Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File:                     ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier:          O/cLiwI3H0kgIip82z4EkYv53S61Ji3E3BdG6VUfdi0=
Subject key identifier:   D2:BA:2E:8E:F4:95:57:9B:7A:97:36:F4:23:17:80:1C:EC:7C:EC:09
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       0195E0B46E6A3FF8890F4F9C308EC9728B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number:          0B85
Signing time:             Sat 29 Mar 2025 07:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:15 +0000
Files and hashes:         1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=)
                          2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: 2XtQHqSvT/FSorJNKlPNFxBaoqGbU5aqbmPBFxOTdIc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:6e:6a:3f:f8:89:0f:4f:9c:30:8e:c9:72:8b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: Mar 29 07:01:15 2025 GMT
            Not After : Mar 30 07:01:15 2025 GMT
        Subject: CN=d2ba2e8ef495579b7a9736f42317801cec7cec09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:1e:8f:e9:62:f5:4d:5f:2b:44:b7:72:3f:
                    0d:0b:3c:07:1c:94:cd:14:da:71:5c:46:d8:c2:89:
                    37:8c:50:f8:5d:b3:7a:6c:5b:4c:29:30:ce:c0:9a:
                    33:6b:20:17:b3:86:ed:9a:32:fc:59:5b:bd:d0:06:
                    7f:03:76:57:6c:cb:e9:31:6e:9b:c9:3b:f2:44:6c:
                    66:73:22:56:47:fd:65:07:bc:ce:26:30:27:1c:5c:
                    ea:93:aa:e2:04:36:0e:b1:2a:fb:31:39:6c:34:37:
                    92:ab:03:a3:5e:fd:66:9c:18:17:63:cf:bd:f9:63:
                    e9:38:7f:45:d1:e8:1f:27:b3:a4:15:dc:85:c2:33:
                    d2:f6:a6:98:d7:97:8e:8a:64:06:db:46:a5:05:23:
                    9a:08:8e:80:6e:4f:82:c7:8d:dc:be:98:6a:b3:0c:
                    23:5f:72:ca:98:9b:ef:30:17:07:59:aa:9a:7e:32:
                    32:97:5e:e4:af:53:60:99:61:22:e2:b7:b1:41:98:
                    8c:a6:b8:54:87:e6:8c:8f:5a:d7:74:50:82:e3:03:
                    25:bd:70:bf:fa:05:2b:e5:dd:2c:36:ff:5d:a3:c8:
                    d6:c2:34:cc:62:3e:d4:be:ff:2b:e9:dd:e1:24:ca:
                    45:13:2c:00:91:28:60:4d:fe:82:90:19:d0:94:72:
                    30:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BA:2E:8E:F4:95:57:9B:7A:97:36:F4:23:17:80:1C:EC:7C:EC:09
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:66:e5:ad:10:b4:66:dd:eb:0a:cb:44:bb:f0:1d:34:bc:03:
         96:25:39:e3:bc:05:27:bf:59:18:25:2e:f5:a0:5b:e1:d7:07:
         3e:b2:d4:f6:a1:a5:6c:9c:e9:20:18:03:07:f7:50:a6:d1:71:
         ee:ec:5b:72:24:e0:b0:03:cc:e9:cb:0c:42:fb:4a:f1:01:26:
         86:bd:ad:63:9e:1b:85:ca:5a:0b:b2:ef:ca:e2:4f:5d:ed:13:
         fb:2a:0f:e2:e0:42:5b:55:12:b8:3b:cb:29:eb:8a:78:57:4d:
         3b:38:72:9f:7b:ac:0d:0a:f9:5f:c6:8a:ce:4c:15:bd:f0:f1:
         b0:cb:4f:3d:6a:b5:95:bb:4d:d5:86:41:18:ac:13:36:a9:cb:
         6f:60:61:b3:a7:e9:06:ae:d5:48:cb:46:2c:32:fb:a9:2b:99:
         eb:17:4f:e7:51:2b:d2:a1:b4:fa:33:0a:9a:2e:f8:b1:7c:c0:
         24:10:c9:81:34:d5:0d:46:8d:b0:f4:7d:55:4e:f8:05:78:95:
         87:20:c1:b9:01:d9:1a:42:04:52:5b:6f:26:4e:d6:00:8f:a4:
         7a:d7:67:60:46:c7:13:9c:ec:dd:ad:5a:1e:38:a4:4f:f5:e7:
         d9:34:b4:89:af:de:2e:ab:72:ef:81:92:c6:81:37:70:5b:87:
         08:a2:38:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgtG5qP/iJD0+cMI7JcouVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1
MmJiOTQwHhcNMjUwMzI5MDcwMTE1WhcNMjUwMzMwMDcwMTE1WjAzMTEwLwYDVQQD
EyhkMmJhMmU4ZWY0OTU1NzliN2E5NzM2ZjQyMzE3ODAxY2VjN2NlYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtowej+li9U1fK0S3cj8NCzwHHJTN
FNpxXEbYwok3jFD4XbN6bFtMKTDOwJozayAXs4btmjL8WVu90AZ/A3ZXbMvpMW6b
yTvyRGxmcyJWR/1lB7zOJjAnHFzqk6riBDYOsSr7MTlsNDeSqwOjXv1mnBgXY8+9
+WPpOH9F0egfJ7OkFdyFwjPS9qaY15eOimQG20alBSOaCI6Abk+Cx43cvphqswwj
X3LKmJvvMBcHWaqafjIyl17kr1NgmWEi4rexQZiMprhUh+aMj1rXdFCC4wMlvXC/
+gUr5d0sNv9do8jWwjTMYj7Uvv8r6d3hJMpFEywAkShgTf6CkBnQlHIwoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNK6Lo70lVebepc29CMXgBzsfOwJMB8GA1UdIwQY
MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt
YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk
LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGblrRC0
Zt3rCstEu/AdNLwDliU547wFJ79ZGCUu9aBb4dcHPrLU9qGlbJzpIBgDB/dQptFx
7uxbciTgsAPM6csMQvtK8QEmhr2tY54bhcpaC7LvyuJPXe0T+yoP4uBCW1USuDvL
KeuKeFdNOzhyn3usDQr5X8aKzkwVvfDxsMtPPWq1lbtN1YZBGKwTNqnLb2Bhs6fp
Bq7VSMtGLDL7qSuZ6xdP51Er0qG0+jMKmi74sXzAJBDJgTTVDUaNsPR9VU74BXiV
hyDBuQHZGkIEUltvJk7WAI+ketdnYEbHE5zs3a1aHjikT/Xn2TS0ia/eLqty74GS
xoE3cFuHCKI4og==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:33:43 2025 by rpki-client