Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
File:                     iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft (raw, json)
Hash identifier:          rHa+lzW1hoFxbsnOwNfCLgJNbm7ryDBdxEcLtMNh5Qk=
Subject key identifier:   67:7D:FE:EF:53:50:BB:7C:04:DE:C9:B6:25:3E:6B:1B:B6:CE:F4:0C
Authority key identifier: 88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C
Certificate issuer:       /CN=887e81ba84344598c61462833aadf3204eae087c
Certificate serial:       0194BC3C60E51B065B580352A0265E444226
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 12:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:01 +0000
Files and hashes:         1: G8pM4BO4SDFuG0O0aHGZFSHu0bY.roa (hash: z8nYleBnvbZLzPZcC36R6KcHw5MKTfcdnhsG0y6RlGM=)
                          2: iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl (hash: 33Rq8FzZrWuGOHD2y4temCovmwOsBRw2Hp1J0D8eYV4=)
                          3: shLVoHyiaZbg7eg2YqA4ky_a-CU.roa (hash: eojzTxeSDWN8wwV7q5opIiiSFcYnrY9hg5to5e5Gp1s=)
                          4: xifnCCeMNH18n0eWMqga1pgyjCM.roa (hash: apTXD8raL3qZhnZiaGrtnxJWUf2/cGGa8lnT/pZJ1So=)
                          5: ywH8wQjufiysHP5OXijDjTOBrH4.roa (hash: Kuw4rCVLsz9XQ+KOtke/DWSrK02REb1j13WO/v4sxqI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:60:e5:1b:06:5b:58:03:52:a0:26:5e:44:42:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887e81ba84344598c61462833aadf3204eae087c
        Validity
            Not Before: Jan 31 12:01:01 2025 GMT
            Not After : Feb  1 12:01:01 2025 GMT
        Subject: CN=677dfeef5350bb7c04dec9b6253e6b1bb6cef40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:94:9e:bb:e2:6e:e8:fc:2d:c6:9e:61:16:
                    26:93:37:d7:87:89:89:76:0c:0c:06:79:f1:09:9e:
                    72:3f:1d:67:72:56:df:1a:d6:46:57:09:4a:6d:a2:
                    69:35:e7:d3:75:a3:e9:ef:73:15:66:8d:75:51:96:
                    6d:99:a9:66:20:5a:70:b9:fa:cc:b6:8e:bc:fd:9d:
                    32:01:84:2b:26:8e:8e:e1:ab:a4:23:49:07:b3:94:
                    6c:09:72:c6:2d:b8:b4:1a:9a:f0:e8:28:ac:fd:4d:
                    42:df:10:8b:1e:69:3c:25:07:26:97:27:9a:72:1b:
                    04:c5:4e:0c:cd:17:6d:c2:56:b3:de:f6:f1:a1:e5:
                    ef:85:a8:a0:67:eb:c4:58:2d:d8:f5:0d:22:a6:ba:
                    f7:63:d7:2e:33:3d:7b:51:fd:10:d0:37:7d:57:96:
                    43:6f:cb:1c:4a:3a:79:a6:1b:fc:9e:0a:0d:e9:eb:
                    a2:73:f1:9d:96:90:79:f0:6c:bc:b5:04:2f:bc:30:
                    54:28:1d:19:fb:84:b4:bc:dc:98:62:f8:34:81:52:
                    d6:aa:51:fb:c2:cf:7c:d1:67:c4:bf:3c:e4:83:80:
                    21:a1:c5:f0:b7:d1:06:1d:ec:a4:29:4c:1c:18:9e:
                    03:ed:5b:9c:34:35:88:ec:fd:8e:1a:60:78:f4:fd:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7D:FE:EF:53:50:BB:7C:04:DE:C9:B6:25:3E:6B:1B:B6:CE:F4:0C
            X509v3 Authority Key Identifier:
                keyid:88:7E:81:BA:84:34:45:98:C6:14:62:83:3A:AD:F3:20:4E:AE:08:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b45b47-c2fd-42af-98bd-e0162401ff7a/1/iH6BuoQ0RZjGFGKDOq3zIE6uCHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ce:7b:04:e4:88:db:7c:ce:28:64:b4:1f:46:b1:d1:b1:69:
         ac:69:ca:f1:35:ad:76:87:03:09:8b:cb:73:92:11:6b:82:86:
         61:11:de:23:8f:c5:40:57:d0:b4:1a:a4:1c:3c:11:47:70:5a:
         95:c5:4c:0f:19:db:60:df:88:2d:b5:cb:74:10:ed:8a:cc:cb:
         33:e5:95:f1:d2:97:35:f9:66:89:4b:27:a7:15:63:1e:40:ca:
         59:76:22:59:f2:d0:1b:9f:cc:5f:7e:6a:d3:4b:b7:8f:cc:03:
         76:9f:8c:75:9f:ac:18:9b:88:79:9f:22:53:b7:50:65:6c:56:
         a6:37:cb:ef:25:61:54:e4:8b:4b:3b:e4:12:2d:0e:9c:16:5d:
         34:a9:87:17:b2:d3:a8:39:0a:d4:4e:c9:2e:89:37:bc:62:35:
         8a:9f:fe:f8:bd:a0:23:c4:0c:f6:60:fa:d7:1c:ce:18:65:6c:
         2a:a1:ed:a4:d3:c0:3b:20:e3:bb:13:8d:f0:68:60:a2:72:7e:
         f0:c2:ec:20:11:1e:ca:9d:2a:d7:2e:ee:07:6c:3b:1b:45:c8:
         54:4f:b8:fa:5f:8e:55:58:5e:52:17:2c:71:54:bb:2a:e8:f4:
         57:81:2b:26:6d:11:23:f4:f2:1a:0d:14:f2:c5:dc:27:fa:76:
         0d:a8:29:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGDlGwZbWANSoCZeREImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2U4MWJhODQzNDQ1OThjNjE0NjI4MzNhYWRmMzIwNGVh
ZTA4N2MwHhcNMjUwMTMxMTIwMTAxWhcNMjUwMjAxMTIwMTAxWjAzMTEwLwYDVQQD
Eyg2NzdkZmVlZjUzNTBiYjdjMDRkZWM5YjYyNTNlNmIxYmI2Y2VmNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ByUnrvibuj8LcaeYRYmkzfXh4mJ
dgwMBnnxCZ5yPx1nclbfGtZGVwlKbaJpNefTdaPp73MVZo11UZZtmalmIFpwufrM
to68/Z0yAYQrJo6O4aukI0kHs5RsCXLGLbi0Gprw6Cis/U1C3xCLHmk8JQcmlyea
chsExU4MzRdtwlaz3vbxoeXvhaigZ+vEWC3Y9Q0iprr3Y9cuMz17Uf0Q0Dd9V5ZD
b8scSjp5phv8ngoN6euic/GdlpB58Gy8tQQvvDBUKB0Z+4S0vNyYYvg0gVLWqlH7
ws980WfEvzzkg4AhocXwt9EGHeykKUwcGJ4D7VucNDWI7P2OGmB49P3GyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGd9/u9TULt8BN7JtiU+axu2zvQMMB8GA1UdIwQY
MBaAFIh+gbqENEWYxhRigzqt8yBOrgh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQt
ZTAxNjI0MDFmZjdhLzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9iNDViNDctYzJmZC00MmFmLTk4YmQtZTAxNjI0MDFmZjdh
LzEvaUg2QnVvUTBSWmpHRkdLRE9xM3pJRTZ1Q0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe857BOSI
23zOKGS0H0ax0bFprGnK8TWtdocDCYvLc5IRa4KGYRHeI4/FQFfQtBqkHDwRR3Ba
lcVMDxnbYN+ILbXLdBDtiszLM+WV8dKXNflmiUsnpxVjHkDKWXYiWfLQG5/MX35q
00u3j8wDdp+MdZ+sGJuIeZ8iU7dQZWxWpjfL7yVhVOSLSzvkEi0OnBZdNKmHF7LT
qDkK1E7JLok3vGI1ip/++L2gI8QM9mD61xzOGGVsKqHtpNPAOyDjuxON8GhgonJ+
8MLsIBEeyp0q1y7uB2w7G0XIVE+4+l+OVVheUhcscVS7Kuj0V4ErJm0RI/TyGg0U
8sXcJ/p2DagpEw==
-----END CERTIFICATE-----