Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.mft
File:                     yQ96sCq8mKRwOKLMATrWb4JntMM.mft (raw, json)
Hash identifier:          6vT21CYy1tPQVEU7io7H01jOpEwoq9pOIA8ij83zaHI=
Subject key identifier:   DB:44:13:B6:BF:93:09:8C:45:AB:1C:F3:5A:14:AC:7D:0D:4F:92:9C
Authority key identifier: C9:0F:7A:B0:2A:BC:98:A4:70:38:A2:CC:01:3A:D6:6F:82:67:B4:C3
Certificate issuer:       /CN=c90f7ab02abc98a47038a2cc013ad66f8267b4c3
Certificate serial:       0195DB8DC5471B4FA835B9B2241A75F82112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yQ96sCq8mKRwOKLMATrWb4JntMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.mft
Manifest number:          14BB
Signing time:             Fri 28 Mar 2025 07:00:56 +0000
Manifest this update:     Fri 28 Mar 2025 07:00:56 +0000
Manifest next update:     Sat 29 Mar 2025 07:00:56 +0000
Files and hashes:         1: yQ96sCq8mKRwOKLMATrWb4JntMM.crl (hash: dG9KCi7pfzAkwnEpgUHfk8WjZpXvspUTlXzZBYoegpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:db:8d:c5:47:1b:4f:a8:35:b9:b2:24:1a:75:f8:21:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c90f7ab02abc98a47038a2cc013ad66f8267b4c3
        Validity
            Not Before: Mar 28 07:00:56 2025 GMT
            Not After : Mar 29 07:00:56 2025 GMT
        Subject: CN=db4413b6bf93098c45ab1cf35a14ac7d0d4f929c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:e3:1b:26:26:6b:65:50:f4:fa:5b:9e:3a:
                    c6:5c:7f:1f:04:df:78:f5:b9:2d:90:ca:ef:fe:70:
                    87:1b:bc:a1:f7:a8:69:3c:d2:63:bc:72:1c:54:30:
                    9a:d4:4d:f0:19:49:9a:44:2f:86:c7:ba:0e:ab:be:
                    b3:a1:ed:79:60:7f:e6:e0:af:57:16:3f:23:03:b5:
                    1f:3d:2a:20:7d:ea:01:3d:5e:00:0c:5e:55:3c:01:
                    ec:24:e6:b3:c5:52:2f:58:8e:66:7a:ba:11:5b:38:
                    ae:04:ae:24:e5:dc:06:83:b2:5b:80:08:65:2b:dd:
                    8a:c5:ee:d3:7d:f2:44:36:23:21:ea:76:31:a3:3e:
                    9f:30:80:a7:4d:d5:03:e5:4f:1e:89:92:9e:b5:3f:
                    4e:20:9d:e6:9f:1c:0a:d9:f4:6d:28:8a:5e:3c:f6:
                    2b:a5:34:18:a2:f2:f5:ac:51:4d:f8:22:e0:f0:61:
                    cb:03:da:b7:4e:8c:a1:9b:c3:d8:f3:e8:8c:e6:40:
                    d0:10:66:98:c0:d0:a3:19:e9:41:76:f5:42:3b:6b:
                    b4:a7:1c:c0:fd:43:5c:f1:5a:cd:c7:f8:38:06:c3:
                    8f:c2:74:fd:54:07:01:93:aa:35:c8:ff:21:f7:ca:
                    d5:06:aa:68:e2:57:a5:75:d7:c7:79:11:bb:57:a5:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:13:B6:BF:93:09:8C:45:AB:1C:F3:5A:14:AC:7D:0D:4F:92:9C
            X509v3 Authority Key Identifier:
                keyid:C9:0F:7A:B0:2A:BC:98:A4:70:38:A2:CC:01:3A:D6:6F:82:67:B4:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQ96sCq8mKRwOKLMATrWb4JntMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/427989-a9cf-4c0e-ad41-184dcbb6167d/1/yQ96sCq8mKRwOKLMATrWb4JntMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:7a:b5:18:43:34:5c:33:68:0b:17:04:dc:50:5e:56:ab:ff:
         0b:22:e6:f2:e8:24:f3:24:d1:6e:1c:8a:7f:23:32:4e:07:20:
         e0:d5:6a:38:97:d4:6d:f3:00:76:be:3c:43:d2:06:d5:b8:4a:
         2d:fa:9e:7e:ab:0b:00:b6:46:dd:21:a7:9a:9e:61:3c:56:78:
         ff:94:bd:ab:3f:d3:e8:31:25:87:5b:f6:91:63:c6:c0:5d:87:
         37:9d:88:d5:ac:58:b6:3f:00:8e:22:9d:a3:0d:ef:46:1d:f5:
         93:6a:08:ba:5e:84:f4:fe:c6:ce:57:e7:e9:06:d8:22:c9:b6:
         ed:61:78:87:36:3d:6a:08:a3:d6:fe:10:8a:b8:fa:51:18:f4:
         03:2b:06:fe:8e:55:08:7c:8c:12:f0:bd:8e:83:15:f5:80:72:
         e5:c7:70:a9:3f:b2:a6:0e:f1:e1:5d:eb:d4:f5:ce:8f:e6:27:
         86:11:c8:e0:d1:68:00:60:ea:ef:45:0c:12:84:d9:da:91:36:
         71:b7:f1:47:8a:a2:3a:45:78:18:83:5b:c5:12:cf:04:21:66:
         07:0f:a9:f5:7c:7a:b5:d5:7b:55:a3:e4:ba:b9:f2:08:26:8c:
         19:bb:d5:ca:e6:9f:5e:8f:55:cc:9b:50:41:ed:9c:ae:2c:d2:
         d8:91:49:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXbjcVHG0+oNbmyJBp1+CESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MGY3YWIwMmFiYzk4YTQ3MDM4YTJjYzAxM2FkNjZmODI2
N2I0YzMwHhcNMjUwMzI4MDcwMDU2WhcNMjUwMzI5MDcwMDU2WjAzMTEwLwYDVQQD
EyhkYjQ0MTNiNmJmOTMwOThjNDVhYjFjZjM1YTE0YWM3ZDBkNGY5MjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDLjGyYma2VQ9PpbnjrGXH8fBN94
9bktkMrv/nCHG7yh96hpPNJjvHIcVDCa1E3wGUmaRC+Gx7oOq76zoe15YH/m4K9X
Fj8jA7UfPSogfeoBPV4ADF5VPAHsJOazxVIvWI5meroRWziuBK4k5dwGg7JbgAhl
K92Kxe7TffJENiMh6nYxoz6fMICnTdUD5U8eiZKetT9OIJ3mnxwK2fRtKIpePPYr
pTQYovL1rFFN+CLg8GHLA9q3Toyhm8PY8+iM5kDQEGaYwNCjGelBdvVCO2u0pxzA
/UNc8VrNx/g4BsOPwnT9VAcBk6o1yP8h98rVBqpo4lelddfHeRG7V6X/kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtEE7a/kwmMRasc81oUrH0NT5KcMB8GA1UdIwQY
MBaAFMkPerAqvJikcDiizAE61m+CZ7TDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVE5NnNDcThtS1J3T0tMTUFUcldiNEpudE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80Mjc5ODktYTljZi00YzBlLWFkNDEt
MTg0ZGNiYjYxNjdkLzEveVE5NnNDcThtS1J3T0tMTUFUcldiNEpudE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80Mjc5ODktYTljZi00YzBlLWFkNDEtMTg0ZGNiYjYxNjdk
LzEveVE5NnNDcThtS1J3T0tMTUFUcldiNEpudE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXq1GEM0
XDNoCxcE3FBeVqv/CyLm8ugk8yTRbhyKfyMyTgcg4NVqOJfUbfMAdr48Q9IG1bhK
LfqefqsLALZG3SGnmp5hPFZ4/5S9qz/T6DElh1v2kWPGwF2HN52I1axYtj8AjiKd
ow3vRh31k2oIul6E9P7Gzlfn6QbYIsm27WF4hzY9agij1v4Qirj6URj0AysG/o5V
CHyMEvC9joMV9YBy5cdwqT+ypg7x4V3r1PXOj+YnhhHI4NFoAGDq70UMEoTZ2pE2
cbfxR4qiOkV4GINbxRLPBCFmBw+p9Xx6tdV7VaPkurnyCCaMGbvVyuafXo9VzJtQ
Qe2crizS2JFJXQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:39:01 2025 by rpki-client