Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
File:                     laWt9q8fzAVwrfhY_Vv74oeRoYY.mft (raw, json)
Hash identifier:          H0N9ANu3SEjTyYToFAGUMUX/WsbjNf92TdtI0mvGuTQ=
Subject key identifier:   00:AC:8C:C7:00:F6:DE:66:F0:4E:DE:36:6B:FA:00:87:37:A9:ED:BF
Authority key identifier: 95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86
Certificate issuer:       /CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
Certificate serial:       0194BCE077DD8DFD5D46D729A6FD3967A758
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft
Manifest number:          0ED9
Signing time:             Fri 31 Jan 2025 15:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:14 +0000
Files and hashes:         1: 8PVKdp7jBdhmskcbZzZ5u7sq85c.roa (hash: XnxGpZ/fINBa34w0yMKfzpg9ucbY/sXeEDSMiSeEKsQ=)
                          2: LfyCocTCxKL8V3zHoX1xFiZMk8Q.roa (hash: V9KPs5yiTRXqdL9lcAPgAPfn6nhC2WxPwKEIJHJAwEE=)
                          3: LlY5-pBhFL3dAl8cX6FAb4DeXq4.roa (hash: oQ/e/lufwF8sFfj12z9wIS+ZAs4sbk+vLTEKm4FrgfQ=)
                          4: fyoGinJNnbCXVA-FGTyI6g0iqfg.roa (hash: Qmtjez3xLzGPUsipebbDVEIAH1OV1oGj/8BaZ2trCyc=)
                          5: laWt9q8fzAVwrfhY_Vv74oeRoYY.crl (hash: WgnKjcFTl92LW+CsOCqd42t8SxbVIf+s6dEtlN0Xcx8=)
                          6: w5AAaFloCKYaEQzBxuGEgwR95Zs.roa (hash: By9YcFbFu2q4K1YFFKZKWijRod5KlV5ghhACJNC0MvQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:77:dd:8d:fd:5d:46:d7:29:a6:fd:39:67:a7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a5adf6af1fcc0570adf858fd5bfbe28791a186
        Validity
            Not Before: Jan 31 15:00:14 2025 GMT
            Not After : Feb  1 15:00:14 2025 GMT
        Subject: CN=00ac8cc700f6de66f04ede366bfa008737a9edbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7b:c1:bd:ae:ff:68:af:19:e6:33:0c:79:d5:
                    b1:0c:d8:16:b1:1b:bd:ba:19:f3:3c:f8:d6:ee:b1:
                    b7:99:49:17:1c:d6:a3:61:6f:54:f1:dc:0a:77:d7:
                    f2:44:b0:b1:1e:04:8c:36:a9:0d:61:bc:bc:94:b1:
                    f9:b3:0d:4a:ae:8d:d1:f7:f0:fc:a6:8e:7f:5c:a8:
                    3c:e0:8e:6a:61:19:fc:7d:d3:c6:4d:57:4f:00:d9:
                    47:ae:88:3b:4c:f5:61:ed:f7:8b:69:31:5d:7d:b0:
                    81:8b:9d:ae:f9:90:ec:ac:26:05:84:7f:75:9f:bf:
                    51:ed:f6:15:13:1b:ba:e1:42:54:65:ce:4f:cc:26:
                    9f:8f:71:73:5c:80:45:52:a1:97:e9:82:d8:10:68:
                    b5:09:ca:3a:63:f3:36:b0:41:f0:a0:7d:7b:64:5e:
                    9c:c0:fa:10:f2:d5:00:b4:f0:39:7b:38:53:59:9f:
                    f4:92:69:f7:a1:fe:05:ec:4c:8b:5b:17:4a:ec:ee:
                    e4:7c:d7:6e:a8:de:5f:05:fd:18:99:66:03:f8:f2:
                    43:15:ce:21:ac:c9:26:38:35:63:f5:3b:7d:15:f7:
                    89:93:b5:98:bf:dc:02:01:3a:69:b6:7b:e7:ec:2b:
                    74:3b:19:a7:96:77:5d:64:e7:fe:07:ca:02:ec:84:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AC:8C:C7:00:F6:DE:66:F0:4E:DE:36:6B:FA:00:87:37:A9:ED:BF
            X509v3 Authority Key Identifier:
                keyid:95:A5:AD:F6:AF:1F:CC:05:70:AD:F8:58:FD:5B:FB:E2:87:91:A1:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/laWt9q8fzAVwrfhY_Vv74oeRoYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d3f1ba-d9e5-45c5-bca2-1619d08c6965/1/laWt9q8fzAVwrfhY_Vv74oeRoYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:7c:f8:14:fc:fb:b0:55:73:ee:10:4c:70:e9:4a:ad:75:f6:
         f5:c0:10:48:0d:e4:d0:8d:70:e8:69:2d:d4:71:36:9c:c9:bc:
         f4:2b:a6:c8:1a:8d:76:c9:a0:34:59:be:41:e0:10:63:d3:78:
         36:25:3a:98:69:36:5d:2c:79:a2:35:0d:fd:5a:1e:02:fb:7d:
         bb:d7:03:d2:58:1b:2d:fc:82:bb:6e:60:3c:86:4f:8a:85:5a:
         73:e6:26:b3:33:a5:c6:60:17:e7:96:2b:b7:c2:c4:6a:50:f3:
         95:6c:3b:e1:0e:68:5d:ea:e9:f4:f8:1c:9d:eb:a8:ac:05:61:
         5b:5d:b0:c1:7a:d4:30:04:95:a0:57:0e:fc:7f:4f:ba:62:53:
         31:54:33:6b:c9:16:b0:82:dd:b4:f9:b3:8b:7e:c6:09:51:ef:
         ac:8d:65:8a:37:6d:a7:88:ee:38:68:5f:a1:fd:ef:61:a0:d8:
         15:0f:87:27:ca:ee:62:46:78:0e:63:32:65:d4:e6:52:d9:78:
         0c:ec:7e:d4:d0:7a:9c:64:30:6e:55:3a:a7:43:fd:19:a2:c4:
         aa:90:47:d1:2f:af:20:2e:b7:f5:98:9d:e0:0b:89:19:46:4f:
         f4:34:71:3a:77:55:72:71:d9:fd:69:92:0c:88:ef:2e:11:52:
         77:6c:b5:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Hfdjf1dRtcppv05Z6dYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YTVhZGY2YWYxZmNjMDU3MGFkZjg1OGZkNWJmYmUyODc5
MWExODYwHhcNMjUwMTMxMTUwMDE0WhcNMjUwMjAxMTUwMDE0WjAzMTEwLwYDVQQD
EygwMGFjOGNjNzAwZjZkZTY2ZjA0ZWRlMzY2YmZhMDA4NzM3YTllZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3vBva7/aK8Z5jMMedWxDNgWsRu9
uhnzPPjW7rG3mUkXHNajYW9U8dwKd9fyRLCxHgSMNqkNYby8lLH5sw1Kro3R9/D8
po5/XKg84I5qYRn8fdPGTVdPANlHrog7TPVh7feLaTFdfbCBi52u+ZDsrCYFhH91
n79R7fYVExu64UJUZc5PzCafj3FzXIBFUqGX6YLYEGi1Cco6Y/M2sEHwoH17ZF6c
wPoQ8tUAtPA5ezhTWZ/0kmn3of4F7EyLWxdK7O7kfNduqN5fBf0YmWYD+PJDFc4h
rMkmODVj9Tt9FfeJk7WYv9wCATpptnvn7Ct0OxmnlnddZOf+B8oC7IRk7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFACsjMcA9t5m8E7eNmv6AIc3qe2/MB8GA1UdIwQY
MBaAFJWlrfavH8wFcK34WP1b++KHkaGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTIt
MTYxOWQwOGM2OTY1LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9kM2YxYmEtZDllNS00NWM1LWJjYTItMTYxOWQwOGM2OTY1
LzEvbGFXdDlxOGZ6QVZ3cmZoWV9Wdjc0b2VSb1lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA23z4FPz7
sFVz7hBMcOlKrXX29cAQSA3k0I1w6Gkt1HE2nMm89CumyBqNdsmgNFm+QeAQY9N4
NiU6mGk2XSx5ojUN/VoeAvt9u9cD0lgbLfyCu25gPIZPioVac+YmszOlxmAX55Yr
t8LEalDzlWw74Q5oXerp9PgcneuorAVhW12wwXrUMASVoFcO/H9PumJTMVQza8kW
sILdtPmzi37GCVHvrI1lijdtp4juOGhfof3vYaDYFQ+HJ8ruYkZ4DmMyZdTmUtl4
DOx+1NB6nGQwblU6p0P9GaLEqpBH0S+vIC639Zid4AuJGUZP9DRxOndVcnHZ/WmS
DIjvLhFSd2y1kg==
-----END CERTIFICATE-----