Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
File:                     9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft (raw, json)
Hash identifier:          reVFag7tAGGQDKO5NoGdC6f/9nq5nJYjZXWQHH25US8=
Subject key identifier:   A8:DE:16:7D:BD:3B:3A:52:32:22:42:7E:D6:0C:DC:3C:EE:75:97:D9
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Certificate issuer:       /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial:       0194BCAA0E060D721EA9D1E093BB4F5F2768
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft
Manifest number:          1385
Signing time:             Fri 31 Jan 2025 14:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:48 +0000
Files and hashes:         1: 949NJzEdExJn5XO-wPE1DtJv8g4.roa (hash: msLuXe7ObxuPncz+MW/EtdRT5Yp9BkwdtqMj7DLIE3w=)
                          2: 9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl (hash: GdPhp/AxWxHVlFWcC4VHHrsGTD1PvcWrimu4kpDaz/Y=)
                          3: SgIFzdX6JcgyEvIi1tU7tEpqzs0.roa (hash: p6RL3L68zCciLtwZlC4lGEQ9Tf1FF1+MJetEEftOp98=)
                          4: WC5kYAaNv3dBMoN7rOV1Dk7R1Eo.roa (hash: IM898uPAV6VmuESMyy3MG48B0cB42EspCAHOuXpg7Io=)
                          5: wcQI0N2rjHU7nz4Hv4-6dzygAdo.roa (hash: Fm3HUvHW0IncmGHh7snGXOSS7m758QU/6otLVSlOO+Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0e:06:0d:72:1e:a9:d1:e0:93:bb:4f:5f:27:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
        Validity
            Not Before: Jan 31 14:00:48 2025 GMT
            Not After : Feb  1 14:00:48 2025 GMT
        Subject: CN=a8de167dbd3b3a523222427ed60cdc3cee7597d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:80:75:16:96:c2:e0:ca:16:2f:ed:60:b9:
                    55:89:ac:bb:7d:ed:68:75:da:2b:e0:4a:0d:98:0c:
                    76:92:17:5a:df:16:57:89:d5:fd:23:b0:24:90:39:
                    23:1b:9c:e8:35:db:28:33:c1:b3:6c:b7:44:2a:05:
                    92:a3:26:50:d6:66:9e:27:27:d1:88:de:80:5d:56:
                    8f:63:de:7b:2e:4b:3d:38:2e:f4:d6:6e:17:ed:e5:
                    fe:af:2c:49:ce:6f:03:fd:d2:b4:d7:81:b0:c3:5c:
                    e6:db:c0:87:d3:52:44:d1:27:b5:84:33:0e:b2:b6:
                    47:e4:c0:be:0b:62:2b:0e:c4:d6:d7:f4:c1:ab:ee:
                    f3:e3:4c:32:64:fc:31:49:37:5a:05:8c:70:f1:a6:
                    6f:ce:75:2f:3b:ed:bb:67:6a:fd:47:d0:e7:e3:6b:
                    d7:2b:4c:e5:35:e3:1a:0b:30:a9:cb:e3:09:51:d3:
                    9c:f7:a9:99:28:f0:cc:97:74:36:7a:48:af:93:da:
                    1d:d5:61:55:10:43:0e:1a:7a:be:77:0b:95:ce:80:
                    ec:3b:6a:02:41:b0:44:53:e2:a8:4e:e3:b8:f9:2c:
                    01:0b:66:f1:9f:23:fb:4a:94:91:a1:62:43:da:5f:
                    a1:18:2b:af:2a:72:a1:22:f6:5a:d5:4f:c1:f1:06:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:16:7D:BD:3B:3A:52:32:22:42:7E:D6:0C:DC:3C:EE:75:97:D9
            X509v3 Authority Key Identifier:
                keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9a:c6:0d:54:c1:76:04:c2:63:52:e9:c4:b0:cb:6e:bd:c5:
         5f:32:61:0e:c3:d1:5f:d9:4c:ab:65:55:3b:a5:60:88:20:57:
         5c:4d:4e:b4:b2:e1:83:ba:c2:bb:04:92:61:79:e5:a8:b0:89:
         73:7b:46:0b:e7:39:ff:7b:fc:ae:17:08:17:54:d3:03:1d:b9:
         b7:b5:a3:87:56:a4:57:f8:6a:b1:23:f5:f3:d7:21:3f:b4:2f:
         13:1c:73:9c:f9:85:fa:1b:e9:fb:33:3d:46:02:7f:18:f6:f8:
         5a:5b:28:45:68:3b:38:7f:55:9c:61:b1:ea:f0:36:38:3e:18:
         8a:af:a0:4a:d6:45:9e:4e:89:cd:2c:d6:b0:b3:f2:e3:f9:34:
         d0:f0:08:f5:ad:f2:4c:10:85:3e:1f:a8:06:41:97:8e:ef:a6:
         1d:c4:10:f1:92:3d:14:47:3c:c3:00:f6:07:8a:83:d9:c9:7e:
         19:8b:08:c0:ee:0c:2a:42:18:5b:23:d0:a7:77:6c:90:71:a8:
         14:f8:69:79:9e:f5:be:1e:40:89:f9:14:b1:fd:0e:11:7e:8e:
         3c:f1:2f:23:9c:81:68:d0:af:bd:ee:8a:88:fd:01:05:44:40:
         46:14:bc:49:ac:63:ba:74:23:00:32:f9:38:1d:c5:2d:23:91:
         87:4c:89:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qg4GDXIeqdHgk7tPXydoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw
OTA4NmYwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
EyhhOGRlMTY3ZGJkM2IzYTUyMzIyMjQyN2VkNjBjZGMzY2VlNzU5N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMSAdRaWwuDKFi/tYLlViay7fe1o
ddor4EoNmAx2khda3xZXidX9I7AkkDkjG5zoNdsoM8GzbLdEKgWSoyZQ1maeJyfR
iN6AXVaPY957Lks9OC701m4X7eX+ryxJzm8D/dK014Gww1zm28CH01JE0Se1hDMO
srZH5MC+C2IrDsTW1/TBq+7z40wyZPwxSTdaBYxw8aZvznUvO+27Z2r9R9Dn42vX
K0zlNeMaCzCpy+MJUdOc96mZKPDMl3Q2ekivk9od1WFVEEMOGnq+dwuVzoDsO2oC
QbBEU+KoTuO4+SwBC2bxnyP7SpSRoWJD2l+hGCuvKnKhIvZa1U/B8Qb1ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjeFn29OzpSMiJCftYM3DzudZfZMB8GA1UdIwQY
MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt
NzE4ZmQxOTVjNWViLzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi
LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJrGDVTB
dgTCY1LpxLDLbr3FXzJhDsPRX9lMq2VVO6VgiCBXXE1OtLLhg7rCuwSSYXnlqLCJ
c3tGC+c5/3v8rhcIF1TTAx25t7Wjh1akV/hqsSP189chP7QvExxznPmF+hvp+zM9
RgJ/GPb4WlsoRWg7OH9VnGGx6vA2OD4Yiq+gStZFnk6JzSzWsLPy4/k00PAI9a3y
TBCFPh+oBkGXju+mHcQQ8ZI9FEc8wwD2B4qD2cl+GYsIwO4MKkIYWyPQp3dskHGo
FPhpeZ71vh5AifkUsf0OEX6OPPEvI5yBaNCvve6KiP0BBURARhS8SaxjunQjADL5
OB3FLSORh0yJ/g==
-----END CERTIFICATE-----