NzEtNDliZC00ZjViLWJhMWItZmU2Y2IwYWIwNzUx
LzEvR0R6ZlVpd0M0ZWNVSl9oUllabUM0dDBvT1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzOjw+qL0
ONbBp1B2OhsaoRLPhOSqbeKyVJk7PZ+bld3kxVbXIJfLiu36V2VVU8T1X4/qyada
OP03QZ4utbV+xqi5Ja2BHHrgNLC56JpgYZ1qOq0YXfzVo9cBSwDsHDBvTBoE0NZ2
nTmELX98qdCFxlSlEJ0GhEXze7ZZBOQAKIvRGdZoycqemhORDb3pCQHNvH7nQ0C9
kDW23rJpd1K5C7vhNsurMlxOfZsmKHaM2t/62kfvNb0h+p95VfVCdA6AgN9CAP+R
+nvFWHBt/ek55Jy2w8OlCxGy4/2+JqXe7T+m5DEERJV4J8wqerKpnws3MRC+P0s+
xOaHv/49ltvuVw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:36:18 2025 by rpki-client