Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
File:                     WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft (raw, json)
Hash identifier:          3TbIppB9CT/Ofke0exomFyLEUgvflASC7RuKEU9Uavc=
Subject key identifier:   8A:22:DD:97:2F:D2:81:60:61:99:DE:04:73:5E:C5:C3:5E:B4:54:B1
Authority key identifier: 59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A
Certificate issuer:       /CN=59f915ae3e2216be338f6334532f9380cfd2f40a
Certificate serial:       0194BBCE58A9B399DB635C280F1F934EECD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft
Manifest number:          1107
Signing time:             Fri 31 Jan 2025 10:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:49 +0000
Files and hashes:         1: HASJFQJ0dhUBOsyjobgHrPemYuk.roa (hash: t2cor/choG8bzkBioIX6Z6t5j6GZXqfW3BgdsKtvgZE=)
                          2: V2wJ6rRmC43RRh3IPdBHHjW281Y.roa (hash: Avq4OHU4hwzXrjOvbzGbJG8yV+Q0N6KuIdKdAo1r63E=)
                          3: WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl (hash: l3F1xOJIL1EsIJXwr4rG2a9/9EvMTjnAWXKE9kXddA4=)
                          4: rv-2MUAhxSXgJ6_WUeSuY2HQEIc.roa (hash: pFW5RVqZxflQiZHo+kcVS/DdoHRiWRG5Vues4Jg84IU=)
                          5: tIRGV1d2T8vpZcEr5yhT7qzzmu8.roa (hash: k7phpFXieBGnmSKu+QsLBAEm2dEA+/STqbnwyEif0CA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:58:a9:b3:99:db:63:5c:28:0f:1f:93:4e:ec:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59f915ae3e2216be338f6334532f9380cfd2f40a
        Validity
            Not Before: Jan 31 10:00:49 2025 GMT
            Not After : Feb  1 10:00:49 2025 GMT
        Subject: CN=8a22dd972fd281606199de04735ec5c35eb454b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:18:d9:b5:9a:57:b9:28:78:eb:76:bf:8f:36:
                    3e:11:6d:76:1f:fc:ff:50:9f:9b:bf:92:b8:7a:f0:
                    f4:67:38:51:d1:be:70:68:ce:d2:22:fb:da:80:49:
                    59:b8:4a:a5:b1:bc:1f:ae:35:f9:47:48:b1:7e:f3:
                    d3:cb:06:73:12:bb:fc:d8:a4:ed:4e:88:86:b4:aa:
                    a2:3a:3a:a8:49:04:f2:9f:2d:6c:1c:93:6a:8f:8d:
                    dc:ec:18:a3:64:3c:3a:ed:33:06:b3:99:e0:ed:83:
                    73:3c:a3:97:e8:f5:d5:28:51:93:43:9c:cb:98:99:
                    99:26:d0:00:77:cf:3b:0d:7d:1a:ff:75:53:9e:4c:
                    fe:24:a2:e5:ff:83:49:16:14:49:93:a3:cf:2f:2c:
                    65:36:3a:29:8e:50:ca:9f:e6:82:9c:79:f3:8c:bd:
                    c8:41:2d:2c:b9:19:89:5c:90:1a:9c:27:18:56:e9:
                    36:50:db:ec:30:35:53:2a:32:6c:fa:ca:af:62:31:
                    d8:23:78:1b:bb:b4:f3:64:b8:14:a3:63:84:be:d7:
                    6c:f4:4b:e2:ca:b1:71:2b:a2:12:7a:55:6c:83:5a:
                    f7:b0:8f:49:21:06:66:ee:25:de:7e:b2:3f:bd:ff:
                    c0:06:c3:06:dd:49:77:1c:98:69:cc:5b:b8:9f:83:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:22:DD:97:2F:D2:81:60:61:99:DE:04:73:5E:C5:C3:5E:B4:54:B1
            X509v3 Authority Key Identifier:
                keyid:59:F9:15:AE:3E:22:16:BE:33:8F:63:34:53:2F:93:80:CF:D2:F4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aa2311-b1cd-4d18-aebb-a3f2324f6d8c/1/WfkVrj4iFr4zj2M0Uy-TgM_S9Ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e8:18:2d:49:e8:7e:ec:43:d6:7e:a9:72:da:21:64:09:43:
         7c:59:61:89:83:ea:aa:b3:02:b7:0d:88:b5:3f:b2:16:44:72:
         aa:c6:7e:66:47:e5:1d:5d:4b:2f:69:8c:57:ba:d2:2d:d7:ae:
         91:c2:46:36:6e:81:94:41:79:1b:e4:70:f0:12:c4:70:28:79:
         ae:0d:c2:8f:a8:14:87:9e:76:0c:cb:b7:b4:19:ac:d8:80:a4:
         bc:1f:27:54:4b:fb:4b:84:64:80:45:6c:c4:4f:9c:3f:52:7c:
         18:cc:31:15:55:23:47:46:d4:1a:c4:d4:62:fe:cf:cf:a4:c4:
         db:4f:ef:0e:f0:65:55:b6:6e:7d:9c:25:44:a5:fd:7a:b3:13:
         39:28:c2:12:4e:52:a7:67:bc:cb:3b:e3:06:f9:21:12:3d:8f:
         f7:ad:73:97:ab:8e:bc:f7:c5:d5:02:30:ce:23:50:89:8b:e0:
         df:5d:37:bd:3a:5e:5f:67:5e:f3:03:1b:9f:87:53:5f:e9:f9:
         63:1f:95:5b:a6:c1:39:fc:07:5b:52:fc:85:a5:8f:3e:30:93:
         88:87:25:c6:79:32:2c:2f:73:13:69:bb:7c:e2:ba:61:5f:97:
         54:00:cd:c3:71:2c:1f:65:d8:c2:0f:13:0e:64:33:2a:fa:c5:
         b6:53:68:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlips5nbY1woDx+TTuzQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZjkxNWFlM2UyMjE2YmUzMzhmNjMzNDUzMmY5MzgwY2Zk
MmY0MGEwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg4YTIyZGQ5NzJmZDI4MTYwNjE5OWRlMDQ3MzVlYzVjMzVlYjQ1NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xjZtZpXuSh463a/jzY+EW12H/z/
UJ+bv5K4evD0ZzhR0b5waM7SIvvagElZuEqlsbwfrjX5R0ixfvPTywZzErv82KTt
ToiGtKqiOjqoSQTyny1sHJNqj43c7BijZDw67TMGs5ng7YNzPKOX6PXVKFGTQ5zL
mJmZJtAAd887DX0a/3VTnkz+JKLl/4NJFhRJk6PPLyxlNjopjlDKn+aCnHnzjL3I
QS0suRmJXJAanCcYVuk2UNvsMDVTKjJs+sqvYjHYI3gbu7TzZLgUo2OEvtds9Evi
yrFxK6ISelVsg1r3sI9JIQZm7iXefrI/vf/ABsMG3Ul3HJhpzFu4n4PpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoi3Zcv0oFgYZneBHNexcNetFSxMB8GA1UdIwQY
MBaAFFn5Fa4+Iha+M49jNFMvk4DP0vQKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ZrVnJqNGlGcjR6ajJNMFV5LVRnTV9TOUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hYTIzMTEtYjFjZC00ZDE4LWFlYmIt
YTNmMjMyNGY2ZDhjLzEvV2ZrVnJqNGlGcjR6ajJNMFV5LVRnTV9TOUFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hYTIzMTEtYjFjZC00ZDE4LWFlYmItYTNmMjMyNGY2ZDhj
LzEvV2ZrVnJqNGlGcjR6ajJNMFV5LVRnTV9TOUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEegYLUno
fuxD1n6pctohZAlDfFlhiYPqqrMCtw2ItT+yFkRyqsZ+ZkflHV1LL2mMV7rSLdeu
kcJGNm6BlEF5G+Rw8BLEcCh5rg3Cj6gUh552DMu3tBms2ICkvB8nVEv7S4RkgEVs
xE+cP1J8GMwxFVUjR0bUGsTUYv7Pz6TE20/vDvBlVbZufZwlRKX9erMTOSjCEk5S
p2e8yzvjBvkhEj2P961zl6uOvPfF1QIwziNQiYvg3103vTpeX2de8wMbn4dTX+n5
Yx+VW6bBOfwHW1L8haWPPjCTiIclxnkyLC9zE2m7fOK6YV+XVADNw3EsH2XYwg8T
DmQzKvrFtlNokw==
-----END CERTIFICATE-----