Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
File:                     APTMQSzDD7L598N8PjkL7F5iVrA.mft (raw, json)
Hash identifier:          HwUFoslpUAmSU61sYujKAJLIkBr8ev/KVleYn/lU7mg=
Subject key identifier:   B0:61:FE:9D:B4:6D:64:FE:59:43:F5:B2:3D:31:0D:0C:4A:20:51:F9
Authority key identifier: 00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0
Certificate issuer:       /CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
Certificate serial:       0195E00FA567FAAE3AFC1A9979B16958D952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft
Manifest number:          13EE
Signing time:             Sat 29 Mar 2025 04:01:16 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:16 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:16 +0000
Files and hashes:         1: 5BciwgNYwMNFn5eFGl4Ow7HBSis.roa (hash: 3UceDm6E5z2xuYBvrfaNWIIbAo66nrZeoQOIOFL2Trc=)
                          2: APTMQSzDD7L598N8PjkL7F5iVrA.crl (hash: Czf07k87Kd53Iqn4O6uJul6QClJMnOEwxaO+eSAiQCc=)
                          3: M7SEgufvftwnRCkx-25asjtCovc.roa (hash: U57VYWY1ePii662SbirLo+F12wZ7w8+u4EylfllvMp4=)
                          4: ebqyf5BiDM6j62bVjaE6r-bdVhw.roa (hash: +MzGy+AsjXhbDBl5ZXZ0wbyW9k0Dlt1wZj2p77zu+Lc=)
                          5: hoKOermCUGUXPhGJMB3htCGxKbo.roa (hash: C2bDkxfzxHRN/J0tOztxhLbDgje2XNYFfUjponmFTcE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:a5:67:fa:ae:3a:fc:1a:99:79:b1:69:58:d9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00f4cc412cc30fb2f9f7c37c3e390bec5e6256b0
        Validity
            Not Before: Mar 29 04:01:16 2025 GMT
            Not After : Mar 30 04:01:16 2025 GMT
        Subject: CN=b061fe9db46d64fe5943f5b23d310d0c4a2051f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:06:b1:98:ae:cb:64:41:72:d6:92:81:05:
                    e4:2d:46:b2:93:07:22:e8:f0:64:87:26:17:2c:cd:
                    43:3f:cd:f4:88:55:78:39:3f:ed:ef:be:68:f6:ee:
                    75:5b:dc:7f:15:a8:f6:c7:01:fa:16:6a:1e:5e:fe:
                    20:ec:68:e0:90:27:e9:47:73:84:21:69:ba:32:fc:
                    f0:44:c0:d6:f0:23:b2:5e:85:20:74:e9:a4:da:4a:
                    36:35:c8:fe:7c:6b:95:b6:d7:92:19:f2:72:9d:cc:
                    c0:58:91:24:d9:22:00:64:88:8c:20:8b:86:0b:54:
                    e9:73:ba:4e:4e:3c:56:0c:fb:78:3c:f0:31:2b:88:
                    8c:a4:53:4c:b5:6f:61:1a:8e:ed:85:50:66:85:91:
                    b3:23:c1:cd:e4:11:e3:11:73:fe:eb:cd:5f:d1:5e:
                    06:6b:0a:c8:cc:c2:9c:5a:e7:bf:95:58:34:de:15:
                    2b:3e:60:cf:69:66:42:ed:c4:90:78:15:02:73:5b:
                    b2:48:3a:ac:5d:1f:55:12:84:58:e3:f6:41:62:42:
                    b6:67:69:33:9b:12:19:d6:65:3c:b0:1f:7f:6d:0e:
                    64:de:b6:a3:b3:38:f8:86:1a:41:79:48:07:7a:00:
                    94:62:44:41:dc:86:7a:ad:16:34:ae:ca:1f:d1:4b:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:61:FE:9D:B4:6D:64:FE:59:43:F5:B2:3D:31:0D:0C:4A:20:51:F9
            X509v3 Authority Key Identifier:
                keyid:00:F4:CC:41:2C:C3:0F:B2:F9:F7:C3:7C:3E:39:0B:EC:5E:62:56:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APTMQSzDD7L598N8PjkL7F5iVrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9375a2-3e6f-4577-85d1-5f145cfd2070/1/APTMQSzDD7L598N8PjkL7F5iVrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:98:a5:90:46:1c:67:3a:79:62:97:7e:4c:0f:20:d5:3e:
         34:00:34:ec:c9:6d:83:89:68:32:35:af:c1:75:c8:18:a7:dc:
         48:c8:fb:4c:fb:c4:7f:32:d1:93:9e:0d:04:33:a4:5a:62:8b:
         8e:4b:47:f1:07:bb:6d:27:c8:6d:f4:fd:eb:85:5e:72:96:92:
         b7:c8:cc:09:c0:91:56:b3:ce:c2:a6:56:d8:55:94:42:b9:d7:
         44:cd:6e:9c:19:60:14:85:8f:b2:78:9f:f7:75:12:ad:4a:e7:
         a0:89:25:97:dd:d5:67:4f:9e:42:bc:ea:a8:3a:fd:8a:10:95:
         f8:65:1f:94:9e:7c:b7:a0:15:14:99:45:b1:f0:a7:7c:7b:8a:
         f4:a9:63:55:6c:a4:30:61:39:43:5b:4d:6b:52:14:50:c7:9b:
         a5:2d:e5:a1:b5:b4:e3:30:11:72:62:96:e2:c4:73:ce:bd:82:
         f4:ff:31:f4:1e:d4:b2:27:bb:cf:a8:fa:08:82:98:6b:a7:98:
         c4:62:b6:fd:3f:a2:a5:d5:6d:7d:ff:8e:04:06:d5:00:c1:5e:
         7e:c0:bf:fa:26:a9:a4:60:f8:a9:cb:ad:6f:54:5b:1f:4c:97:
         ab:7c:e5:43:23:8f:9e:93:74:c8:b9:16:9a:ef:f1:fd:cb:84:
         c2:93:7f:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD6Vn+q46/BqZebFpWNlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjRjYzQxMmNjMzBmYjJmOWY3YzM3YzNlMzkwYmVjNWU2
MjU2YjAwHhcNMjUwMzI5MDQwMTE2WhcNMjUwMzMwMDQwMTE2WjAzMTEwLwYDVQQD
EyhiMDYxZmU5ZGI0NmQ2NGZlNTk0M2Y1YjIzZDMxMGQwYzRhMjA1MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBEGsZiuy2RBctaSgQXkLUaykwci
6PBkhyYXLM1DP830iFV4OT/t775o9u51W9x/Faj2xwH6FmoeXv4g7GjgkCfpR3OE
IWm6MvzwRMDW8COyXoUgdOmk2ko2Ncj+fGuVtteSGfJynczAWJEk2SIAZIiMIIuG
C1Tpc7pOTjxWDPt4PPAxK4iMpFNMtW9hGo7thVBmhZGzI8HN5BHjEXP+681f0V4G
awrIzMKcWue/lVg03hUrPmDPaWZC7cSQeBUCc1uySDqsXR9VEoRY4/ZBYkK2Z2kz
mxIZ1mU8sB9/bQ5k3rajszj4hhpBeUgHegCUYkRB3IZ6rRY0rsof0Uuu4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBh/p20bWT+WUP1sj0xDQxKIFH5MB8GA1UdIwQY
MBaAFAD0zEEsww+y+ffDfD45C+xeYlawMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEt
NWYxNDVjZmQyMDcwLzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy85Mzc1YTItM2U2Zi00NTc3LTg1ZDEtNWYxNDVjZmQyMDcw
LzEvQVBUTVFTekREN0w1OThOOFBqa0w3RjVpVnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPGYpZBG
HGc6eWKXfkwPINU+NAA07Mltg4loMjWvwXXIGKfcSMj7TPvEfzLRk54NBDOkWmKL
jktH8Qe7bSfIbfT964VecpaSt8jMCcCRVrPOwqZW2FWUQrnXRM1unBlgFIWPsnif
93USrUrnoIkll93VZ0+eQrzqqDr9ihCV+GUflJ58t6AVFJlFsfCnfHuK9KljVWyk
MGE5Q1tNa1IUUMebpS3lobW04zARcmKW4sRzzr2C9P8x9B7Usie7z6j6CIKYa6eY
xGK2/T+ipdVtff+OBAbVAMFefsC/+iappGD4qcutb1RbH0yXq3zlQyOPnpN0yLkW
mu/x/cuEwpN/kg==
-----END CERTIFICATE-----