Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
File:                     IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft (raw, json)
Hash identifier:          miP6l60M0+pBygtT0Xx1E8Ke1ecNdGTEAm0tUXjowck=
Subject key identifier:   4E:1A:9F:35:35:8A:EF:D4:EC:B4:CE:E9:01:9F:4A:42:9F:87:7A:DF
Authority key identifier: 21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86
Certificate issuer:       /CN=21a00080cd2cb1bb073903b32b25ad660a366486
Certificate serial:       0195E1900F8E7C3F8E816C0246BA22E2AA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft
Manifest number:          1397
Signing time:             Sat 29 Mar 2025 11:01:09 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:09 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:09 +0000
Files and hashes:         1: 1KLC3gBk4V8UlL1q34VPnUxHzZY.roa (hash: PpTqyE9jhdplaM4jeC6bew/Mkzc7lRGupafDYfql5k0=)
                          2: IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl (hash: 8+wzzyUjhgY88kDpcsj9qTr27+CwW3lTbaWAqRpF2UM=)
                          3: QdEJ7zpCJnQlkbu72Bn_JyCb_EM.roa (hash: uicaL7GuC1Mghzq3VpHhej/MKa/9KriBzrxlFVoCpcc=)
                          4: WylnrO-wU58E26AefCAQ7nrb79w.roa (hash: y1OWdCLTeRgES3w6dtbyOUz1ZW2NZGMx2qqGlzUOOl8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:0f:8e:7c:3f:8e:81:6c:02:46:ba:22:e2:aa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a00080cd2cb1bb073903b32b25ad660a366486
        Validity
            Not Before: Mar 29 11:01:09 2025 GMT
            Not After : Mar 30 11:01:09 2025 GMT
        Subject: CN=4e1a9f35358aefd4ecb4cee9019f4a429f877adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:87:61:f8:09:17:ef:0b:71:fb:ec:83:3e:ee:
                    92:0d:d1:3d:8b:81:8e:7e:14:a9:b0:19:e1:f2:35:
                    cf:54:39:46:bf:4a:01:a3:c8:cf:5b:0d:f2:0b:14:
                    7b:07:d3:f4:57:ae:84:47:e8:5b:c5:00:d2:2d:dd:
                    6a:11:24:6e:10:34:99:9f:fc:28:bb:e9:ab:46:0a:
                    2f:ac:3c:53:2f:59:23:f3:2a:15:0e:50:c2:0a:a9:
                    fc:35:a4:4f:2f:fe:55:04:6d:49:bd:d4:ce:7f:7d:
                    46:4e:75:ff:a6:d1:79:96:5f:40:30:20:7c:2b:07:
                    27:7e:2d:12:f6:63:b4:bb:37:3a:92:62:b9:68:55:
                    a4:85:0a:fe:cf:06:b8:ad:22:34:5b:59:1f:35:4a:
                    ed:49:8b:6d:5e:8c:9a:b6:9e:90:d1:49:3b:74:ae:
                    bc:97:6d:ee:13:d5:25:4b:ed:26:fc:8f:c5:df:a5:
                    0c:13:c2:66:6f:80:c3:8d:f5:42:e9:eb:24:d6:4d:
                    6b:35:b4:9b:fe:49:1d:8e:3d:2a:88:1a:5a:a2:63:
                    00:20:18:9f:3b:cc:30:54:ea:f3:af:7d:2d:e2:19:
                    71:48:63:8f:32:e7:83:83:5f:76:07:c4:ed:72:fa:
                    09:59:66:02:18:9c:6f:b7:58:7c:64:9c:e5:53:14:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1A:9F:35:35:8A:EF:D4:EC:B4:CE:E9:01:9F:4A:42:9F:87:7A:DF
            X509v3 Authority Key Identifier:
                keyid:21:A0:00:80:CD:2C:B1:BB:07:39:03:B3:2B:25:AD:66:0A:36:64:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c3d9f-8a4f-4a6c-8579-e92ece4d3cb3/1/IaAAgM0ssbsHOQOzKyWtZgo2ZIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:93:22:b4:ab:10:3e:72:8c:82:aa:de:6e:51:a2:43:a8:31:
         6a:76:6a:33:33:58:da:7e:ed:44:64:f0:69:29:f8:71:72:62:
         e5:88:25:10:f0:d3:89:af:e3:e9:6f:c4:3e:44:e1:62:cf:41:
         c8:1c:f0:20:ed:53:b6:9e:81:e7:eb:2c:b2:84:81:bb:3b:ed:
         cd:1d:1e:6f:6b:1d:2b:57:05:83:ca:b3:34:98:1c:43:84:b7:
         a7:b0:d1:90:85:5d:bf:fd:27:78:a0:15:20:b8:0d:ba:63:02:
         c4:70:f5:af:ff:c4:1d:ef:8b:b2:bb:4a:f6:05:3d:e5:02:fe:
         53:6a:d3:9a:ae:7c:f9:dd:23:c3:23:47:20:f7:b0:39:7d:ac:
         aa:65:00:11:81:b2:7d:45:f6:4c:da:dc:65:b2:ac:28:2b:74:
         d5:c6:fc:4d:3a:df:df:fe:09:6f:31:79:07:7f:67:3e:03:ea:
         4f:5b:db:5f:e7:8b:b4:27:3c:83:09:4a:69:12:4a:dd:89:f9:
         80:66:b6:95:67:1c:01:e9:33:16:bb:29:e2:d1:28:96:25:d1:
         66:db:6f:d7:ad:1d:a3:5d:b7:24:1c:c1:7f:06:41:f2:a2:27:
         05:eb:2c:0a:4e:b2:63:c4:52:26:32:be:22:16:54:9e:e8:20:
         b6:54:4a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkA+OfD+OgWwCRroi4qphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTAwMDgwY2QyY2IxYmIwNzM5MDNiMzJiMjVhZDY2MGEz
NjY0ODYwHhcNMjUwMzI5MTEwMTA5WhcNMjUwMzMwMTEwMTA5WjAzMTEwLwYDVQQD
Eyg0ZTFhOWYzNTM1OGFlZmQ0ZWNiNGNlZTkwMTlmNGE0MjlmODc3YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYdh+AkX7wtx++yDPu6SDdE9i4GO
fhSpsBnh8jXPVDlGv0oBo8jPWw3yCxR7B9P0V66ER+hbxQDSLd1qESRuEDSZn/wo
u+mrRgovrDxTL1kj8yoVDlDCCqn8NaRPL/5VBG1JvdTOf31GTnX/ptF5ll9AMCB8
Kwcnfi0S9mO0uzc6kmK5aFWkhQr+zwa4rSI0W1kfNUrtSYttXoyatp6Q0Uk7dK68
l23uE9UlS+0m/I/F36UME8Jmb4DDjfVC6esk1k1rNbSb/kkdjj0qiBpaomMAIBif
O8wwVOrzr30t4hlxSGOPMueDg192B8TtcvoJWWYCGJxvt1h8ZJzlUxSzuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4anzU1iu/U7LTO6QGfSkKfh3rfMB8GA1UdIwQY
MBaAFCGgAIDNLLG7BzkDsyslrWYKNmSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1Nzkt
ZTkyZWNlNGQzY2IzLzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82YzNkOWYtOGE0Zi00YTZjLTg1NzktZTkyZWNlNGQzY2Iz
LzEvSWFBQWdNMHNzYnNIT1FPekt5V3RaZ28yWklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpMitKsQ
PnKMgqreblGiQ6gxanZqMzNY2n7tRGTwaSn4cXJi5YglEPDTia/j6W/EPkThYs9B
yBzwIO1Ttp6B5+sssoSBuzvtzR0eb2sdK1cFg8qzNJgcQ4S3p7DRkIVdv/0neKAV
ILgNumMCxHD1r//EHe+LsrtK9gU95QL+U2rTmq58+d0jwyNHIPewOX2sqmUAEYGy
fUX2TNrcZbKsKCt01cb8TTrf3/4JbzF5B39nPgPqT1vbX+eLtCc8gwlKaRJK3Yn5
gGa2lWccAekzFrsp4tEoliXRZttv160do123JBzBfwZB8qInBessCk6yY8RSJjK+
IhZUnuggtlRKJA==
-----END CERTIFICATE-----