Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
File:                     DFFAKCWR-ZEvljnuFBK20dz_CGE.mft (raw, json)
Hash identifier:          vAFPQThXyEDXhSDEiMdjDAAVP+LG7jI6u+OOw4AAZDg=
Subject key identifier:   BE:F3:3A:86:A4:A6:6D:A7:95:61:E6:05:67:05:07:A5:83:19:BD:A0
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Certificate issuer:       /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial:       0194BCE0A24D6B5F1676E6887F4B3CFBEBE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft
Manifest number:          0F22
Signing time:             Fri 31 Jan 2025 15:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:25 +0000
Files and hashes:         1: 11LkwQ-N6VfEoL2UOolTTtwyC0A.roa (hash: 4IiXXwUiHVJn5G6ZxhwvZ1hIOI9+INkjTA9o1uNtGQ0=)
                          2: 3-7iYxjDmWIkoHK_4noiervlZso.roa (hash: EZIhmn63+jHC7dSkdhFnNoELxK2IzViKeTsuKfene+o=)
                          3: 67xwFwY8Vk2ZubSlLJvHrRraSTM.roa (hash: jU5f+Ei9hwCgrVDyChiwT3f+vBtT/uSvK7fGn1pfLCc=)
                          4: CGn4s2pU7K3VeOrkYLpYpgrWn-I.roa (hash: GQqBG/Vl4bd5VzIuhCKjbzMj1VUBaxRbMg/a4MUGD6Q=)
                          5: DFFAKCWR-ZEvljnuFBK20dz_CGE.crl (hash: K3Sd29Lxyno8zlN8yRFNx1m7KXXE6PI9OfQquQnXp/w=)
                          6: FI6bfjPN7t6NFAgQVExPOIQtMIg.roa (hash: PXiteBbCStnt/SqubPRrbNoWhhfQi1ko8O4Z1tf6P4k=)
                          7: QmLqclIeKgJyec7JezomHprMxUI.roa (hash: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=)
                          8: VzoNXL780cFrtxBAM22HPsqCfbY.roa (hash: r8ASjL2fERxq4oWQV1zbe0dNGLgz5xWOZYb0jAuonuU=)
                          9: bnr5M42KRWXFv7chSu2D1KxB-cw.roa (hash: ScAYtfr9XW53vAvDd9YH+2F+3RelzhQ8EtRFMubEhTw=)
                          10: fs2NqdHmBWbdljnYXU7Xc8k9FFw.roa (hash: d42+qHA3Gw35e9i+slzRwkeTMrNV+saclrLYPR5KBMU=)
                          11: j3OTuke_mRknBmt1C4J4dhIEdOk.roa (hash: EmP6SaUNKBb8hBPbpdHrMv/BtY++jtNe3kNkjqBzyN8=)
                          12: lSA3-P81lGkm7lfiM62ZONoLQ8o.roa (hash: BtM051ZzrqYida10JCA45Qbdudn+mcjbrJv0lanGaek=)
                          13: uxvSxb6hO_dqcJktX5KDTvbKf5E.roa (hash: BX9cKfQZ93LsNtPJ1OCQVgNnA/T13AZWB09hs71M25A=)
                          14: vJODnu8qBB0BlR1jt5n-BRo4qmc.roa (hash: cVd7WS0pSoOiicbKp9gmdhaO5+PWfMgG5srT6gEkT+I=)
                          15: ykinNBKuv2aUf3zoGP_gc5Krh-g.roa (hash: UHYGkWwi+Bc8CtX9dR7vpwojaXCxSC9SxUum639MnAM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:a2:4d:6b:5f:16:76:e6:88:7f:4b:3c:fb:eb:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
        Validity
            Not Before: Jan 31 15:00:25 2025 GMT
            Not After : Feb  1 15:00:25 2025 GMT
        Subject: CN=bef33a86a4a66da79561e605670507a58319bda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:80:3d:86:79:8f:02:a9:cb:ab:62:72:a9:
                    30:3b:12:43:34:e3:02:03:56:28:5b:56:91:09:1c:
                    ec:8e:a8:25:a2:b5:5a:f0:f4:2f:c0:bf:a8:b4:1f:
                    92:ae:4e:48:fc:48:a6:ba:62:c3:ec:fb:ee:d6:bc:
                    7d:8c:8b:e4:39:b5:82:d9:2d:72:1f:04:12:ee:21:
                    bb:37:31:8f:b5:f8:a2:2a:ad:84:ca:fc:08:7a:83:
                    24:06:ef:4f:82:f5:b9:88:e3:44:81:cb:4c:f8:67:
                    04:a3:5a:45:68:a6:a3:61:ca:75:d6:57:76:5b:7c:
                    e6:3b:29:41:57:31:2e:05:bb:23:46:53:fb:52:c8:
                    5d:35:61:4c:9e:25:59:21:f6:ec:99:97:d8:d5:80:
                    e1:ed:bf:80:ea:52:c1:d8:46:a2:96:fa:07:ea:d7:
                    e9:24:39:e7:48:77:f8:4c:9c:51:11:b1:59:82:c8:
                    90:52:40:bf:7c:69:a3:77:0e:35:c3:70:d2:3b:e5:
                    99:ea:12:8f:a3:3d:3a:7a:c7:d2:b8:41:a7:82:3f:
                    ce:d8:40:fd:97:2a:e3:c3:99:53:71:10:c0:52:c8:
                    24:0c:77:e7:36:76:db:ca:18:e6:08:6d:53:4c:91:
                    2b:f2:c5:8f:ba:b3:7c:7a:04:56:99:f5:68:e7:d0:
                    f8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F3:3A:86:A4:A6:6D:A7:95:61:E6:05:67:05:07:A5:83:19:BD:A0
            X509v3 Authority Key Identifier:
                keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:45:9b:2d:be:41:1a:f9:c3:1a:05:46:60:5f:45:cc:b9:23:
         b2:6a:b5:89:8e:43:4a:ae:68:6a:e8:60:02:e8:cc:0c:37:b5:
         7a:c9:ab:05:12:f3:14:0a:bd:98:9b:dd:a9:8f:36:4e:15:ee:
         bb:73:34:91:4c:df:6b:b6:27:10:bc:88:d8:66:82:e5:51:73:
         17:26:f3:a9:43:76:0b:ee:f2:12:66:24:d7:3b:08:82:46:69:
         5c:08:35:d4:72:fd:fa:a6:86:c5:79:57:78:d1:93:43:b0:a0:
         41:60:d3:2a:6a:61:82:18:29:b1:0c:7c:56:d2:8e:6d:82:6d:
         e2:55:98:4c:b4:19:1b:bb:a8:c7:ab:e8:20:b0:ea:ee:47:ec:
         7d:91:35:fb:b7:fc:b9:58:f8:a2:fd:32:cb:ec:de:5b:98:6e:
         2f:b4:b4:ed:03:75:c8:77:ef:13:2e:16:1a:23:a2:41:88:0a:
         66:4a:5e:5d:2d:5e:f4:e3:8c:d5:8a:2c:04:b2:1a:c2:b9:aa:
         1b:db:81:82:84:58:28:70:d7:13:d0:42:d5:f0:84:b8:5f:1f:
         3c:0a:18:e2:d1:ff:25:53:8a:04:bf:7e:10:62:c2:57:4f:7a:
         2b:1f:19:2b:84:b7:fc:dc:aa:33:44:33:b2:09:3b:61:a4:53:
         28:74:d4:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84KJNa18WduaIf0s8++vpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjUwMTMxMTUwMDI1WhcNMjUwMjAxMTUwMDI1WjAzMTEwLwYDVQQD
EyhiZWYzM2E4NmE0YTY2ZGE3OTU2MWU2MDU2NzA1MDdhNTgzMTliZGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJeAPYZ5jwKpy6ticqkwOxJDNOMC
A1YoW1aRCRzsjqglorVa8PQvwL+otB+Srk5I/EimumLD7Pvu1rx9jIvkObWC2S1y
HwQS7iG7NzGPtfiiKq2EyvwIeoMkBu9PgvW5iONEgctM+GcEo1pFaKajYcp11ld2
W3zmOylBVzEuBbsjRlP7UshdNWFMniVZIfbsmZfY1YDh7b+A6lLB2EailvoH6tfp
JDnnSHf4TJxREbFZgsiQUkC/fGmjdw41w3DSO+WZ6hKPoz06esfSuEGngj/O2ED9
lyrjw5lTcRDAUsgkDHfnNnbbyhjmCG1TTJEr8sWPurN8egRWmfVo59D4EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7zOoakpm2nlWHmBWcFB6WDGb2gMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakWbLb5B
GvnDGgVGYF9FzLkjsmq1iY5DSq5oauhgAujMDDe1esmrBRLzFAq9mJvdqY82ThXu
u3M0kUzfa7YnELyI2GaC5VFzFybzqUN2C+7yEmYk1zsIgkZpXAg11HL9+qaGxXlX
eNGTQ7CgQWDTKmphghgpsQx8VtKObYJt4lWYTLQZG7uox6voILDq7kfsfZE1+7f8
uVj4ov0yy+zeW5huL7S07QN1yHfvEy4WGiOiQYgKZkpeXS1e9OOM1YosBLIawrmq
G9uBgoRYKHDXE9BC1fCEuF8fPAoY4tH/JVOKBL9+EGLCV096Kx8ZK4S3/NyqM0Qz
sgk7YaRTKHTUtA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:30 2025 by rpki-client