Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File:                     FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier:          eir9bhaJm53viywC+rL+BgxH93P8fLxs8NEudwL5BmE=
Subject key identifier:   AF:A6:8D:FE:57:DC:9A:1D:C3:7B:B9:38:FC:D0:27:48:A2:42:62:AC
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       0194BD4EB17FEC3B4F2494F2D97CE907C837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number:          0E9B
Signing time:             Fri 31 Jan 2025 17:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:38 +0000
Files and hashes:         1: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: BS8fSKvUCiJEqwECIo34vtohMKjWtfTsT14URdHmZZA=)
                          2: T7TBRzeJX6tbdWoccYUlzQavEvE.roa (hash: GbQhCrhDJnuTs6aD5dp/vwgXjm1RN1g0gqgdS90d0Rg=)
                          3: c053duW9yVX04hvH9uI3J-eIkE4.roa (hash: XRTPmRVBWHDOHpFSQkgtPCpg1cl8rrGstMwajzVZVD8=)
                          4: hyQNNpjW95By6SH0X4WUwzxeoxY.roa (hash: oNbxynrjBjA1wygEmG+ILxTB5lS8dgDRIesXXnDM0Aw=)
                          5: rrklfK2SIXU63eNHbLfy96DEEE4.roa (hash: MG3f+4yFLcREUv4lMpAVJXVlUxg7hDY8kaD7dmGDqvA=)
                          6: wT_wbXD63kRspn66-sCHN9HX56k.roa (hash: giCV77XuxHEuebQnQQQbW4oA8w7bEamDw12AkczJQ2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b1:7f:ec:3b:4f:24:94:f2:d9:7c:e9:07:c8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: Jan 31 17:00:38 2025 GMT
            Not After : Feb  1 17:00:38 2025 GMT
        Subject: CN=afa68dfe57dc9a1dc37bb938fcd02748a24262ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8f:98:b1:2c:51:83:df:d2:53:42:fd:ca:dc:
                    cf:c0:66:eb:7a:f6:96:12:3b:a8:0f:c0:92:2e:3a:
                    cd:4e:f9:87:09:dd:38:b0:22:49:7c:50:c1:36:0d:
                    1e:69:c2:81:93:df:f2:5e:9b:88:09:c6:fe:f5:0c:
                    15:b0:e0:da:6b:24:af:a1:fa:a4:1c:23:37:19:41:
                    3b:89:a1:6f:43:16:0c:26:de:43:bc:5c:23:44:68:
                    7d:1d:e8:36:84:51:16:20:61:f4:c1:42:6b:3a:8c:
                    58:76:5c:00:39:6c:e7:d7:e8:eb:6e:99:a3:26:03:
                    7d:4f:7c:64:d5:df:94:09:58:1f:b0:76:09:f8:64:
                    26:06:38:8c:47:de:20:71:05:95:07:77:5c:03:f9:
                    67:55:dc:c9:03:46:30:c3:52:55:fd:57:46:84:08:
                    da:80:aa:34:52:60:eb:c6:5a:6c:99:2e:5b:93:40:
                    0c:10:25:62:bd:1c:a6:6b:2d:5b:45:b2:18:27:ca:
                    f2:3a:d0:18:ed:5f:01:9b:27:d7:fb:28:2b:19:9c:
                    06:08:9c:78:31:98:09:ed:28:79:62:4c:96:15:f0:
                    6b:9b:ca:31:88:01:bd:5d:d7:74:9c:2e:4d:81:1f:
                    91:b3:03:58:73:fe:9f:9c:6c:03:02:cd:26:e6:9e:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A6:8D:FE:57:DC:9A:1D:C3:7B:B9:38:FC:D0:27:48:A2:42:62:AC
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8b:ed:35:5e:2f:ad:c7:37:de:95:87:3a:2c:26:dc:c8:0e:
         1d:cb:a4:68:cb:7f:af:ef:bf:f4:6e:ec:5b:f3:29:b8:a5:2e:
         99:5a:7f:72:06:a0:91:f5:69:74:56:e6:57:d3:94:66:6d:c4:
         8d:79:46:08:76:46:8b:76:e9:87:44:17:8e:24:0a:d0:7b:68:
         21:d2:6f:2b:44:b0:0f:e2:2f:09:53:c2:13:11:1e:f0:b2:ca:
         69:0c:24:6b:9b:5e:d8:9c:9c:dc:f3:a7:fa:f0:e5:85:3b:20:
         a7:d7:d3:f3:f8:dd:a7:01:ac:15:22:4c:03:b4:46:55:aa:5e:
         e0:8c:58:86:cd:6b:31:16:67:d0:d9:31:1b:53:fa:46:51:ce:
         6a:db:95:44:88:0a:af:6d:cb:96:36:ba:65:80:4b:7f:2b:f0:
         b7:79:55:e1:a7:7e:9e:55:9f:d7:70:44:e8:fa:0b:bb:32:3c:
         d0:23:99:b6:a4:29:0e:d2:51:b7:8c:50:bf:81:a3:85:41:44:
         20:bc:91:2f:cc:2a:a1:6d:b1:3e:b5:8a:e9:20:c0:09:42:30:
         2d:73:51:db:7e:00:3b:30:7d:21:2b:f1:48:70:f6:4b:39:b9:
         69:3d:4e:96:9f:b8:96:9b:7f:82:40:06:91:ed:7d:f6:0c:58:
         9e:71:b3:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TrF/7DtPJJTy2XzpB8g3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MjUzNzYwMWEzMTY5NzQwNDkyMmQ5NTdlNzQ0NTBmNWE5
Y2JlNzMwHhcNMjUwMTMxMTcwMDM4WhcNMjUwMjAxMTcwMDM4WjAzMTEwLwYDVQQD
EyhhZmE2OGRmZTU3ZGM5YTFkYzM3YmI5MzhmY2QwMjc0OGEyNDI2MmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY+YsSxRg9/SU0L9ytzPwGbrevaW
EjuoD8CSLjrNTvmHCd04sCJJfFDBNg0eacKBk9/yXpuICcb+9QwVsODaaySvofqk
HCM3GUE7iaFvQxYMJt5DvFwjRGh9Heg2hFEWIGH0wUJrOoxYdlwAOWzn1+jrbpmj
JgN9T3xk1d+UCVgfsHYJ+GQmBjiMR94gcQWVB3dcA/lnVdzJA0Yww1JV/VdGhAja
gKo0UmDrxlpsmS5bk0AMECVivRymay1bRbIYJ8ryOtAY7V8BmyfX+ygrGZwGCJx4
MZgJ7Sh5YkyWFfBrm8oxiAG9Xdd0nC5NgR+RswNYc/6fnGwDAs0m5p51ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+mjf5X3Jodw3u5OPzQJ0iiQmKsMB8GA1UdIwQY
MBaAFBclN2AaMWl0BJItlX50RQ9anL5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQt
ZTYwNGI2MWJlMGVhLzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMTljYWUtMjY0ZC00NmE3LTllNjQtZTYwNGI2MWJlMGVh
LzEvRnlVM1lCb3hhWFFFa2kyVmZuUkZEMXFjdm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4vtNV4v
rcc33pWHOiwm3MgOHcukaMt/r++/9G7sW/MpuKUumVp/cgagkfVpdFbmV9OUZm3E
jXlGCHZGi3bph0QXjiQK0HtoIdJvK0SwD+IvCVPCExEe8LLKaQwka5te2Jyc3POn
+vDlhTsgp9fT8/jdpwGsFSJMA7RGVape4IxYhs1rMRZn0NkxG1P6RlHOatuVRIgK
r23Llja6ZYBLfyvwt3lV4ad+nlWf13BE6PoLuzI80COZtqQpDtJRt4xQv4GjhUFE
ILyRL8wqoW2xPrWK6SDACUIwLXNR234AOzB9ISvxSHD2Szm5aT1Olp+4lpt/gkAG
ke199gxYnnGz9A==
-----END CERTIFICATE-----