Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
File:                     MvbeMKm492SENE0M07bAJz6t028.mft (raw, json)
Hash identifier:          K8Jzoerulg7jAUQIACdY+TggAcgBuqATDg01QSUfNbc=
Subject key identifier:   2D:EC:3F:5B:66:E7:17:8D:0D:D7:E6:2B:40:21:B8:C8:20:8A:DE:A0
Authority key identifier: 32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F
Certificate issuer:       /CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
Certificate serial:       0195E1591E64AE42A49CF8A363771CB23E56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft
Manifest number:          016E
Signing time:             Sat 29 Mar 2025 10:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:08 +0000
Files and hashes:         1: 4h6gd-8--_DbMb2PIrFary1u45w.roa (hash: omFQCpjJiNTW/cNLim2vTaoqpmXOjD5FAaL5ZDoz4f8=)
                          2: MvbeMKm492SENE0M07bAJz6t028.crl (hash: YH78DcRPuabCLBCqjbubXkCLRyjN6ixPuFFGF+5FUEE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:1e:64:ae:42:a4:9c:f8:a3:63:77:1c:b2:3e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f6de30a9b8f76484344d0cd3b6c0273eadd36f
        Validity
            Not Before: Mar 29 10:01:08 2025 GMT
            Not After : Mar 30 10:01:08 2025 GMT
        Subject: CN=2dec3f5b66e7178d0dd7e62b4021b8c8208adea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:50:3e:6b:09:f0:7f:ea:94:58:f8:35:0d:
                    5f:f9:cc:1b:15:15:fb:49:20:6c:44:22:b4:75:cc:
                    d5:49:e9:1d:53:d8:96:98:a5:c9:51:da:a5:66:71:
                    63:28:d4:c4:62:9b:32:6c:f3:5e:6a:21:31:48:59:
                    8b:85:8b:71:7a:21:cf:8a:4d:cc:e2:fc:ca:50:53:
                    7b:63:c0:14:65:a8:c5:d6:6b:99:24:fe:e8:95:ff:
                    49:c9:b1:c4:fd:97:27:89:4e:77:d3:27:af:5f:f5:
                    15:6c:b4:29:59:df:b6:2b:cb:2b:ea:98:5d:ec:33:
                    67:1a:f2:e9:89:68:c1:53:d9:dc:13:79:b0:60:e0:
                    45:99:0f:0f:28:11:ec:f5:78:a0:37:f1:c9:06:5d:
                    b0:d4:a9:c1:5b:a0:97:50:59:6c:6c:e8:bd:a9:fe:
                    39:d4:fb:47:ff:d7:9e:4d:8e:ff:b5:bd:8b:33:84:
                    7a:ce:7c:4d:1c:b6:c8:54:df:72:49:00:65:91:ee:
                    c8:a4:aa:61:75:17:b2:8d:4f:a6:f5:0c:ea:f3:d1:
                    17:d0:96:33:d0:3a:8c:54:0c:30:af:46:30:bc:56:
                    46:55:83:cd:d5:8c:77:eb:95:d4:88:f0:f3:98:eb:
                    11:6e:a4:1b:3b:f6:dd:45:dd:73:95:54:4a:8e:f3:
                    dd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:EC:3F:5B:66:E7:17:8D:0D:D7:E6:2B:40:21:B8:C8:20:8A:DE:A0
            X509v3 Authority Key Identifier:
                keyid:32:F6:DE:30:A9:B8:F7:64:84:34:4D:0C:D3:B6:C0:27:3E:AD:D3:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvbeMKm492SENE0M07bAJz6t028.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cbd060-ad68-4f5f-ad5e-c0404437e85b/1/MvbeMKm492SENE0M07bAJz6t028.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:68:ab:03:14:7e:1a:65:5b:34:67:77:45:68:4d:5e:7b:
         24:0b:68:02:7b:da:19:36:56:08:ce:62:93:8d:e0:54:ad:82:
         91:e4:22:7c:84:f1:80:ab:3d:36:2c:d6:12:eb:9b:b4:5b:4a:
         19:41:d9:b3:14:3e:dc:b4:93:07:18:2e:13:f0:e2:64:87:63:
         42:0e:bb:b2:5d:18:72:09:d3:f1:ee:73:3d:49:c0:5d:4a:c2:
         c9:89:9d:5d:8d:5c:4f:04:c4:7f:db:04:60:02:d7:cf:a9:6a:
         ab:43:c1:b2:48:32:9b:52:93:e6:bc:91:1f:72:0d:d3:44:3c:
         07:d4:ee:ce:5a:7c:35:a8:1a:1f:aa:e5:53:22:f7:ab:4f:86:
         bb:1d:aa:22:6e:23:a9:4d:32:53:81:66:82:38:0c:06:a2:d4:
         ab:05:7e:9f:0b:63:80:e4:5d:69:3d:41:d3:38:30:4a:98:ee:
         49:d9:85:f2:37:c2:83:71:64:35:ea:f2:81:99:c3:24:c1:90:
         e8:11:b9:a0:0c:3e:42:8a:1e:8e:63:ca:aa:0e:35:22:7f:31:
         87:e8:ff:c0:88:9c:61:03:b2:8b:d1:c2:13:11:6b:59:5b:e7:
         b2:05:90:2e:e2:a8:43:bd:5e:75:d8:b4:7c:20:b3:82:d2:90:
         c4:53:10:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWR5krkKknPijY3ccsj5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjZkZTMwYTliOGY3NjQ4NDM0NGQwY2QzYjZjMDI3M2Vh
ZGQzNmYwHhcNMjUwMzI5MTAwMTA4WhcNMjUwMzMwMTAwMTA4WjAzMTEwLwYDVQQD
EygyZGVjM2Y1YjY2ZTcxNzhkMGRkN2U2MmI0MDIxYjhjODIwOGFkZWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBJQPmsJ8H/qlFj4NQ1f+cwbFRX7
SSBsRCK0dczVSekdU9iWmKXJUdqlZnFjKNTEYpsybPNeaiExSFmLhYtxeiHPik3M
4vzKUFN7Y8AUZajF1muZJP7olf9JybHE/ZcniU530yevX/UVbLQpWd+2K8sr6phd
7DNnGvLpiWjBU9ncE3mwYOBFmQ8PKBHs9XigN/HJBl2w1KnBW6CXUFlsbOi9qf45
1PtH/9eeTY7/tb2LM4R6znxNHLbIVN9ySQBlke7IpKphdReyjU+m9Qzq89EX0JYz
0DqMVAwwr0YwvFZGVYPN1Yx365XUiPDzmOsRbqQbO/bdRd1zlVRKjvPdSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC3sP1tm5xeNDdfmK0AhuMggit6gMB8GA1UdIwQY
MBaAFDL23jCpuPdkhDRNDNO2wCc+rdNvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUt
YzA0MDQ0MzdlODViLzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9jYmQwNjAtYWQ2OC00ZjVmLWFkNWUtYzA0MDQ0MzdlODVi
LzEvTXZiZU1LbTQ5MlNFTkUwTTA3YkFKejZ0MDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9hoqwMU
fhplWzRnd0VoTV57JAtoAnvaGTZWCM5ik43gVK2CkeQifITxgKs9NizWEuubtFtK
GUHZsxQ+3LSTBxguE/DiZIdjQg67sl0YcgnT8e5zPUnAXUrCyYmdXY1cTwTEf9sE
YALXz6lqq0PBskgym1KT5ryRH3IN00Q8B9Tuzlp8NagaH6rlUyL3q0+Gux2qIm4j
qU0yU4FmgjgMBqLUqwV+nwtjgORdaT1B0zgwSpjuSdmF8jfCg3FkNerygZnDJMGQ
6BG5oAw+QooejmPKqg41In8xh+j/wIicYQOyi9HCExFrWVvnsgWQLuKoQ71eddi0
fCCzgtKQxFMQEQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:21 2025 by rpki-client