Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
File:                     OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft (raw, json)
Hash identifier:          TQ8Dgn/qHMxOgltchCntdsBU+bLPVQ4RRe4pO3zCTpY=
Subject key identifier:   91:DB:82:3A:6C:2C:33:2D:3C:DB:E1:0D:35:86:75:63:3F:A5:06:85
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Certificate issuer:       /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial:       0194BD17A47E8312818C424F1046A0154123
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft
Manifest number:          0F3F
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: 4iN5nDTRDVV1CTGuGlGWY0Ybm9Y.roa (hash: EMh2tz4i0xV1ZX0fHy8PWh0LdLWVBXB/z2TGKHCydUo=)
                          2: OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl (hash: pd384GzguaR2sWgDMK3fSydZjUqiFklM68QU2alwLo8=)
                          3: lKnLzY94Z9zOTG6_1gzuoDIJ_5Y.roa (hash: veP44H4IXhWwV/CHwiAUB7r/bJ77LhyJozTjkioLQx0=)
                          4: rYkWvcE_3GQZ3jkaDTUiqjj986g.roa (hash: FOkCN5CJZuWhjjVzqhCAbEwhLO4+xpDqIO3h/0CpxnA=)
                          5: xvMwGEntPrsPSijtn7qckfPF1Lw.roa (hash: cfgqt0GeV7LUHA50FIbHHM6KEXg5Xmqps/DGbUwBUAM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a4:7e:83:12:81:8c:42:4f:10:46:a0:15:41:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=91db823a6c2c332d3cdbe10d358675633fa50685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:4e:dd:16:95:ac:d1:16:ea:67:66:1e:be:
                    4d:57:50:4c:e9:c9:c4:78:eb:11:bc:82:b6:58:a4:
                    b5:ca:57:e9:55:80:1d:08:54:8d:3e:94:17:56:4e:
                    37:2b:45:f7:d7:da:bf:7a:6b:fb:83:f8:81:01:25:
                    cc:a9:c6:2e:40:67:f0:c6:90:dc:1e:74:db:e2:28:
                    de:01:d4:83:9d:f3:98:92:81:64:78:09:98:0c:7f:
                    8f:26:f4:a8:e6:a1:b7:a0:6d:f4:62:39:af:05:e5:
                    12:7c:68:e4:55:92:18:05:65:1b:48:53:f1:c9:a7:
                    64:45:eb:4f:52:73:c1:27:91:86:f7:f4:b6:34:7d:
                    6b:8a:d0:9d:71:0e:e8:af:a6:54:58:6b:aa:27:44:
                    ca:3d:99:0f:d2:98:b4:03:cf:94:0c:55:65:2c:2f:
                    d2:0c:e8:e3:33:e1:d0:a6:bf:ad:73:90:f6:7a:ab:
                    23:56:47:19:58:a8:14:30:f5:45:fd:60:3d:b2:20:
                    58:2b:42:1a:25:7a:05:a2:f5:8d:74:34:27:1f:94:
                    85:a3:1e:d9:77:ff:b0:0f:16:f2:3a:cf:16:7e:43:
                    ef:91:1d:62:d8:4b:83:86:c3:da:da:74:84:0d:cb:
                    2d:56:37:e8:8a:0e:a3:dc:b4:62:b3:d1:33:cb:c5:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DB:82:3A:6C:2C:33:2D:3C:DB:E1:0D:35:86:75:63:3F:A5:06:85
            X509v3 Authority Key Identifier:
                keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2d:31:0a:8b:54:4c:2e:63:34:20:b0:03:3a:29:c3:6f:ef:
         13:bf:f6:04:70:29:da:63:43:76:4b:99:5d:1c:91:b2:ee:cc:
         fd:4e:13:df:11:73:52:1d:75:77:2d:7a:26:07:bf:59:4e:d8:
         ef:f9:2d:a7:7c:e8:25:65:4c:1d:97:34:79:d8:7e:7e:9b:a7:
         c7:37:0c:35:df:a4:41:6a:11:0e:cc:73:b7:17:75:18:fb:32:
         fd:55:7f:c2:e2:00:ac:6e:77:12:2f:cd:96:da:76:c9:8a:a2:
         b2:8d:2f:b8:6f:da:21:ed:09:00:d0:57:76:63:02:70:f4:f3:
         03:d2:4d:0c:ac:bd:68:0e:8f:32:7b:79:f5:36:48:8e:a0:1f:
         75:b2:7c:20:ac:bc:89:ad:f9:36:c1:bd:55:41:f1:cb:49:29:
         27:ea:23:37:8d:5f:6c:2d:1f:75:92:d6:57:37:16:0f:1d:ac:
         fa:15:3b:b6:00:7a:9b:30:d5:43:34:f3:95:9b:c0:21:bc:21:
         00:14:c7:bc:9c:1f:4e:3c:3f:39:64:e6:6d:4b:7d:ea:24:d4:
         d8:36:6b:b1:96:da:a5:74:22:a5:29:c2:24:bd:e6:a2:0b:28:
         7f:dd:55:bc:83:b8:c6:45:d0:16:e0:1b:ea:4d:a5:a9:72:74:
         75:e3:75:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6R+gxKBjEJPEEagFUEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDY1MjE2ODEyZWQyNGZkMWM3MTk4NzFhNTlhOTcxZGVj
MzBhMjYwHhcNMjUwMTMxMTYwMDMwWhcNMjUwMjAxMTYwMDMwWjAzMTEwLwYDVQQD
Eyg5MWRiODIzYTZjMmMzMzJkM2NkYmUxMGQzNTg2NzU2MzNmYTUwNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMFO3RaVrNEW6mdmHr5NV1BM6cnE
eOsRvIK2WKS1ylfpVYAdCFSNPpQXVk43K0X319q/emv7g/iBASXMqcYuQGfwxpDc
HnTb4ijeAdSDnfOYkoFkeAmYDH+PJvSo5qG3oG30YjmvBeUSfGjkVZIYBWUbSFPx
yadkRetPUnPBJ5GG9/S2NH1ritCdcQ7or6ZUWGuqJ0TKPZkP0pi0A8+UDFVlLC/S
DOjjM+HQpr+tc5D2eqsjVkcZWKgUMPVF/WA9siBYK0IaJXoFovWNdDQnH5SFox7Z
d/+wDxbyOs8WfkPvkR1i2EuDhsPa2nSEDcstVjfoig6j3LRis9Ezy8VBRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHbgjpsLDMtPNvhDTWGdWM/pQaFMB8GA1UdIwQY
MBaAFDrWUhaBLtJP0ccZhxpZqXHewwomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTct
NDY1MzhjYTUzODNjLzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iOGNhZTQtYjVhZi00MzgwLTk4MTctNDY1MzhjYTUzODNj
LzEvT3RaU0ZvRXUwa19SeHhtSEdsbXBjZDdEQ2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADy0xCotU
TC5jNCCwAzopw2/vE7/2BHAp2mNDdkuZXRyRsu7M/U4T3xFzUh11dy16Jge/WU7Y
7/ktp3zoJWVMHZc0edh+fpunxzcMNd+kQWoRDsxztxd1GPsy/VV/wuIArG53Ei/N
ltp2yYqiso0vuG/aIe0JANBXdmMCcPTzA9JNDKy9aA6PMnt59TZIjqAfdbJ8IKy8
ia35NsG9VUHxy0kpJ+ojN41fbC0fdZLWVzcWDx2s+hU7tgB6mzDVQzTzlZvAIbwh
ABTHvJwfTjw/OWTmbUt96iTU2DZrsZbapXQipSnCJL3mogsof91VvIO4xkXQFuAb
6k2lqXJ0deN15w==
-----END CERTIFICATE-----