Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
File:                     b_xyU8DaFbVuAJVzGhDCu61sEX4.mft (raw, json)
Hash identifier:          7rCXVD5uMXSJ5/tpw2sr7Y0huIMVg8WXha7j6ZCuS6Q=
Subject key identifier:   4E:AE:95:41:95:55:76:5E:91:6F:F7:B2:F5:CB:E6:10:92:94:63:80
Authority key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Certificate issuer:       /CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Certificate serial:       0194BCE0EFAE5D71CCA1211253F57C710584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
Manifest number:          0281
Signing time:             Fri 31 Jan 2025 15:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:45 +0000
Files and hashes:         1: ViU3nx0KMvyzkw-cFoaI3YiJf24.roa (hash: 2MVqhG3jfXK0CnKSuEcQLvgpRXs6MX1MKLdphJMDw6E=)
                          2: b_xyU8DaFbVuAJVzGhDCu61sEX4.crl (hash: DoGKgZ4o6ezCI02j3hzHEkQn+RaJLVvEltENIpYI5hQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ef:ae:5d:71:cc:a1:21:12:53:f5:7c:71:05:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
        Validity
            Not Before: Jan 31 15:00:45 2025 GMT
            Not After : Feb  1 15:00:45 2025 GMT
        Subject: CN=4eae95419555765e916ff7b2f5cbe61092946380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:8f:40:8d:2b:5d:96:e4:e9:d9:bc:2d:a9:
                    8a:2e:23:6c:55:16:99:23:93:94:bb:b8:c7:5d:93:
                    9b:a7:f7:bb:fe:5c:e2:38:1e:73:cd:b3:77:90:9b:
                    bf:da:2e:fb:ae:80:1c:28:9b:c8:44:6e:5a:7b:ec:
                    05:f8:db:4d:2c:d0:9f:7d:8d:6f:7f:c8:15:ff:47:
                    35:ef:49:58:e1:a8:65:84:dc:37:bd:69:9f:b3:d2:
                    0d:e1:f5:1e:01:37:a4:01:44:5a:03:34:33:f8:56:
                    6b:17:d1:7e:8d:db:cd:77:19:8f:00:ce:25:dc:99:
                    20:4e:b2:0f:7c:ac:59:31:51:24:3b:fd:e5:5d:e4:
                    9c:f3:57:44:f2:14:82:37:23:45:14:92:60:78:d7:
                    d1:59:d1:89:ea:ee:4c:98:2d:b8:09:7b:b2:7a:39:
                    f8:c3:38:61:a9:4f:c1:b8:6a:ae:14:e1:b6:a4:52:
                    91:9c:1c:c3:d2:f0:c9:0b:b4:76:b7:a3:ae:2d:a3:
                    59:a0:a0:33:6b:85:4d:ce:88:98:41:4f:aa:64:84:
                    bc:dc:e0:a1:f0:f3:3d:a5:98:18:be:71:51:83:55:
                    10:ab:99:95:b6:6d:ae:11:91:06:5f:8d:81:b2:3d:
                    57:c3:10:f5:3e:82:74:a2:97:46:36:18:82:25:12:
                    76:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AE:95:41:95:55:76:5E:91:6F:F7:B2:F5:CB:E6:10:92:94:63:80
            X509v3 Authority Key Identifier:
                keyid:6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:e0:74:11:b0:00:2b:b6:94:5c:80:a1:b5:89:49:75:fa:
         56:93:fd:bd:89:1d:f6:5b:8a:24:d1:3b:68:09:24:5f:b2:4a:
         7f:7e:b7:ca:5a:c0:1e:bc:a3:c1:6e:5f:b7:f8:32:50:4f:f4:
         1d:c3:57:30:61:d0:8f:08:41:af:56:ec:b4:f4:7d:79:46:33:
         23:e5:93:e6:c7:42:99:58:4f:dd:61:7d:ab:7a:e4:8b:bc:d9:
         82:30:36:81:33:f2:56:87:a1:7b:00:4e:d0:6c:8c:da:fb:df:
         d4:82:57:cf:bc:df:f6:58:9f:e8:cd:eb:ee:71:3d:29:ae:ca:
         2c:1f:c5:07:d0:34:5d:78:7d:0f:e3:41:e1:94:9a:50:1e:dd:
         62:a5:0b:e3:2c:2f:eb:36:ea:25:28:a4:af:8c:77:b2:bf:33:
         18:ba:85:c5:df:2e:0f:9d:03:71:90:9c:61:2f:61:a2:c1:51:
         de:7b:be:4f:f9:ef:c7:f7:dc:5c:24:fe:d5:69:24:26:c1:17:
         a9:64:ce:82:79:2b:c9:ee:1d:ae:10:91:75:17:fb:5b:3c:c0:
         4d:93:4a:e5:cb:d0:e7:99:25:ef:bf:ea:3c:39:1d:e2:11:4b:
         8b:78:cd:44:bd:57:f6:e2:4f:18:60:d5:79:ce:77:86:51:41:
         fa:f3:64:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84O+uXXHMoSESU/V8cQWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmM3MjUzYzBkYTE1YjU2ZTAwOTU3MzFhMTBjMmJiYWQ2
YzExN2UwHhcNMjUwMTMxMTUwMDQ1WhcNMjUwMjAxMTUwMDQ1WjAzMTEwLwYDVQQD
Eyg0ZWFlOTU0MTk1NTU3NjVlOTE2ZmY3YjJmNWNiZTYxMDkyOTQ2MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy66PQI0rXZbk6dm8LamKLiNsVRaZ
I5OUu7jHXZObp/e7/lziOB5zzbN3kJu/2i77roAcKJvIRG5ae+wF+NtNLNCffY1v
f8gV/0c170lY4ahlhNw3vWmfs9IN4fUeATekAURaAzQz+FZrF9F+jdvNdxmPAM4l
3JkgTrIPfKxZMVEkO/3lXeSc81dE8hSCNyNFFJJgeNfRWdGJ6u5MmC24CXuyejn4
wzhhqU/BuGquFOG2pFKRnBzD0vDJC7R2t6OuLaNZoKAza4VNzoiYQU+qZIS83OCh
8PM9pZgYvnFRg1UQq5mVtm2uEZEGX42Bsj1XwxD1PoJ0opdGNhiCJRJ2KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6ulUGVVXZekW/3svXL5hCSlGOAMB8GA1UdIwQY
MBaAFG/8clPA2hW1bgCVcxoQwrutbBF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTct
MzdhN2NkMzdkNDllLzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZWU3MmQtZDkxZC00NjVlLTlkNTctMzdhN2NkMzdkNDll
LzEvYl94eVU4RGFGYlZ1QUpWekdoREN1NjFzRVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcDgdBGw
ACu2lFyAobWJSXX6VpP9vYkd9luKJNE7aAkkX7JKf363ylrAHryjwW5ft/gyUE/0
HcNXMGHQjwhBr1bstPR9eUYzI+WT5sdCmVhP3WF9q3rki7zZgjA2gTPyVoehewBO
0GyM2vvf1IJXz7zf9lif6M3r7nE9Ka7KLB/FB9A0XXh9D+NB4ZSaUB7dYqUL4ywv
6zbqJSikr4x3sr8zGLqFxd8uD50DcZCcYS9hosFR3nu+T/nvx/fcXCT+1WkkJsEX
qWTOgnkrye4drhCRdRf7WzzATZNK5cvQ55kl77/qPDkd4hFLi3jNRL1X9uJPGGDV
ec53hlFB+vNkug==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:15 2025 by rpki-client