Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
File:                     gtB-spT0BQdjLzcAik1HtpgxET4.mft (raw, json)
Hash identifier:          XTbot1/fc/tnw5/b/vr1xCDOlMDkVccSQ8zZZtz2kCc=
Subject key identifier:   8A:4B:93:DE:81:5D:CD:0F:01:1E:9D:D9:94:13:97:D0:75:3D:19:02
Authority key identifier: 82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E
Certificate issuer:       /CN=82d07eb294f40507632f37008a4d47b69831113e
Certificate serial:       018AEEF9CEF27A312861C00497BA728E825E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
Manifest number:          0857
Signing time:             Mon 02 Oct 2023 06:01:03 +0000
Manifest this update:     Mon 02 Oct 2023 06:01:03 +0000
Manifest next update:     Tue 03 Oct 2023 06:01:03 +0000
Files and hashes:         1: VpWZhBhyeCu8eVYqRL1VKSpjKlg.roa (hash: vojTgDkjM/L9uS5O8cVw0AElshLQkkWUGAIZs2b8ceY=)
                          2: gtB-spT0BQdjLzcAik1HtpgxET4.crl (hash: AdQaICMmjvAxKiriTXkLiElL4aKUKjloPOoVjIobmfI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ee:f9:ce:f2:7a:31:28:61:c0:04:97:ba:72:8e:82:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82d07eb294f40507632f37008a4d47b69831113e
        Validity
            Not Before: Oct  2 06:01:03 2023 GMT
            Not After : Oct  3 06:01:03 2023 GMT
        Subject: CN=8a4b93de815dcd0f011e9dd9941397d0753d1902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:a4:ec:a2:26:c7:01:bf:1f:9e:bb:6c:1c:
                    d8:51:25:5c:f8:c1:6e:32:94:2d:dc:3e:55:db:3c:
                    ad:b1:ff:a5:ab:18:ee:a5:c8:08:c9:06:5a:f7:a9:
                    91:32:d6:3a:a2:97:a0:e4:f8:23:a9:19:0d:38:b9:
                    56:e2:72:16:80:a6:28:cb:e5:bd:69:06:cc:9a:e8:
                    41:a4:25:21:be:2f:e6:11:fb:0a:98:ff:96:47:81:
                    20:75:f8:a5:77:8f:a4:98:13:1e:f6:6f:32:85:9e:
                    6a:d8:ce:ac:66:c9:bb:9a:fd:c1:76:87:25:a2:f9:
                    04:69:72:c5:51:fa:78:9c:30:4d:36:dc:0e:a8:9a:
                    75:ea:68:08:27:e7:5c:1f:dc:13:b0:84:ef:ee:8e:
                    50:2b:9d:de:d6:84:97:48:9f:0f:26:05:87:ed:a2:
                    18:db:4c:04:16:c1:da:87:9b:2b:2d:e6:f4:b8:0f:
                    01:46:c3:51:55:13:86:28:cc:4a:62:45:7e:26:45:
                    db:2e:1e:95:1d:25:76:29:65:0f:9b:41:c2:fa:18:
                    3e:04:74:7a:a3:5e:97:42:6d:33:8d:4e:71:cd:95:
                    ca:6b:04:c8:01:aa:ec:9f:e6:0f:ab:a7:f0:b1:9f:
                    77:75:f3:30:bf:d3:26:0a:7b:22:31:fc:39:b4:cf:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4B:93:DE:81:5D:CD:0F:01:1E:9D:D9:94:13:97:D0:75:3D:19:02
            X509v3 Authority Key Identifier:
                keyid:82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d7:cb:99:25:ad:ca:77:dd:e1:47:92:31:f6:b0:1e:db:20:
         a3:4d:69:bb:2e:6e:46:03:e2:9f:f6:c1:c7:de:ef:90:9d:a8:
         cc:32:4b:ed:93:35:30:61:bf:8e:d3:5d:cc:62:ef:5f:44:db:
         de:43:d0:a0:05:63:cd:b9:be:31:1e:ca:09:1b:f6:56:9a:8a:
         2a:d4:bb:22:dd:b8:50:52:72:3d:1d:87:77:de:75:8f:d6:65:
         59:ad:1c:25:f9:87:f8:c2:a6:9c:79:62:3c:fe:d3:29:87:d8:
         a2:94:5f:f1:53:0b:73:66:14:09:c1:b7:58:94:d1:0e:91:49:
         46:38:13:f3:e1:63:f0:9d:53:2a:e6:31:c9:fa:19:6c:e4:c6:
         06:6c:8a:af:b7:01:24:d4:6f:5d:77:ad:8b:f6:8f:fd:36:e2:
         23:2a:56:8d:c4:de:7d:63:88:1d:f0:85:73:6d:5e:f3:84:e8:
         56:9b:f3:d3:91:cf:7f:9e:40:4e:ad:86:11:11:31:af:38:70:
         e6:cb:51:dd:d2:a6:d2:17:21:11:83:00:86:89:38:b8:70:fa:
         01:3c:22:0a:fa:a3:ee:51:da:b2:f4:02:c9:10:9a:68:d6:b0:
         c6:e0:6b:28:5c:9f:3f:fb:5f:99:c0:cd:ff:47:bf:db:e9:b7:
         b4:99:17:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYru+c7yejEoYcAEl7pyjoJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZDA3ZWIyOTRmNDA1MDc2MzJmMzcwMDhhNGQ0N2I2OTgz
MTExM2UwHhcNMjMxMDAyMDYwMTAzWhcNMjMxMDAzMDYwMTAzWjAzMTEwLwYDVQQD
Eyg4YTRiOTNkZTgxNWRjZDBmMDExZTlkZDk5NDEzOTdkMDc1M2QxOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfGk7KImxwG/H567bBzYUSVc+MFu
MpQt3D5V2zytsf+lqxjupcgIyQZa96mRMtY6opeg5PgjqRkNOLlW4nIWgKYoy+W9
aQbMmuhBpCUhvi/mEfsKmP+WR4Egdfild4+kmBMe9m8yhZ5q2M6sZsm7mv3Bdocl
ovkEaXLFUfp4nDBNNtwOqJp16mgIJ+dcH9wTsITv7o5QK53e1oSXSJ8PJgWH7aIY
20wEFsHah5srLeb0uA8BRsNRVROGKMxKYkV+JkXbLh6VHSV2KWUPm0HC+hg+BHR6
o16XQm0zjU5xzZXKawTIAarsn+YPq6fwsZ93dfMwv9MmCnsiMfw5tM/USwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpLk96BXc0PAR6d2ZQTl9B1PRkCMB8GA1UdIwQY
MBaAFILQfrKU9AUHYy83AIpNR7aYMRE+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RCLXNwVDBCUWRqTHpjQWlrMUh0cGd4RVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZDFjNDYtMjMzOC00YmIzLTk1NmQt
YmEzZDE2YjA2YTUyLzEvZ3RCLXNwVDBCUWRqTHpjQWlrMUh0cGd4RVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kZDFjNDYtMjMzOC00YmIzLTk1NmQtYmEzZDE2YjA2YTUy
LzEvZ3RCLXNwVDBCUWRqTHpjQWlrMUh0cGd4RVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9fLmSWt
ynfd4UeSMfawHtsgo01puy5uRgPin/bBx97vkJ2ozDJL7ZM1MGG/jtNdzGLvX0Tb
3kPQoAVjzbm+MR7KCRv2VpqKKtS7It24UFJyPR2Hd951j9ZlWa0cJfmH+MKmnHli
PP7TKYfYopRf8VMLc2YUCcG3WJTRDpFJRjgT8+Fj8J1TKuYxyfoZbOTGBmyKr7cB
JNRvXXeti/aP/TbiIypWjcTefWOIHfCFc21e84ToVpvz05HPf55ATq2GERExrzhw
5stR3dKm0hchEYMAhok4uHD6ATwiCvqj7lHasvQCyRCaaNawxuBrKFyfP/tfmcDN
/0e/2+m3tJkXuQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:22 2025 by rpki-client