Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          WZk09O3b3UHB+hwOYheFo7c7QPZuQRkzdlWWJDnhBg4=
Subject key identifier:   1B:01:BF:05:18:A3:17:9C:7C:22:D2:29:66:A8:44:4A:7D:20:6B:A3
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       0194BCA96E951A8831464D404F5C0FFC3C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          1175
Signing time:             Fri 31 Jan 2025 14:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:07 +0000
Files and hashes:         1: BS_uFjltIa2QdarHmlrjr-N1lfU.roa (hash: In6YLEFgpwciZfoYuJdlvQqiCYVNTfn1vSODPqF0a14=)
                          2: KyGy1yiZWdO5Baarc34FhluuX6o.roa (hash: PluDSAEvqHUwzzXaYjhHiEYtCeH5Nq3YEFQLeyKhxg0=)
                          3: MTuQql9Rh88BHIoSEfi0N5xULhQ.roa (hash: c4KaJbDb+YQM6dcx+R5wyGu53GnRsEWM+y0F8Wui/6Q=)
                          4: aPIQbORfDqMdRus3FUsayPmmxSc.roa (hash: Bjwo2XfxvG4dmeK0piMxmJc9w9b8pe3Sc6uuX95IjTw=)
                          5: aTlzb3K-mNhSWkbEKv29Xc3ITT0.roa (hash: Y8Xw4D+ihA3z60B6zW48nfEFoOcri17+Bm+/jPd3INc=)
                          6: kL_2gvtUAFUX3-zbMD5AfdbkkFc.roa (hash: i5sBmgPlAzgh1HcdG7lTgrd/mdbOcJciFVKfQ5U2fAw=)
                          7: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: 23OXBXRkIKxejMKA6dZu/BoW8vp0RtSAJhT1gyKG3K4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:6e:95:1a:88:31:46:4d:40:4f:5c:0f:fc:3c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Jan 31 14:00:07 2025 GMT
            Not After : Feb  1 14:00:07 2025 GMT
        Subject: CN=1b01bf0518a3179c7c22d22966a8444a7d206ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:ef:69:86:51:46:34:88:21:3b:dc:2e:6b:
                    50:42:ac:28:37:24:ac:f0:c1:a8:ae:3c:4d:3b:d3:
                    9b:aa:28:41:01:df:d9:b3:d3:fb:1f:23:b8:07:00:
                    a1:05:12:ec:99:4b:18:cb:39:99:a8:4b:2f:ee:cc:
                    d6:67:4b:06:37:ec:59:45:86:5b:63:8d:0f:56:f4:
                    48:17:fc:1b:84:49:20:84:e0:29:4f:19:ba:ea:61:
                    0e:3a:ad:2f:d2:e8:00:57:3b:4a:30:59:24:ff:ff:
                    96:cd:59:0d:5c:81:33:8b:74:6d:95:71:ef:10:49:
                    67:c5:18:7a:bb:6c:00:4f:87:94:34:c0:bc:1d:35:
                    02:30:de:c9:72:02:12:80:25:70:88:66:05:9c:dd:
                    4a:d8:bd:bb:d4:e7:53:55:f4:55:a6:05:30:68:18:
                    aa:9e:fd:10:ee:d8:d1:2c:29:9c:7c:89:c4:a2:d7:
                    7b:32:1b:84:86:3a:53:77:3c:b4:2d:23:d8:67:09:
                    0d:68:6d:45:62:b1:95:64:a5:06:fe:c8:65:6f:e6:
                    0a:51:7b:8a:b8:49:a7:ac:42:b7:95:3e:e4:44:66:
                    49:0a:a3:c8:e1:a5:ed:45:5a:47:30:a1:0c:10:0b:
                    22:fb:a8:86:9a:49:cc:cb:bf:74:5c:4a:2f:87:d5:
                    c6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:01:BF:05:18:A3:17:9C:7C:22:D2:29:66:A8:44:4A:7D:20:6B:A3
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:68:a4:9c:62:e8:b2:07:67:4a:d0:46:44:c4:07:a8:90:
         de:cc:2c:b2:e0:4c:70:90:94:a7:8d:ba:8c:b3:22:91:fa:78:
         15:25:cf:d5:df:38:91:f7:4f:68:4d:73:1f:16:0b:db:f7:f6:
         24:9f:e7:3e:96:36:2a:f2:46:36:68:9c:ea:ec:5f:2e:0a:4a:
         55:bf:c9:c7:d8:84:0c:9e:b9:35:a1:2a:cd:2a:67:47:88:7b:
         77:ff:19:94:29:18:0e:03:c0:63:c2:ad:48:96:ff:4f:f3:ac:
         eb:72:f8:ea:27:1e:ab:ca:98:0b:12:11:6c:97:16:91:da:4b:
         c8:27:22:e9:3a:8d:86:53:39:47:b1:72:df:71:86:a2:99:cc:
         5f:44:94:36:31:92:39:79:10:72:8f:c9:7f:61:43:8d:c9:07:
         11:e3:51:90:b9:5d:d2:d5:c9:58:33:fb:5e:d6:de:47:26:b8:
         05:3f:d1:5e:b0:ae:81:21:47:9a:1e:ce:65:79:e3:5d:0a:e0:
         b2:88:30:41:46:c0:39:9b:6f:19:28:1a:c5:e6:ff:71:f9:97:
         67:c0:a9:38:d8:98:64:46:e6:83:a2:e2:4a:a9:de:ef:8b:0a:
         eb:1c:92:1a:17:cb:6b:82:a7:1a:a6:d3:e5:9e:dc:ad:12:83:
         dc:9f:89:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qW6VGogxRk1AT1wP/DwjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4
M2MzOWEwHhcNMjUwMTMxMTQwMDA3WhcNMjUwMjAxMTQwMDA3WjAzMTEwLwYDVQQD
EygxYjAxYmYwNTE4YTMxNzljN2MyMmQyMjk2NmE4NDQ0YTdkMjA2YmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPrvaYZRRjSIITvcLmtQQqwoNySs
8MGorjxNO9ObqihBAd/Zs9P7HyO4BwChBRLsmUsYyzmZqEsv7szWZ0sGN+xZRYZb
Y40PVvRIF/wbhEkghOApTxm66mEOOq0v0ugAVztKMFkk//+WzVkNXIEzi3RtlXHv
EElnxRh6u2wAT4eUNMC8HTUCMN7JcgISgCVwiGYFnN1K2L271OdTVfRVpgUwaBiq
nv0Q7tjRLCmcfInEotd7MhuEhjpTdzy0LSPYZwkNaG1FYrGVZKUG/shlb+YKUXuK
uEmnrEK3lT7kRGZJCqPI4aXtRVpHMKEMEAsi+6iGmknMy790XEovh9XGhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsBvwUYoxecfCLSKWaoREp9IGujMB8GA1UdIwQY
MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt
NDk3YmVkZDcxZWI5LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5
LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHVopJxi
6LIHZ0rQRkTEB6iQ3swssuBMcJCUp426jLMikfp4FSXP1d84kfdPaE1zHxYL2/f2
JJ/nPpY2KvJGNmic6uxfLgpKVb/Jx9iEDJ65NaEqzSpnR4h7d/8ZlCkYDgPAY8Kt
SJb/T/Os63L46iceq8qYCxIRbJcWkdpLyCci6TqNhlM5R7Fy33GGopnMX0SUNjGS
OXkQco/Jf2FDjckHEeNRkLld0tXJWDP7XtbeRya4BT/RXrCugSFHmh7OZXnjXQrg
sogwQUbAOZtvGSgaxeb/cfmXZ8CpONiYZEbmg6LiSqne74sK6xySGhfLa4KnGqbT
5Z7crRKD3J+JCw==
-----END CERTIFICATE-----