Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/da2df1-83c5-476b-aaee-6f87accaf2e3/1/L3O0blQnf7rbE4O-QkYT1vXe0mo.mft
File:                     L3O0blQnf7rbE4O-QkYT1vXe0mo.mft (raw, json)
Hash identifier:          H6WjHOTahYbK5bkdx7a+qjg5TCe9j/skh8hel4x3wXE=
Subject key identifier:   17:03:AF:26:D7:EB:ED:73:36:02:45:AE:53:FC:2B:EC:55:75:95:E2
Authority key identifier: 2F:73:B4:6E:54:27:7F:BA:DB:13:83:BE:42:46:13:D6:F5:DE:D2:6A
Certificate issuer:       /CN=2f73b46e54277fbadb1383be424613d6f5ded26a
Certificate serial:       018C8EA2E84606DAEB1D7828144D8F268DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3O0blQnf7rbE4O-QkYT1vXe0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/da2df1-83c5-476b-aaee-6f87accaf2e3/1/L3O0blQnf7rbE4O-QkYT1vXe0mo.mft
Manifest number:          01
Signing time:             Thu 21 Dec 2023 23:08:10 +0000
Manifest this update:     Thu 21 Dec 2023 23:08:10 +0000
Manifest next update:     Fri 22 Dec 2023 23:08:10 +0000
Files and hashes:         1: L3O0blQnf7rbE4O-QkYT1vXe0mo.crl (hash: 4ApoNMV3hjLx/Lettut+hbQGnP/Fguetd0gGTUD+AQs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:8e:a2:e8:46:06:da:eb:1d:78:28:14:4d:8f:26:8d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f73b46e54277fbadb1383be424613d6f5ded26a
        Validity
            Not Before: Dec 21 23:08:10 2023 GMT
            Not After : Dec 22 23:08:10 2023 GMT
        Subject: CN=1703af26d7ebed73360245ae53fc2bec557595e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:95:2c:04:95:de:a4:30:78:95:d8:fa:b8:
                    f1:64:0b:da:1b:6c:5c:b1:d8:96:f2:a6:95:95:e2:
                    98:d7:e9:20:03:94:71:e8:1a:09:de:d3:9b:9a:31:
                    38:1b:e3:ac:66:33:c7:68:d3:25:96:32:78:13:c8:
                    91:ae:da:52:ff:b8:0c:ca:84:d6:67:8e:5f:cb:8f:
                    77:09:b2:ca:3e:d7:73:07:55:3b:9b:cf:9c:e4:f2:
                    80:34:f7:c9:9a:b1:7f:e4:73:cf:68:78:47:b6:b2:
                    4c:c2:df:fb:e6:9b:93:de:1d:4d:b2:33:f8:75:ab:
                    bf:3a:11:b9:dc:1a:f7:fc:e3:75:f1:ad:fc:6a:77:
                    a6:01:8d:71:08:5f:4d:00:56:1f:60:06:02:d9:40:
                    0a:14:df:27:9b:d5:82:3b:e0:7b:f6:19:a4:19:04:
                    2f:eb:de:bf:03:4d:d7:ab:dc:b7:ff:3d:90:ee:79:
                    7b:f1:f7:2f:16:03:c8:a0:33:32:08:31:95:74:86:
                    e6:93:19:f1:da:dd:17:9d:71:c9:e0:b8:8f:ef:1b:
                    32:a4:ea:87:cd:d9:93:0d:82:51:5b:99:16:54:ea:
                    2e:f6:ad:45:0b:3f:2b:19:0c:f7:3d:9c:46:a0:9b:
                    ad:25:16:7e:77:7c:35:b6:db:ba:4c:a5:18:d1:d5:
                    15:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:03:AF:26:D7:EB:ED:73:36:02:45:AE:53:FC:2B:EC:55:75:95:E2
            X509v3 Authority Key Identifier:
                keyid:2F:73:B4:6E:54:27:7F:BA:DB:13:83:BE:42:46:13:D6:F5:DE:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3O0blQnf7rbE4O-QkYT1vXe0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/da2df1-83c5-476b-aaee-6f87accaf2e3/1/L3O0blQnf7rbE4O-QkYT1vXe0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/da2df1-83c5-476b-aaee-6f87accaf2e3/1/L3O0blQnf7rbE4O-QkYT1vXe0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:49:73:e7:80:a2:c4:0d:33:3c:c5:75:70:94:4b:f6:d5:2d:
         74:b2:cd:18:f3:5d:d0:8e:e3:9f:ab:84:f5:19:97:7e:cd:d1:
         3b:74:e4:09:3d:bc:a3:e5:e8:a2:d6:1f:2f:af:16:cc:56:94:
         87:3a:60:86:b3:83:44:bc:a7:53:a9:e4:ca:45:91:cd:9f:d2:
         6e:4a:e9:08:ca:99:a0:63:2d:ec:81:b6:f2:76:e9:0e:bc:72:
         a4:fc:5b:cc:cd:47:28:76:b3:c1:1f:92:c9:54:1c:2d:fa:de:
         ee:da:ed:b2:cc:a0:4a:29:5b:0b:32:a5:69:fb:f1:87:67:ea:
         14:69:11:cc:5c:b8:76:4e:2c:aa:2d:6f:93:da:f7:53:ae:9a:
         84:ab:77:23:a7:d5:a3:85:e1:2c:a1:26:f5:48:d2:39:5a:4b:
         82:a5:ea:69:11:13:9e:1e:b7:16:e7:35:76:c8:18:35:0f:5e:
         ca:ad:33:c2:e7:17:9e:80:76:43:50:52:9f:bd:a3:cf:c5:8d:
         20:34:92:3d:68:a7:02:3b:aa:76:9e:7b:15:e5:3a:7a:ac:2d:
         a3:47:eb:77:2d:e8:e7:8a:12:45:22:0e:ba:cb:e7:ba:8e:21:
         dc:9d:06:8c:04:62:60:b7:e8:12:2f:7a:cb:07:2a:d7:3d:e9:
         69:70:72:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyOouhGBtrrHXgoFE2PJo3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzNiNDZlNTQyNzdmYmFkYjEzODNiZTQyNDYxM2Q2ZjVk
ZWQyNmEwHhcNMjMxMjIxMjMwODEwWhcNMjMxMjIyMjMwODEwWjAzMTEwLwYDVQQD
EygxNzAzYWYyNmQ3ZWJlZDczMzYwMjQ1YWU1M2ZjMmJlYzU1NzU5NWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8WVLASV3qQweJXY+rjxZAvaG2xc
sdiW8qaVleKY1+kgA5Rx6BoJ3tObmjE4G+OsZjPHaNMlljJ4E8iRrtpS/7gMyoTW
Z45fy493CbLKPtdzB1U7m8+c5PKANPfJmrF/5HPPaHhHtrJMwt/75puT3h1NsjP4
dau/OhG53Br3/ON18a38anemAY1xCF9NAFYfYAYC2UAKFN8nm9WCO+B79hmkGQQv
696/A03Xq9y3/z2Q7nl78fcvFgPIoDMyCDGVdIbmkxnx2t0XnXHJ4LiP7xsypOqH
zdmTDYJRW5kWVOou9q1FCz8rGQz3PZxGoJutJRZ+d3w1ttu6TKUY0dUV8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcDrybX6+1zNgJFrlP8K+xVdZXiMB8GA1UdIwQY
MBaAFC9ztG5UJ3+62xODvkJGE9b13tJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNPMGJsUW5mN3JiRTRPLVFrWVQxdlhlMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kYTJkZjEtODNjNS00NzZiLWFhZWUt
NmY4N2FjY2FmMmUzLzEvTDNPMGJsUW5mN3JiRTRPLVFrWVQxdlhlMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kYTJkZjEtODNjNS00NzZiLWFhZWUtNmY4N2FjY2FmMmUz
LzEvTDNPMGJsUW5mN3JiRTRPLVFrWVQxdlhlMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcklz54Ci
xA0zPMV1cJRL9tUtdLLNGPNd0I7jn6uE9RmXfs3RO3TkCT28o+XootYfL68WzFaU
hzpghrODRLynU6nkykWRzZ/SbkrpCMqZoGMt7IG28nbpDrxypPxbzM1HKHazwR+S
yVQcLfre7trtssygSilbCzKlafvxh2fqFGkRzFy4dk4sqi1vk9r3U66ahKt3I6fV
o4XhLKEm9UjSOVpLgqXqaRETnh63Fuc1dsgYNQ9eyq0zwucXnoB2Q1BSn72jz8WN
IDSSPWinAjuqdp57FeU6eqwto0frdy3o54oSRSIOusvnuo4h3J0GjARiYLfoEi96
ywcq1z3paXBy8w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:24 2025 by rpki-client