Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
File:                     6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft (raw, json)
Hash identifier:          /Kzyj3N2v7JkZZxZqU5G12bWqVkAIj/QN4NkAtoAf40=
Subject key identifier:   0F:B2:83:1C:5A:AC:C3:82:AB:BF:AA:EB:24:6E:C8:1A:CD:3C:88:FA
Authority key identifier: E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04
Certificate issuer:       /CN=e920237e725cf0a53ef43a74b5569551aff74e04
Certificate serial:       0194BBCEF5653985B99EC1E0A6CD1E918F7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft
Manifest number:          0662
Signing time:             Fri 31 Jan 2025 10:01:30 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:30 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:30 +0000
Files and hashes:         1: 6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl (hash: 7m67Mfz7j9xbHyn0pqjE/0ZCleMsLQAnUbJ31sxernc=)
                          2: bYwJVKNEie6jgjCIP7suKHbkq0A.roa (hash: gBYweOoSxODSbbYi3S03mFZJ+Vs6bHOyqwK1v3lQMdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f5:65:39:85:b9:9e:c1:e0:a6:cd:1e:91:8f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e920237e725cf0a53ef43a74b5569551aff74e04
        Validity
            Not Before: Jan 31 10:01:30 2025 GMT
            Not After : Feb  1 10:01:30 2025 GMT
        Subject: CN=0fb2831c5aacc382abbfaaeb246ec81acd3c88fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:23:0a:df:00:8b:a1:ed:1f:69:3b:60:b7:37:
                    a0:20:54:c3:30:22:e4:fe:c7:66:04:3e:04:d3:95:
                    01:d6:1c:0f:15:29:11:a0:e9:1e:91:f8:77:8e:6d:
                    0d:70:82:0e:cf:88:0d:5d:8b:d1:66:82:82:cd:97:
                    6d:3c:c7:70:0a:d6:44:06:7e:6f:59:a1:ef:c6:f5:
                    b7:97:7d:23:75:70:92:a7:af:93:32:35:a7:f0:73:
                    78:b9:00:00:66:ef:92:df:45:54:91:af:5b:8d:73:
                    b4:f9:e1:4e:69:3e:81:fa:de:55:fd:e2:26:0c:80:
                    2b:8f:48:01:af:8f:ad:63:57:66:66:0a:63:34:cf:
                    e0:e4:2c:13:d3:6e:2a:7f:9d:97:84:73:19:e7:21:
                    20:60:b8:7e:84:3d:ab:ac:16:b7:32:85:ad:99:de:
                    f8:e4:40:6e:0f:42:45:b8:e3:99:c4:59:5d:b3:40:
                    a0:3a:88:cc:ad:62:f0:6a:b5:87:13:0b:2c:83:a4:
                    10:d4:d2:da:d0:c8:22:ff:10:34:2d:02:2a:07:01:
                    3b:80:6d:d8:21:ee:aa:a2:a3:d6:a2:31:54:49:a3:
                    da:25:80:51:6e:b1:18:04:bb:be:e8:17:15:89:a0:
                    c8:1d:35:be:35:5d:b8:19:fd:56:5d:a1:8c:a0:1f:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B2:83:1C:5A:AC:C3:82:AB:BF:AA:EB:24:6E:C8:1A:CD:3C:88:FA
            X509v3 Authority Key Identifier:
                keyid:E9:20:23:7E:72:5C:F0:A5:3E:F4:3A:74:B5:56:95:51:AF:F7:4E:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a560d0-0368-49c3-9b88-eb1139a33d0a/1/6SAjfnJc8KU-9Dp0tVaVUa_3TgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:87:d1:96:cd:8c:de:87:be:9c:23:df:27:7b:37:b1:bd:13:
         d2:71:9a:f9:e2:78:0e:5d:91:d5:8a:81:82:32:db:ab:84:c7:
         d9:70:02:c7:6d:4f:4b:1c:35:4b:b7:68:e9:f4:83:36:cb:d2:
         b0:0a:26:71:7a:1d:0f:7b:f3:d4:26:d1:59:40:80:2d:0a:d2:
         b5:9f:60:db:06:e5:d6:2d:7a:f1:51:05:70:2b:a7:da:9b:e4:
         07:d2:1e:d7:5f:48:f7:8b:d3:33:8a:2a:f3:1b:8e:63:85:91:
         bc:f3:95:fd:0b:6f:d1:0f:87:5b:8a:e0:98:31:00:44:9b:69:
         d5:c1:07:b8:b1:ab:57:05:e0:dc:9f:30:bc:41:df:5f:f7:01:
         36:8a:55:21:bf:e2:b5:23:6f:10:05:2c:f7:0f:17:d2:ea:d3:
         e5:00:70:65:44:66:8b:ae:f5:b0:3a:7e:89:24:76:8b:36:b0:
         d9:ab:99:c1:34:26:9b:f4:72:1b:b2:e6:23:3a:6a:26:b3:a4:
         db:a7:b5:42:b2:55:8d:5a:9b:28:6e:03:11:6a:ff:7a:87:31:
         ac:87:c2:c1:85:7f:35:57:7c:a1:60:db:fd:de:48:e6:92:15:
         cc:62:e6:94:46:38:68:2c:41:7a:3e:06:60:95:50:18:56:a2:
         d9:88:b9:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvVlOYW5nsHgps0ekY96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MjAyMzdlNzI1Y2YwYTUzZWY0M2E3NGI1NTY5NTUxYWZm
NzRlMDQwHhcNMjUwMTMxMTAwMTMwWhcNMjUwMjAxMTAwMTMwWjAzMTEwLwYDVQQD
EygwZmIyODMxYzVhYWNjMzgyYWJiZmFhZWIyNDZlYzgxYWNkM2M4OGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCMK3wCLoe0faTtgtzegIFTDMCLk
/sdmBD4E05UB1hwPFSkRoOkekfh3jm0NcIIOz4gNXYvRZoKCzZdtPMdwCtZEBn5v
WaHvxvW3l30jdXCSp6+TMjWn8HN4uQAAZu+S30VUka9bjXO0+eFOaT6B+t5V/eIm
DIArj0gBr4+tY1dmZgpjNM/g5CwT024qf52XhHMZ5yEgYLh+hD2rrBa3MoWtmd74
5EBuD0JFuOOZxFlds0CgOojMrWLwarWHEwssg6QQ1NLa0Mgi/xA0LQIqBwE7gG3Y
Ie6qoqPWojFUSaPaJYBRbrEYBLu+6BcViaDIHTW+NV24Gf1WXaGMoB/1TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+ygxxarMOCq7+q6yRuyBrNPIj6MB8GA1UdIwQY
MBaAFOkgI35yXPClPvQ6dLVWlVGv904EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgt
ZWIxMTM5YTMzZDBhLzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9hNTYwZDAtMDM2OC00OWMzLTliODgtZWIxMTM5YTMzZDBh
LzEvNlNBamZuSmM4S1UtOURwMHRWYVZVYV8zVGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIfRls2M
3oe+nCPfJ3s3sb0T0nGa+eJ4Dl2R1YqBgjLbq4TH2XACx21PSxw1S7do6fSDNsvS
sAomcXodD3vz1CbRWUCALQrStZ9g2wbl1i168VEFcCun2pvkB9Ie119I94vTM4oq
8xuOY4WRvPOV/Qtv0Q+HW4rgmDEARJtp1cEHuLGrVwXg3J8wvEHfX/cBNopVIb/i
tSNvEAUs9w8X0urT5QBwZURmi671sDp+iSR2izaw2auZwTQmm/RyG7LmIzpqJrOk
26e1QrJVjVqbKG4DEWr/eocxrIfCwYV/NVd8oWDb/d5I5pIVzGLmlEY4aCxBej4G
YJVQGFai2Yi5dA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:22 2025 by rpki-client