Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File:                     dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier:          NlfxaRsn1HIfLc26fTTBFPkWC2EoVowUODQbQlPB72Q=
Subject key identifier:   A8:D3:CF:C0:5E:49:CC:5F:13:3B:C3:26:B6:14:65:A1:CD:30:89:E0
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer:       /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial:       0194BD4E80BAEC728E1C24A4459A3B55A210
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number:          0E16
Signing time:             Fri 31 Jan 2025 17:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:26 +0000
Files and hashes:         1: BlZTyn453CV0yZnKwe_T35RBLj8.roa (hash: PAa8WNraC9MFUR+BnYs7v6ED2lFQD5yfvCpmA0N6q0g=)
                          2: UDoseI4zszDcDoPnMdfmZguRd1g.roa (hash: VWwS6jcqEeePHwTnYZpbdNRT6bmACcXJEdqIR68HwbA=)
                          3: XeENoq2HuB6omGApVd7MyU5r1TA.roa (hash: epvaDIj9ho9XW3OqF0eBT6eF6xWMid+XMsTU4k7CI2s=)
                          4: Yrj8M2QKm85FgqezvTNKupJvfRM.roa (hash: 19NO01gkKNfH49H88V9pcdpwsCQD2Y7XMbrn6a7gp8I=)
                          5: dcRF9U3L6DhFSWTZEdsiTMS3P2o.roa (hash: ES6jEJ/RK/dO83oihrvVXwCUZSvWJGm8C1RK/nM0bYI=)
                          6: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: w4qMuo50wW2LyyU8tO+hrt/oLQmAdagOZW7kAQmm4qM=)
                          7: eaH07OW5KOtKpWvHksqObMQWq4E.roa (hash: /p/ujtYI0LrIojxA4eFgMakt3BjMBgIlLRM6Y1JhEgo=)
                          8: fKdatG9WcJc5WVUN6pdVKIOjMnQ.roa (hash: kqSOLzeO/Lml0iGRyiBotGsiuI6Y4hQbc4VPC8laBE4=)
                          9: saRTVdpqQA0OCzsMYir3B6BlFes.roa (hash: nWaisSWXPPt/Ku1COahUOFAKdzpunAhgMbmaca4maXE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:80:ba:ec:72:8e:1c:24:a4:45:9a:3b:55:a2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
        Validity
            Not Before: Jan 31 17:00:26 2025 GMT
            Not After : Feb  1 17:00:26 2025 GMT
        Subject: CN=a8d3cfc05e49cc5f133bc326b61465a1cd3089e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1e:a3:a5:0d:f7:2f:53:6f:d8:58:73:06:de:
                    64:51:a3:e0:1f:51:15:df:5f:02:b3:36:d4:fe:21:
                    9c:20:48:98:02:78:d1:a2:80:f1:a8:df:07:56:b6:
                    b6:54:ab:39:52:b7:52:b1:41:f4:ef:3d:d0:df:ed:
                    0b:f3:bd:25:21:3e:e2:36:e6:fd:79:c6:e7:e6:42:
                    e6:00:2b:96:ea:85:a0:16:bf:a1:c6:1c:d1:54:98:
                    e0:58:84:64:35:c4:72:ec:72:ec:92:9f:04:06:40:
                    f5:7a:c2:39:9c:7f:0e:91:99:44:95:51:4a:fb:9a:
                    9b:41:d8:04:6e:97:3e:20:95:4a:d9:68:96:ed:c0:
                    74:8c:18:12:00:e9:d9:e6:b2:7a:44:9e:fd:e7:99:
                    fd:77:60:18:52:7e:cc:b0:c5:0d:95:9e:8a:a4:55:
                    f1:2e:b7:28:1b:67:91:09:1e:9e:df:21:78:65:f0:
                    ca:73:c9:4a:a1:76:42:03:ec:87:99:68:2a:fb:ad:
                    92:2c:0a:67:c3:47:41:35:cd:8a:cc:e3:ed:73:0b:
                    2c:18:2b:c8:7b:11:50:97:33:12:ed:06:89:db:07:
                    a4:85:00:db:8d:42:77:ce:10:a5:60:64:8a:38:3c:
                    ec:72:5c:2f:4a:78:10:69:ae:55:e9:47:ae:af:c1:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D3:CF:C0:5E:49:CC:5F:13:3B:C3:26:B6:14:65:A1:CD:30:89:E0
            X509v3 Authority Key Identifier:
                keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2d:24:8b:e6:9b:03:cb:0a:53:80:c2:ea:df:95:fa:4a:e6:
         05:8d:f4:2f:55:51:a8:48:c3:f6:03:1e:5c:02:ba:35:e5:30:
         9d:02:ed:8f:c4:35:4a:32:6a:12:3a:e3:bb:6b:7b:0f:18:da:
         6b:e1:f8:34:b2:7c:36:74:07:64:2d:c0:08:c1:12:a1:d1:24:
         c6:f4:e8:14:d3:41:55:d7:52:e1:48:27:d6:67:48:9d:9d:dd:
         ff:7c:5c:7c:3a:b6:81:4b:b6:04:1e:a1:fd:ab:48:84:da:27:
         b6:3e:1a:77:ab:42:85:ec:13:28:73:14:34:d7:5f:ea:43:10:
         54:e9:a0:be:45:9f:f7:26:36:a3:e6:df:bc:69:96:37:21:35:
         d6:ff:0c:6a:d1:85:b2:4f:b7:85:77:a9:48:41:5b:25:a1:7d:
         7b:1a:ec:76:c2:f2:2e:58:f3:5f:b8:e6:79:c9:ae:13:77:8e:
         f7:85:e2:d3:bd:3d:b0:28:c0:52:4f:5f:37:d8:05:e4:46:f6:
         d7:1b:27:4e:a8:4d:bd:56:33:ac:09:2f:d7:e7:88:0f:2a:2c:
         c9:b4:4f:78:a5:64:99:ff:86:d5:42:b8:b9:f1:b0:7c:70:5a:
         a1:55:32:47:61:15:e6:93:b6:03:9d:48:b8:ea:99:c2:2d:b1:
         77:a4:43:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToC67HKOHCSkRZo7VaIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky
MGMzZDkwHhcNMjUwMTMxMTcwMDI2WhcNMjUwMjAxMTcwMDI2WjAzMTEwLwYDVQQD
EyhhOGQzY2ZjMDVlNDljYzVmMTMzYmMzMjZiNjE0NjVhMWNkMzA4OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB6jpQ33L1Nv2FhzBt5kUaPgH1EV
318CszbU/iGcIEiYAnjRooDxqN8HVra2VKs5UrdSsUH07z3Q3+0L870lIT7iNub9
ecbn5kLmACuW6oWgFr+hxhzRVJjgWIRkNcRy7HLskp8EBkD1esI5nH8OkZlElVFK
+5qbQdgEbpc+IJVK2WiW7cB0jBgSAOnZ5rJ6RJ7955n9d2AYUn7MsMUNlZ6KpFXx
LrcoG2eRCR6e3yF4ZfDKc8lKoXZCA+yHmWgq+62SLApnw0dBNc2KzOPtcwssGCvI
exFQlzMS7QaJ2wekhQDbjUJ3zhClYGSKODzsclwvSngQaa5V6Ueur8EufQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjTz8BeScxfEzvDJrYUZaHNMIngMB8GA1UdIwQY
MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt
NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz
LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACi0ki+ab
A8sKU4DC6t+V+krmBY30L1VRqEjD9gMeXAK6NeUwnQLtj8Q1SjJqEjrju2t7Dxja
a+H4NLJ8NnQHZC3ACMESodEkxvToFNNBVddS4Ugn1mdInZ3d/3xcfDq2gUu2BB6h
/atIhNontj4ad6tChewTKHMUNNdf6kMQVOmgvkWf9yY2o+bfvGmWNyE11v8MatGF
sk+3hXepSEFbJaF9exrsdsLyLljzX7jmecmuE3eO94Xi0709sCjAUk9fN9gF5Eb2
1xsnTqhNvVYzrAkv1+eIDyosybRPeKVkmf+G1UK4ufGwfHBaoVUyR2EV5pO2A51I
uOqZwi2xd6RDJA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:20:29 2025 by rpki-client