Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
File:                     psP-xo0utonX0ElSISvQrWOdkA8.mft (raw, json)
Hash identifier:          1jyxmyamOMnY+Qn734RV6RcSDu5qPRdaajoiUgaU+XM=
Subject key identifier:   D2:43:C7:51:D0:E1:A7:05:AC:7F:FC:A1:07:43:E4:9A:74:70:97:17
Authority key identifier: A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F
Certificate issuer:       /CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
Certificate serial:       01957EDBBEFCC1255A66EFF448E4A0F56129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft
Manifest number:          02BE
Signing time:             Mon 10 Mar 2025 07:01:25 +0000
Manifest this update:     Mon 10 Mar 2025 07:01:25 +0000
Manifest next update:     Tue 11 Mar 2025 07:01:25 +0000
Files and hashes:         1: psP-xo0utonX0ElSISvQrWOdkA8.crl (hash: 0ztZqOe8+tCjuuIIfxzd75RQuivIm6u1XUzoxnr7H9k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:7e:db:be:fc:c1:25:5a:66:ef:f4:48:e4:a0:f5:61:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c3fec68d2eb689d7d04952212bd0ad639d900f
        Validity
            Not Before: Mar 10 07:01:25 2025 GMT
            Not After : Mar 11 07:01:25 2025 GMT
        Subject: CN=d243c751d0e1a705ac7ffca10743e49a74709717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a7:3a:9c:fb:a2:9d:74:f7:e8:ec:18:e0:1c:
                    e6:8b:94:a0:67:54:e7:3a:7c:c5:d9:37:b9:c4:d6:
                    03:77:35:a2:de:a1:52:5c:b2:32:b0:81:cc:c0:0a:
                    20:d9:87:26:54:ac:8a:97:c3:ea:f8:c9:a6:f4:fa:
                    10:32:5f:d7:dd:66:de:2a:be:37:66:fb:1b:25:24:
                    8a:e2:c1:e2:ef:e5:62:5f:59:95:f4:bc:d0:f2:4e:
                    a9:4e:ae:39:28:a1:06:a7:d5:b1:61:43:4f:b8:b6:
                    8b:ea:07:58:61:9b:11:9e:46:15:e9:fc:06:b6:ee:
                    a8:ba:45:69:8c:66:93:4e:38:df:1f:b9:98:de:13:
                    65:e4:c5:c6:44:f5:fa:92:6e:4a:6a:be:09:fd:74:
                    d9:2f:03:3f:3f:a5:b8:81:13:1f:91:5e:8b:3c:17:
                    6c:41:a8:0b:c2:f9:fd:e6:7b:f3:02:dc:7e:b4:bc:
                    49:64:b0:ee:09:29:64:c5:f6:05:3e:9c:62:f3:da:
                    6d:97:ba:97:6f:b5:75:77:91:2b:7d:fe:2f:a4:f0:
                    b2:14:39:23:a8:67:f3:c3:a2:46:f7:9e:16:89:78:
                    78:74:6e:1f:6a:3e:3a:a1:99:69:b9:63:87:64:ef:
                    8a:09:f8:a4:1e:46:8c:49:fd:eb:8c:d2:5b:55:c0:
                    06:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:43:C7:51:D0:E1:A7:05:AC:7F:FC:A1:07:43:E4:9A:74:70:97:17
            X509v3 Authority Key Identifier:
                keyid:A6:C3:FE:C6:8D:2E:B6:89:D7:D0:49:52:21:2B:D0:AD:63:9D:90:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psP-xo0utonX0ElSISvQrWOdkA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7042af-31aa-44a3-a636-fb6ab2ef23e5/1/psP-xo0utonX0ElSISvQrWOdkA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:30:b5:65:80:06:2c:9a:4b:b9:4b:ea:29:75:60:64:49:e5:
         6a:95:46:44:5d:83:6d:63:d5:21:7a:4f:45:e6:e1:8a:73:b3:
         a7:aa:8d:ea:8d:f8:9b:99:cc:11:ac:68:59:76:2e:c6:e6:cb:
         4d:af:bd:72:26:d2:cb:98:e5:02:fd:7e:83:49:29:e0:15:a7:
         53:71:ac:4e:ea:79:ee:00:20:70:7c:2e:f0:45:b1:0f:b3:db:
         1f:2e:cf:8d:d0:b3:12:65:99:b4:c7:a4:b4:78:4e:5c:f2:8b:
         0d:e4:a0:5a:f9:bf:86:7a:5a:b0:73:13:1d:38:c3:e3:c5:63:
         29:84:74:76:cd:ed:63:b9:de:c0:5f:f2:2f:01:b0:6c:95:bd:
         85:11:d1:19:8b:4c:42:f3:f3:9e:3d:0c:ab:ed:9d:81:c1:fb:
         34:a4:9a:78:f0:a1:d1:5d:74:03:eb:cd:06:41:6c:0d:58:80:
         26:05:68:50:9d:84:b9:17:c4:17:a7:25:94:40:64:54:8f:14:
         25:c6:13:84:25:7c:5d:f6:6e:02:f6:c0:10:ce:c6:60:2c:a8:
         81:55:fb:54:ac:8d:d9:34:84:b2:0c:ec:8a:70:9c:8f:37:de:
         e2:19:b4:ab:e4:5a:09:89:a1:4c:87:6b:cd:c2:fc:4f:6e:b8:
         7b:09:7e:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZV+2778wSVaZu/0SOSg9WEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YzNmZWM2OGQyZWI2ODlkN2QwNDk1MjIxMmJkMGFkNjM5
ZDkwMGYwHhcNMjUwMzEwMDcwMTI1WhcNMjUwMzExMDcwMTI1WjAzMTEwLwYDVQQD
EyhkMjQzYzc1MWQwZTFhNzA1YWM3ZmZjYTEwNzQzZTQ5YTc0NzA5NzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqc6nPuinXT36OwY4Bzmi5SgZ1Tn
OnzF2Te5xNYDdzWi3qFSXLIysIHMwAog2YcmVKyKl8Pq+Mmm9PoQMl/X3WbeKr43
ZvsbJSSK4sHi7+ViX1mV9LzQ8k6pTq45KKEGp9WxYUNPuLaL6gdYYZsRnkYV6fwG
tu6oukVpjGaTTjjfH7mY3hNl5MXGRPX6km5Kar4J/XTZLwM/P6W4gRMfkV6LPBds
QagLwvn95nvzAtx+tLxJZLDuCSlkxfYFPpxi89ptl7qXb7V1d5Erff4vpPCyFDkj
qGfzw6JG954WiXh4dG4faj46oZlpuWOHZO+KCfikHkaMSf3rjNJbVcAGQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJDx1HQ4acFrH/8oQdD5Jp0cJcXMB8GA1UdIwQY
MBaAFKbD/saNLraJ19BJUiEr0K1jnZAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHNQLXhvMHV0b25YMEVsU0lTdlFyV09ka0E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83MDQyYWYtMzFhYS00NGEzLWE2MzYt
ZmI2YWIyZWYyM2U1LzEvcHNQLXhvMHV0b25YMEVsU0lTdlFyV09ka0E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83MDQyYWYtMzFhYS00NGEzLWE2MzYtZmI2YWIyZWYyM2U1
LzEvcHNQLXhvMHV0b25YMEVsU0lTdlFyV09ka0E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDC1ZYAG
LJpLuUvqKXVgZEnlapVGRF2DbWPVIXpPRebhinOzp6qN6o34m5nMEaxoWXYuxubL
Ta+9cibSy5jlAv1+g0kp4BWnU3GsTup57gAgcHwu8EWxD7PbHy7PjdCzEmWZtMek
tHhOXPKLDeSgWvm/hnpasHMTHTjD48VjKYR0ds3tY7newF/yLwGwbJW9hRHRGYtM
QvPznj0Mq+2dgcH7NKSaePCh0V10A+vNBkFsDViAJgVoUJ2EuRfEF6cllEBkVI8U
JcYThCV8XfZuAvbAEM7GYCyogVX7VKyN2TSEsgzsinCcjzfe4hm0q+RaCYmhTIdr
zcL8T264ewl+6w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:50:42 2025 by rpki-client