Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft
File:                     cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft (raw, json)
Hash identifier:          HyAmM9/qAWYHr3NT7E4TcI+DzEy4kHWbyDJOCe9grIw=
Subject key identifier:   BA:9A:F8:15:5E:F5:A3:84:22:38:6F:8F:55:9F:B8:E1:82:B7:BC:32
Authority key identifier: 71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55
Certificate issuer:       /CN=712d0af87b0662f31e483e01efefc02a74326355
Certificate serial:       0193B9E2D3BA09B49766EB67EA4B6E928577
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft
Manifest number:          0E07
Signing time:             Thu 12 Dec 2024 08:01:10 +0000
Manifest this update:     Thu 12 Dec 2024 08:01:10 +0000
Manifest next update:     Fri 13 Dec 2024 08:01:10 +0000
Files and hashes:         1: cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl (hash: zMumuJOmnPDLn7tFTyvgqBzak1E9zPsNCAdpnROGMWg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:b9:e2:d3:ba:09:b4:97:66:eb:67:ea:4b:6e:92:85:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712d0af87b0662f31e483e01efefc02a74326355
        Validity
            Not Before: Dec 12 08:01:10 2024 GMT
            Not After : Dec 13 08:01:10 2024 GMT
        Subject: CN=ba9af8155ef5a38422386f8f559fb8e182b7bc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:6c:9f:47:97:54:63:04:03:cc:00:40:d8:
                    ed:65:97:0e:7f:69:38:3a:51:99:cf:88:eb:48:2e:
                    e8:f1:3c:26:09:50:a5:19:55:2c:e7:3f:8c:c5:2e:
                    9c:cc:82:32:2e:c3:57:c7:58:52:b0:7f:91:2f:4f:
                    32:e2:a9:4c:b9:e3:67:9b:1c:99:54:0d:d7:77:81:
                    6c:f8:6c:de:0a:c6:c2:07:f9:a4:0b:56:0c:0a:9f:
                    99:b0:91:64:29:71:cc:9d:49:13:08:89:62:12:2e:
                    7b:48:ff:d2:46:84:7d:a0:7d:59:11:ca:0a:01:be:
                    64:23:65:20:5f:ff:dd:e7:ff:28:28:67:0f:93:c2:
                    9e:48:ca:16:db:c6:bb:a0:e6:e2:38:59:ff:ad:da:
                    ad:f2:d3:ff:f5:55:85:40:0b:a4:e1:dc:43:ee:16:
                    64:a5:26:bf:43:57:86:2c:f1:94:13:d9:d6:68:5c:
                    e1:8b:19:2f:fd:fc:90:03:e1:aa:b1:e8:86:03:eb:
                    c8:20:09:3d:9a:ca:8d:76:93:00:27:08:99:a2:ad:
                    69:56:a5:09:0f:76:95:70:cc:f1:4d:6f:64:85:e5:
                    4b:a1:ca:e2:5f:f8:8e:fa:1d:19:1f:49:11:fd:88:
                    57:2b:86:0d:84:15:12:58:26:c8:74:ed:1f:84:c1:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9A:F8:15:5E:F5:A3:84:22:38:6F:8F:55:9F:B8:E1:82:B7:BC:32
            X509v3 Authority Key Identifier:
                keyid:71:2D:0A:F8:7B:06:62:F3:1E:48:3E:01:EF:EF:C0:2A:74:32:63:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS0K-HsGYvMeSD4B7-_AKnQyY1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0e83e8-151d-4f80-b61d-17e0d24c32c1/1/cS0K-HsGYvMeSD4B7-_AKnQyY1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:e6:91:85:2f:11:f3:c9:ba:ce:30:f7:91:cd:bb:a5:db:
         c5:64:5a:8f:fa:0e:6f:81:18:d0:a8:9d:5c:c8:e7:9d:2c:d3:
         29:15:ab:cc:00:23:fb:01:44:e2:26:d1:a9:d1:4b:06:8b:6c:
         fc:d7:04:e8:b5:3c:54:f2:51:3f:ec:fb:d9:e4:af:53:c4:8a:
         b7:bd:7f:b8:bf:5d:e3:f2:d1:27:87:19:49:f3:bf:14:13:cc:
         0f:36:ba:ba:97:01:ad:a9:3f:99:a5:22:ed:ba:6f:e8:24:34:
         1b:fd:ca:bc:64:c8:11:e1:d6:57:18:53:f0:fd:26:72:a9:a1:
         e1:14:f7:11:3c:dc:06:71:16:c0:8a:c2:83:34:08:8a:74:72:
         44:fd:b1:14:9a:56:ed:60:ba:e3:6b:bf:b9:6f:20:e9:7d:10:
         60:30:03:13:87:46:f4:0b:96:d9:de:61:b8:d8:7a:5f:14:58:
         3b:1a:44:40:e5:0c:40:68:10:cc:2d:e7:42:41:b9:43:1a:29:
         51:82:41:f1:48:c7:6b:6b:2b:6c:dd:7c:81:23:08:e0:0c:83:
         72:1f:4d:e7:02:c5:fc:88:96:e8:48:b9:b9:be:e0:b2:74:65:
         1c:66:5d:67:1d:95:1c:f7:ee:b3:6a:f5:fe:43:2d:fa:7f:94:
         e5:c2:10:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZO54tO6CbSXZutn6ktukoV3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmQwYWY4N2IwNjYyZjMxZTQ4M2UwMWVmZWZjMDJhNzQz
MjYzNTUwHhcNMjQxMjEyMDgwMTEwWhcNMjQxMjEzMDgwMTEwWjAzMTEwLwYDVQQD
EyhiYTlhZjgxNTVlZjVhMzg0MjIzODZmOGY1NTlmYjhlMTgyYjdiYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6dsn0eXVGMEA8wAQNjtZZcOf2k4
OlGZz4jrSC7o8TwmCVClGVUs5z+MxS6czIIyLsNXx1hSsH+RL08y4qlMueNnmxyZ
VA3Xd4Fs+GzeCsbCB/mkC1YMCp+ZsJFkKXHMnUkTCIliEi57SP/SRoR9oH1ZEcoK
Ab5kI2UgX//d5/8oKGcPk8KeSMoW28a7oObiOFn/rdqt8tP/9VWFQAuk4dxD7hZk
pSa/Q1eGLPGUE9nWaFzhixkv/fyQA+GqseiGA+vIIAk9msqNdpMAJwiZoq1pVqUJ
D3aVcMzxTW9kheVLocriX/iO+h0ZH0kR/YhXK4YNhBUSWCbIdO0fhME7eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqa+BVe9aOEIjhvj1WfuOGCt7wyMB8GA1UdIwQY
MBaAFHEtCvh7BmLzHkg+Ae/vwCp0MmNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1MwSy1Ic0dZdk1lU0Q0QjctX0FLblF5WTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wZTgzZTgtMTUxZC00ZjgwLWI2MWQt
MTdlMGQyNGMzMmMxLzEvY1MwSy1Ic0dZdk1lU0Q0QjctX0FLblF5WTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wZTgzZTgtMTUxZC00ZjgwLWI2MWQtMTdlMGQyNGMzMmMx
LzEvY1MwSy1Ic0dZdk1lU0Q0QjctX0FLblF5WTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmvmkYUv
EfPJus4w95HNu6XbxWRaj/oOb4EY0KidXMjnnSzTKRWrzAAj+wFE4ibRqdFLBots
/NcE6LU8VPJRP+z72eSvU8SKt71/uL9d4/LRJ4cZSfO/FBPMDza6upcBrak/maUi
7bpv6CQ0G/3KvGTIEeHWVxhT8P0mcqmh4RT3ETzcBnEWwIrCgzQIinRyRP2xFJpW
7WC642u/uW8g6X0QYDADE4dG9AuW2d5huNh6XxRYOxpEQOUMQGgQzC3nQkG5Qxop
UYJB8UjHa2srbN18gSMI4AyDch9N5wLF/IiW6Ei5ub7gsnRlHGZdZx2VHPfus2r1
/kMt+n+U5cIQvw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:53 2025 by rpki-client