Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
File:                     bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft (raw, json)
Hash identifier:          4X+LZ1EppLNUyalLQrcNOJVHJPMvr6+hcUwx/W9qdhc=
Subject key identifier:   3F:FE:B0:84:97:CB:1D:61:3A:90:20:5E:B4:9B:32:73:97:5F:CC:E4
Authority key identifier: 6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E
Certificate issuer:       /CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
Certificate serial:       0195EB00FEB926FD5E09EA61445FDCC6AAEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft
Manifest number:          10D4
Signing time:             Mon 31 Mar 2025 07:01:05 +0000
Manifest this update:     Mon 31 Mar 2025 07:01:05 +0000
Manifest next update:     Tue 01 Apr 2025 07:01:05 +0000
Files and hashes:         1: 9LxgfTOJcoE2_jHJSOljCVVPS5Y.roa (hash: qp8gK1apqd3e4qrwJ4WSA7TFQheE7slpZrtZy4gGTvM=)
                          2: bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl (hash: WREpU7PkSA8lgFoCMRGXmcgRCxliT+Se132XeCwbHI4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:eb:00:fe:b9:26:fd:5e:09:ea:61:44:5f:dc:c6:aa:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d6d1f110f595c635ccbe9fbb3090dbb5fcfbd6e
        Validity
            Not Before: Mar 31 07:01:05 2025 GMT
            Not After : Apr  1 07:01:05 2025 GMT
        Subject: CN=3ffeb08497cb1d613a90205eb49b3273975fcce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c5:30:96:cf:a4:71:22:f1:21:e7:79:a5:7c:
                    7b:25:38:d4:e9:0b:f0:33:e0:52:6d:bc:c2:12:63:
                    a1:b6:26:53:f6:c8:98:da:e1:c0:b4:90:72:a0:da:
                    b0:da:0d:8c:7d:85:26:bc:2b:68:ad:1b:38:b2:be:
                    b2:bd:16:25:c2:02:a7:81:d8:e6:4f:7e:ff:7f:5c:
                    e7:7d:cc:bd:df:fa:e7:3e:58:c3:61:63:c5:0e:95:
                    1c:f7:45:02:4d:4e:4f:7b:04:82:b0:4b:d8:7b:06:
                    7c:04:6e:53:7d:fd:a3:a1:e0:8d:18:7d:2b:50:fd:
                    1f:3c:ee:20:8e:71:db:11:7f:04:e3:5a:e0:f7:53:
                    6d:ab:9e:28:5f:46:28:88:d1:34:11:60:62:4c:7f:
                    e6:6e:46:4f:dd:24:54:6f:75:a5:1b:11:32:90:69:
                    37:6c:95:1b:96:de:c6:05:d3:79:bd:b2:86:b0:ad:
                    c5:a3:f6:da:fb:d0:44:c9:75:4d:97:c7:16:b1:5d:
                    c1:8c:6c:36:29:d5:e6:fa:46:02:56:4c:50:3b:af:
                    0f:a8:ec:b4:6a:0f:ae:a9:d2:7f:f7:31:c6:d9:94:
                    44:98:2f:75:61:8f:a5:08:17:1e:de:80:f5:24:c9:
                    34:5e:f4:f0:1e:c4:de:95:48:f6:6c:f7:d4:7d:f4:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:FE:B0:84:97:CB:1D:61:3A:90:20:5E:B4:9B:32:73:97:5F:CC:E4
            X509v3 Authority Key Identifier:
                keyid:6D:6D:1F:11:0F:59:5C:63:5C:CB:E9:FB:B3:09:0D:BB:5F:CF:BD:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b247da-3192-4813-bff4-2c7e2e4a9747/1/bW0fEQ9ZXGNcy-n7swkNu1_PvW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:16:75:9a:5f:75:2b:f8:85:81:c9:a2:84:39:af:8c:da:5d:
         56:56:fa:13:38:18:f3:9e:b9:a2:f6:8f:be:92:d4:42:ad:37:
         c5:15:ed:0d:56:ee:17:d9:d0:62:5a:28:29:ad:a2:32:34:61:
         ad:9d:73:65:df:70:4e:4d:af:88:82:ee:13:2e:a7:9d:1b:22:
         38:48:3a:a0:ce:b6:74:ef:d7:23:9d:7c:45:ce:d3:b8:96:af:
         d3:ff:06:b0:ad:93:c2:3e:0d:fd:21:c8:d4:af:8d:53:1a:52:
         7e:22:fe:ab:28:3c:62:42:e9:09:9d:d0:20:f7:4e:33:fc:4c:
         45:83:b8:05:92:85:09:12:0d:17:e1:64:92:19:b9:8a:37:4d:
         52:32:1e:59:32:60:75:65:f2:3d:31:1d:c9:a4:18:c5:01:84:
         12:ff:2f:2c:93:a4:ef:bf:26:48:a3:7a:3d:76:14:1b:06:e3:
         a4:f1:e4:39:dc:fe:90:ab:33:a0:8d:ff:d5:84:ed:c9:f7:46:
         d8:78:71:3f:9b:94:8a:26:32:7f:8c:36:55:4a:ca:75:35:13:
         0f:55:e9:b7:51:27:c2:0b:cd:90:54:36:21:2d:11:63:d0:c5:
         7c:b6:71:06:bb:e0:5b:ee:ec:5f:5f:dd:71:47:fe:eb:86:63:
         a2:53:07:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXrAP65Jv1eCephRF/cxqrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNmQxZjExMGY1OTVjNjM1Y2NiZTlmYmIzMDkwZGJiNWZj
ZmJkNmUwHhcNMjUwMzMxMDcwMTA1WhcNMjUwNDAxMDcwMTA1WjAzMTEwLwYDVQQD
EygzZmZlYjA4NDk3Y2IxZDYxM2E5MDIwNWViNDliMzI3Mzk3NWZjY2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosUwls+kcSLxIed5pXx7JTjU6Qvw
M+BSbbzCEmOhtiZT9siY2uHAtJByoNqw2g2MfYUmvCtorRs4sr6yvRYlwgKngdjm
T37/f1znfcy93/rnPljDYWPFDpUc90UCTU5PewSCsEvYewZ8BG5Tff2joeCNGH0r
UP0fPO4gjnHbEX8E41rg91Ntq54oX0YoiNE0EWBiTH/mbkZP3SRUb3WlGxEykGk3
bJUblt7GBdN5vbKGsK3Fo/ba+9BEyXVNl8cWsV3BjGw2KdXm+kYCVkxQO68PqOy0
ag+uqdJ/9zHG2ZREmC91YY+lCBce3oD1JMk0XvTwHsTelUj2bPfUffTotwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/+sISXyx1hOpAgXrSbMnOXX8zkMB8GA1UdIwQY
MBaAFG1tHxEPWVxjXMvp+7MJDbtfz71uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlcwZkVROVpYR05jeS1uN3N3a051MV9Qdlc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9iMjQ3ZGEtMzE5Mi00ODEzLWJmZjQt
MmM3ZTJlNGE5NzQ3LzEvYlcwZkVROVpYR05jeS1uN3N3a051MV9Qdlc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9iMjQ3ZGEtMzE5Mi00ODEzLWJmZjQtMmM3ZTJlNGE5NzQ3
LzEvYlcwZkVROVpYR05jeS1uN3N3a051MV9Qdlc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRZ1ml91
K/iFgcmihDmvjNpdVlb6EzgY8565ovaPvpLUQq03xRXtDVbuF9nQYlooKa2iMjRh
rZ1zZd9wTk2viILuEy6nnRsiOEg6oM62dO/XI518Rc7TuJav0/8GsK2Twj4N/SHI
1K+NUxpSfiL+qyg8YkLpCZ3QIPdOM/xMRYO4BZKFCRINF+Fkkhm5ijdNUjIeWTJg
dWXyPTEdyaQYxQGEEv8vLJOk778mSKN6PXYUGwbjpPHkOdz+kKszoI3/1YTtyfdG
2HhxP5uUiiYyf4w2VUrKdTUTD1Xpt1EnwgvNkFQ2IS0RY9DFfLZxBrvgW+7sX1/d
cUf+64ZjolMHXQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:26 2025 by rpki-client