Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File:                     ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier:          JzipP9lT/XS2xCIfXNwgW4x5mILDOnD6TG0XryaEYH0=
Subject key identifier:   AF:03:50:D1:EA:94:42:0C:85:3C:89:E8:47:FD:69:9A:0E:57:01:E5
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer:       /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial:       0195DFD88663EDE4649998D2A662C509784A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 03:01:04 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:04 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:04 +0000
Files and hashes:         1: 247X9D1Esz836HPvMIfzLW0B854.roa (hash: Fkey/OHY+Y9n6nw6ttvvB2iW6TWF5VqkiLPkPWvaqPI=)
                          2: 8SNIPJlJXNItZIA2GR0OXYDa_i8.roa (hash: aeM9z7aE9fQDO6RpZPSWesAItm3ODAcugSKxcWZxiRA=)
                          3: TUyrNyg3GzeG46BhvjS1xNbOwkc.roa (hash: KZj23T82PopCcscXVu/2+qnCL784PU3BrydL/yln4Uo=)
                          4: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: gzEdoL5MC2BYR0UxEqi3VtuKiPqS0bWr6X3IVNxr8Lw=)
                          5: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:86:63:ed:e4:64:99:98:d2:a6:62:c5:09:78:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
        Validity
            Not Before: Mar 29 03:01:04 2025 GMT
            Not After : Mar 30 03:01:04 2025 GMT
        Subject: CN=af0350d1ea94420c853c89e847fd699a0e5701e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:f7:b7:39:66:3f:5a:c4:fb:a8:b9:85:01:
                    18:fa:b5:25:e1:4c:47:c0:62:e1:6d:85:92:e4:0f:
                    fb:94:cd:47:52:31:18:0e:21:75:66:9a:f3:65:fe:
                    16:22:75:cc:2f:57:7c:2b:2d:d2:54:5e:73:1c:79:
                    e2:f0:db:84:72:5f:aa:73:23:c6:71:25:a1:15:4a:
                    89:75:6b:2d:82:14:d4:c3:e6:44:bd:53:9f:6f:ba:
                    2c:0f:bb:1d:3a:2f:00:29:cb:ea:8d:8e:50:a1:ce:
                    66:51:e0:b0:09:22:6b:b3:59:55:10:a1:6d:b2:39:
                    a6:ee:8a:69:32:38:9b:36:08:e8:c9:25:2c:e4:c9:
                    9d:d5:6b:b7:0d:02:46:11:f5:72:36:b8:0d:17:bc:
                    8c:6d:42:d4:10:81:dd:47:76:7c:6b:77:54:de:72:
                    34:5e:f8:75:ec:c5:b2:1e:10:f6:d9:fa:33:4d:84:
                    59:d9:fc:d9:68:7b:e7:1d:3c:b6:ce:9e:56:0f:07:
                    b4:67:cd:b5:38:4c:d2:88:16:07:4a:b6:07:6f:ae:
                    e9:c8:47:85:80:08:8c:16:5b:9c:0f:a7:2d:f9:5a:
                    0d:51:57:d9:d6:3e:81:97:18:02:89:d5:2d:91:8e:
                    c0:ab:60:eb:24:4e:bf:e7:cb:fb:e9:cf:22:38:3a:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:50:D1:EA:94:42:0C:85:3C:89:E8:47:FD:69:9A:0E:57:01:E5
            X509v3 Authority Key Identifier:
                keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:7b:84:ed:dc:c4:dc:c9:07:c4:e4:b7:58:7f:fd:2a:14:db:
         76:c9:db:a4:3e:3c:17:29:93:00:9a:f7:0a:67:68:87:9e:14:
         2e:f8:9c:95:c5:8d:6a:5c:e6:e6:4b:bd:27:0f:5d:56:fc:45:
         1c:ed:9e:df:1a:08:c8:fa:0c:c5:86:ea:69:19:74:02:5b:34:
         50:e4:ab:db:54:a2:a6:77:9e:03:30:30:bb:cf:c1:bd:f8:a7:
         3b:d1:c6:05:2d:93:88:e0:fc:b7:48:39:bb:cb:2e:68:19:7c:
         0c:ba:bb:dc:32:11:2f:49:f0:db:93:55:db:da:8e:50:14:9d:
         e8:91:42:32:a7:7d:47:99:0c:31:cb:8d:9e:45:28:8f:82:4c:
         03:e2:7e:cc:ab:81:63:1f:cb:79:e6:7d:70:35:ab:4c:73:e6:
         22:9c:ae:d8:57:93:88:d2:25:eb:6d:e2:cb:ba:f7:72:d3:99:
         b8:6a:25:ce:fa:77:61:d2:cb:f5:6b:a1:ad:90:82:3b:5d:52:
         6e:4e:c0:55:29:2a:81:6a:a7:59:1a:f8:d6:93:ee:0e:cc:b2:
         c8:17:03:50:85:d8:24:20:13:56:1a:1b:8a:22:7b:13:70:90:
         86:24:d1:b1:36:53:1b:d7:97:de:a1:66:7a:10:49:f5:44:b6:
         f5:61:c8:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2IZj7eRkmZjSpmLFCXhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzY2ZmRmY2FhMjBlODBlOGJmYzMzMGE0ZDhiMWJlN2Rl
NmExZDAwHhcNMjUwMzI5MDMwMTA0WhcNMjUwMzMwMDMwMTA0WjAzMTEwLwYDVQQD
EyhhZjAzNTBkMWVhOTQ0MjBjODUzYzg5ZTg0N2ZkNjk5YTBlNTcwMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnb3tzlmP1rE+6i5hQEY+rUl4UxH
wGLhbYWS5A/7lM1HUjEYDiF1ZprzZf4WInXML1d8Ky3SVF5zHHni8NuEcl+qcyPG
cSWhFUqJdWstghTUw+ZEvVOfb7osD7sdOi8AKcvqjY5Qoc5mUeCwCSJrs1lVEKFt
sjmm7oppMjibNgjoySUs5Mmd1Wu3DQJGEfVyNrgNF7yMbULUEIHdR3Z8a3dU3nI0
Xvh17MWyHhD22fozTYRZ2fzZaHvnHTy2zp5WDwe0Z821OEzSiBYHSrYHb67pyEeF
gAiMFlucD6ct+VoNUVfZ1j6BlxgCidUtkY7Aq2DrJE6/58v76c8iODp+aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8DUNHqlEIMhTyJ6Ef9aZoOVwHlMB8GA1UdIwQY
MBaAFGo2b9/Kog6A6L/DMKTYsb595qHQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84YzRlYzQtZDYzNy00ZDNmLTlkZTgt
MDU1NTljMWY1OTE1LzEvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84YzRlYzQtZDYzNy00ZDNmLTlkZTgtMDU1NTljMWY1OTE1
LzEvYWpadjM4cWlEb0RvdjhNd3BOaXh2bjNtb2RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHuE7dzE
3MkHxOS3WH/9KhTbdsnbpD48FymTAJr3Cmdoh54ULviclcWNalzm5ku9Jw9dVvxF
HO2e3xoIyPoMxYbqaRl0Als0UOSr21SipneeAzAwu8/BvfinO9HGBS2TiOD8t0g5
u8suaBl8DLq73DIRL0nw25NV29qOUBSd6JFCMqd9R5kMMcuNnkUoj4JMA+J+zKuB
Yx/LeeZ9cDWrTHPmIpyu2FeTiNIl623iy7r3ctOZuGolzvp3YdLL9WuhrZCCO11S
bk7AVSkqgWqnWRr41pPuDsyyyBcDUIXYJCATVhobiiJ7E3CQhiTRsTZTG9eX3qFm
ehBJ9US29WHIow==
-----END CERTIFICATE-----