Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File:                     s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier:          QYhVeVT0qkYrfoidSY000vyNMcO9Pr4Gd2lC0hlvP90=
Subject key identifier:   BD:9C:3D:EE:2C:0B:7C:51:9A:6E:0F:B2:7A:28:56:E6:F5:CE:24:F6
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer:       /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial:       0194BC04D8D46BD7B7190087944CFD637B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 11:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:21 +0000
Files and hashes:         1: 9-NB3ppe0EfeL2Nj37oF8VJ41t8.roa (hash: ZMKYndtOmSHpSKO5kfkDg42yZItGmF3H5NrIrUVaQPk=)
                          2: W3ef7yk_8thOKV8fePQf_c3aBKs.roa (hash: q4TpxDQr4+wv6OyV3D6r4UE1e0P7/7+4PMrtZl4uXJc=)
                          3: YRU1Ojg5qyXEoXOhvO7oLvQPC8c.roa (hash: TDJgwlET1jOQj6C/tybMD3s4rcsYrcr30h1aS7JqjFc=)
                          4: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: MkF8Sm5DkqoE13RBAeljFv6V8Av3B22nYYB75HsTNu8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d8:d4:6b:d7:b7:19:00:87:94:4c:fd:63:7b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
        Validity
            Not Before: Jan 31 11:00:21 2025 GMT
            Not After : Feb  1 11:00:21 2025 GMT
        Subject: CN=bd9c3dee2c0b7c519a6e0fb27a2856e6f5ce24f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:a3:93:ce:99:18:58:f1:19:2a:f4:08:28:
                    06:15:9b:66:7d:b7:78:5e:cf:1a:5f:14:8e:76:31:
                    1f:11:e8:00:30:fe:c0:88:78:0d:dd:a9:43:ce:a8:
                    1c:19:56:65:15:68:e2:cf:c5:32:d4:18:1d:1b:fc:
                    50:ec:f6:19:78:0a:80:4e:f9:46:dc:74:c3:2c:88:
                    ab:35:74:4f:14:ec:8f:d8:b0:48:3e:e6:a3:34:a7:
                    b3:0c:49:a3:f4:f2:8a:1e:2f:09:b2:08:54:90:42:
                    78:6b:44:a8:c7:ea:f5:a6:b4:68:64:ff:ad:32:63:
                    45:1c:6a:db:2c:5e:99:3a:a5:35:a3:c4:62:33:cd:
                    0e:ac:c0:af:b9:9e:27:ba:05:e6:4e:19:6c:5d:20:
                    c7:58:db:25:c1:a4:c1:23:09:6b:a6:1e:11:d2:9e:
                    b3:63:14:67:17:95:02:52:81:54:da:e5:46:49:f9:
                    55:37:39:9d:f2:1d:5b:68:fd:bc:99:d1:53:9a:54:
                    8b:49:0b:56:5b:4d:71:7d:8b:20:de:1a:fe:cd:36:
                    d5:38:c4:81:3a:d9:53:a2:d7:f5:ce:02:0e:da:6a:
                    08:64:1b:d2:d3:c3:7a:9a:e9:53:0d:3f:79:13:e9:
                    c6:9f:b0:2d:2b:93:84:e6:e4:ea:91:39:f3:81:9b:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9C:3D:EE:2C:0B:7C:51:9A:6E:0F:B2:7A:28:56:E6:F5:CE:24:F6
            X509v3 Authority Key Identifier:
                keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:d4:1f:61:b9:e8:c7:95:b1:6f:c7:f9:0c:f4:73:02:b4:
         9b:52:64:4a:4d:bd:b9:31:cf:d2:5a:14:b1:c1:57:89:54:0e:
         6f:a2:ff:5d:0e:4c:53:a7:92:f3:09:7b:52:d5:3c:d6:c6:a0:
         1c:e2:9e:cf:24:84:0c:9d:be:4c:65:bc:48:cd:e0:2e:6f:a2:
         2e:03:22:11:62:87:23:63:73:12:00:10:6c:a1:f5:bd:21:a2:
         ee:6c:e1:11:03:b0:d0:53:07:dc:20:d2:9f:e8:d4:37:ae:26:
         67:fa:8d:8d:f1:0b:b1:7c:4e:6a:f6:8b:a1:6d:8e:fc:e7:a1:
         e2:01:d9:6d:52:78:b8:41:1d:3c:2d:d0:ae:4f:a1:58:9a:c8:
         2d:5c:80:ba:d0:b0:29:a3:0f:ad:ad:ff:c0:76:9a:c9:36:a1:
         47:f4:9b:8b:9e:56:95:0c:86:9b:bb:b5:ef:da:e0:4a:50:df:
         55:f9:1b:da:21:b4:69:5a:84:67:b9:a8:c6:6d:44:93:31:dc:
         f4:83:1f:26:73:4d:7b:5a:59:4b:cb:44:9f:dc:07:b8:12:53:
         e5:bd:c8:65:dc:af:71:43:5d:c5:d1:a7:7c:d8:ff:da:da:67:
         72:2f:da:56:bc:0a:6c:77:67:f2:2b:04:70:77:00:94:6b:62:
         75:50:db:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNjUa9e3GQCHlEz9Y3t9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZGQzNWNjZmY2YzJiODZhMWZhZDhmMTAzYmMyMDA3MGQw
OWU1MGQwHhcNMjUwMTMxMTEwMDIxWhcNMjUwMjAxMTEwMDIxWjAzMTEwLwYDVQQD
EyhiZDljM2RlZTJjMGI3YzUxOWE2ZTBmYjI3YTI4NTZlNmY1Y2UyNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1Gjk86ZGFjxGSr0CCgGFZtmfbd4
Xs8aXxSOdjEfEegAMP7AiHgN3alDzqgcGVZlFWjiz8Uy1BgdG/xQ7PYZeAqATvlG
3HTDLIirNXRPFOyP2LBIPuajNKezDEmj9PKKHi8JsghUkEJ4a0Sox+r1prRoZP+t
MmNFHGrbLF6ZOqU1o8RiM80OrMCvuZ4nugXmThlsXSDHWNslwaTBIwlrph4R0p6z
YxRnF5UCUoFU2uVGSflVNzmd8h1baP28mdFTmlSLSQtWW01xfYsg3hr+zTbVOMSB
OtlTotf1zgIO2moIZBvS08N6mulTDT95E+nGn7AtK5OE5uTqkTnzgZtyrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2cPe4sC3xRmm4PsnooVub1ziT2MB8GA1UdIwQY
MBaAFLPdNcz/bCuGofrY8QO8IAcNCeUNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEt
MmIxMDUwNTFiYTU5LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny80NGQ0YTMtN2E4NC00NDk5LThiNzEtMmIxMDUwNTFiYTU5
LzEvczkwMXpQOXNLNGFoLXRqeEE3d2dCdzBKNVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbjUH2G5
6MeVsW/H+Qz0cwK0m1JkSk29uTHP0loUscFXiVQOb6L/XQ5MU6eS8wl7UtU81sag
HOKezySEDJ2+TGW8SM3gLm+iLgMiEWKHI2NzEgAQbKH1vSGi7mzhEQOw0FMH3CDS
n+jUN64mZ/qNjfELsXxOavaLoW2O/Oeh4gHZbVJ4uEEdPC3Qrk+hWJrILVyAutCw
KaMPra3/wHaayTahR/Sbi55WlQyGm7u179rgSlDfVfkb2iG0aVqEZ7moxm1EkzHc
9IMfJnNNe1pZS8tEn9wHuBJT5b3IZdyvcUNdxdGnfNj/2tpnci/aVrwKbHdn8isE
cHcAlGtidVDbmw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:55:23 2025 by rpki-client