Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File:                     r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier:          /5mVsVaZvFxPjYfWkwkfCe8tZSNdDFEX0HbpxfvtRqg=
Subject key identifier:   CC:B9:6C:93:54:C6:4A:32:5F:AA:E2:85:4E:F6:40:DC:F1:F2:FE:D0
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer:       /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial:       0195E0469913930003B613BEFB34BD3A7322
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number:          1517
Signing time:             Sat 29 Mar 2025 05:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:17 +0000
Files and hashes:         1: 8K2lGgpGXjS00-GcfRjT3a_eJgA.roa (hash: C+7sI9Pyh9Bl/Kj0tjtivklrSn2Sxfv2neZ3RxgZoe8=)
                          2: G4Jxn_aqBgyU9_YGlRiE9ULjWaU.roa (hash: RbL+vfgJwT99KSNM/1Fv+iOzh78qncOg1wBYg2kVVuA=)
                          3: IoD5gau8ca33bX7P3LRLuiKbRZM.roa (hash: j9p5Da+/+Yzr/MRz0NAUAXr0JoA15rp7WE5vGQVI32s=)
                          4: JQA-HarJVevrzVlDDxxLwEh8Gs0.roa (hash: DCqgPByQqjOW1Ld1zDzDgjTePs/q3+t/F+AzIwqXHgI=)
                          5: TkJi6MAHiQpNj2Oyk40aOzqLJ7Y.roa (hash: I/uwWwVqDGThqp+KA/qqLKY8rR+9iLdzyQtCR4yZvrA=)
                          6: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: AaRWEL59+StYOeueWjUpd1y2Cah3m+1eTmQ+rmrUwvA=)
                          7: yNtguhxLlGFfI9XOFYXxQMQLlUo.roa (hash: CRlX9/2P79xJ+8xnxa+t5w4SEHZe79te4oGn3OoZ39E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:99:13:93:00:03:b6:13:be:fb:34:bd:3a:73:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
        Validity
            Not Before: Mar 29 05:01:17 2025 GMT
            Not After : Mar 30 05:01:17 2025 GMT
        Subject: CN=ccb96c9354c64a325faae2854ef640dcf1f2fed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:60:e3:66:68:38:63:0e:56:34:08:91:9e:72:
                    1f:af:e7:9d:6c:02:b1:3b:7c:78:5c:98:8e:98:a4:
                    da:16:a7:90:fc:12:11:e1:92:dc:f7:36:c0:18:c1:
                    7f:f5:cc:34:bb:b1:ff:ce:c0:3b:ea:f0:14:36:37:
                    b3:24:a9:51:57:39:06:f9:80:8c:ed:d2:2a:ba:32:
                    36:a5:0e:b4:4a:57:68:fb:c4:60:fa:71:70:19:a4:
                    c2:f5:99:f9:68:1c:f0:49:88:38:37:a8:5f:42:fd:
                    88:4c:62:90:28:b0:80:7e:f3:34:7f:f4:90:51:d5:
                    98:7d:ce:0e:ee:03:fa:0e:70:77:d8:35:d1:a5:6e:
                    fa:b7:86:d4:55:f8:9e:b2:55:f5:b8:c7:4e:af:e3:
                    97:67:fe:46:16:75:30:03:2c:3e:62:ef:a6:c0:43:
                    8f:4e:be:c4:b9:2a:f5:05:95:17:7e:fa:16:88:c5:
                    ae:79:65:9f:b1:b3:c9:ec:ed:08:7f:98:28:66:69:
                    08:f9:e8:09:dd:4f:44:48:41:2f:0b:f6:37:e9:eb:
                    c6:50:b8:e8:fe:b2:de:7e:47:6f:a3:83:24:26:39:
                    d3:82:b9:60:1b:0b:f4:e3:b3:9d:51:72:04:18:af:
                    9c:6b:ef:89:d3:2a:a1:ef:58:0d:e5:b3:32:ff:f1:
                    d8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B9:6C:93:54:C6:4A:32:5F:AA:E2:85:4E:F6:40:DC:F1:F2:FE:D0
            X509v3 Authority Key Identifier:
                keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:1d:3d:a4:e6:db:4c:f7:7d:30:33:d2:34:f0:4b:b4:63:a4:
         22:ba:9e:7c:24:2d:f5:a6:ad:82:09:91:4d:e1:11:59:f8:2d:
         97:ba:de:d3:3e:24:89:0b:01:7c:d6:5d:49:71:26:02:d3:20:
         0a:a0:42:4e:66:5b:4d:ad:ec:1a:d6:45:9f:3b:5a:40:18:75:
         91:36:97:8f:38:8d:be:39:05:86:1b:b4:69:6f:52:e0:c0:9a:
         ad:7c:7a:92:a0:72:3d:9c:ab:74:56:12:5b:30:a0:a0:ee:2a:
         3b:e6:d2:99:5b:79:f8:2d:21:60:fa:6d:00:bd:27:4c:94:39:
         28:3a:fa:72:3c:78:8b:2b:13:5a:ae:54:f8:d0:ad:3d:a2:ce:
         be:0c:30:ce:b6:3c:5b:2f:2b:59:c8:f1:98:3e:33:9b:69:1b:
         24:76:f7:cc:cf:ca:c1:a0:96:f8:ff:c6:4c:f1:05:a1:42:74:
         1c:86:66:3e:6e:ac:e3:ba:04:c7:b3:b5:2d:79:c1:33:d9:5c:
         40:86:ac:7c:cd:33:d5:f7:63:b7:54:aa:3b:06:7c:8c:a9:a5:
         1d:3d:66:f8:52:03:cc:07:91:d6:38:c5:ba:cc:35:5c:cd:2f:
         ca:44:cd:fd:22:4c:19:81:21:ab:07:cf:aa:6d:9d:74:f9:26:
         27:21:0a:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRpkTkwADthO++zS9OnMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODAxOTg0Y2MzOGYwYTRmYzVhZmUxYWRlYWI2ODBjMWI4
OWU5NWIwHhcNMjUwMzI5MDUwMTE3WhcNMjUwMzMwMDUwMTE3WjAzMTEwLwYDVQQD
EyhjY2I5NmM5MzU0YzY0YTMyNWZhYWUyODU0ZWY2NDBkY2YxZjJmZWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WDjZmg4Yw5WNAiRnnIfr+edbAKx
O3x4XJiOmKTaFqeQ/BIR4ZLc9zbAGMF/9cw0u7H/zsA76vAUNjezJKlRVzkG+YCM
7dIqujI2pQ60Sldo+8Rg+nFwGaTC9Zn5aBzwSYg4N6hfQv2ITGKQKLCAfvM0f/SQ
UdWYfc4O7gP6DnB32DXRpW76t4bUVfieslX1uMdOr+OXZ/5GFnUwAyw+Yu+mwEOP
Tr7EuSr1BZUXfvoWiMWueWWfsbPJ7O0If5goZmkI+egJ3U9ESEEvC/Y36evGULjo
/rLefkdvo4MkJjnTgrlgGwv047OdUXIEGK+ca++J0yqh71gN5bMy//HYLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMy5bJNUxkoyX6rihU72QNzx8v7QMB8GA1UdIwQY
MBaAFK+AGYTMOPCk/Fr+Gt6raAwbielbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQt
NDAyMTI2NWMzOWIwLzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZmQzN2MtY2IxMi00YTljLThmNWQtNDAyMTI2NWMzOWIw
LzEvcjRBWmhNdzQ4S1Q4V3Y0YTNxdG9EQnVKNlZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmR09pObb
TPd9MDPSNPBLtGOkIrqefCQt9aatggmRTeERWfgtl7re0z4kiQsBfNZdSXEmAtMg
CqBCTmZbTa3sGtZFnztaQBh1kTaXjziNvjkFhhu0aW9S4MCarXx6kqByPZyrdFYS
WzCgoO4qO+bSmVt5+C0hYPptAL0nTJQ5KDr6cjx4iysTWq5U+NCtPaLOvgwwzrY8
Wy8rWcjxmD4zm2kbJHb3zM/KwaCW+P/GTPEFoUJ0HIZmPm6s47oEx7O1LXnBM9lc
QIasfM0z1fdjt1SqOwZ8jKmlHT1m+FIDzAeR1jjFusw1XM0vykTN/SJMGYEhqwfP
qm2ddPkmJyEKsw==
-----END CERTIFICATE-----