Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.mft
File:                     39cDtgrGhzJW5rSCa6J6ne7KLwo.mft (raw, json)
Hash identifier:          hH4Pk3J7tTMFxfnGCnhOjVQBJBus+qMerPxKtbP2vJo=
Subject key identifier:   3B:82:BA:27:DF:90:08:03:B2:F1:25:DB:B7:3E:5F:99:31:2C:E5:53
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Certificate issuer:       /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial:       018B89E687AF6D5DDC5DB8FE719E1EFEA85D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.mft
Manifest number:          08A1
Signing time:             Wed 01 Nov 2023 08:01:08 +0000
Manifest this update:     Wed 01 Nov 2023 08:01:08 +0000
Manifest next update:     Thu 02 Nov 2023 08:01:08 +0000
Files and hashes:         1: 39cDtgrGhzJW5rSCa6J6ne7KLwo.crl (hash: G/fP8rV/I3ewkMz/r7BZFHSUrx3g9JYkjO9nQjIqkCs=)
                          2: 4yVfbPp7Kc9NuATQt83mDowSAbk.roa (hash: oVMLgI9gnFWm6sLHQJh/DJbcsXawxYeL22XappmRMCM=)
                          3: 7LitmnPr7P35hUML3LByHYUtWSs.roa (hash: u2sP5pM1SE6fhwY8zRRGrI3fKrXT9BfwAHT62VTant8=)
                          4: BOW96Lpt0xlVSo91KrHpze3uJSY.roa (hash: BRHwZTJZnHoBUS0TmXwAbpkl69sQMNJfFtRP98NwTtU=)
                          5: CFavrYEYGlc2V9V8V1XC2gHJCt4.roa (hash: oG3l2iwgFkgag7uy4inGEI3YimakcRJ0LVEQRCdhGGI=)
                          6: M4-IvB3UC8rtS0rxe63VoL01Zfs.roa (hash: FzHFKr4ajR6Cy6lwE7ivk6gzufkDJ/eaCAEEUs6kLAg=)
                          7: R_HOCw5P73NNB5qfzoYE_3ubShI.roa (hash: tYdokgxqk7M5jXTjwLBwO26v/Z/lq4g8azhuMqo8pVU=)
                          8: So5T8XfWerZCWM7PbH4nnckXOmg.roa (hash: lcsWzssnfCVcXKwTBWx0dd95V9iVdcS5bEcL7GmfB/g=)
                          9: Ud44FA6nXN0aIWmGBdx3TpPYy2A.roa (hash: 5c0KA4lb0FkrJNeNHBkTh/r7Ks2iW2eBYrhOZ8+264o=)
                          10: XlksBlzf5JtgpXoBsjtKq7r22H4.roa (hash: YuC1lS4saUiK+ops1Jpnj2UuzAgFcK9Un5lKU2MiWoo=)
                          11: lJMqmo9D9dRnYRlieF0kv0mPPKE.roa (hash: 2rLW4fzqa7s5IPc3OOLLEKlkayzskgNWawx1uIblY9k=)
                          12: mXVBaEfwquQfaISogdlOXYd0UuE.roa (hash: 5msJuc+8XusQW5g2WBKSU64Ld6OTTqZrKLckCYgn+k8=)
                          13: yi7hisRxs84c_XdbcKi5VC2iE-w.roa (hash: RoMnq+S1uhWpfyajywr3RM/WN+7HNVq8D/Ao54tMH1g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:89:e6:87:af:6d:5d:dc:5d:b8:fe:71:9e:1e:fe:a8:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
        Validity
            Not Before: Nov  1 08:01:08 2023 GMT
            Not After : Nov  2 08:01:08 2023 GMT
        Subject: CN=3b82ba27df900803b2f125dbb73e5f99312ce553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ca:23:d1:f6:7c:87:4e:bf:57:8c:a3:c2:a8:
                    9d:fd:d4:72:f3:37:0f:00:aa:8b:07:c2:5a:f0:be:
                    66:44:a4:34:d7:19:4b:5f:4c:88:a4:32:3a:70:f1:
                    4a:c5:c2:91:e9:ce:90:5f:3a:c9:2d:83:24:31:77:
                    b9:d9:dc:8b:1b:15:f5:3b:ab:4e:a8:19:76:53:3f:
                    d2:a8:51:9d:f1:48:c6:a9:78:6e:62:ad:31:8e:e3:
                    26:bc:9e:86:ba:7c:06:b0:55:a5:20:96:ff:58:17:
                    0f:ea:6e:27:6c:aa:bb:b0:af:b5:6c:c2:d0:e3:37:
                    de:d1:8b:d3:49:18:8a:d5:48:be:f7:35:b8:77:97:
                    3f:8c:f4:97:a1:53:40:9a:b7:ed:7d:23:2e:46:2b:
                    56:59:5a:d9:e5:f6:78:f6:ad:47:b5:45:82:b3:c0:
                    6d:dd:f9:5e:9e:7c:fd:53:d8:5f:42:e1:6b:14:28:
                    46:07:8c:19:e4:24:b1:f9:ae:00:68:94:1c:0d:2a:
                    26:1b:87:76:86:a7:4d:17:7b:1e:ea:6a:3e:3b:17:
                    3f:08:1e:1c:20:b2:04:ab:e9:10:ee:5c:67:79:2c:
                    91:3d:f9:5b:a8:de:ad:db:f7:fa:76:fa:11:ab:53:
                    81:cd:e7:79:b0:80:de:02:23:9c:73:90:1d:16:d2:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:BA:27:DF:90:08:03:B2:F1:25:DB:B7:3E:5F:99:31:2C:E5:53
            X509v3 Authority Key Identifier:
                keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:6b:60:b8:25:69:dc:e4:35:70:3d:d9:32:45:6a:b1:88:
         6e:44:42:fb:09:10:3d:c0:18:80:80:31:7f:55:a7:f4:fc:c4:
         12:b3:2d:34:75:89:05:4b:82:b0:ee:14:b6:4a:f8:9a:76:25:
         47:0d:b5:1f:b4:8a:c0:05:da:80:77:ec:20:75:01:44:12:cf:
         bc:d0:a1:06:5a:8d:b8:32:dd:58:89:03:73:ad:aa:8b:1c:1b:
         3c:f6:f5:60:32:9d:cd:4a:78:82:40:22:d5:96:f2:a9:be:86:
         47:45:a3:74:d0:90:35:ac:3e:d4:59:31:e6:19:0f:0f:3f:a2:
         6f:39:7d:fb:fe:b8:3a:da:39:df:61:e8:23:bb:9b:37:33:a0:
         6a:3d:56:84:55:39:62:ee:f5:39:eb:8a:74:f3:a4:b3:47:9b:
         34:54:2e:77:c0:0d:de:d5:ed:8d:ab:a8:3c:83:5e:7b:1b:c0:
         8d:f3:0e:6e:68:38:60:89:05:94:31:71:b5:66:ae:09:23:e4:
         23:ff:b9:54:1e:28:33:cd:46:28:4a:8a:cf:c1:36:6a:74:c2:
         32:9c:56:19:03:54:67:b1:1b:50:17:e6:bc:a1:60:2b:94:04:
         6a:b3:77:c0:90:0d:b1:02:33:38:c8:76:d1:f5:ae:fa:cc:3f:
         f3:6c:ab:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuJ5oevbV3cXbj+cZ4e/qhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDcwM2I2MGFjNjg3MzI1NmU2YjQ4MjZiYTI3YTlkZWVj
YTJmMGEwHhcNMjMxMTAxMDgwMTA4WhcNMjMxMTAyMDgwMTA4WjAzMTEwLwYDVQQD
EygzYjgyYmEyN2RmOTAwODAzYjJmMTI1ZGJiNzNlNWY5OTMxMmNlNTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMoj0fZ8h06/V4yjwqid/dRy8zcP
AKqLB8Ja8L5mRKQ01xlLX0yIpDI6cPFKxcKR6c6QXzrJLYMkMXe52dyLGxX1O6tO
qBl2Uz/SqFGd8UjGqXhuYq0xjuMmvJ6GunwGsFWlIJb/WBcP6m4nbKq7sK+1bMLQ
4zfe0YvTSRiK1Ui+9zW4d5c/jPSXoVNAmrftfSMuRitWWVrZ5fZ49q1HtUWCs8Bt
3flennz9U9hfQuFrFChGB4wZ5CSx+a4AaJQcDSomG4d2hqdNF3se6mo+Oxc/CB4c
ILIEq+kQ7lxneSyRPflbqN6t2/f6dvoRq1OBzed5sIDeAiOcc5AdFtLGowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDuCuiffkAgDsvEl27c+X5kxLOVTMB8GA1UdIwQY
MBaAFN/XA7YKxocyVua0gmuiep3uyi8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzljRHRnckdoekpXNXJTQ2E2SjZuZTdLTHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNjc4YmQtNGZlMC00YWUwLTgwZDct
NTNmMDc4OGUxYTFiLzEvMzljRHRnckdoekpXNXJTQ2E2SjZuZTdLTHdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNjc4YmQtNGZlMC00YWUwLTgwZDctNTNmMDc4OGUxYTFi
LzEvMzljRHRnckdoekpXNXJTQ2E2SjZuZTdLTHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWxrYLgl
adzkNXA92TJFarGIbkRC+wkQPcAYgIAxf1Wn9PzEErMtNHWJBUuCsO4Utkr4mnYl
Rw21H7SKwAXagHfsIHUBRBLPvNChBlqNuDLdWIkDc62qixwbPPb1YDKdzUp4gkAi
1Zbyqb6GR0WjdNCQNaw+1Fkx5hkPDz+ibzl9+/64Oto532HoI7ubNzOgaj1WhFU5
Yu71OeuKdPOks0ebNFQud8AN3tXtjauoPINeexvAjfMObmg4YIkFlDFxtWauCSPk
I/+5VB4oM81GKEqKz8E2anTCMpxWGQNUZ7EbUBfmvKFgK5QEarN3wJANsQIzOMh2
0fWu+sw/82yrgQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:20:50 2025 by rpki-client