Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
File:                     SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json)
Hash identifier:          hyC29ZBJYjMsW2lF4KBVNznTEVoL5FZEFoioWSWQMIY=
Subject key identifier:   B9:B6:16:2A:A2:84:7B:F2:A3:5E:D3:A8:06:31:C5:F5:CD:13:B3:78
Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6
Certificate issuer:       /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
Certificate serial:       0194BCE0A12C7521E9534A124371430D3FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft
Manifest number:          0985
Signing time:             Fri 31 Jan 2025 15:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:25 +0000
Files and hashes:         1: FZ5EZpDq-K0XA4SjrzGHyd153to.roa (hash: b4KiX1j/3r//4ngjLPvb5RfQAtdM3BaY0Jf4yPv0wJk=)
                          2: NVd8LXx_N2OnP7Dz0qYfp0BrwyE.roa (hash: KXS5t23U3JN9IkH4G9USA7r6qnruCVWmREWySxRe2Ns=)
                          3: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: huqNP85S+O+luwT87sulesYFwOZb45Cy28kSifejH7k=)
                          4: cSVJv9Y-FnxxLG20frdAri_noBk.roa (hash: 34paWKddNtWaw0Vl7xzlk/3/M190Z6IXyvbGbAK4Tj8=)
                          5: u7FYseYTvFuik1kkZdQXan5NUT4.roa (hash: OILWNi9mv9AwF8S+yDdOr81iUCDmwjfaxbEGwvX0caY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:a1:2c:75:21:e9:53:4a:12:43:71:43:0d:3f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6
        Validity
            Not Before: Jan 31 15:00:25 2025 GMT
            Not After : Feb  1 15:00:25 2025 GMT
        Subject: CN=b9b6162aa2847bf2a35ed3a80631c5f5cd13b378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c9:8e:0b:a7:78:80:59:ea:92:ee:b9:df:d9:
                    c8:33:7e:1d:ad:99:03:76:f5:c2:95:39:e1:3f:c0:
                    6d:e0:a2:0f:df:65:fe:a8:39:25:2c:b5:b9:6c:1b:
                    74:db:3f:d2:63:c8:de:aa:67:11:ef:75:ec:1c:2b:
                    dd:43:45:6a:bd:5b:6c:35:67:c2:a7:d7:bd:d7:df:
                    bc:8a:b8:fe:ed:66:5e:23:b2:2c:8c:aa:79:57:40:
                    ed:36:ab:d4:f9:4e:06:e8:a8:52:46:01:d0:ff:d4:
                    c1:aa:c3:29:60:78:fa:82:35:bc:5c:91:cf:94:6f:
                    dd:b1:2f:b9:1b:04:97:4f:ab:1b:63:6b:50:44:ae:
                    c1:e1:15:c4:4b:58:8d:ab:df:fa:6b:81:41:bc:60:
                    01:d4:3a:c1:40:a7:db:39:72:11:dc:87:ec:8d:b3:
                    ea:71:79:74:77:df:f5:48:63:64:ec:69:3b:cf:7e:
                    f9:dc:9e:6e:61:89:fd:15:a2:de:b3:03:09:db:87:
                    24:d1:80:6a:3f:4c:2f:56:13:57:0d:00:cf:dd:76:
                    88:76:b3:49:9d:4f:19:f5:df:80:a7:0a:6e:6c:3f:
                    a8:94:03:b6:24:6d:16:cb:52:39:be:bb:ec:81:ae:
                    62:ca:36:ce:be:37:de:11:2a:6f:32:0c:00:79:15:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:16:2A:A2:84:7B:F2:A3:5E:D3:A8:06:31:C5:F5:CD:13:B3:78
            X509v3 Authority Key Identifier:
                keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8b:32:54:ae:4f:3e:d4:15:1a:41:6c:10:2f:bf:68:b3:20:
         40:2e:a0:12:bb:49:e1:11:00:a3:ba:03:4c:ec:2b:5c:cf:ce:
         84:4f:2a:54:ce:bc:1a:d1:c2:61:46:3d:f8:8e:99:f2:fe:92:
         97:fc:ca:74:31:55:e1:4e:cd:74:fe:0c:a6:97:a8:2b:fb:45:
         4b:1c:4b:64:47:33:80:fd:4e:07:33:9f:8d:c2:06:32:3e:86:
         cc:6a:5f:bb:da:54:1c:ea:2a:16:dd:f3:2e:7b:61:9e:f9:33:
         98:90:8e:bd:05:cb:b5:94:af:6f:6e:51:d4:27:87:20:07:ed:
         2d:a9:9e:e3:33:5e:55:55:bd:10:bd:07:b9:36:85:6b:47:8b:
         50:9c:8f:e6:3f:5d:b1:2e:29:8e:94:58:24:97:2f:dd:24:62:
         0d:79:09:0d:56:4a:45:86:67:c6:ad:66:06:8b:1d:ca:88:49:
         9d:bd:98:a8:7e:fd:98:94:4c:7d:a1:8f:8b:74:4c:9f:78:ec:
         24:94:4e:58:8c:ea:ad:3d:00:62:d3:f7:34:c0:ad:bb:c8:f8:
         8e:f8:ba:45:bb:f0:92:b2:21:5f:4c:52:99:23:72:33:8a:87:
         e2:54:d6:73:fc:bb:68:df:06:96:d3:16:82:50:b1:33:b6:3f:
         11:aa:60:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KEsdSHpU0oSQ3FDDT/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4
NGU4YzYwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
EyhiOWI2MTYyYWEyODQ3YmYyYTM1ZWQzYTgwNjMxYzVmNWNkMTNiMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cmOC6d4gFnqku6539nIM34drZkD
dvXClTnhP8Bt4KIP32X+qDklLLW5bBt02z/SY8jeqmcR73XsHCvdQ0VqvVtsNWfC
p9e919+8irj+7WZeI7IsjKp5V0DtNqvU+U4G6KhSRgHQ/9TBqsMpYHj6gjW8XJHP
lG/dsS+5GwSXT6sbY2tQRK7B4RXES1iNq9/6a4FBvGAB1DrBQKfbOXIR3IfsjbPq
cXl0d9/1SGNk7Gk7z3753J5uYYn9FaLeswMJ24ck0YBqP0wvVhNXDQDP3XaIdrNJ
nU8Z9d+ApwpubD+olAO2JG0Wy1I5vrvsga5iyjbOvjfeESpvMgwAeRXpaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLm2FiqihHvyo17TqAYxxfXNE7N4MB8GA1UdIwQY
MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt
YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl
LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYsyVK5P
PtQVGkFsEC+/aLMgQC6gErtJ4REAo7oDTOwrXM/OhE8qVM68GtHCYUY9+I6Z8v6S
l/zKdDFV4U7NdP4MppeoK/tFSxxLZEczgP1OBzOfjcIGMj6GzGpfu9pUHOoqFt3z
LnthnvkzmJCOvQXLtZSvb25R1CeHIAftLame4zNeVVW9EL0HuTaFa0eLUJyP5j9d
sS4pjpRYJJcv3SRiDXkJDVZKRYZnxq1mBosdyohJnb2YqH79mJRMfaGPi3RMn3js
JJROWIzqrT0AYtP3NMCtu8j4jvi6RbvwkrIhX0xSmSNyM4qH4lTWc/y7aN8GltMW
glCxM7Y/Eapgrw==
-----END CERTIFICATE-----