Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
File:                     b8zf_aakxIkUtejN59pdgguclxg.mft (raw, json)
Hash identifier:          dW1Nlcq3e5lmQJq/qQ8HFCAdfQqZdKl6j81MHcVMGiM=
Subject key identifier:   95:B2:73:2B:D8:E8:BC:D6:5B:19:EA:35:CB:56:39:92:A0:63:4D:E9
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Certificate issuer:       /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial:       0195E1590178C535E6258F1F36B3D2FE96F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
Manifest number:          14D4
Signing time:             Sat 29 Mar 2025 10:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:01 +0000
Files and hashes:         1: 1-tdTzrCyZd7lEHmJJDJ8ws5WSYg.roa (hash: 4j/Yryuq0eJvbWon8IZY/muGfuoD1JF1qyyc+MjhZB8=)
                          2: GQpZM-fB0ZkxzCRMqCw0f9N7tyU.roa (hash: KTppITpJ7wsyB8SXrbAMqiKKxUwVykbBRMICRs5VO4A=)
                          3: K221sfSU8a2Lsy0QMVbBz-yAHyg.roa (hash: kybj+mQFwM3CNEIgEWcR7xMFvyhG9N8dFqe0X/0hhYM=)
                          4: L9ix8pw07x4PhUpkqGmls3mm4gM.roa (hash: O7RkSci1TH3Sjpald3VvboQYxEi06vvVnFtQcOqBkgA=)
                          5: b8zf_aakxIkUtejN59pdgguclxg.crl (hash: Z1hAScV+JR2/MHQh+E8Y14VARl5rlGo5JlnaemC3qa8=)
                          6: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (hash: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=)
                          7: j93BEME5b_K-Zki214QPN4kzqeg.roa (hash: hcvpDseLA+C6KaXIoA6Bv3d4XdBkZlvTz5OO4bMB8oo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:01:78:c5:35:e6:25:8f:1f:36:b3:d2:fe:96:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
        Validity
            Not Before: Mar 29 10:01:01 2025 GMT
            Not After : Mar 30 10:01:01 2025 GMT
        Subject: CN=95b2732bd8e8bcd65b19ea35cb563992a0634de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:42:50:bb:d1:5e:fb:76:0d:b6:61:24:16:31:
                    ae:b4:ad:a4:63:a1:8e:f9:eb:75:1d:d0:04:41:5e:
                    0a:f8:94:60:5b:06:b6:35:83:51:81:2a:f6:4e:3e:
                    78:77:bf:6a:b3:f8:31:9a:6d:83:1b:7e:02:09:eb:
                    b7:d1:6a:af:c6:f6:e4:ea:28:af:67:f9:a4:4d:8b:
                    8a:21:73:5d:3b:af:5f:da:6b:57:e7:9c:ef:ff:4c:
                    ae:fc:ee:b6:d2:3a:b5:7f:de:81:51:e3:e5:86:2a:
                    6b:ba:82:20:dd:4c:f8:d3:20:cc:75:7f:6b:a2:4f:
                    0a:26:28:de:44:71:88:58:65:37:52:26:48:ee:e4:
                    94:ee:87:06:ec:b0:23:4d:c1:66:6c:11:b8:cc:bc:
                    60:db:33:e0:ad:83:2e:48:e0:c4:83:16:d8:31:b0:
                    77:85:1e:4f:61:78:93:08:84:70:43:b5:2e:74:4f:
                    56:4d:32:8a:7a:6a:dd:8f:c6:7d:7f:f0:5c:88:fa:
                    66:0f:4c:d9:82:8e:bc:a2:24:05:21:98:1f:17:49:
                    25:b2:40:b7:ea:de:fb:90:d6:df:a8:e4:fb:a5:77:
                    43:27:d4:8c:fa:cf:59:41:80:da:78:3d:6e:47:1b:
                    2c:98:79:1b:e1:d7:47:37:ba:31:c9:f9:3c:f4:5f:
                    a6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B2:73:2B:D8:E8:BC:D6:5B:19:EA:35:CB:56:39:92:A0:63:4D:E9
            X509v3 Authority Key Identifier:
                keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:74:3c:55:e5:00:bb:c9:82:ff:f8:6b:48:60:b9:3d:b3:bf:
         3c:a9:23:8c:b6:6f:64:98:94:c1:ce:6c:34:a6:27:71:99:1c:
         86:a6:d6:36:da:bf:fa:54:49:b0:e6:a2:ff:db:86:9a:10:21:
         34:fe:80:e7:4e:a2:da:95:19:b9:ee:cc:65:5e:7c:48:ea:6a:
         fd:a3:08:44:4e:74:72:b0:cb:57:b8:64:cc:3a:96:42:dc:84:
         a0:f5:0c:e2:d0:c6:cd:70:d6:ac:c7:28:04:64:7a:ca:c9:f1:
         00:b6:ec:e1:b1:71:47:b6:10:fd:d4:4f:70:f1:b3:91:e5:f5:
         3e:03:0e:01:d8:de:c6:8a:f3:57:3d:c7:2b:19:f5:c2:09:18:
         94:7c:e9:35:5c:fd:44:6e:69:08:d4:0b:3f:0b:7e:f7:ba:98:
         4a:1c:ef:86:37:10:65:0f:bd:17:3f:99:08:24:36:f0:8c:37:
         13:80:1c:cc:69:10:1c:65:67:1c:54:95:d0:5f:eb:6f:38:a5:
         b1:aa:cd:89:08:d1:85:c3:cf:4f:1e:dc:3a:0f:f3:16:07:58:
         f0:de:8c:8e:ab:98:d2:e1:12:3f:8d:fa:87:1c:67:9d:5e:a0:
         86:52:0a:56:c8:d7:a3:2d:3e:4e:96:38:6e:29:44:09:ec:93:
         4a:bf:b6:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWQF4xTXmJY8fNrPS/pbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjUwMzI5MTAwMTAxWhcNMjUwMzMwMTAwMTAxWjAzMTEwLwYDVQQD
Eyg5NWIyNzMyYmQ4ZThiY2Q2NWIxOWVhMzVjYjU2Mzk5MmEwNjM0ZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EJQu9Fe+3YNtmEkFjGutK2kY6GO
+et1HdAEQV4K+JRgWwa2NYNRgSr2Tj54d79qs/gxmm2DG34CCeu30Wqvxvbk6iiv
Z/mkTYuKIXNdO69f2mtX55zv/0yu/O620jq1f96BUePlhipruoIg3Uz40yDMdX9r
ok8KJijeRHGIWGU3UiZI7uSU7ocG7LAjTcFmbBG4zLxg2zPgrYMuSODEgxbYMbB3
hR5PYXiTCIRwQ7UudE9WTTKKemrdj8Z9f/BciPpmD0zZgo68oiQFIZgfF0klskC3
6t77kNbfqOT7pXdDJ9SM+s9ZQYDaeD1uRxssmHkb4ddHN7oxyfk89F+msQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWycyvY6LzWWxnqNctWOZKgY03pMB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnQ8VeUA
u8mC//hrSGC5PbO/PKkjjLZvZJiUwc5sNKYncZkchqbWNtq/+lRJsOai/9uGmhAh
NP6A506i2pUZue7MZV58SOpq/aMIRE50crDLV7hkzDqWQtyEoPUM4tDGzXDWrMco
BGR6ysnxALbs4bFxR7YQ/dRPcPGzkeX1PgMOAdjexorzVz3HKxn1wgkYlHzpNVz9
RG5pCNQLPwt+97qYShzvhjcQZQ+9Fz+ZCCQ28Iw3E4AczGkQHGVnHFSV0F/rbzil
sarNiQjRhcPPTx7cOg/zFgdY8N6MjquY0uESP436hxxnnV6ghlIKVsjXoy0+TpY4
bilECeyTSr+2FQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:47 2025 by rpki-client