Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File:                     wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier:          pMJeaww5bZ1prZktfO9KxgpTqwffrf6ORTcw4a7wo6I=
Subject key identifier:   63:10:62:6A:4D:80:76:42:6E:2F:D8:D9:2C:C7:5D:19:F7:44:7E:13
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer:       /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial:       0195E0B4312EE676E940E5D06F10547AAF4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number:          14BE
Signing time:             Sat 29 Mar 2025 07:01:00 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:00 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:00 +0000
Files and hashes:         1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: xTWAkO6/Ja+nBYT4dqWxB3nZI3ytwiRLsU/oBDZTFx4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:31:2e:e6:76:e9:40:e5:d0:6f:10:54:7a:af:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
        Validity
            Not Before: Mar 29 07:01:00 2025 GMT
            Not After : Mar 30 07:01:00 2025 GMT
        Subject: CN=6310626a4d8076426e2fd8d92cc75d19f7447e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:10:a1:f3:10:b9:50:ea:2f:9f:e7:c5:5f:
                    eb:38:1b:62:de:b9:e0:46:ff:0f:cb:7c:35:24:7c:
                    fa:aa:76:2f:a2:4a:f2:31:08:fd:92:dd:a1:b1:da:
                    7d:a4:7c:12:98:bc:e3:2c:ae:ee:3b:80:54:1c:ba:
                    36:b5:84:95:be:4d:c5:18:b1:30:9b:17:11:72:19:
                    87:bc:b1:c1:38:df:6d:8e:0b:04:1e:a6:cc:3d:55:
                    b3:22:24:60:72:b5:76:3d:48:c9:df:86:bd:43:b7:
                    37:1a:2f:40:9f:a0:cb:35:57:27:95:90:28:1d:b1:
                    22:49:c2:f8:c4:9f:5e:92:01:bb:3c:d0:66:a0:61:
                    df:27:88:66:86:30:ff:53:26:5f:0f:b9:07:f8:87:
                    77:1a:59:24:31:af:2b:69:b3:7a:70:89:a5:87:c8:
                    4b:5c:c2:f2:7e:8c:9b:d7:c2:ab:97:b8:90:17:34:
                    0e:ae:34:a5:eb:81:0f:14:03:a0:bb:cf:9b:38:21:
                    1c:e9:58:df:42:ba:40:9b:2a:91:5f:b6:ff:6b:53:
                    b5:82:52:7f:26:c1:ea:da:0f:97:24:6f:be:c1:08:
                    36:93:c7:ef:b6:db:e1:16:e2:39:48:1e:26:13:dd:
                    15:98:0e:e7:26:8c:cf:e6:54:80:84:b4:78:60:a5:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:62:6A:4D:80:76:42:6E:2F:D8:D9:2C:C7:5D:19:F7:44:7E:13
            X509v3 Authority Key Identifier:
                keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:78:0d:cf:5b:c5:96:69:5e:0f:da:3b:13:f3:98:10:da:ea:
         d9:81:c9:4b:49:0a:f6:e3:d8:14:8a:21:f4:ad:a0:09:61:15:
         ac:af:f6:39:20:50:d3:1e:4b:b7:75:bf:ab:17:1f:b8:6d:ff:
         5b:48:78:5f:54:0c:c7:0c:02:a0:cf:7d:59:17:77:40:72:ee:
         4b:a0:b7:b4:6b:44:64:bd:df:cd:19:b0:f9:82:94:af:a3:45:
         49:46:9c:aa:f4:e0:da:72:58:57:d8:c8:fc:df:7d:65:43:36:
         f6:a7:34:0a:49:10:50:fd:a9:e5:1e:ae:13:a9:1d:62:e0:fe:
         d3:a2:25:98:eb:f6:58:98:29:ac:6f:dc:9e:57:10:f8:16:59:
         9f:c7:a5:25:18:04:ba:f4:a2:b5:17:f6:54:0a:d7:d5:2b:5c:
         2c:de:3e:6e:9b:16:07:a5:6d:f4:a2:83:ea:ea:fd:a2:fa:df:
         ed:07:89:c4:04:66:a9:c1:58:fe:b6:bc:33:51:8f:5a:50:e9:
         2d:81:f3:d9:b3:19:de:8e:95:8a:9f:8f:85:cc:2d:c3:50:6e:
         fb:e3:28:5b:2a:f4:66:89:ec:b1:99:f7:ac:66:90:0a:d3:09:
         ba:7d:4e:8b:a5:6a:97:c3:79:c6:c5:c3:d5:97:61:c4:f3:b9:
         f2:f5:6e:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtDEu5nbpQOXQbxBUeq9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzU2ZWI0M2YyMjBlYjUxNDFlZDg2MTUzMGFmZjI1MjFi
MjFlZWQwHhcNMjUwMzI5MDcwMTAwWhcNMjUwMzMwMDcwMTAwWjAzMTEwLwYDVQQD
Eyg2MzEwNjI2YTRkODA3NjQyNmUyZmQ4ZDkyY2M3NWQxOWY3NDQ3ZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvacQofMQuVDqL5/nxV/rOBti3rng
Rv8Py3w1JHz6qnYvokryMQj9kt2hsdp9pHwSmLzjLK7uO4BUHLo2tYSVvk3FGLEw
mxcRchmHvLHBON9tjgsEHqbMPVWzIiRgcrV2PUjJ34a9Q7c3Gi9An6DLNVcnlZAo
HbEiScL4xJ9ekgG7PNBmoGHfJ4hmhjD/UyZfD7kH+Id3GlkkMa8rabN6cImlh8hL
XMLyfoyb18Krl7iQFzQOrjSl64EPFAOgu8+bOCEc6VjfQrpAmyqRX7b/a1O1glJ/
JsHq2g+XJG++wQg2k8fvttvhFuI5SB4mE90VmA7nJozP5lSAhLR4YKUwUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMQYmpNgHZCbi/Y2SzHXRn3RH4TMB8GA1UdIwQY
MBaAFMLFbrQ/Ig61FB7YYVMK/yUhsh7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEt
MDk4MmJiZDMxZGQ0LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEtMDk4MmJiZDMxZGQ0
LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3gNz1vF
lmleD9o7E/OYENrq2YHJS0kK9uPYFIoh9K2gCWEVrK/2OSBQ0x5Lt3W/qxcfuG3/
W0h4X1QMxwwCoM99WRd3QHLuS6C3tGtEZL3fzRmw+YKUr6NFSUacqvTg2nJYV9jI
/N99ZUM29qc0CkkQUP2p5R6uE6kdYuD+06IlmOv2WJgprG/cnlcQ+BZZn8elJRgE
uvSitRf2VArX1StcLN4+bpsWB6Vt9KKD6ur9ovrf7QeJxARmqcFY/ra8M1GPWlDp
LYHz2bMZ3o6Vip+Phcwtw1Bu++MoWyr0ZonssZn3rGaQCtMJun1Oi6Vql8N5xsXD
1ZdhxPO58vVuVg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:40:21 2025 by rpki-client