Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.mft
File:                     jWTrFZEI4_ilA0wZav_OBMenJG4.mft (raw, json)
Hash identifier:          eEK0mhM57H5/ZHK8lTjo3/oWdqxu94NCeSQPp37Yc1k=
Subject key identifier:   AD:27:46:33:A2:97:E2:E3:D3:E5:F5:A3:0B:17:11:4A:22:13:95:90
Authority key identifier: 8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E
Certificate issuer:       /CN=8d64eb159108e3f8a5034c196affce04c7a7246e
Certificate serial:       0194A4A17AD7B083EE0002E4B794C765CC46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.mft
Manifest number:          1346
Signing time:             Sun 26 Jan 2025 22:00:33 +0000
Manifest this update:     Sun 26 Jan 2025 22:00:33 +0000
Manifest next update:     Mon 27 Jan 2025 22:00:33 +0000
Files and hashes:         1: jWTrFZEI4_ilA0wZav_OBMenJG4.crl (hash: SWuH4zLJQ2SIImzgP3tu4KE6w7gbqVrXylflcUiG/DM=)
                          2: mm1QzOIAjpJ0CzdgM1IUl36VTZ4.roa (hash: i7Q9ASK+O8BQwChA7pz5kBCQUK9uUpFz6WgMTZ80wP8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:a4:a1:7a:d7:b0:83:ee:00:02:e4:b7:94:c7:65:cc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d64eb159108e3f8a5034c196affce04c7a7246e
        Validity
            Not Before: Jan 26 22:00:33 2025 GMT
            Not After : Jan 27 22:00:33 2025 GMT
        Subject: CN=ad274633a297e2e3d3e5f5a30b17114a22139590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:ff:ad:74:02:0d:7a:39:38:84:80:d1:7a:
                    14:36:be:3d:fa:0f:98:d7:e1:50:b7:af:22:7b:df:
                    2b:6c:2e:1e:5b:75:d1:4d:1a:43:65:98:d2:6e:71:
                    7c:9a:2f:30:1a:55:ac:c4:57:81:15:57:9d:cf:58:
                    79:ee:d3:ed:36:f3:74:c0:47:e3:61:56:36:d7:f6:
                    93:98:a3:f6:14:5f:cb:f8:f0:6b:7e:06:79:6d:94:
                    ff:2e:b9:3a:ad:b1:22:1e:f9:bf:c1:24:01:f9:20:
                    5d:7c:b3:3b:73:10:86:ae:ef:f8:72:cf:4f:87:22:
                    45:de:9e:1e:6d:33:79:d8:b6:2f:4d:b7:30:a7:d7:
                    7a:2a:9f:71:7c:c6:2c:93:7e:3b:91:62:df:89:b3:
                    bd:92:6f:7a:5f:3d:72:6d:6b:8e:78:53:60:17:55:
                    09:f3:f8:82:c0:67:d9:03:23:0f:6e:89:80:94:f8:
                    2e:97:cb:00:7b:1c:a6:e4:e7:7f:5d:8b:d4:f3:a2:
                    bd:a3:e0:98:03:85:a9:7a:06:02:2f:02:12:5d:9e:
                    62:e7:df:8e:1a:95:cd:db:0e:b7:68:66:5a:8b:bb:
                    93:27:45:e5:d2:56:42:13:12:96:61:1b:79:ad:23:
                    6e:65:33:a0:c4:7b:f9:21:e7:1a:6e:b0:b6:d0:aa:
                    dc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:46:33:A2:97:E2:E3:D3:E5:F5:A3:0B:17:11:4A:22:13:95:90
            X509v3 Authority Key Identifier:
                keyid:8D:64:EB:15:91:08:E3:F8:A5:03:4C:19:6A:FF:CE:04:C7:A7:24:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTrFZEI4_ilA0wZav_OBMenJG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/603e7e-2150-4d95-95fb-44565ae589ca/1/jWTrFZEI4_ilA0wZav_OBMenJG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:3a:ad:6a:fc:08:98:7b:81:fb:a7:9a:b3:6f:93:f0:0c:
         7f:dd:7a:71:e3:e4:11:be:cb:81:38:0c:8a:07:d2:30:71:b3:
         f3:32:1a:bf:fe:3e:4f:db:4f:3e:bd:fd:25:37:6a:a7:e9:58:
         ea:50:ec:7c:9f:75:58:f2:a5:5e:01:ec:b3:3e:5d:93:b8:9e:
         ba:43:c6:06:ce:29:e9:6f:e3:4b:bd:71:a9:44:43:66:ad:ac:
         46:d5:3e:28:7a:01:46:0b:57:13:62:48:df:d8:91:a1:8d:bd:
         f1:0a:a2:46:39:58:30:05:cf:ff:f3:64:42:bb:04:8a:a8:92:
         08:4e:29:59:b7:32:1d:80:c6:7c:2a:1f:e6:70:90:ab:09:48:
         3a:f8:f5:35:a8:eb:be:44:9c:26:55:c0:cf:52:4a:67:0a:e5:
         37:09:17:e5:c1:1f:8e:ec:6a:b2:35:36:bd:dc:bf:fc:bf:a7:
         89:54:48:05:21:ab:8f:78:f0:a3:a3:2b:2a:2b:a8:9c:be:55:
         87:76:26:1f:80:e1:f9:35:10:1f:48:ad:0a:80:6a:1a:e4:ec:
         f3:1a:20:b2:cb:0d:80:97:ab:7c:c7:17:3b:88:39:f4:91:d4:
         cc:44:30:14:f4:36:d7:51:01:b5:4e:e4:f9:31:44:53:76:6d:
         17:56:7d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSkoXrXsIPuAALkt5THZcxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjRlYjE1OTEwOGUzZjhhNTAzNGMxOTZhZmZjZTA0Yzdh
NzI0NmUwHhcNMjUwMTI2MjIwMDMzWhcNMjUwMTI3MjIwMDMzWjAzMTEwLwYDVQQD
EyhhZDI3NDYzM2EyOTdlMmUzZDNlNWY1YTMwYjE3MTE0YTIyMTM5NTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsv/rXQCDXo5OISA0XoUNr49+g+Y
1+FQt68ie98rbC4eW3XRTRpDZZjSbnF8mi8wGlWsxFeBFVedz1h57tPtNvN0wEfj
YVY21/aTmKP2FF/L+PBrfgZ5bZT/Lrk6rbEiHvm/wSQB+SBdfLM7cxCGru/4cs9P
hyJF3p4ebTN52LYvTbcwp9d6Kp9xfMYsk347kWLfibO9km96Xz1ybWuOeFNgF1UJ
8/iCwGfZAyMPbomAlPgul8sAexym5Od/XYvU86K9o+CYA4WpegYCLwISXZ5i59+O
GpXN2w63aGZai7uTJ0Xl0lZCExKWYRt5rSNuZTOgxHv5IecabrC20KrcWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0nRjOil+Lj0+X1owsXEUoiE5WQMB8GA1UdIwQY
MBaAFI1k6xWRCOP4pQNMGWr/zgTHpyRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldUckZaRUk0X2lsQTB3WmF2X09CTWVuSkc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDNlN2UtMjE1MC00ZDk1LTk1ZmIt
NDQ1NjVhZTU4OWNhLzEvaldUckZaRUk0X2lsQTB3WmF2X09CTWVuSkc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC82MDNlN2UtMjE1MC00ZDk1LTk1ZmItNDQ1NjVhZTU4OWNh
LzEvaldUckZaRUk0X2lsQTB3WmF2X09CTWVuSkc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7Y6rWr8
CJh7gfunmrNvk/AMf916cePkEb7LgTgMigfSMHGz8zIav/4+T9tPPr39JTdqp+lY
6lDsfJ91WPKlXgHssz5dk7ieukPGBs4p6W/jS71xqURDZq2sRtU+KHoBRgtXE2JI
39iRoY298QqiRjlYMAXP//NkQrsEiqiSCE4pWbcyHYDGfCof5nCQqwlIOvj1Najr
vkScJlXAz1JKZwrlNwkX5cEfjuxqsjU2vdy//L+niVRIBSGrj3jwo6MrKiuonL5V
h3YmH4Dh+TUQH0itCoBqGuTs8xogsssNgJerfMcXO4g59JHUzEQwFPQ211EBtU7k
+TFEU3ZtF1Z9tw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:29:00 2025 by rpki-client