Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft
File:                     ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft (raw, json)
Hash identifier:          6KMDKf+08+3mFYSl8mDgqL0aO5o3NbgDaeplDE6lA1o=
Subject key identifier:   11:DA:76:7D:D5:96:9D:9B:37:40:AB:F6:9C:2E:A4:C7:63:C0:46:A0
Authority key identifier: 7B:01:9C:40:38:6A:69:E2:90:FA:C1:66:37:15:65:FD:8D:92:E0:F6
Certificate issuer:       /CN=7b019c40386a69e290fac166371565fd8d92e0f6
Certificate serial:       01909F4FC714EA61F5C19E9FE0DE46619FD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft
Manifest number:          1172
Signing time:             Thu 11 Jul 2024 01:02:03 +0000
Manifest this update:     Thu 11 Jul 2024 01:02:03 +0000
Manifest next update:     Fri 12 Jul 2024 01:02:03 +0000
Files and hashes:         1: RzpY0h0SjyyQU6Y6Y6uFpwSRck4.roa (hash: zB0O9usn9jDIjtx/kiRHS/n3jlqX9V94Dd15COV7K3E=)
                          2: ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.crl (hash: sFAP4UUnNgu3ItCDCJ4r3Elt2G50pEQi/l4cYBXB3MA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9f:4f:c7:14:ea:61:f5:c1:9e:9f:e0:de:46:61:9f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b019c40386a69e290fac166371565fd8d92e0f6
        Validity
            Not Before: Jul 11 01:02:03 2024 GMT
            Not After : Jul 12 01:02:03 2024 GMT
        Subject: CN=11da767dd5969d9b3740abf69c2ea4c763c046a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:40:8d:25:cb:0d:17:93:24:ba:de:97:45:
                    ae:6a:3a:ab:55:c1:bd:1e:61:9e:7b:ae:90:8c:0d:
                    91:bc:1b:88:37:ee:7c:c9:72:5f:41:cf:52:c9:df:
                    da:0c:0a:7b:d9:2d:29:de:63:e6:88:79:b8:7b:cd:
                    20:e2:c5:47:59:48:87:80:c4:ca:01:90:3c:de:74:
                    5c:1e:1f:94:ee:96:6b:f9:c6:8f:c2:c1:5b:7a:98:
                    2d:df:e3:b3:75:ff:77:11:a5:a3:58:59:f2:87:c0:
                    39:52:26:be:3a:cc:ab:a1:a7:da:3d:58:93:20:f1:
                    08:48:2c:04:cb:dc:c9:7b:35:db:45:83:0d:69:7f:
                    5a:29:1c:44:6a:8b:1e:68:b6:66:56:c1:fe:30:37:
                    cf:83:2c:26:77:eb:1a:5d:51:4b:a3:44:7a:a3:12:
                    5c:2b:68:f3:49:d4:81:23:9d:c9:04:d7:b7:55:9c:
                    d0:95:07:4d:74:cf:84:e6:b6:c4:12:75:86:34:49:
                    8e:ff:c9:22:91:f0:0b:5e:80:6b:39:ce:0f:ff:24:
                    74:52:ef:f3:6e:09:4c:88:13:c3:bd:c4:59:3d:1f:
                    ee:e2:33:e5:9d:27:cb:b9:9a:64:0f:d2:bb:39:c5:
                    5e:f5:9a:cb:df:ad:ed:4f:97:a8:1e:a3:a1:f6:2a:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DA:76:7D:D5:96:9D:9B:37:40:AB:F6:9C:2E:A4:C7:63:C0:46:A0
            X509v3 Authority Key Identifier:
                keyid:7B:01:9C:40:38:6A:69:E2:90:FA:C1:66:37:15:65:FD:8D:92:E0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5c1822-6ff9-4847-86b0-76ffab9b10aa/1/ewGcQDhqaeKQ-sFmNxVl_Y2S4PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:80:f9:63:cc:f2:61:c2:3a:df:ec:e0:d0:c7:50:d2:6a:
         38:cd:ff:51:b9:3a:74:5b:68:bd:da:fc:a7:38:82:10:c2:fd:
         8a:73:58:81:74:1f:7c:f3:1f:76:9a:b5:d4:06:19:96:45:9a:
         aa:2c:7f:dc:8d:f2:49:9c:5f:24:8b:6b:fd:20:a6:98:3f:75:
         3d:29:ea:0b:2e:52:6c:54:94:16:45:11:d7:c0:61:16:21:62:
         5e:e8:28:5a:b0:d2:17:48:11:d9:fb:d0:51:d4:e7:2c:d8:29:
         0c:6c:96:65:c4:aa:a8:60:c4:5f:8a:6d:1f:f8:dd:13:22:02:
         46:c0:6b:e9:55:0f:45:1a:68:47:9a:d3:ca:4c:11:e9:f3:3c:
         df:49:01:ac:36:02:0f:9a:a4:91:35:b7:50:2a:09:15:45:08:
         1c:7b:84:5e:05:e5:04:2e:6e:fd:b2:52:b3:92:b9:29:9a:0a:
         34:41:75:85:a9:a8:ed:bc:3e:ea:8d:93:16:8d:6f:1f:75:a1:
         fb:f4:85:8b:d9:fc:57:b0:d5:c3:de:90:e1:b9:be:ea:6b:5f:
         5f:21:28:70:19:56:5d:f7:b8:1f:23:61:52:3a:69:de:62:0c:
         5d:a0:e0:50:77:ee:cf:12:97:7e:5f:31:0c:cb:12:e4:6e:70:
         5a:fa:89:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCfT8cU6mH1wZ6f4N5GYZ/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMDE5YzQwMzg2YTY5ZTI5MGZhYzE2NjM3MTU2NWZkOGQ5
MmUwZjYwHhcNMjQwNzExMDEwMjAzWhcNMjQwNzEyMDEwMjAzWjAzMTEwLwYDVQQD
EygxMWRhNzY3ZGQ1OTY5ZDliMzc0MGFiZjY5YzJlYTRjNzYzYzA0NmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte5AjSXLDReTJLrel0WuajqrVcG9
HmGee66QjA2RvBuIN+58yXJfQc9Syd/aDAp72S0p3mPmiHm4e80g4sVHWUiHgMTK
AZA83nRcHh+U7pZr+caPwsFbepgt3+Ozdf93EaWjWFnyh8A5Uia+OsyroafaPViT
IPEISCwEy9zJezXbRYMNaX9aKRxEaoseaLZmVsH+MDfPgywmd+saXVFLo0R6oxJc
K2jzSdSBI53JBNe3VZzQlQdNdM+E5rbEEnWGNEmO/8kikfALXoBrOc4P/yR0Uu/z
bglMiBPDvcRZPR/u4jPlnSfLuZpkD9K7OcVe9ZrL363tT5eoHqOh9irc/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBHadn3Vlp2bN0Cr9pwupMdjwEagMB8GA1UdIwQY
MBaAFHsBnEA4amnikPrBZjcVZf2NkuD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXdHY1FEaHFhZUtRLXNGbU54VmxfWTJTNFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81YzE4MjItNmZmOS00ODQ3LTg2YjAt
NzZmZmFiOWIxMGFhLzEvZXdHY1FEaHFhZUtRLXNGbU54VmxfWTJTNFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81YzE4MjItNmZmOS00ODQ3LTg2YjAtNzZmZmFiOWIxMGFh
LzEvZXdHY1FEaHFhZUtRLXNGbU54VmxfWTJTNFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHGA+WPM
8mHCOt/s4NDHUNJqOM3/Ubk6dFtovdr8pziCEML9inNYgXQffPMfdpq11AYZlkWa
qix/3I3ySZxfJItr/SCmmD91PSnqCy5SbFSUFkUR18BhFiFiXugoWrDSF0gR2fvQ
UdTnLNgpDGyWZcSqqGDEX4ptH/jdEyICRsBr6VUPRRpoR5rTykwR6fM830kBrDYC
D5qkkTW3UCoJFUUIHHuEXgXlBC5u/bJSs5K5KZoKNEF1hamo7bw+6o2TFo1vH3Wh
+/SFi9n8V7DVw96Q4bm+6mtfXyEocBlWXfe4HyNhUjpp3mIMXaDgUHfuzxKXfl8x
DMsS5G5wWvqJPw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:47:53 2025 by rpki-client