Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File:                     rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier:          5mZOt0XNnX/tfsfzZjHKD2l9ZyL/9YyQAGfn9gomVE8=
Subject key identifier:   F6:75:BF:FC:F5:50:DF:12:90:42:8C:C5:91:E9:FC:F2:A8:14:A9:9D
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer:       /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial:       0195E07D31E1997C3CB1B22762444DD4B72A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number:          03F7
Signing time:             Sat 29 Mar 2025 06:00:55 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:55 +0000
Manifest next update:     Sun 30 Mar 2025 06:00:55 +0000
Files and hashes:         1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
                          2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
                          3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: l7X9WnJPEjKJWtytCNhqvFJVlM6Ktv0F9MQL+3Rcn7Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:31:e1:99:7c:3c:b1:b2:27:62:44:4d:d4:b7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
        Validity
            Not Before: Mar 29 06:00:55 2025 GMT
            Not After : Mar 30 06:00:55 2025 GMT
        Subject: CN=f675bffcf550df1290428cc591e9fcf2a814a99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d3:b9:20:64:16:77:93:c7:5e:72:a9:ef:e9:
                    e4:50:39:93:76:91:bd:a0:a8:62:29:ae:0c:a6:54:
                    70:8b:34:fa:98:75:38:43:3f:2d:b2:19:d6:0d:86:
                    e8:54:0e:b3:53:d1:6f:f7:08:80:af:28:74:91:2b:
                    ff:ac:98:6c:6b:e5:ae:af:31:96:46:42:5b:b8:6a:
                    5a:74:33:dd:82:2c:ee:64:53:3d:71:9b:27:45:ff:
                    dc:d6:3c:c4:f8:c4:35:ea:5d:c8:f7:ec:17:b6:5e:
                    b5:90:77:c2:84:bb:7f:1d:0e:72:88:30:16:71:da:
                    54:34:11:97:53:fb:6f:e3:77:2e:19:26:19:e9:79:
                    c6:93:e5:76:27:d1:48:68:02:94:15:51:9a:68:31:
                    b0:04:69:96:18:36:ca:cd:7f:ba:c3:bb:cc:c7:3b:
                    dd:d9:bb:9a:27:fa:f3:92:5e:c6:02:ae:0e:ba:89:
                    24:1a:ad:c3:25:af:39:42:ed:59:89:c6:71:7e:0e:
                    40:4b:ce:2f:ee:13:16:0c:b6:de:93:8b:a7:0b:df:
                    c1:91:40:a9:4e:4d:a7:b3:d2:93:ed:1d:2a:3f:f5:
                    f4:c6:46:7d:77:e7:7b:31:3b:d6:c4:39:a3:7e:db:
                    0e:04:07:13:44:74:55:89:79:92:6b:62:10:cd:b3:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:75:BF:FC:F5:50:DF:12:90:42:8C:C5:91:E9:FC:F2:A8:14:A9:9D
            X509v3 Authority Key Identifier:
                keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:01:ac:f9:cb:60:b7:5d:e2:71:76:ee:d8:2b:eb:88:c7:25:
         2c:08:df:4d:63:cc:5a:e6:07:70:45:79:b9:d8:80:e0:0d:54:
         2b:5e:65:77:f0:0d:46:b2:fd:09:0b:09:7d:7e:b2:bc:d6:bc:
         59:c2:1a:ee:76:be:6e:31:90:d7:68:f0:b7:01:9d:a8:98:95:
         91:81:3b:4a:e7:cb:10:02:70:46:ae:13:43:fe:1d:50:bd:a7:
         a2:9b:7f:fe:68:d0:e1:9d:a6:8b:35:01:10:a9:16:0a:39:71:
         94:32:e6:b6:c5:fa:bc:37:78:94:0b:40:9d:d0:5f:b1:b6:42:
         87:ce:61:a6:4a:6e:a7:f8:b7:02:ee:2f:c5:e3:99:22:b5:e7:
         70:f0:e1:3d:76:df:f1:d5:1e:bc:51:3d:c9:90:ad:c1:4a:25:
         d4:36:bf:56:1f:c3:b8:72:32:08:67:ca:83:7e:79:fa:10:8f:
         cc:9e:7a:41:78:5f:b2:39:26:fb:0a:56:fe:10:9e:3e:bd:d8:
         50:51:7b:cc:b7:31:24:2c:8e:4c:70:ce:9a:54:51:7e:6f:b9:
         43:ca:0f:97:35:34:84:5a:4c:a0:59:e6:dc:93:85:27:a0:d1:
         ff:7e:57:04:87:ae:fd:82:b4:9e:bf:8f:82:1f:61:b2:0e:9c:
         de:8e:fd:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfTHhmXw8sbInYkRN1LcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz
MGYyNWEwHhcNMjUwMzI5MDYwMDU1WhcNMjUwMzMwMDYwMDU1WjAzMTEwLwYDVQQD
EyhmNjc1YmZmY2Y1NTBkZjEyOTA0MjhjYzU5MWU5ZmNmMmE4MTRhOTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tO5IGQWd5PHXnKp7+nkUDmTdpG9
oKhiKa4MplRwizT6mHU4Qz8tshnWDYboVA6zU9Fv9wiAryh0kSv/rJhsa+WurzGW
RkJbuGpadDPdgizuZFM9cZsnRf/c1jzE+MQ16l3I9+wXtl61kHfChLt/HQ5yiDAW
cdpUNBGXU/tv43cuGSYZ6XnGk+V2J9FIaAKUFVGaaDGwBGmWGDbKzX+6w7vMxzvd
2buaJ/rzkl7GAq4OuokkGq3DJa85Qu1ZicZxfg5AS84v7hMWDLbek4unC9/BkUCp
Tk2ns9KT7R0qP/X0xkZ9d+d7MTvWxDmjftsOBAcTRHRViXmSa2IQzbOHjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ1v/z1UN8SkEKMxZHp/PKoFKmdMB8GA1UdIwQY
MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt
NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm
LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwGs+ctg
t13icXbu2CvriMclLAjfTWPMWuYHcEV5udiA4A1UK15ld/ANRrL9CQsJfX6yvNa8
WcIa7na+bjGQ12jwtwGdqJiVkYE7SufLEAJwRq4TQ/4dUL2nopt//mjQ4Z2mizUB
EKkWCjlxlDLmtsX6vDd4lAtAndBfsbZCh85hpkpup/i3Au4vxeOZIrXncPDhPXbf
8dUevFE9yZCtwUol1Da/Vh/DuHIyCGfKg355+hCPzJ56QXhfsjkm+wpW/hCePr3Y
UFF7zLcxJCyOTHDOmlRRfm+5Q8oPlzU0hFpMoFnm3JOFJ6DR/35XBIeu/YK0nr+P
gh9hsg6c3o79vQ==
-----END CERTIFICATE-----