Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
File:                     iUkoo5YnzV7l-XW9iXwtd1qymUA.mft (raw, json)
Hash identifier:          YMM+stJv1/099/RrpV83nf3F6CXBTV7AYF/Ke3rmanE=
Subject key identifier:   B3:25:95:0B:37:81:BE:54:07:44:2E:81:39:4F:D8:14:75:DA:DE:97
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Certificate issuer:       /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial:       0195DFD9245F97852D3EC4401BBB57841CED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
Manifest number:          12B6
Signing time:             Sat 29 Mar 2025 03:01:44 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:44 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:44 +0000
Files and hashes:         1: 488Qk5K_zcU34uRLaYoKwXIwxJ4.roa (hash: sEL2CPSz4U47VxtQdqd40IdriMnhXYxHCyQu23pvrO0=)
                          2: dQxql56lhNCcsiK9oqDeI2i1LPI.roa (hash: CxD6bxaQqZ0RT6lpsgrhcGouck3CGYAGHcM3mIM2Zq4=)
                          3: iAaGQCDc_iZliu2DoFEK7u1sCxw.roa (hash: 7QJwq3waRZZPrVPoJAerKObMOq48fRn6b3EgRBxedqA=)
                          4: iUkoo5YnzV7l-XW9iXwtd1qymUA.crl (hash: dMzkpuOLhqidHnvtxIjZFIHFHSUWABRgXhJ4NhlwR+s=)
                          5: rQBafyOV_GMUpeH8CJAXqGt37D4.roa (hash: mme56aqaI+VwFjLkWHLeeNyvz92hx7BIY2OU2aRNReA=)
                          6: tZdYfZbtvBoL1PuFqRVIr40YorA.roa (hash: 9/ShFLjqXPH/FU9fRS887UeJx3NTZoeFoqhL/mHPt14=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:24:5f:97:85:2d:3e:c4:40:1b:bb:57:84:1c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
        Validity
            Not Before: Mar 29 03:01:44 2025 GMT
            Not After : Mar 30 03:01:44 2025 GMT
        Subject: CN=b325950b3781be5407442e81394fd81475dade97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2a:e0:a0:66:d6:78:83:63:29:9f:d8:59:c1:
                    5c:2a:85:97:63:1e:1b:ca:15:9d:cc:53:70:21:19:
                    ad:42:c8:dd:73:8d:83:a6:c0:a8:6d:24:5a:fd:6c:
                    41:c2:dd:2c:af:40:a6:07:d4:0b:2f:ab:49:37:fa:
                    1c:91:26:75:23:7f:c0:62:34:35:ef:be:35:63:39:
                    11:2f:c5:0f:0b:e5:9f:e2:c3:9e:8c:13:8b:a8:c4:
                    a7:17:c5:aa:91:95:ff:e6:2d:8c:c5:4c:98:77:a9:
                    7e:48:df:89:0f:1c:cf:4c:94:e4:df:fe:ee:01:bb:
                    40:3c:92:6d:18:97:0d:51:28:ae:e6:5e:63:92:00:
                    ab:e1:f0:cc:8c:c2:b0:03:78:5c:d9:93:d8:14:38:
                    4b:ec:bf:4c:15:70:cf:28:d2:99:e5:c4:d1:d2:39:
                    45:c9:c0:35:97:0b:b7:4f:92:a4:95:b8:2e:11:a5:
                    6a:d5:0a:fe:50:46:9a:cd:43:52:37:48:13:43:ba:
                    f8:68:3f:a9:01:f7:6d:bb:4b:c4:5e:90:cd:73:c3:
                    31:1e:ef:bc:55:f2:17:4b:e8:34:97:81:7f:c0:87:
                    f2:a4:14:41:96:7d:7d:8a:6c:66:62:d2:27:e6:a5:
                    3b:dc:5a:10:b8:b7:45:3e:bc:72:a1:ed:c7:3a:96:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:25:95:0B:37:81:BE:54:07:44:2E:81:39:4F:D8:14:75:DA:DE:97
            X509v3 Authority Key Identifier:
                keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:05:e1:92:db:ae:52:e3:b0:9a:4c:d9:01:3a:7d:92:7e:1e:
         06:5f:cd:22:48:b4:3a:cb:21:67:51:f5:f6:06:1f:55:7e:fd:
         85:51:23:78:a7:5e:0e:fb:85:92:ff:39:5f:67:57:99:6d:5c:
         08:d5:26:8c:cd:30:05:c1:22:3e:53:6f:45:7b:de:c8:2d:59:
         b4:3e:fb:42:18:ed:a3:6e:23:e7:d5:e2:10:83:31:73:d3:99:
         8c:93:26:2c:d4:c2:5a:0a:c2:ac:e1:95:99:c3:8c:38:dc:cf:
         f4:7a:e3:d5:9a:03:71:c3:47:26:15:a4:f6:c3:e5:87:bd:95:
         a6:79:fc:61:d8:f6:a5:aa:81:56:14:6c:c7:01:1e:a2:57:e7:
         4e:4b:49:e9:2c:e3:46:45:c7:54:31:7f:0b:2a:d8:47:74:5e:
         67:a6:f3:64:8c:f6:62:78:eb:43:75:49:d3:72:cf:fb:57:9b:
         ff:9a:4f:ce:1b:b5:ac:a5:e8:8a:a9:cb:fd:61:72:aa:22:cc:
         22:1d:e8:04:09:34:80:9b:b7:8d:04:da:65:7a:47:e5:1c:96:
         1b:bf:2d:db:69:c0:7c:56:20:24:7e:98:ce:a5:a7:94:05:4d:
         6a:81:98:8f:bd:15:99:00:c8:4e:0f:08:a4:cf:40:da:06:68:
         03:bf:f6:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2SRfl4UtPsRAG7tXhBztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi
Mjk5NDAwHhcNMjUwMzI5MDMwMTQ0WhcNMjUwMzMwMDMwMTQ0WjAzMTEwLwYDVQQD
EyhiMzI1OTUwYjM3ODFiZTU0MDc0NDJlODEzOTRmZDgxNDc1ZGFkZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSrgoGbWeINjKZ/YWcFcKoWXYx4b
yhWdzFNwIRmtQsjdc42DpsCobSRa/WxBwt0sr0CmB9QLL6tJN/ockSZ1I3/AYjQ1
7741YzkRL8UPC+Wf4sOejBOLqMSnF8WqkZX/5i2MxUyYd6l+SN+JDxzPTJTk3/7u
AbtAPJJtGJcNUSiu5l5jkgCr4fDMjMKwA3hc2ZPYFDhL7L9MFXDPKNKZ5cTR0jlF
ycA1lwu3T5KklbguEaVq1Qr+UEaazUNSN0gTQ7r4aD+pAfdtu0vEXpDNc8MxHu+8
VfIXS+g0l4F/wIfypBRBln19imxmYtIn5qU73FoQuLdFPrxyoe3HOpb3IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMllQs3gb5UB0QugTlP2BR12t6XMB8GA1UdIwQY
MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt
MTU5M2Q0MDQ1Y2JjLzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj
LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgXhktuu
UuOwmkzZATp9kn4eBl/NIki0OsshZ1H19gYfVX79hVEjeKdeDvuFkv85X2dXmW1c
CNUmjM0wBcEiPlNvRXveyC1ZtD77Qhjto24j59XiEIMxc9OZjJMmLNTCWgrCrOGV
mcOMONzP9Hrj1ZoDccNHJhWk9sPlh72Vpnn8Ydj2paqBVhRsxwEeolfnTktJ6Szj
RkXHVDF/CyrYR3ReZ6bzZIz2YnjrQ3VJ03LP+1eb/5pPzhu1rKXoiqnL/WFyqiLM
Ih3oBAk0gJu3jQTaZXpH5RyWG78t22nAfFYgJH6YzqWnlAVNaoGYj70VmQDITg8I
pM9A2gZoA7/2WQ==
-----END CERTIFICATE-----