Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2b110c-deb5-4a01-bf86-86c67d4b801f/1/qWDNyL5b97r4t0EtEtJRu4Hqn5g.mft
File:                     qWDNyL5b97r4t0EtEtJRu4Hqn5g.mft (raw, json)
Hash identifier:          Rjg7lWDiYE4LIU6ATuaf+sTWPcDJGqM3lTYe5rjSYmw=
Subject key identifier:   62:D1:DE:86:29:AC:77:8E:2A:E5:07:C3:7A:13:F3:9C:9E:C5:19:CD
Authority key identifier: A9:60:CD:C8:BE:5B:F7:BA:F8:B7:41:2D:12:D2:51:BB:81:EA:9F:98
Certificate issuer:       /CN=a960cdc8be5bf7baf8b7412d12d251bb81ea9f98
Certificate serial:       036810A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qWDNyL5b97r4t0EtEtJRu4Hqn5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2b110c-deb5-4a01-bf86-86c67d4b801f/1/qWDNyL5b97r4t0EtEtJRu4Hqn5g.mft
Manifest number:          047A
Signing time:             Thu 24 Mar 2022 23:42:56 +0000
Manifest this update:     Thu 24 Mar 2022 23:42:56 +0000
Manifest next update:     Fri 25 Mar 2022 23:42:56 +0000
Files and hashes:         1: qWDNyL5b97r4t0EtEtJRu4Hqn5g.crl (hash: KWYMwc8rSGPkHGNhARqKgXcEsnkLcAQ8tOB0jX8k/X0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57151652 (0x36810a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a960cdc8be5bf7baf8b7412d12d251bb81ea9f98
        Validity
            Not Before: Mar 24 23:42:56 2022 GMT
            Not After : Mar 25 23:42:56 2022 GMT
        Subject: CN=62d1de8629ac778e2ae507c37a13f39c9ec519cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f5:c1:2e:8f:52:32:2e:84:f5:30:1d:c7:a5:
                    14:0a:ed:a3:e8:d6:f1:be:f3:da:7d:f5:aa:af:9c:
                    1e:bd:4f:f1:0c:4d:5b:9e:af:e8:e5:cd:4a:31:1e:
                    90:1e:fc:3d:18:37:87:ea:31:85:84:c9:cc:55:03:
                    2d:6c:67:7e:8e:83:3d:75:69:8b:7a:80:8b:e5:59:
                    8b:5a:8e:47:58:48:82:0c:a5:46:ea:30:5a:b7:f8:
                    fa:ce:6e:57:62:56:af:61:4c:97:b1:72:c1:7f:4f:
                    eb:84:0e:e5:59:25:6f:d3:14:3c:06:5b:4e:9c:02:
                    64:6f:fe:ea:7a:4f:57:3f:58:57:43:fa:0d:31:0a:
                    27:31:35:33:15:ee:fd:14:f5:6a:85:8b:51:bd:d1:
                    38:df:b3:c5:85:69:53:6e:ca:fd:9d:c2:bc:ff:8a:
                    47:49:d1:56:c3:c9:45:6a:ff:69:b7:9f:66:6d:9d:
                    74:06:b5:4c:69:bb:81:a1:9a:5b:9c:27:79:28:73:
                    21:0d:fc:02:ed:b5:3c:75:b8:60:7b:c0:1b:1c:d8:
                    19:6a:bd:fc:89:b4:a0:fc:6e:2f:7c:15:7b:9d:b5:
                    24:d5:d4:ce:7c:d3:b1:59:de:63:b8:0c:f1:88:d5:
                    4a:bb:06:d1:9d:10:ec:27:ae:39:73:56:8c:48:19:
                    d6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D1:DE:86:29:AC:77:8E:2A:E5:07:C3:7A:13:F3:9C:9E:C5:19:CD
            X509v3 Authority Key Identifier:
                keyid:A9:60:CD:C8:BE:5B:F7:BA:F8:B7:41:2D:12:D2:51:BB:81:EA:9F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWDNyL5b97r4t0EtEtJRu4Hqn5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2b110c-deb5-4a01-bf86-86c67d4b801f/1/qWDNyL5b97r4t0EtEtJRu4Hqn5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2b110c-deb5-4a01-bf86-86c67d4b801f/1/qWDNyL5b97r4t0EtEtJRu4Hqn5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:58:04:35:15:f3:94:2d:bb:27:1f:6b:71:46:df:67:56:
         ed:e2:05:2a:28:ea:bb:2d:f7:c8:5c:42:de:3e:79:e3:1b:a6:
         4e:72:fe:20:a5:5c:00:e9:d6:2b:4a:8c:64:f5:b1:39:c1:c3:
         79:c7:10:cb:4d:d5:87:7d:dc:31:c0:dd:36:29:4f:76:6a:d1:
         4a:dc:ee:09:c7:e2:ed:08:7d:66:9c:7c:9e:c1:dc:b4:3b:34:
         fe:0c:83:90:d2:15:7c:36:1b:51:69:bd:54:7d:10:cd:e6:ca:
         f8:fb:08:2a:34:12:46:a8:c3:e1:3f:c6:5d:95:51:16:bb:c7:
         ba:07:d1:95:e9:9a:4f:f6:2c:d8:aa:91:64:1f:0f:1c:d6:60:
         14:f7:50:6e:39:7d:0c:8c:ee:1f:c2:29:4f:f1:b4:ab:1f:61:
         8f:08:c3:65:3f:f2:a8:ab:45:9e:ba:d2:4e:c6:17:14:30:bd:
         35:c1:28:6a:5b:84:7a:6d:04:ab:37:61:1d:36:0f:77:cc:f0:
         0e:c1:59:18:9c:17:d3:a5:41:c5:69:3d:c7:25:32:00:c3:85:
         6f:cf:1e:58:5a:df:55:f7:ac:f4:4d:91:77:13:48:39:78:8b:
         cc:88:b2:64:37:c5:74:82:da:42:9c:6f:e9:0b:ee:c9:30:7d:
         87:3f:45:bd
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEA2gQpDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
OTYwY2RjOGJlNWJmN2JhZjhiNzQxMmQxMmQyNTFiYjgxZWE5Zjk4MB4XDTIyMDMy
NDIzNDI1NloXDTIyMDMyNTIzNDI1NlowMzExMC8GA1UEAxMoNjJkMWRlODYyOWFj
Nzc4ZTJhZTUwN2MzN2ExM2YzOWM5ZWM1MTljZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIH1wS6PUjIuhPUwHcelFArto+jW8b7z2n31qq+cHr1P8QxN
W56v6OXNSjEekB78PRg3h+oxhYTJzFUDLWxnfo6DPXVpi3qAi+VZi1qOR1hIggyl
RuowWrf4+s5uV2JWr2FMl7FywX9P64QO5Vklb9MUPAZbTpwCZG/+6npPVz9YV0P6
DTEKJzE1MxXu/RT1aoWLUb3RON+zxYVpU27K/Z3CvP+KR0nRVsPJRWr/abefZm2d
dAa1TGm7gaGaW5wneShzIQ38Au21PHW4YHvAGxzYGWq9/Im0oPxuL3wVe521JNXU
znzTsVneY7gM8YjVSrsG0Z0Q7CeuOXNWjEgZ1mkCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRi0d6GKax3jirlB8N6E/OcnsUZzTAfBgNVHSMEGDAWgBSpYM3Ivlv3uvi3
QS0S0lG7geqfmDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3FXRE55TDViOTdyNHQwRXRFdEpSdTRIcW41Zy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYzMvMmIxMTBjLWRlYjUtNGEwMS1iZjg2LTg2YzY3ZDRiODAxZi8x
L3FXRE55TDViOTdyNHQwRXRFdEpSdTRIcW41Zy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzMv
MmIxMTBjLWRlYjUtNGEwMS1iZjg2LTg2YzY3ZDRiODAxZi8xL3FXRE55TDViOTdy
NHQwRXRFdEpSdTRIcW41Zy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAKWKWAQ1FfOULbsnH2txRt9nVu3i
BSoo6rst98hcQt4+eeMbpk5y/iClXADp1itKjGT1sTnBw3nHEMtN1Yd93DHA3TYp
T3Zq0Urc7gnH4u0IfWacfJ7B3LQ7NP4Mg5DSFXw2G1FpvVR9EM3myvj7CCo0Ekao
w+E/xl2VURa7x7oH0ZXpmk/2LNiqkWQfDxzWYBT3UG45fQyM7h/CKU/xtKsfYY8I
w2U/8qirRZ660k7GFxQwvTXBKGpbhHptBKs3YR02D3fM8A7BWRicF9OlQcVpPccl
MgDDhW/PHlha31X3rPRNkXcTSDl4i8yIsmQ3xXSC2kKcb+kL7skwfYc/Rb0=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:06 2025 by rpki-client