Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft
File:                     DYcUK9wrPw0ISKDYALaTCxq7NLw.mft (raw, json)
Hash identifier:          Rvj4Phj/Z0WsHDDaC59OAVTjNqn3p/Lfa1RZaAZc2+k=
Subject key identifier:   C8:1C:F2:8F:1B:D6:39:22:B0:DE:45:59:97:D5:35:A4:E8:11:6F:F1
Authority key identifier: 0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC
Certificate issuer:       /CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
Certificate serial:       0191E0BE3A75851663D5C58262DE132E547C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft
Manifest number:          10B8
Signing time:             Wed 11 Sep 2024 11:00:48 +0000
Manifest this update:     Wed 11 Sep 2024 11:00:48 +0000
Manifest next update:     Thu 12 Sep 2024 11:00:48 +0000
Files and hashes:         1: 4OIH-Un4yy4-pSE4nKbPDHGPbFk.roa (hash: y2kF5QVQDo4B+KA5N0Dskl5cwATEuYWUah4UN3OB11c=)
                          2: 4hV-WauH8aRe-matXISwnBbj0aE.roa (hash: blgTAYOtumzmTFxOPJSBWjRdn4nDb+K3lNVcRzjkJbI=)
                          3: 5wOPTST3NLbHllN1P7Knj0R04sI.roa (hash: OMJlpVtc4d/wtbKew6CSZzD4lZcaLM84sgd6XbZDd9g=)
                          4: 9zWDUYDTONhfjoox6avTGD92gRM.roa (hash: faetXrco7oo1Wv/x6UK2yIUKHT9B8MOEiCSiFEDBlsM=)
                          5: DYcUK9wrPw0ISKDYALaTCxq7NLw.crl (hash: EGM0r8B0hapI0qoon5uJ45VHPxd9yDggN+SxD0Gsz4A=)
                          6: Ml4sQKTmSpS4eSt99aWN2P6Yb5k.roa (hash: J/tnVFJhggLagTowBPCIDcidDOt5xRUa54rWu3p0RLA=)
                          7: PUNiVgLPYhqs94F8IRCAJgl7j40.roa (hash: kb+h76iaXKsN43BZIN7e0s/Hc5JlhyjB4g2twrGBYPY=)
                          8: RziS74kv7uHp10fdkcU9eFNo_hY.roa (hash: WwqsUYvlQ69ekycXDe7ghd4BQ333M+urxU8PwrkpKu4=)
                          9: _4OJEmy-_xr_kOyO6EpYKRvyk_M.roa (hash: M6KX3NAag16FtxfM/8U8uJKiWDb1qs68R8f4zbgn6y8=)
                          10: c5rAqPU3OE2FKIkvJ4wjskmbrNg.roa (hash: JmuCUlo1CMWiEzTSEz4Q+Y4P55Z2DQoMPJ07S5iefiU=)
                          11: gEBD1SrlixKLUIhv281F9gdrYRU.roa (hash: zq165Ib3ZWzi609hfGZ6pOD80SzZXLMH5NgYIdn8C9M=)
                          12: hVSpcz72F_3hGT_ih8BBg9MjSz8.roa (hash: /aC7JTzrFSFyjshV3SREAKDrKAlAXukiZvxSVLATCaM=)
                          13: m9GjhS3o3nK9Hamrf2ATChjAq3w.roa (hash: 1A3lCSWc/s7Mlmo8/byV32XCq7Lprl8wU0qHTnFmpqg=)
                          14: u5Yj7oyXI4qvBjbxgtzlODQkogg.roa (hash: rDeTJ+dodsHpnjSYH8Tu5IF78etZ/GpO7qMEBIebRTw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:e0:be:3a:75:85:16:63:d5:c5:82:62:de:13:2e:54:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d87142bdc2b3f0d0848a0d800b6930b1abb34bc
        Validity
            Not Before: Sep 11 11:00:48 2024 GMT
            Not After : Sep 12 11:00:48 2024 GMT
        Subject: CN=c81cf28f1bd63922b0de455997d535a4e8116ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:80:0d:36:61:01:0b:0c:df:64:30:35:07:
                    6d:03:62:ec:de:0d:76:15:0c:17:7b:01:ef:93:40:
                    47:8d:75:34:ac:84:f0:e4:46:8b:a8:5a:59:4f:0b:
                    2d:c2:3c:2d:d7:2c:b5:ec:b4:db:23:a8:56:93:9b:
                    4c:c6:e3:1a:ff:71:f1:f7:5f:b1:c1:a1:a6:ab:82:
                    a1:38:e1:0d:d3:3b:1f:88:1b:f9:a8:1b:4b:d2:a5:
                    85:be:92:10:2e:d7:f5:0a:8f:69:5f:36:70:d8:9d:
                    50:b7:0e:d9:f5:51:0b:a6:19:fa:34:00:c0:88:fc:
                    44:41:93:f8:e8:a9:bf:bc:fc:a7:1b:e5:97:b6:e4:
                    f3:2b:9b:4a:74:69:c8:d2:fb:7f:c8:7b:f3:24:82:
                    cc:ef:8e:ed:f2:c4:6a:81:aa:c5:33:c3:7e:14:2a:
                    76:11:b8:c6:48:dd:c5:80:8a:61:1f:62:66:2b:75:
                    4f:54:36:68:22:7c:2b:94:2d:d1:48:6f:69:6c:39:
                    4b:02:ee:de:96:d8:d4:9c:1e:96:f4:77:d7:e0:77:
                    3e:9a:f1:ac:4d:b3:d9:6a:fd:03:47:99:6e:7a:8e:
                    c7:ca:46:c4:ac:1c:84:17:c4:8c:ec:0e:d1:0b:aa:
                    46:ef:fe:3e:84:b4:fe:d0:9a:e0:e1:87:01:ce:c8:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1C:F2:8F:1B:D6:39:22:B0:DE:45:59:97:D5:35:A4:E8:11:6F:F1
            X509v3 Authority Key Identifier:
                keyid:0D:87:14:2B:DC:2B:3F:0D:08:48:A0:D8:00:B6:93:0B:1A:BB:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYcUK9wrPw0ISKDYALaTCxq7NLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f8cc0-f693-421c-bc54-a31708d40391/1/DYcUK9wrPw0ISKDYALaTCxq7NLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:0a:2d:48:9a:43:1e:78:0d:98:b5:a7:f6:5f:4a:a6:68:
         cb:c3:9b:b9:e9:53:f0:1e:f6:8a:23:a3:d6:51:24:f0:df:09:
         0c:3b:70:4d:50:b0:f7:33:4f:c9:71:e5:6d:94:eb:29:4b:cb:
         1f:b7:09:6a:3b:51:8d:39:19:ac:f1:ac:09:f7:a4:1e:ff:30:
         48:d1:1b:7b:a5:3e:1c:e3:3a:37:76:cc:d9:24:6d:bb:2e:cf:
         d5:f0:ca:49:9f:79:5f:1e:6e:a5:84:50:9d:6a:22:68:5a:6a:
         b1:c2:29:02:0a:8e:d7:45:7e:d4:b5:4a:eb:0d:ce:5b:82:3b:
         e3:fd:87:d3:27:c4:f4:5d:7e:7e:c5:9b:ba:93:01:b9:a4:48:
         d3:92:4e:1d:c9:59:45:b7:57:fd:5a:ca:32:74:30:c8:de:08:
         a1:25:c5:eb:2f:59:fc:54:d7:95:ca:97:3d:a7:8e:f0:63:a1:
         ab:d2:0a:c7:73:64:d9:b5:9e:4b:96:be:38:c0:9f:6a:23:1e:
         52:89:20:af:e8:8e:18:22:55:76:bb:aa:75:3f:43:1c:33:05:
         53:c7:76:94:1c:81:6d:28:b0:67:7b:e6:e9:06:c2:7d:ab:a9:
         6a:7d:86:7a:c9:82:c2:e7:14:62:5a:75:d2:b6:99:80:72:54:
         1d:38:81:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZHgvjp1hRZj1cWCYt4TLlR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODcxNDJiZGMyYjNmMGQwODQ4YTBkODAwYjY5MzBiMWFi
YjM0YmMwHhcNMjQwOTExMTEwMDQ4WhcNMjQwOTEyMTEwMDQ4WjAzMTEwLwYDVQQD
EyhjODFjZjI4ZjFiZDYzOTIyYjBkZTQ1NTk5N2Q1MzVhNGU4MTE2ZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9+ADTZhAQsM32QwNQdtA2Ls3g12
FQwXewHvk0BHjXU0rITw5EaLqFpZTwstwjwt1yy17LTbI6hWk5tMxuMa/3Hx91+x
waGmq4KhOOEN0zsfiBv5qBtL0qWFvpIQLtf1Co9pXzZw2J1Qtw7Z9VELphn6NADA
iPxEQZP46Km/vPynG+WXtuTzK5tKdGnI0vt/yHvzJILM747t8sRqgarFM8N+FCp2
EbjGSN3FgIphH2JmK3VPVDZoInwrlC3RSG9pbDlLAu7eltjUnB6W9HfX4Hc+mvGs
TbPZav0DR5lueo7HykbErByEF8SM7A7RC6pG7/4+hLT+0Jrg4YcBzsjseQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgc8o8b1jkisN5FWZfVNaToEW/xMB8GA1UdIwQY
MBaAFA2HFCvcKz8NCEig2AC2kwsauzS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQt
YTMxNzA4ZDQwMzkxLzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjhjYzAtZjY5My00MjFjLWJjNTQtYTMxNzA4ZDQwMzkx
LzEvRFljVUs5d3JQdzBJU0tEWUFMYVRDeHE3Tkx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsQKLUia
Qx54DZi1p/ZfSqZoy8ObuelT8B72iiOj1lEk8N8JDDtwTVCw9zNPyXHlbZTrKUvL
H7cJajtRjTkZrPGsCfekHv8wSNEbe6U+HOM6N3bM2SRtuy7P1fDKSZ95Xx5upYRQ
nWoiaFpqscIpAgqO10V+1LVK6w3OW4I74/2H0yfE9F1+fsWbupMBuaRI05JOHclZ
RbdX/VrKMnQwyN4IoSXF6y9Z/FTXlcqXPaeO8GOhq9IKx3Nk2bWeS5a+OMCfaiMe
Uokgr+iOGCJVdruqdT9DHDMFU8d2lByBbSiwZ3vm6QbCfaupan2GesmCwucUYlp1
0raZgHJUHTiBiQ==
-----END CERTIFICATE-----
Generated at Sun May 11 09:20:53 2025 by rpki-client