Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File:                     RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier:          h2HPcYidFBLFcA51Qka06FFRyQAP2VQZ7bl/l/9dmyU=
Subject key identifier:   6A:A9:F4:AF:34:0B:5D:9C:81:81:FE:A2:E6:A1:6E:11:81:37:8D:48
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer:       /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial:       0194BCE0D0664E0D87B00D677ED1185F75B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number:          0361
Signing time:             Fri 31 Jan 2025 15:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:37 +0000
Files and hashes:         1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
                          2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
                          3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: Psh8wpUuFgPhQ8wrLPZgApH+FaeA7HxeoaoMw4oFlIw=)
                          4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:d0:66:4e:0d:87:b0:0d:67:7e:d1:18:5f:75:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
        Validity
            Not Before: Jan 31 15:00:37 2025 GMT
            Not After : Feb  1 15:00:37 2025 GMT
        Subject: CN=6aa9f4af340b5d9c8181fea2e6a16e1181378d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:c8:0f:85:3e:5e:56:5f:09:ea:b5:8c:e9:
                    f0:46:ae:98:da:cd:dd:ee:11:42:d4:77:f6:c3:7a:
                    5b:67:cd:b1:53:64:0c:e7:43:1a:1f:5d:d8:51:f1:
                    01:3b:b1:94:30:20:62:8b:34:75:5c:41:68:09:58:
                    f4:3c:40:fe:9f:7a:5d:c5:f9:f4:11:be:44:0c:87:
                    6f:fd:7e:ba:ae:d9:9a:9d:f7:2e:85:63:86:2b:ab:
                    61:22:5f:0e:d1:41:34:fc:86:67:6c:75:7c:df:c1:
                    bc:83:b6:71:ec:9d:fa:82:32:dd:8e:dd:fa:e9:8f:
                    bf:15:18:8a:43:26:0f:d9:f9:de:3d:10:65:6e:70:
                    89:76:6c:d0:c9:92:f9:79:ad:69:f0:33:4b:29:cc:
                    9b:63:1a:7b:1b:59:1b:b8:91:ac:39:4f:4f:59:6c:
                    c2:c0:a3:3d:1e:a2:cd:d8:39:0b:57:c8:8c:8d:15:
                    f3:a4:48:5a:f4:25:d7:b5:1d:6e:e7:1a:a7:f4:8e:
                    6c:69:a7:69:b9:fc:c9:89:ea:e9:55:4f:01:47:12:
                    5a:4e:d3:1b:82:b0:74:a5:72:9c:53:8e:e4:88:a3:
                    85:4d:04:81:6b:b6:4f:b2:64:c1:8f:b2:81:4d:1c:
                    04:fc:c1:85:19:2c:a4:e1:4a:72:a5:3c:8e:9c:ea:
                    19:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:F4:AF:34:0B:5D:9C:81:81:FE:A2:E6:A1:6E:11:81:37:8D:48
            X509v3 Authority Key Identifier:
                keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fd:68:19:c2:8e:ae:0a:a1:a7:bc:8a:cf:f9:92:1e:d8:e6:
         6e:f0:9e:cf:0b:6f:c8:7b:24:03:9e:cd:b1:63:9c:4b:f0:25:
         34:b3:fb:56:65:98:7e:f5:fa:05:65:aa:4a:66:f8:4c:75:25:
         00:7f:a9:68:1a:52:01:f5:de:45:0c:4d:c6:b0:f1:d0:44:b7:
         f7:d1:f1:bc:15:85:a9:f5:fa:20:73:ba:7d:4e:63:3d:20:46:
         9c:ba:44:a8:db:5f:8d:77:5c:4e:88:a6:3b:78:8f:33:15:6c:
         3b:e4:02:20:63:8a:70:a4:38:d1:72:79:85:af:c0:99:a0:28:
         8d:a7:fa:3e:26:11:5a:af:13:01:61:b7:1e:99:bf:8b:b7:13:
         04:a1:14:cf:89:3a:ed:7e:c0:b1:31:4a:bc:8c:bf:cd:93:57:
         f3:aa:52:ea:7a:6b:6e:c8:2e:bb:ff:1d:b7:3d:68:c1:70:17:
         2d:f7:4f:fa:73:b6:b0:b5:4f:07:11:44:3e:79:a6:be:a4:2c:
         c8:0c:1d:78:72:1c:fd:71:1d:66:09:f3:95:a5:b9:1a:fc:6e:
         47:b7:46:52:d1:6b:c0:34:f3:20:1f:a3:0c:df:d0:47:99:aa:
         a2:80:56:0e:aa:71:6a:17:88:62:a8:c1:a2:da:6e:ae:84:83:
         8f:f1:f0:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84NBmTg2HsA1nftEYX3W1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1
ZTcyYTgwHhcNMjUwMTMxMTUwMDM3WhcNMjUwMjAxMTUwMDM3WjAzMTEwLwYDVQQD
Eyg2YWE5ZjRhZjM0MGI1ZDljODE4MWZlYTJlNmExNmUxMTgxMzc4ZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolTID4U+XlZfCeq1jOnwRq6Y2s3d
7hFC1Hf2w3pbZ82xU2QM50MaH13YUfEBO7GUMCBiizR1XEFoCVj0PED+n3pdxfn0
Eb5EDIdv/X66rtmanfcuhWOGK6thIl8O0UE0/IZnbHV838G8g7Zx7J36gjLdjt36
6Y+/FRiKQyYP2fnePRBlbnCJdmzQyZL5ea1p8DNLKcybYxp7G1kbuJGsOU9PWWzC
wKM9HqLN2DkLV8iMjRXzpEha9CXXtR1u5xqn9I5saadpufzJierpVU8BRxJaTtMb
grB0pXKcU47kiKOFTQSBa7ZPsmTBj7KBTRwE/MGFGSyk4UpypTyOnOoZ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqp9K80C12cgYH+ouahbhGBN41IMB8GA1UdIwQY
MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt
NzQ5OWE4MjMxZjU2LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2
LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEv1oGcKO
rgqhp7yKz/mSHtjmbvCezwtvyHskA57NsWOcS/AlNLP7VmWYfvX6BWWqSmb4THUl
AH+paBpSAfXeRQxNxrDx0ES399HxvBWFqfX6IHO6fU5jPSBGnLpEqNtfjXdcToim
O3iPMxVsO+QCIGOKcKQ40XJ5ha/AmaAojaf6PiYRWq8TAWG3Hpm/i7cTBKEUz4k6
7X7AsTFKvIy/zZNX86pS6nprbsguu/8dtz1owXAXLfdP+nO2sLVPBxFEPnmmvqQs
yAwdeHIc/XEdZgnzlaW5GvxuR7dGUtFrwDTzIB+jDN/QR5mqooBWDqpxaheIYqjB
otpuroSDj/HwUg==
-----END CERTIFICATE-----