Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
File:                     RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft (raw, json)
Hash identifier:          saHDNfL5BizRdoALHHCy+3h55OiwFomYZxlJNMaw0R0=
Subject key identifier:   AB:72:9A:D0:A1:88:EF:DB:38:4B:82:52:89:C3:D9:D8:AE:08:86:D6
Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C
Certificate issuer:       /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
Certificate serial:       0194BBCE26754A836B915C30E27989207D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 10:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:37 +0000
Files and hashes:         1: 5VyyRu9k0KJF1HIYdY3SbNtLs7Y.roa (hash: JzNrotC5WQ6zx3dtdKUI1Ev/FqX2rmyNFShITvJA34M=)
                          2: BFq1km9XkHnmoDoXJVc27vizfZA.roa (hash: cHrkhcCjIdFy9DEItV+YoEGVfmLA0+VuuQv0zsT4f+Q=)
                          3: EaYz9d8bcgido2cK-J8A5iABR88.roa (hash: 4N+EHFeIdH2VhV+aazrq8nz7FcT1+8SnVmo4BQnN98I=)
                          4: RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl (hash: oAJ39I91mYICf3jI6z4mkGA5uir1s1YwXY76ggf/hDs=)
                          5: bQc5T4PirD71F511kjzfy84OVUo.roa (hash: EWzOl7FZsznXJxW6MkTJcVJE6hamn7Yg/ELBjTogg48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:26:75:4a:83:6b:91:5c:30:e2:79:89:20:7d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c
        Validity
            Not Before: Jan 31 10:00:37 2025 GMT
            Not After : Feb  1 10:00:37 2025 GMT
        Subject: CN=ab729ad0a188efdb384b825289c3d9d8ae0886d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:a4:ef:a6:bc:0d:55:f8:9e:06:41:3c:7c:
                    21:c6:b7:88:09:50:e8:e9:d1:5d:88:64:dc:96:fb:
                    55:ce:62:c0:e1:16:2d:de:1d:39:bc:58:3d:9f:63:
                    ed:6d:f8:68:b0:a2:76:59:fb:cf:ac:9f:fe:4f:fc:
                    37:52:34:c0:54:a4:86:31:34:38:3b:a3:d0:01:4d:
                    89:05:4c:05:76:57:06:c6:ab:7b:25:d8:d3:cb:8f:
                    f1:10:50:db:1f:28:2b:a8:ca:45:34:7d:d8:57:f9:
                    fe:31:d1:c1:9a:71:a0:9f:45:f5:87:e7:8e:1a:91:
                    2f:7c:a1:97:3d:54:ef:be:54:c4:df:e6:4a:b1:99:
                    6d:42:9d:4e:f8:9e:74:1f:16:7a:c4:24:f3:3c:5c:
                    28:4f:ba:d2:b3:6d:65:56:15:df:08:02:d7:0b:f6:
                    44:b1:11:8d:75:d1:76:76:5a:d1:fc:f7:95:3e:be:
                    7f:ef:2d:79:48:88:78:07:80:55:27:a1:d0:d9:df:
                    6d:20:00:2c:ff:23:f5:6b:d5:27:84:25:33:1a:e9:
                    2c:48:5d:55:48:7d:60:af:32:ac:5d:07:ed:13:11:
                    08:1c:b6:d9:60:d8:c2:21:f8:8a:8d:9f:5d:e3:f6:
                    bb:8a:5e:b5:59:b2:d1:96:be:65:04:cb:cf:4e:0b:
                    37:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:72:9A:D0:A1:88:EF:DB:38:4B:82:52:89:C3:D9:D8:AE:08:86:D6
            X509v3 Authority Key Identifier:
                keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:19:d9:68:81:71:86:bb:e4:ed:4b:72:41:b1:e7:10:3c:d5:
         35:57:18:31:f2:d2:bc:96:5b:46:bb:d1:b6:f4:7f:0d:be:42:
         e6:6f:fa:54:10:94:70:f8:4f:ca:15:13:77:f8:96:0a:e6:aa:
         06:07:c2:3d:b7:5d:1b:a8:be:44:de:55:e8:cd:87:e7:7e:a8:
         32:6c:e8:72:2e:72:96:1c:24:c6:7e:10:17:7c:2e:13:0e:ed:
         a5:c1:51:01:d7:9a:fa:0e:cd:12:4a:dd:c8:8f:93:d6:87:0b:
         35:7d:aa:12:ba:c3:1b:f8:f7:53:32:47:4b:7f:6a:45:b4:c2:
         2e:d4:b5:06:5d:11:9d:25:f6:72:58:1a:e0:39:a9:fb:66:ef:
         fa:a4:cc:d8:0e:f1:5f:c7:6b:8e:83:65:ff:c8:3e:7d:a7:90:
         7a:ca:2d:a3:c8:01:8b:44:77:e2:97:b2:9a:76:61:5d:fd:8e:
         1a:af:80:8c:18:64:27:68:04:21:fc:6a:28:ff:b6:e0:9c:f8:
         3e:75:76:1b:2c:92:01:63:a9:7a:8f:21:77:43:29:49:0e:63:
         a7:ee:bb:c7:ae:05:28:de:8b:3a:65:a1:ed:fc:42:49:5b:73:
         68:5a:0e:d9:aa:ef:98:c0:0b:d3:b8:64:8d:ff:71:9f:27:2f:
         c0:2d:a8:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ziZ1SoNrkVww4nmJIH1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MjJhZWEwZWY0YzA2NjdkYjgxOWY1ZDVhM2RhZWE2Mzk5
ZjAzOGMwHhcNMjUwMTMxMTAwMDM3WhcNMjUwMjAxMTAwMDM3WjAzMTEwLwYDVQQD
EyhhYjcyOWFkMGExODhlZmRiMzg0YjgyNTI4OWMzZDlkOGFlMDg4NmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrqk76a8DVX4ngZBPHwhxreICVDo
6dFdiGTclvtVzmLA4RYt3h05vFg9n2PtbfhosKJ2WfvPrJ/+T/w3UjTAVKSGMTQ4
O6PQAU2JBUwFdlcGxqt7JdjTy4/xEFDbHygrqMpFNH3YV/n+MdHBmnGgn0X1h+eO
GpEvfKGXPVTvvlTE3+ZKsZltQp1O+J50HxZ6xCTzPFwoT7rSs21lVhXfCALXC/ZE
sRGNddF2dlrR/PeVPr5/7y15SIh4B4BVJ6HQ2d9tIAAs/yP1a9UnhCUzGuksSF1V
SH1grzKsXQftExEIHLbZYNjCIfiKjZ9d4/a7il61WbLRlr5lBMvPTgs3CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtymtChiO/bOEuCUonD2diuCIbWMB8GA1UdIwQY
MBaAFEcirqDvTAZn24GfXVo9rqY5nwOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYt
NmUzMDc0YzZjNjYzLzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYtNmUzMDc0YzZjNjYz
LzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhnZaIFx
hrvk7UtyQbHnEDzVNVcYMfLSvJZbRrvRtvR/Db5C5m/6VBCUcPhPyhUTd/iWCuaq
BgfCPbddG6i+RN5V6M2H536oMmzoci5ylhwkxn4QF3wuEw7tpcFRAdea+g7NEkrd
yI+T1ocLNX2qErrDG/j3UzJHS39qRbTCLtS1Bl0RnSX2clga4Dmp+2bv+qTM2A7x
X8drjoNl/8g+faeQesoto8gBi0R34peymnZhXf2OGq+AjBhkJ2gEIfxqKP+24Jz4
PnV2GyySAWOpeo8hd0MpSQ5jp+67x64FKN6LOmWh7fxCSVtzaFoO2arvmMAL07hk
jf9xnycvwC2oNQ==
-----END CERTIFICATE-----