Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
File:                     cL9VMELxpDgn3ANFALvRBopyl8o.mft (raw, json)
Hash identifier:          X0ojBDkrpNKPQk/M++Jy3sT6LPa23RyTFY+Sf+Reb9w=
Subject key identifier:   E0:2C:4E:0C:79:F5:2F:AB:0C:C3:56:7A:12:C9:40:D9:CB:A7:7A:77
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Certificate issuer:       /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial:       0194BD4EB9C80D2788DF2E19057C4081C1F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
Manifest number:          0B6F
Signing time:             Fri 31 Jan 2025 17:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:40 +0000
Files and hashes:         1: 8QLNAinC7SuGQs0u2JoJgweE3hw.roa (hash: dAi1joyO2k4RmtvcFPPdlgEIFrn1dcDWPA6bCC8U2+I=)
                          2: cL9VMELxpDgn3ANFALvRBopyl8o.crl (hash: aJ1Ud3046W9J6k9f8k1NpD9+gJ10NHPWvIW3XDUn5QA=)
                          3: ecFUW2z0XsJzdPaPmfmi1NbravY.roa (hash: B/1KiGYT9I28lQbSFekF4v776yFSZOm/z2BZeazx7uo=)
                          4: pqlbIbNJ9fb6HI0B5-w4UgSYcbY.roa (hash: mcYLCtbaBwaS/xS6dmXpUntAVPZrHZ1andB/RjcjVcA=)
                          5: wH7YjQGC2kPbicIfKx1K6Iv4sBs.roa (hash: YR8jN4lQpTriIrl6/luq+DdE8e4Qj31ZZIIQj98pQoI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b9:c8:0d:27:88:df:2e:19:05:7c:40:81:c1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
        Validity
            Not Before: Jan 31 17:00:40 2025 GMT
            Not After : Feb  1 17:00:40 2025 GMT
        Subject: CN=e02c4e0c79f52fab0cc3567a12c940d9cba77a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:91:25:db:72:fe:ae:a3:1d:60:12:c1:87:5f:
                    0e:33:9d:b1:c7:da:22:3b:cb:8c:a7:a7:7b:42:5b:
                    ec:93:75:2e:0e:d4:64:54:bc:8c:ab:45:9c:c3:c0:
                    7a:17:6b:3f:c0:0d:3a:88:81:03:7a:13:41:8e:56:
                    2f:42:74:51:c0:bc:84:55:5e:9d:ad:b9:32:32:3e:
                    3c:99:84:63:df:a0:39:45:ea:85:60:85:cb:22:e7:
                    03:0a:c6:b1:21:11:d9:eb:81:b7:f8:e3:7c:b4:45:
                    e5:47:a1:f2:28:83:dc:a0:99:4d:c7:3a:f1:9c:63:
                    5f:3d:0f:42:3f:1b:3d:08:47:6a:93:12:a3:8d:58:
                    92:73:c1:d2:27:5d:28:56:a3:c4:08:cb:e6:77:9f:
                    69:43:af:1d:57:74:18:e0:c0:ed:64:db:47:03:d4:
                    1e:28:7e:e3:08:88:c4:16:fc:97:69:6c:86:2c:66:
                    2b:9f:16:a3:e2:a7:15:26:95:fc:48:b3:ab:e0:40:
                    d2:76:73:50:7d:c7:83:42:c4:de:37:99:58:8e:81:
                    2e:55:a1:a0:c1:f9:56:48:51:18:c7:91:7c:a2:f9:
                    37:08:54:34:0b:06:00:4b:5e:0e:a7:0f:e0:96:7f:
                    7c:2e:2c:cc:b1:aa:19:7a:84:86:79:7f:27:00:3e:
                    60:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:4E:0C:79:F5:2F:AB:0C:C3:56:7A:12:C9:40:D9:CB:A7:7A:77
            X509v3 Authority Key Identifier:
                keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e9:6d:8b:0d:3c:2b:4b:72:56:07:50:81:60:04:b5:60:a0:
         07:7b:bc:f0:26:78:5e:16:05:6f:83:80:65:fa:fc:bf:3b:30:
         df:b3:da:e2:bd:33:38:94:d8:d3:14:3a:56:18:65:b5:23:e5:
         0f:93:b0:74:40:af:10:3a:84:f5:df:8f:cd:d6:7b:5d:31:28:
         62:76:ba:ac:ae:4d:5c:f0:cc:24:6c:11:da:1b:b0:da:13:b3:
         5c:9e:05:29:79:08:d3:c8:7f:90:41:a7:9b:e4:8a:9a:f1:3e:
         5d:18:b6:88:d6:c6:55:31:33:ea:dd:29:62:44:4c:ba:b5:29:
         08:d9:d5:08:fb:a2:54:94:df:c4:75:fc:a6:58:35:13:c2:83:
         08:74:bb:21:55:b5:c4:49:42:3c:de:d8:00:89:cc:76:03:e8:
         53:bc:4f:5b:97:80:86:c0:cd:5b:bd:ec:51:2f:ed:88:ce:d6:
         3f:bc:1b:4c:89:1f:c5:cb:a6:72:65:b8:e0:89:3e:6a:8f:f4:
         0f:9e:f8:44:3c:fe:0c:a9:4c:16:97:34:e4:bf:cb:6b:e4:d9:
         90:6c:c3:e1:c8:50:4d:11:96:a0:27:00:35:3f:03:47:d6:ae:
         20:33:8f:52:e6:92:43:01:cc:3b:ac:06:8d:ed:29:ce:c3:a9:
         63:3f:2a:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrnIDSeI3y4ZBXxAgcH1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjUwMTMxMTcwMDQwWhcNMjUwMjAxMTcwMDQwWjAzMTEwLwYDVQQD
EyhlMDJjNGUwYzc5ZjUyZmFiMGNjMzU2N2ExMmM5NDBkOWNiYTc3YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZEl23L+rqMdYBLBh18OM52xx9oi
O8uMp6d7Qlvsk3UuDtRkVLyMq0Wcw8B6F2s/wA06iIEDehNBjlYvQnRRwLyEVV6d
rbkyMj48mYRj36A5ReqFYIXLIucDCsaxIRHZ64G3+ON8tEXlR6HyKIPcoJlNxzrx
nGNfPQ9CPxs9CEdqkxKjjViSc8HSJ10oVqPECMvmd59pQ68dV3QY4MDtZNtHA9Qe
KH7jCIjEFvyXaWyGLGYrnxaj4qcVJpX8SLOr4EDSdnNQfceDQsTeN5lYjoEuVaGg
wflWSFEYx5F8ovk3CFQ0CwYAS14Opw/gln98LizMsaoZeoSGeX8nAD5gFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAsTgx59S+rDMNWehLJQNnLp3p3MB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlultiw08
K0tyVgdQgWAEtWCgB3u88CZ4XhYFb4OAZfr8vzsw37Pa4r0zOJTY0xQ6VhhltSPl
D5OwdECvEDqE9d+PzdZ7XTEoYna6rK5NXPDMJGwR2huw2hOzXJ4FKXkI08h/kEGn
m+SKmvE+XRi2iNbGVTEz6t0pYkRMurUpCNnVCPuiVJTfxHX8plg1E8KDCHS7IVW1
xElCPN7YAInMdgPoU7xPW5eAhsDNW73sUS/tiM7WP7wbTIkfxcumcmW44Ik+ao/0
D574RDz+DKlMFpc05L/La+TZkGzD4chQTRGWoCcANT8DR9auIDOPUuaSQwHMO6wG
je0pzsOpYz8qwA==
-----END CERTIFICATE-----