Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
File:                     AvViYsnox9E0TfKw-MJdoTq9YiI.mft (raw, json)
Hash identifier:          UyHIh59r5GGHVn6D48Sh8Uo4Z+R3LbBZUYVhdnJxb4o=
Subject key identifier:   17:89:96:E0:01:4F:8B:56:18:48:F3:AE:90:C8:CC:AE:AD:6B:7B:B9
Authority key identifier: 02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22
Certificate issuer:       /CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
Certificate serial:       0194BC04AB3CA701D6B73B518B3990B4A513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft
Manifest number:          0679
Signing time:             Fri 31 Jan 2025 11:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:10 +0000
Files and hashes:         1: 1--_Zcgs6dmSejokLiM_ybNoSeYY.roa (hash: WtkOeqxSouyMu3WCH8w+fCLALFhCyGea7LlfmEYOb0U=)
                          2: AvViYsnox9E0TfKw-MJdoTq9YiI.crl (hash: CyGRWMCz2zzU/lW0jLgBJlhYMSLfb6XIcuXdl91OcZw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ab:3c:a7:01:d6:b7:3b:51:8b:39:90:b4:a5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02f56262c9e8c7d1344df2b0f8c25da13abd6222
        Validity
            Not Before: Jan 31 11:00:10 2025 GMT
            Not After : Feb  1 11:00:10 2025 GMT
        Subject: CN=178996e0014f8b561848f3ae90c8ccaead6b7bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3e:3a:b3:1c:c8:27:74:6e:94:c0:33:cb:0d:
                    30:a4:49:c0:a1:52:e4:ca:ea:87:3a:08:24:8b:ab:
                    b9:6a:55:97:36:6d:1d:b3:31:dd:8f:72:9a:66:b0:
                    f9:49:1d:80:b4:58:f3:e9:fc:5a:5e:6d:80:ed:c2:
                    96:7d:04:da:97:8a:80:7f:b2:58:43:9f:51:fa:18:
                    ea:d2:42:24:4f:d8:3e:06:a0:f7:c6:b5:36:51:0a:
                    ad:fb:51:bd:32:df:b0:4d:4a:6f:3e:6d:f5:e3:ef:
                    7a:f4:d3:3b:da:ec:ee:d9:92:ef:ca:06:11:72:36:
                    43:a8:0d:92:e5:ff:a2:76:1b:76:1c:3b:5a:53:dd:
                    62:e2:db:0d:a0:6f:90:0d:1b:dd:7a:16:24:cf:80:
                    53:d7:d5:c8:36:62:3d:ad:21:14:71:d0:a2:91:81:
                    61:df:db:aa:9a:bc:e4:0a:52:6a:0e:ff:cc:25:72:
                    0e:34:33:ba:5e:50:b3:b6:c3:a2:b5:83:31:11:c4:
                    69:4d:be:2b:bf:9f:70:66:05:2d:b3:4a:93:86:77:
                    e7:17:d8:bd:e7:6b:30:8f:2c:5a:0a:08:9d:62:4d:
                    0b:da:4c:f7:fc:2a:32:d6:6e:36:70:76:31:e1:b8:
                    fe:22:de:6a:b6:09:0d:04:2d:0a:63:68:c5:99:c2:
                    01:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:89:96:E0:01:4F:8B:56:18:48:F3:AE:90:C8:CC:AE:AD:6B:7B:B9
            X509v3 Authority Key Identifier:
                keyid:02:F5:62:62:C9:E8:C7:D1:34:4D:F2:B0:F8:C2:5D:A1:3A:BD:62:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvViYsnox9E0TfKw-MJdoTq9YiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/793e7c-7139-4da6-b802-d4bc772a92bd/1/AvViYsnox9E0TfKw-MJdoTq9YiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c9:8a:f5:15:36:53:0c:ca:3d:d3:bc:36:11:ee:fd:ac:bb:
         11:ec:28:5a:15:50:a7:6c:71:45:81:23:d0:01:b9:8b:83:52:
         73:0a:63:f2:6c:cb:16:99:8b:df:1f:e7:62:a9:0c:b9:1d:fc:
         75:ff:2b:a9:e6:be:5b:42:be:ff:35:74:9c:89:e2:0d:dd:66:
         8f:eb:8e:82:d6:46:77:5c:33:19:ae:0d:c3:96:e4:2f:c5:25:
         db:e6:50:74:74:a3:3a:11:fa:e1:5d:71:48:31:fc:bb:2a:8a:
         66:97:0f:12:b0:4e:38:28:a3:ec:ee:64:1b:3e:ae:d8:35:09:
         9a:c6:d5:71:a3:a1:47:51:2c:f3:92:d3:24:c2:36:63:3d:00:
         10:17:85:2c:db:8a:b7:98:26:a0:ad:aa:de:70:8e:b2:85:85:
         dd:f9:60:be:22:b9:8b:9c:b6:55:23:b4:84:13:b6:ec:4b:66:
         d1:22:01:75:99:1b:fd:26:1f:64:fc:98:63:e9:de:07:36:9d:
         34:32:0a:ed:26:d0:27:ad:eb:b5:b8:51:9d:db:c1:39:a4:b5:
         e3:11:a1:21:83:b3:d8:03:5f:69:a1:08:d1:cd:e2:46:f8:04:
         f1:28:a1:ff:36:20:8f:26:77:02:f9:19:63:1f:bd:ba:82:18:
         e9:7d:32:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKs8pwHWtztRizmQtKUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZjU2MjYyYzllOGM3ZDEzNDRkZjJiMGY4YzI1ZGExM2Fi
ZDYyMjIwHhcNMjUwMTMxMTEwMDEwWhcNMjUwMjAxMTEwMDEwWjAzMTEwLwYDVQQD
EygxNzg5OTZlMDAxNGY4YjU2MTg0OGYzYWU5MGM4Y2NhZWFkNmI3YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj46sxzIJ3RulMAzyw0wpEnAoVLk
yuqHOggki6u5alWXNm0dszHdj3KaZrD5SR2AtFjz6fxaXm2A7cKWfQTal4qAf7JY
Q59R+hjq0kIkT9g+BqD3xrU2UQqt+1G9Mt+wTUpvPm314+969NM72uzu2ZLvygYR
cjZDqA2S5f+idht2HDtaU91i4tsNoG+QDRvdehYkz4BT19XINmI9rSEUcdCikYFh
39uqmrzkClJqDv/MJXIONDO6XlCztsOitYMxEcRpTb4rv59wZgUts0qThnfnF9i9
52swjyxaCgidYk0L2kz3/Coy1m42cHYx4bj+It5qtgkNBC0KY2jFmcIBXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeJluABT4tWGEjzrpDIzK6ta3u5MB8GA1UdIwQY
MBaAFAL1YmLJ6MfRNE3ysPjCXaE6vWIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDIt
ZDRiYzc3MmE5MmJkLzEvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC83OTNlN2MtNzEzOS00ZGE2LWI4MDItZDRiYzc3MmE5MmJk
LzEvQXZWaVlzbm94OUUwVGZLdy1NSmRvVHE5WWlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacmK9RU2
UwzKPdO8NhHu/ay7EewoWhVQp2xxRYEj0AG5i4NScwpj8mzLFpmL3x/nYqkMuR38
df8rqea+W0K+/zV0nIniDd1mj+uOgtZGd1wzGa4Nw5bkL8Ul2+ZQdHSjOhH64V1x
SDH8uyqKZpcPErBOOCij7O5kGz6u2DUJmsbVcaOhR1Es85LTJMI2Yz0AEBeFLNuK
t5gmoK2q3nCOsoWF3flgviK5i5y2VSO0hBO27Etm0SIBdZkb/SYfZPyYY+neBzad
NDIK7SbQJ63rtbhRndvBOaS14xGhIYOz2ANfaaEI0c3iRvgE8Sih/zYgjyZ3AvkZ
Yx+9uoIY6X0yfw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:31 2025 by rpki-client