Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
File:                     yE1hzRftkuVLszl_HlprOQSsbwU.mft (raw, json)
Hash identifier:          Co/v9peiA66+4HQ97ZlRb1LkUSC0AQpXC9W8e/s//Bk=
Subject key identifier:   FD:55:CB:10:14:86:12:C4:F5:16:10:E6:BD:6D:BF:F7:DF:6B:24:58
Authority key identifier: C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05
Certificate issuer:       /CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
Certificate serial:       0194BBCE927633E885F1F1E87653E8E56E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 10:01:04 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:04 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:04 +0000
Files and hashes:         1: 7lgq0ctAzIlTDcpOLaQGdaGThZk.roa (hash: e5z2Mfd4VCKCw2JmNleVEdAAScHXO8Xd9p2GShP5Y6E=)
                          2: IGLb7JdpoxpYlnFXvXAzGRRfnEo.roa (hash: 0HJkbHEqR9KGOAfONOEGNISfFQwVd9M/ZUhb0aiOuaQ=)
                          3: L_lziZvf0rcW2nhVL69U2cxHt5E.roa (hash: pANePALmK/hOXRwbvUEA/qtpc0qlGhfdWdBBREZqc1k=)
                          4: YtSu06eBvsaI_VOFmqz1IslXnNc.roa (hash: 0dn7VD8ICYAbfWAEObXxBVJEjbsCWfJ8U7nwROGAGsU=)
                          5: ckan5dvz7J1ZSK30Drxlo4PWhMs.roa (hash: F1BRb89WpgPtx0JUztwDXeDnh4+IrOFx75odNR04usQ=)
                          6: dLz_hs_QORbsBLSIa-GqwYxnFoY.roa (hash: +fTN+O03RfwmbM+R0hQdMI6NFyRIvlQwmN4JSANhNh0=)
                          7: flXkvhrZJ0ZeBKtpmmtVGzFsQKI.roa (hash: Y9UGCFlpeU/Vq7d3cJo997/pq2lWNIQ3AFJn/rIco44=)
                          8: ikN4SSSIJdpATfbTuF1aqPVQm8w.roa (hash: gunzQ7zSHNaZSvXp8QC6wdbsRU0gF2fXQubVjTHi9K8=)
                          9: nBGnunXHIlzfqmh1yvjBYc2bnwI.roa (hash: AE0YoKWgcnhxm5wM19OntmREG6LsPgDjKTOjRjiZyzs=)
                          10: yE1hzRftkuVLszl_HlprOQSsbwU.crl (hash: ouq2kCReg6sziTW01KxtFP8ZN+bj/Kf60tCPbhcGB00=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:92:76:33:e8:85:f1:f1:e8:76:53:e8:e5:6e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c84d61cd17ed92e54bb3397f1e5a6b3904ac6f05
        Validity
            Not Before: Jan 31 10:01:04 2025 GMT
            Not After : Feb  1 10:01:04 2025 GMT
        Subject: CN=fd55cb10148612c4f51610e6bd6dbff7df6b2458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:50:76:16:42:4e:8a:1b:ec:1d:0e:4a:cd:
                    12:1f:ab:04:01:e8:35:07:9c:4f:d5:9c:64:b0:82:
                    81:6a:66:72:92:2b:a6:30:8f:78:8a:c1:ae:b8:0d:
                    1a:23:e9:04:32:be:f4:e0:e8:e0:37:72:e4:4a:bf:
                    55:c7:3e:3c:77:ae:62:1e:38:58:fb:45:9d:44:49:
                    d1:81:bd:1f:5c:46:a9:81:69:f6:23:46:ad:79:bd:
                    92:0e:28:c8:c5:41:48:91:99:67:a3:b9:dd:13:a9:
                    96:b8:e4:18:bd:6e:74:64:c5:df:42:88:8c:6f:19:
                    42:ee:e6:84:fc:67:93:eb:9f:fc:19:ef:3c:84:7d:
                    a1:7a:2a:4c:7a:93:5a:5f:d2:dc:b3:e0:82:96:7c:
                    40:4b:ca:8d:c1:7d:bc:b0:d2:9c:5b:e1:e2:86:e7:
                    db:2b:54:2f:55:c6:a6:6a:cd:dc:30:16:00:42:b1:
                    08:e8:20:61:9e:51:88:b3:83:26:c9:7e:bc:bc:51:
                    c7:ef:09:2d:90:04:1d:29:90:b0:30:5b:57:90:2b:
                    2e:1e:87:95:0a:26:84:85:2b:64:b5:d0:6d:af:b5:
                    28:a5:1b:93:6e:11:ec:ff:94:70:cc:68:39:7f:e0:
                    85:ca:69:22:70:74:4a:b3:34:5d:ca:df:60:57:cd:
                    06:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:55:CB:10:14:86:12:C4:F5:16:10:E6:BD:6D:BF:F7:DF:6B:24:58
            X509v3 Authority Key Identifier:
                keyid:C8:4D:61:CD:17:ED:92:E5:4B:B3:39:7F:1E:5A:6B:39:04:AC:6F:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yE1hzRftkuVLszl_HlprOQSsbwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/88eae8-4b86-4389-aadb-c257792dadc4/1/yE1hzRftkuVLszl_HlprOQSsbwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:12:d3:75:35:aa:b7:f1:cc:ff:66:c8:f9:6a:0d:a4:d8:17:
         96:8b:c6:e7:1e:fd:40:7c:77:93:d9:ea:95:52:b1:e8:ff:36:
         6d:3a:da:1b:cf:b0:26:5a:8d:c8:a6:89:a7:9d:57:1a:1f:81:
         49:2b:56:c8:82:e3:5e:7e:6c:09:ed:33:99:a8:f1:2b:7d:89:
         17:3f:8b:05:69:35:27:e3:a1:5a:6a:52:af:39:a2:43:17:53:
         35:11:63:16:54:af:35:e7:e3:e7:92:b7:bb:75:7e:f5:92:2b:
         a7:5a:ee:bb:23:c5:eb:bc:ef:5d:b1:96:a2:a3:68:2b:06:2d:
         c6:3e:8b:2d:fd:02:a1:38:d0:62:db:1f:60:57:60:6d:7d:5d:
         ea:25:02:0d:52:e6:65:a9:ad:18:7e:ac:59:ce:40:17:77:6a:
         69:a1:f0:9c:72:01:77:95:3b:91:04:e2:d3:53:bd:ec:56:b7:
         27:68:06:34:55:12:6c:89:86:61:6a:5e:81:39:78:7c:3c:14:
         6c:24:14:b2:53:59:d1:3e:59:cc:61:c5:af:9a:e2:c4:9a:bb:
         bd:4b:b9:9e:84:df:22:8a:45:25:2a:1b:82:e4:10:6b:e3:c4:
         52:0a:d6:2c:7b:4a:02:cc:d2:b8:41:fa:65:a5:57:37:8f:8c:
         63:f6:a9:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zpJ2M+iF8fHodlPo5W5EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NGQ2MWNkMTdlZDkyZTU0YmIzMzk3ZjFlNWE2YjM5MDRh
YzZmMDUwHhcNMjUwMTMxMTAwMTA0WhcNMjUwMjAxMTAwMTA0WjAzMTEwLwYDVQQD
EyhmZDU1Y2IxMDE0ODYxMmM0ZjUxNjEwZTZiZDZkYmZmN2RmNmIyNDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUpQdhZCToob7B0OSs0SH6sEAeg1
B5xP1ZxksIKBamZykiumMI94isGuuA0aI+kEMr704OjgN3LkSr9Vxz48d65iHjhY
+0WdREnRgb0fXEapgWn2I0ateb2SDijIxUFIkZlno7ndE6mWuOQYvW50ZMXfQoiM
bxlC7uaE/GeT65/8Ge88hH2heipMepNaX9Lcs+CClnxAS8qNwX28sNKcW+Hihufb
K1QvVcamas3cMBYAQrEI6CBhnlGIs4MmyX68vFHH7wktkAQdKZCwMFtXkCsuHoeV
CiaEhStktdBtr7UopRuTbhHs/5RwzGg5f+CFymkicHRKszRdyt9gV80GkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1VyxAUhhLE9RYQ5r1tv/ffayRYMB8GA1UdIwQY
MBaAFMhNYc0X7ZLlS7M5fx5aazkErG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGIt
YzI1Nzc5MmRhZGM0LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84OGVhZTgtNGI4Ni00Mzg5LWFhZGItYzI1Nzc5MmRhZGM0
LzEveUUxaHpSZnRrdVZMc3psX0hscHJPUVNzYndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRLTdTWq
t/HM/2bI+WoNpNgXlovG5x79QHx3k9nqlVKx6P82bTraG8+wJlqNyKaJp51XGh+B
SStWyILjXn5sCe0zmajxK32JFz+LBWk1J+OhWmpSrzmiQxdTNRFjFlSvNefj55K3
u3V+9ZIrp1ruuyPF67zvXbGWoqNoKwYtxj6LLf0CoTjQYtsfYFdgbX1d6iUCDVLm
ZamtGH6sWc5AF3dqaaHwnHIBd5U7kQTi01O97Fa3J2gGNFUSbImGYWpegTl4fDwU
bCQUslNZ0T5ZzGHFr5rixJq7vUu5noTfIopFJSobguQQa+PEUgrWLHtKAszSuEH6
ZaVXN4+MY/apOw==
-----END CERTIFICATE-----