Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          80JGhicNy+pdu1hnKOb6mw6FWfHO2mpTAV9NH9Zpp2w=
Subject key identifier:   55:88:4E:40:59:A7:97:13:65:28:45:81:4D:0D:29:C8:DA:48:95:30
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       0195E00F53D7EFA88D9250A449806D008699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          14C9
Signing time:             Sat 29 Mar 2025 04:00:55 +0000
Manifest this update:     Sat 29 Mar 2025 04:00:55 +0000
Manifest next update:     Sun 30 Mar 2025 04:00:55 +0000
Files and hashes:         1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=)
                          2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=)
                          3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: iCfsChW7b7yi2ZbSBK3jEHSfmlrZBWMutK/VPoFMmAk=)
                          4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=)
                          5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:53:d7:ef:a8:8d:92:50:a4:49:80:6d:00:86:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: Mar 29 04:00:55 2025 GMT
            Not After : Mar 30 04:00:55 2025 GMT
        Subject: CN=55884e4059a79713652845814d0d29c8da489530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:ba:2b:47:66:81:dd:86:56:c2:0f:8f:26:
                    6c:9c:48:f4:e5:09:8b:7e:2e:82:87:a9:19:f5:e0:
                    22:a9:c0:ba:f6:07:18:8e:e5:e5:19:bb:13:fe:ab:
                    47:50:8c:d3:5d:db:dc:7c:81:06:db:96:4c:f0:d6:
                    f1:2a:c8:bd:ac:7c:e5:73:9b:94:57:ca:cf:a7:f8:
                    f5:e9:2d:76:43:71:60:47:4b:0f:2c:78:51:0d:34:
                    43:f4:94:2c:15:ea:a2:c9:10:64:36:6b:1c:a5:87:
                    31:c9:39:13:b4:b1:ae:70:3e:d1:e2:26:f8:43:61:
                    cd:91:19:59:bc:45:53:a7:c2:93:2c:b0:2f:0a:8a:
                    9c:9d:d0:d7:8b:a8:87:ce:e3:78:4a:7b:1f:0e:0b:
                    78:96:92:28:6f:c7:73:46:8f:ec:13:97:dd:0e:e6:
                    fb:59:dc:28:ae:a2:5b:6e:c3:38:f8:7f:b3:c4:39:
                    92:b8:37:cd:dd:14:33:e7:22:0a:a8:60:01:70:20:
                    0f:de:4d:44:7f:38:c3:ad:f8:56:cd:e9:ae:34:a1:
                    0d:c4:32:32:fb:7e:18:8b:c9:57:4b:d2:87:24:21:
                    81:f9:b5:54:6d:f6:0f:87:eb:91:75:49:1a:e3:b8:
                    9a:30:c6:c1:cb:d9:c1:bd:cb:94:c7:87:c4:1d:f2:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:88:4E:40:59:A7:97:13:65:28:45:81:4D:0D:29:C8:DA:48:95:30
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1a:96:97:bd:ed:e1:45:ed:6d:71:4f:fc:80:87:98:55:a9:
         39:ea:82:24:49:a3:49:af:be:58:98:38:92:92:18:67:f3:f3:
         33:95:3b:ab:26:ab:97:f2:22:7c:e8:da:6c:58:f0:3a:a9:ca:
         82:2e:4e:ab:4c:9a:a9:45:f0:07:4d:cf:8b:e5:f9:f7:89:e1:
         31:88:e1:ca:2e:3d:36:5f:5b:c7:e4:b6:8d:7b:00:76:81:b5:
         02:ad:4d:88:45:43:3e:f8:1a:58:6c:31:b3:e7:d7:ba:9a:27:
         50:dd:00:71:ef:db:da:e7:f4:08:74:b3:a6:64:d9:7f:35:5c:
         17:85:c8:69:bc:37:4f:cb:51:ca:85:55:43:39:2d:65:47:42:
         9f:a4:ff:38:96:08:70:52:39:24:f4:02:af:a9:8f:b3:c2:c9:
         82:7e:65:a3:7a:91:f1:8d:e1:aa:c0:bb:8b:73:a5:48:0c:30:
         fa:66:ad:f2:13:6e:6b:5d:00:a4:1b:c7:fe:cc:39:1d:dc:49:
         5b:cd:70:52:1b:76:e5:bc:9a:90:3e:dd:fa:69:75:51:65:b4:
         b5:88:2e:5d:59:b4:3f:6e:54:c5:33:74:eb:20:30:fa:64:86:
         f1:50:cf:e5:3e:0a:2c:e2:5c:ce:3d:d6:db:92:d5:d6:94:fa:
         e8:31:cf:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD1PX76iNklCkSYBtAIaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj
Y2U3NzkwHhcNMjUwMzI5MDQwMDU1WhcNMjUwMzMwMDQwMDU1WjAzMTEwLwYDVQQD
Eyg1NTg4NGU0MDU5YTc5NzEzNjUyODQ1ODE0ZDBkMjljOGRhNDg5NTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGq6K0dmgd2GVsIPjyZsnEj05QmL
fi6Ch6kZ9eAiqcC69gcYjuXlGbsT/qtHUIzTXdvcfIEG25ZM8NbxKsi9rHzlc5uU
V8rPp/j16S12Q3FgR0sPLHhRDTRD9JQsFeqiyRBkNmscpYcxyTkTtLGucD7R4ib4
Q2HNkRlZvEVTp8KTLLAvCoqcndDXi6iHzuN4SnsfDgt4lpIob8dzRo/sE5fdDub7
WdworqJbbsM4+H+zxDmSuDfN3RQz5yIKqGABcCAP3k1EfzjDrfhWzemuNKENxDIy
+34Yi8lXS9KHJCGB+bVUbfYPh+uRdUka47iaMMbBy9nBvcuUx4fEHfJaswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWITkBZp5cTZShFgU0NKcjaSJUwMB8GA1UdIwQY
MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt
ZmFkNWZkNzk3MGJhLzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh
LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRqWl73t
4UXtbXFP/ICHmFWpOeqCJEmjSa++WJg4kpIYZ/PzM5U7qyarl/IifOjabFjwOqnK
gi5Oq0yaqUXwB03Pi+X594nhMYjhyi49Nl9bx+S2jXsAdoG1Aq1NiEVDPvgaWGwx
s+fXuponUN0Ace/b2uf0CHSzpmTZfzVcF4XIabw3T8tRyoVVQzktZUdCn6T/OJYI
cFI5JPQCr6mPs8LJgn5lo3qR8Y3hqsC7i3OlSAww+mat8hNua10ApBvH/sw5HdxJ
W81wUht25byakD7d+ml1UWW0tYguXVm0P25UxTN06yAw+mSG8VDP5T4KLOJczj3W
25LV1pT66DHP9w==
-----END CERTIFICATE-----