Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
File:                     ORoOzCub6rqet21VGf54e0Az_BI.mft (raw, json)
Hash identifier:          w79M1p2RM6Nmk2jdichZQzHXFGj6tCzGHtNd9oJhLjk=
Subject key identifier:   DF:5A:81:2F:32:DD:64:0A:56:FE:31:21:E1:E6:5C:9C:91:F5:AA:1A
Authority key identifier: 39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12
Certificate issuer:       /CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
Certificate serial:       0195E046E10A5B9A79DE3F397BCCDC450BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft
Manifest number:          1463
Signing time:             Sat 29 Mar 2025 05:01:36 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:36 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:36 +0000
Files and hashes:         1: 3Kw90ItO7TUOrV2eE5yvx9jqpuc.roa (hash: fbxMMDDeQ+we4nZz/v5oIPx4/3sbHXCdx1jupmXCzFU=)
                          2: 3bXgf6qiHkZ7wpe3NbEbqd19UII.roa (hash: GFgPfBtoaTen3iMblZ9KSc5rE6intd3/umoBeZq+ejs=)
                          3: MIKj6NwkBoijX5RCu9BLUoczIOA.roa (hash: TpSQaRTCbf9UYf4e5y2oNI5uWSWIkWo+nLWFnRcfelo=)
                          4: ORoOzCub6rqet21VGf54e0Az_BI.crl (hash: 7O7Nijwn3rZ8A97fP2bga30475k+yvxImxYdsTarQjo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:e1:0a:5b:9a:79:de:3f:39:7b:cc:dc:45:0b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a0ecc2b9beaba9eb76d5519fe787b4033fc12
        Validity
            Not Before: Mar 29 05:01:36 2025 GMT
            Not After : Mar 30 05:01:36 2025 GMT
        Subject: CN=df5a812f32dd640a56fe3121e1e65c9c91f5aa1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:9b:0d:91:f8:3c:12:74:cc:92:5c:a8:ca:
                    81:d5:05:85:8a:42:d3:f5:53:70:40:1e:28:f3:50:
                    83:4a:d7:b7:a9:37:7c:e2:8d:61:ae:be:0c:7a:1a:
                    da:f7:c2:0d:e0:da:b9:99:5a:59:32:77:37:84:6a:
                    37:95:86:f2:da:1b:03:76:f5:e9:2d:4e:57:09:52:
                    e2:2d:08:5d:33:af:89:81:b8:97:37:5c:1c:8e:31:
                    e9:ce:2b:36:c1:03:1d:ca:d1:7e:a6:56:dd:a7:f0:
                    52:ac:b2:49:05:81:5d:25:8c:62:12:6d:48:a2:49:
                    9c:de:7d:a3:52:c5:9c:3a:90:49:65:3b:9c:70:69:
                    41:a5:c8:ef:47:8c:a9:7b:ee:21:17:f0:f9:c0:f2:
                    4b:40:60:d2:3d:cd:57:20:ca:19:a3:d3:5c:0c:8d:
                    89:50:10:e0:8e:d2:ca:14:33:f7:b5:1d:e6:05:a8:
                    ae:7f:5f:e2:0a:d7:3e:25:0b:94:7d:49:0d:37:da:
                    de:ae:76:7f:43:59:3d:b8:54:bc:9b:44:1f:fd:42:
                    7a:85:b0:50:67:99:4e:46:31:e9:21:1e:f6:a3:6f:
                    3b:71:71:e1:44:d3:27:5d:27:f1:7a:e7:b4:cf:62:
                    b3:f1:b6:42:87:c8:1e:05:3d:42:fb:72:ab:92:c9:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5A:81:2F:32:DD:64:0A:56:FE:31:21:E1:E6:5C:9C:91:F5:AA:1A
            X509v3 Authority Key Identifier:
                keyid:39:1A:0E:CC:2B:9B:EA:BA:9E:B7:6D:55:19:FE:78:7B:40:33:FC:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORoOzCub6rqet21VGf54e0Az_BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c27cd1-570b-47d1-b256-1814223d92ce/1/ORoOzCub6rqet21VGf54e0Az_BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:8a:2d:42:54:b6:b8:de:67:62:95:82:73:50:11:e2:1d:ea:
         b1:93:d8:15:99:9c:2f:73:9d:c5:36:7c:f7:0d:30:87:17:3a:
         59:bf:eb:77:92:50:09:80:d9:0d:b1:eb:44:b3:ab:0d:d9:bb:
         32:bb:6c:61:a7:8e:0b:24:80:24:bf:50:7e:03:c1:60:23:dc:
         a2:35:d1:79:59:9c:22:7f:f8:68:b8:e1:b7:41:f6:81:45:ad:
         b6:c8:41:31:3b:2d:b3:14:61:2a:04:f0:c4:69:2c:45:35:c3:
         ca:89:22:7f:3b:56:4b:51:a8:e0:e7:07:a5:39:c5:95:a6:43:
         64:50:30:e1:45:6d:76:b6:4f:3f:1d:e0:aa:ec:b0:91:da:bf:
         e5:77:e2:61:6c:c2:82:c6:46:0b:ac:ac:9f:3e:e3:b0:5c:bf:
         ed:34:c9:c6:7e:54:c8:68:6f:ba:6e:a5:aa:a9:c2:59:b2:70:
         27:b1:48:8c:20:87:00:be:b1:96:3c:26:e8:c5:0b:a8:25:fb:
         9c:45:ff:59:11:0f:d9:9f:8b:50:30:7b:ac:d2:73:76:4c:5f:
         a6:50:87:ba:ec:ae:0b:20:07:78:f9:b2:94:3b:4e:91:ee:d9:
         9c:90:88:84:3f:76:e5:f7:72:bd:93:f0:d5:8d:6a:63:85:b6:
         d1:76:1d:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRuEKW5p53j85e8zcRQvmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MWEwZWNjMmI5YmVhYmE5ZWI3NmQ1NTE5ZmU3ODdiNDAz
M2ZjMTIwHhcNMjUwMzI5MDUwMTM2WhcNMjUwMzMwMDUwMTM2WjAzMTEwLwYDVQQD
EyhkZjVhODEyZjMyZGQ2NDBhNTZmZTMxMjFlMWU2NWM5YzkxZjVhYTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDibDZH4PBJ0zJJcqMqB1QWFikLT
9VNwQB4o81CDSte3qTd84o1hrr4Mehra98IN4Nq5mVpZMnc3hGo3lYby2hsDdvXp
LU5XCVLiLQhdM6+JgbiXN1wcjjHpzis2wQMdytF+plbdp/BSrLJJBYFdJYxiEm1I
okmc3n2jUsWcOpBJZTuccGlBpcjvR4ype+4hF/D5wPJLQGDSPc1XIMoZo9NcDI2J
UBDgjtLKFDP3tR3mBaiuf1/iCtc+JQuUfUkNN9rernZ/Q1k9uFS8m0Qf/UJ6hbBQ
Z5lORjHpIR72o287cXHhRNMnXSfxeue0z2Kz8bZCh8geBT1C+3Krksk/nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9agS8y3WQKVv4xIeHmXJyR9aoaMB8GA1UdIwQY
MBaAFDkaDswrm+q6nrdtVRn+eHtAM/wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYt
MTgxNDIyM2Q5MmNlLzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jMjdjZDEtNTcwYi00N2QxLWIyNTYtMTgxNDIyM2Q5MmNl
LzEvT1JvT3pDdWI2cnFldDIxVkdmNTRlMEF6X0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4otQlS2
uN5nYpWCc1AR4h3qsZPYFZmcL3OdxTZ89w0whxc6Wb/rd5JQCYDZDbHrRLOrDdm7
MrtsYaeOCySAJL9QfgPBYCPcojXReVmcIn/4aLjht0H2gUWttshBMTstsxRhKgTw
xGksRTXDyokifztWS1Go4OcHpTnFlaZDZFAw4UVtdrZPPx3gquywkdq/5XfiYWzC
gsZGC6ysnz7jsFy/7TTJxn5UyGhvum6lqqnCWbJwJ7FIjCCHAL6xljwm6MULqCX7
nEX/WREP2Z+LUDB7rNJzdkxfplCHuuyuCyAHePmylDtOke7ZnJCIhD925fdyvZPw
1Y1qY4W20XYdbw==
-----END CERTIFICATE-----