Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          LyJB7dJ63Gxp7o8ttqPHm87SnNTAwf1CLesJfOzwI9A=
Subject key identifier:   7D:41:8B:41:04:20:29:9F:53:23:52:DF:3A:B7:91:0E:8D:B1:2F:F6
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       0194BC3CAB26B1BCAFE22B41859AF81F15E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          02DB
Signing time:             Fri 31 Jan 2025 12:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:19 +0000
Files and hashes:         1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: BhzR2hKxTbnU4ifs7bA4u5pO52DE3mfFIhoM4pJjJgM=)
                          3: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
                          4: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
                          5: zuXVABH3iQHva6C3x_7o7gzuXEY.roa (hash: oBzqdMlIWS4N+t9dxQHDBXhwNKLOQHnlyrSOj0n4CXA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:ab:26:b1:bc:af:e2:2b:41:85:9a:f8:1f:15:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Jan 31 12:01:19 2025 GMT
            Not After : Feb  1 12:01:19 2025 GMT
        Subject: CN=7d418b410420299f532352df3ab7910e8db12ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:62:a7:41:57:52:d0:9a:7a:f4:38:f7:de:
                    ba:6e:2a:94:2e:d7:d9:be:ed:e2:0c:8d:02:26:ac:
                    23:30:e3:32:70:74:8f:09:b6:ad:ff:7e:04:fb:4d:
                    5e:66:a8:d0:9c:27:8e:3a:20:24:be:db:36:a4:8a:
                    f6:c1:e2:e2:0b:1e:f3:d6:c2:3b:8f:c6:cb:45:22:
                    3f:3c:ef:c3:bf:6d:93:5a:75:81:c1:5b:7c:c5:28:
                    2f:0b:57:a7:78:b5:eb:30:07:46:65:16:03:b8:fb:
                    96:56:d9:fb:26:93:a9:8f:6b:11:02:0d:fa:c8:e3:
                    51:43:9d:bc:e5:e0:75:9f:a7:d7:d6:4b:8d:1e:f9:
                    2c:c3:2f:3a:54:05:11:53:94:c9:02:bc:cd:e3:65:
                    04:2c:58:51:fc:62:53:8a:14:57:66:92:ab:c8:b0:
                    0a:9e:b0:01:fb:d0:f4:0c:9c:aa:9b:40:36:f0:cf:
                    ae:80:6a:a4:fa:56:1f:5d:bb:21:64:f7:70:2c:5b:
                    2d:96:45:e0:7b:46:cb:6f:40:f8:bd:38:22:77:43:
                    c1:db:58:f4:d3:76:13:2f:7e:4d:2c:40:30:bf:8b:
                    86:a1:61:ef:41:5f:1a:9f:18:80:4d:fb:bb:5b:26:
                    ce:87:f3:55:91:03:c0:b5:73:7f:fd:65:e9:6c:af:
                    1e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:41:8B:41:04:20:29:9F:53:23:52:DF:3A:B7:91:0E:8D:B1:2F:F6
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:13:39:02:fd:2f:6e:ba:ca:c2:c9:f7:f8:80:08:9e:6e:61:
         12:36:d9:63:1c:d6:b7:2b:b2:75:da:58:6d:e7:83:7b:7d:32:
         a1:45:33:71:cc:59:83:32:f3:1f:b3:e9:cf:88:fe:84:a3:78:
         37:01:90:41:2d:f9:c6:0d:a1:e2:f3:5d:19:f2:05:74:d3:a8:
         d5:a3:86:3e:57:56:7b:85:22:22:82:71:55:43:e7:08:f0:42:
         e0:40:e9:d5:18:f7:c0:8c:0b:c8:ca:3b:f3:0d:5b:c3:ee:e3:
         c5:c7:9c:7c:4d:dc:96:fc:b4:2d:38:ae:c7:28:55:3e:c4:9b:
         96:c0:5d:a4:02:69:31:b2:64:42:50:57:00:ac:b0:73:ce:2b:
         b7:e9:d5:66:8a:c3:87:1f:64:fa:aa:8f:61:59:47:25:7d:be:
         34:8b:e0:86:5d:b5:75:75:43:62:b0:40:df:f8:bf:74:34:94:
         2e:82:06:a8:86:2a:1d:bb:6f:9f:41:0b:5c:0b:b4:69:b9:e5:
         61:38:a0:5e:8d:a6:56:a5:3d:e6:b4:77:0a:c2:a2:af:a6:e9:
         bd:e0:88:9f:5f:88:5e:90:0f:08:b1:d0:45:e6:7e:27:09:90:
         55:a2:d8:69:24:4c:c5:b5:8f:21:53:e9:e9:cb:45:70:f1:5b:
         55:1a:9a:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKsmsbyv4itBhZr4HxXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMmMxNWNmNzJmY2RiODU5NmI3YzY0ODliMTVhNmI3MjBj
MTRlYjUwHhcNMjUwMTMxMTIwMTE5WhcNMjUwMjAxMTIwMTE5WjAzMTEwLwYDVQQD
Eyg3ZDQxOGI0MTA0MjAyOTlmNTMyMzUyZGYzYWI3OTEwZThkYjEyZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsBip0FXUtCaevQ49966biqULtfZ
vu3iDI0CJqwjMOMycHSPCbat/34E+01eZqjQnCeOOiAkvts2pIr2weLiCx7z1sI7
j8bLRSI/PO/Dv22TWnWBwVt8xSgvC1eneLXrMAdGZRYDuPuWVtn7JpOpj2sRAg36
yONRQ5285eB1n6fX1kuNHvkswy86VAURU5TJArzN42UELFhR/GJTihRXZpKryLAK
nrAB+9D0DJyqm0A28M+ugGqk+lYfXbshZPdwLFstlkXge0bLb0D4vTgid0PB21j0
03YTL35NLEAwv4uGoWHvQV8anxiATfu7WybOh/NVkQPAtXN//WXpbK8eKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1Bi0EEICmfUyNS3zq3kQ6NsS/2MB8GA1UdIwQY
MBaAFN8sFc9y/NuFlrfGSJsVprcgwU61MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUt
ZjE4NTNkMTBlNjEwLzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85Y2ZlYTEtZDgyYS00NzU1LTgxMGUtZjE4NTNkMTBlNjEw
LzEvM3l3VnozTDgyNFdXdDhaSW14V210eURCVHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxM5Av0v
brrKwsn3+IAInm5hEjbZYxzWtyuyddpYbeeDe30yoUUzccxZgzLzH7Ppz4j+hKN4
NwGQQS35xg2h4vNdGfIFdNOo1aOGPldWe4UiIoJxVUPnCPBC4EDp1Rj3wIwLyMo7
8w1bw+7jxcecfE3clvy0LTiuxyhVPsSblsBdpAJpMbJkQlBXAKywc84rt+nVZorD
hx9k+qqPYVlHJX2+NIvghl21dXVDYrBA3/i/dDSULoIGqIYqHbtvn0ELXAu0abnl
YTigXo2mVqU95rR3CsKir6bpveCIn1+IXpAPCLHQReZ+JwmQVaLYaSRMxbWPIVPp
6ctFcPFbVRqaFA==
-----END CERTIFICATE-----