Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
File:                     PubOz_2bi7oY1HTns5k-Ch0U27M.mft (raw, json)
Hash identifier:          bK6IAOnmAUcGutsbrIkNe4UKLfzx/atfQ4SGbyDtkoI=
Subject key identifier:   AF:ED:F7:57:84:55:DB:C3:5E:83:F5:A2:4F:4A:6A:AD:64:DB:2F:CD
Authority key identifier: 3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3
Certificate issuer:       /CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
Certificate serial:       0194BCE068B8060803270E9CF714A84BECA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 15:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:10 +0000
Files and hashes:         1: 0Z0N7XcDaBDDIFuADZvveEOpnJw.roa (hash: gAUFpbijoaRws4OSpZQdGdoxqVjsxrfddgC/n57+l3g=)
                          2: 8-FKPJHE6vcPzqBfhidoWPOxdAI.roa (hash: YFJG/U27ibxfBXMxeBPb2K+kYbsAd+aEaMxdkmB5KX8=)
                          3: MeMsmYAnac73QikfwHpf4FiB8MA.roa (hash: w8cyx5Qe5TgkNbDbtB6QAHXf0+aV1FgiM053aALKsSg=)
                          4: PubOz_2bi7oY1HTns5k-Ch0U27M.crl (hash: 4eFE/joDzpEkMdC12LrepTruVHRz4SwPXZLhfpY55VA=)
                          5: gBOr1K9o3G_sjVut4hTNYrOz3aw.roa (hash: WvCboN2sSwdfSWgLauEyXaJvvKZ2k+WSGckagpeMJcA=)
                          6: pRRc-aHsLhs7L3jVpiMmTF9mbXU.roa (hash: 3+Rll0s3Qp4ADMZLaRyXjqLo1eqDlTqqXI3V1CpcTo4=)
                          7: vuTW0ftXsfvIWtL6nGLUGKWxAa0.roa (hash: vusAgJM4Fe2/TEz+SbhV7Z/ibEen3tJQhfA8nIe5Or8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:68:b8:06:08:03:27:0e:9c:f7:14:a8:4b:ec:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee6cecffd9b8bba18d474e7b3993e0a1d14dbb3
        Validity
            Not Before: Jan 31 15:00:10 2025 GMT
            Not After : Feb  1 15:00:10 2025 GMT
        Subject: CN=afedf7578455dbc35e83f5a24f4a6aad64db2fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f3:4f:5a:ae:48:80:05:a5:0b:c7:19:93:3e:
                    69:06:67:e7:1a:c9:da:f9:5a:6f:20:a0:58:0a:30:
                    e2:55:b1:2b:86:68:9b:8a:f7:90:3d:68:13:02:d9:
                    82:0f:3b:34:de:19:b9:38:3d:fd:10:8e:27:ab:01:
                    51:f3:9e:4c:58:6d:c8:c9:33:61:4b:77:4a:3b:ce:
                    64:f4:99:9d:3f:f4:98:46:fc:fb:9f:1b:01:e9:1b:
                    0a:e0:c3:94:71:6c:2c:d2:17:1e:55:f0:57:17:6f:
                    96:4c:e6:ef:a0:e7:39:55:11:36:71:ff:ed:54:8a:
                    fd:9c:24:9b:bd:05:7c:ce:5e:20:3e:6a:22:bd:2a:
                    00:20:c6:ce:ea:d2:fd:ec:39:a0:c1:21:75:ba:72:
                    38:f7:de:29:7a:06:1f:fc:36:4d:c4:ba:fe:cb:72:
                    0d:5c:97:a1:fa:43:30:ea:b7:45:7e:20:f9:fd:a0:
                    f5:17:85:fd:69:b3:cb:0e:b0:b8:fc:36:6b:9c:3a:
                    28:46:3c:a7:60:fe:26:54:4f:c1:9d:b8:fa:f5:17:
                    29:8d:f9:88:b4:00:1f:c8:2f:66:5f:80:23:83:3d:
                    30:3e:52:10:8e:58:80:af:c4:95:91:dd:e9:c9:43:
                    1a:72:d1:23:35:42:c0:85:df:e7:58:4c:08:01:ec:
                    43:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:ED:F7:57:84:55:DB:C3:5E:83:F5:A2:4F:4A:6A:AD:64:DB:2F:CD
            X509v3 Authority Key Identifier:
                keyid:3E:E6:CE:CF:FD:9B:8B:BA:18:D4:74:E7:B3:99:3E:0A:1D:14:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PubOz_2bi7oY1HTns5k-Ch0U27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e61caa-2500-4388-a9fa-7324913975d5/1/PubOz_2bi7oY1HTns5k-Ch0U27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c8:bb:dd:99:6e:c7:1e:c8:44:c3:a0:7a:ba:36:ae:93:ab:
         ab:8a:32:37:95:91:3a:a2:ab:a3:46:10:aa:0e:2e:c5:a6:bc:
         5c:f9:85:27:0f:c2:af:4f:f9:2d:8d:88:80:99:17:6a:ff:10:
         5f:7f:d4:da:21:ae:82:d4:64:68:77:51:54:4f:91:54:e8:ec:
         dc:d6:4e:12:3e:c0:5c:91:aa:a2:eb:b8:3b:ea:42:50:27:bb:
         65:08:c0:49:2f:f3:0b:83:c7:54:0f:bb:39:a1:7e:84:56:80:
         32:fc:23:bf:9b:7c:79:35:f6:32:e9:eb:53:24:3d:17:2c:e4:
         8c:7c:d0:84:fe:0a:3f:dd:aa:e5:4c:be:cc:cd:25:c8:13:3f:
         12:cd:8b:8e:4e:b5:f1:2b:b7:4c:8b:7c:d5:34:f8:ba:4e:9f:
         5d:47:e7:e2:b9:d7:7d:f4:9d:9b:e8:de:7b:e4:d0:0e:65:f9:
         f9:64:b8:4c:f7:90:d0:17:a5:1c:a1:d8:f0:bc:1b:1e:07:0b:
         5c:5e:fe:17:61:fc:43:df:0b:b6:28:d1:e5:ba:62:59:5b:37:
         87:26:cb:a0:bf:cc:dd:26:b6:89:1c:cf:29:90:3b:2b:2b:de:
         ae:eb:f3:3b:5d:a7:20:bb:e2:a6:f0:f8:36:dc:e2:30:1e:e6:
         44:e7:93:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Gi4BggDJw6c9xSoS+ymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTZjZWNmZmQ5YjhiYmExOGQ0NzRlN2IzOTkzZTBhMWQx
NGRiYjMwHhcNMjUwMTMxMTUwMDEwWhcNMjUwMjAxMTUwMDEwWjAzMTEwLwYDVQQD
EyhhZmVkZjc1Nzg0NTVkYmMzNWU4M2Y1YTI0ZjRhNmFhZDY0ZGIyZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfNPWq5IgAWlC8cZkz5pBmfnGsna
+VpvIKBYCjDiVbErhmibiveQPWgTAtmCDzs03hm5OD39EI4nqwFR855MWG3IyTNh
S3dKO85k9JmdP/SYRvz7nxsB6RsK4MOUcWws0hceVfBXF2+WTObvoOc5VRE2cf/t
VIr9nCSbvQV8zl4gPmoivSoAIMbO6tL97DmgwSF1unI4994pegYf/DZNxLr+y3IN
XJeh+kMw6rdFfiD5/aD1F4X9abPLDrC4/DZrnDooRjynYP4mVE/Bnbj69RcpjfmI
tAAfyC9mX4Ajgz0wPlIQjliAr8SVkd3pyUMactEjNULAhd/nWEwIAexDQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/t91eEVdvDXoP1ok9Kaq1k2y/NMB8GA1UdIwQY
MBaAFD7mzs/9m4u6GNR057OZPgodFNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEt
NzMyNDkxMzk3NWQ1LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9lNjFjYWEtMjUwMC00Mzg4LWE5ZmEtNzMyNDkxMzk3NWQ1
LzEvUHViT3pfMmJpN29ZMUhUbnM1ay1DaDBVMjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMi73Zlu
xx7IRMOgero2rpOrq4oyN5WROqKro0YQqg4uxaa8XPmFJw/Cr0/5LY2IgJkXav8Q
X3/U2iGugtRkaHdRVE+RVOjs3NZOEj7AXJGqouu4O+pCUCe7ZQjASS/zC4PHVA+7
OaF+hFaAMvwjv5t8eTX2MunrUyQ9FyzkjHzQhP4KP92q5Uy+zM0lyBM/Es2Ljk61
8Su3TIt81TT4uk6fXUfn4rnXffSdm+jee+TQDmX5+WS4TPeQ0BelHKHY8LwbHgcL
XF7+F2H8Q98LtijR5bpiWVs3hybLoL/M3Sa2iRzPKZA7KyveruvzO12nILvipvD4
NtziMB7mROeTSA==
-----END CERTIFICATE-----