Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
File:                     y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft (raw, json)
Hash identifier:          lo8M5UEHmSpMDUfpXsDzEP6bWk3xuwTDvD8b3fxFOrE=
Subject key identifier:   D8:03:0A:D6:22:F8:F5:E5:9C:A9:F6:FD:8D:1A:83:45:98:89:E2:39
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Certificate issuer:       /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial:       0194BC72E221C2E9A857403E3AAE3D09D25E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 13:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:32 +0000
Files and hashes:         1: 3Vm_yCVfs-cMELxePU7IOqjsJok.roa (hash: kVD1zt/Fw0wy4FVKrPF6BbM/tCCUinsyU9AcxcCbEdA=)
                          2: d7nnb22eByZ3PgdzvIIdeg7bVrw.roa (hash: MtT+ZrWZXS09kZHHdiFFktcO1Kssl/83QQmCIziV1ms=)
                          3: fX9eMLnK7xVb4_2F9g2DOCYqfvU.roa (hash: 1sy/TAEfLZZfPClLeEAAWlanxJu879FILQU8C/alm0M=)
                          4: y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl (hash: SkkJerK/JOztTpxJn/n2U9YN9w8cQ/9hABA+Vh2B/Wg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:e2:21:c2:e9:a8:57:40:3e:3a:ae:3d:09:d2:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
        Validity
            Not Before: Jan 31 13:00:32 2025 GMT
            Not After : Feb  1 13:00:32 2025 GMT
        Subject: CN=d8030ad622f8f5e59ca9f6fd8d1a83459889e239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:a5:79:13:b5:ea:49:4f:7b:ee:f4:53:32:
                    f9:5d:5e:7c:b8:7d:a7:06:39:f9:c7:41:40:c9:09:
                    93:e4:bc:5c:c0:f7:36:26:73:cb:f9:4c:4e:9d:9b:
                    7a:9a:ca:16:65:6b:46:35:db:78:c1:cc:43:25:82:
                    69:c7:2a:9f:46:67:f0:b5:f0:a1:3d:2f:cb:d5:7b:
                    c0:a4:fb:d9:1e:a3:ba:b4:c4:4a:6d:93:f6:4a:46:
                    da:a7:89:66:0d:03:30:e0:d2:2b:ec:7b:81:0e:48:
                    9e:b7:58:19:36:38:37:7f:06:62:f3:30:48:f8:e6:
                    5b:fc:35:5b:f3:40:07:56:25:5b:2c:dc:78:22:9a:
                    39:4e:ac:d5:8a:99:96:cc:f9:c7:99:12:3e:86:2b:
                    85:38:d7:52:00:32:2c:f3:12:dd:9c:42:15:8f:19:
                    78:b3:42:44:98:68:3e:dc:96:07:37:b4:b6:88:77:
                    bc:63:2f:b6:12:ea:d7:54:cc:66:59:40:cd:c0:23:
                    ab:ed:c4:68:d1:5f:dc:e6:6a:56:5f:e6:6b:df:cc:
                    c2:68:4b:76:bc:3b:6b:93:ce:e6:ff:cf:9b:ac:5e:
                    1a:51:50:7d:69:c9:4a:cc:e0:f0:90:3e:f4:27:87:
                    45:1a:c1:7b:31:f0:f5:c4:5c:ae:14:57:c8:fc:bf:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:03:0A:D6:22:F8:F5:E5:9C:A9:F6:FD:8D:1A:83:45:98:89:E2:39
            X509v3 Authority Key Identifier:
                keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:ea:fa:18:9d:75:9f:d4:f4:77:67:83:d4:df:1f:ed:d6:
         18:cd:1e:c6:07:9a:db:16:13:7c:69:9b:89:b4:76:49:65:a8:
         53:9e:d5:ba:ac:03:a2:fb:ad:98:81:2b:f5:20:63:6c:d2:f1:
         af:5a:d6:a4:f6:68:6f:3f:9b:39:75:01:98:e6:7a:2e:99:50:
         7e:95:25:e4:9b:af:ac:a4:c3:28:df:23:7a:44:be:ec:b9:62:
         43:6f:1f:b5:a4:85:b3:d9:d7:14:4a:38:82:77:a3:c4:ee:b5:
         76:4d:de:b0:d7:c2:e4:c6:6a:55:dd:c0:00:b8:61:61:46:e5:
         cd:94:1f:47:3e:53:5c:c2:bd:8a:18:0d:ba:a8:69:ca:65:cd:
         c3:ca:3c:0d:5e:96:4d:5f:dd:4a:03:2d:b2:38:89:80:d8:97:
         d7:87:59:d3:48:37:a2:7d:a7:55:34:a8:7c:d7:62:18:e6:67:
         70:1c:97:fb:60:3c:61:6f:80:de:47:74:08:0b:d7:15:92:69:
         64:66:25:c9:70:01:c1:0b:2f:a0:0f:71:74:71:e1:0e:b2:97:
         52:23:c3:e5:1b:f0:de:50:35:30:d0:cb:11:48:2d:da:01:1d:
         60:c0:15:54:2a:e4:e9:38:7b:a7:35:fb:a4:3a:9d:e9:c5:6c:
         60:90:68:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuIhwumoV0A+Oq49CdJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy
OTdlMjUwHhcNMjUwMTMxMTMwMDMyWhcNMjUwMjAxMTMwMDMyWjAzMTEwLwYDVQQD
EyhkODAzMGFkNjIyZjhmNWU1OWNhOWY2ZmQ4ZDFhODM0NTk4ODllMjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8mleRO16klPe+70UzL5XV58uH2n
Bjn5x0FAyQmT5LxcwPc2JnPL+UxOnZt6msoWZWtGNdt4wcxDJYJpxyqfRmfwtfCh
PS/L1XvApPvZHqO6tMRKbZP2Skbap4lmDQMw4NIr7HuBDkiet1gZNjg3fwZi8zBI
+OZb/DVb80AHViVbLNx4Ipo5TqzVipmWzPnHmRI+hiuFONdSADIs8xLdnEIVjxl4
s0JEmGg+3JYHN7S2iHe8Yy+2EurXVMxmWUDNwCOr7cRo0V/c5mpWX+Zr38zCaEt2
vDtrk87m/8+brF4aUVB9aclKzODwkD70J4dFGsF7MfD1xFyuFFfI/L+odwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgDCtYi+PXlnKn2/Y0ag0WYieI5MB8GA1UdIwQY
MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt
YjQ5MmQ2ZmY0ODNmLzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm
LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZ7q+hid
dZ/U9Hdng9TfH+3WGM0exgea2xYTfGmbibR2SWWoU57VuqwDovutmIEr9SBjbNLx
r1rWpPZobz+bOXUBmOZ6LplQfpUl5JuvrKTDKN8jekS+7LliQ28ftaSFs9nXFEo4
gnejxO61dk3esNfC5MZqVd3AALhhYUblzZQfRz5TXMK9ihgNuqhpymXNw8o8DV6W
TV/dSgMtsjiJgNiX14dZ00g3on2nVTSofNdiGOZncByX+2A8YW+A3kd0CAvXFZJp
ZGYlyXABwQsvoA9xdHHhDrKXUiPD5Rvw3lA1MNDLEUgt2gEdYMAVVCrk6Th7pzX7
pDqd6cVsYJBoMQ==
-----END CERTIFICATE-----