Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.mft
File:                     ouSYKJJvxhx_a3fpo9j9A25GOEU.mft (raw, json)
Hash identifier:          Ikk/dT0D7k2lxbk9TLaSagdV2Y+5TWvsdEBB46aZdhA=
Subject key identifier:   CA:F3:D4:79:C4:D3:49:E4:5E:FD:F3:F0:4A:7D:15:4F:2B:A7:7D:5C
Authority key identifier: A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45
Certificate issuer:       /CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
Certificate serial:       018E1292674FD5063BFD0FB78542DDA2A786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.mft
Manifest number:          0880
Signing time:             Wed 06 Mar 2024 07:02:48 +0000
Manifest this update:     Wed 06 Mar 2024 07:02:48 +0000
Manifest next update:     Thu 07 Mar 2024 07:02:48 +0000
Files and hashes:         1: 6GBLph1Gylzo64Ed8z4s_J7hLIQ.roa (hash: UkuG9b39Ssw9YIHOuRCxtjpt3O6nOXBxq5MDBUvAW6s=)
                          2: Iz5Lr49qsQU_t8s1AkMu-txH7X8.roa (hash: LQPDm5Va91gdvlmrYmuvMyv2IeGm+FludrDQmncBbbA=)
                          3: ouSYKJJvxhx_a3fpo9j9A25GOEU.crl (hash: qUcaOmrYgqNty1SBhLHwlI/Ioj+1Ww8uLqFDr1tMxg0=)
                          4: wU68ukB-i3tvyYVDmmt5yXJBsnk.roa (hash: vivHsdY9vWfD96ZhNyGz7m4WRUHv4U+UYTG5w1xgFrg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:12:92:67:4f:d5:06:3b:fd:0f:b7:85:42:dd:a2:a7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2e49828926fc61c7f6b77e9a3d8fd036e463845
        Validity
            Not Before: Mar  6 07:02:48 2024 GMT
            Not After : Mar  7 07:02:48 2024 GMT
        Subject: CN=caf3d479c4d349e45efdf3f04a7d154f2ba77d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a4:cd:6b:80:a1:35:f8:9f:26:70:f8:14:91:
                    46:a5:06:aa:15:ec:49:72:a2:a9:b4:98:bc:25:31:
                    5d:77:97:1d:54:d8:95:01:94:10:e5:c8:6e:9b:3f:
                    5b:91:2f:60:06:d8:bb:c5:39:72:27:39:cf:67:47:
                    a8:89:0e:5b:1c:4d:62:cf:f1:46:c5:39:83:ad:5d:
                    d5:6a:c1:78:ef:7c:26:3b:d0:88:7e:45:d6:09:61:
                    03:4b:b3:ca:1b:d4:49:fd:3e:fa:48:60:c4:16:b7:
                    d2:72:a9:ad:67:46:e3:c1:09:57:0a:41:95:74:09:
                    fc:ab:cb:4e:df:86:aa:d6:a8:23:5f:28:48:ae:4e:
                    49:48:3e:dd:88:cc:03:a4:11:b1:bd:93:2a:34:77:
                    9b:74:d6:03:8b:d5:92:93:82:24:03:9f:20:61:a2:
                    24:ee:49:67:ba:c9:3f:79:61:54:eb:7b:63:12:79:
                    31:8b:2d:0b:18:aa:26:07:27:f8:5f:3c:87:39:e6:
                    9c:4f:dc:88:28:d6:c3:6e:b0:a7:98:9b:66:25:e8:
                    29:64:a0:8c:75:5f:f3:bd:91:00:4e:c5:ec:1f:a7:
                    10:16:e3:26:15:bb:ed:c0:0f:83:65:d4:3e:70:71:
                    0d:d3:0f:55:e4:30:9a:bd:c2:fb:88:31:3b:2d:aa:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F3:D4:79:C4:D3:49:E4:5E:FD:F3:F0:4A:7D:15:4F:2B:A7:7D:5C
            X509v3 Authority Key Identifier:
                keyid:A2:E4:98:28:92:6F:C6:1C:7F:6B:77:E9:A3:D8:FD:03:6E:46:38:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouSYKJJvxhx_a3fpo9j9A25GOEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cffe7b-696c-4a18-8c40-641a3499565b/1/ouSYKJJvxhx_a3fpo9j9A25GOEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c0:fe:28:c6:c9:9e:67:bc:41:e6:31:31:70:e4:a8:65:5b:
         d0:46:6a:5e:69:6a:b1:4a:76:3e:9c:44:ee:b6:8f:fd:f6:33:
         ee:33:6f:32:10:f1:fd:43:ee:9b:00:80:55:56:db:28:23:ad:
         45:be:36:43:f0:81:4e:f9:61:3b:af:6c:2c:d2:8d:c0:ae:e7:
         c0:c3:28:a6:0f:b8:f6:7c:d8:58:9f:60:46:97:5e:08:9b:b6:
         5f:63:bb:94:ac:39:11:01:d0:6c:40:57:c4:78:d4:6a:c6:5b:
         53:b2:64:21:80:37:f8:ff:1a:75:29:e5:3e:7d:df:74:59:d6:
         f7:a6:ee:01:f2:28:dd:92:e1:53:3f:85:00:aa:18:3d:cb:c7:
         13:c1:5d:83:95:32:71:2c:47:2c:83:8a:65:8f:10:87:9c:db:
         d5:34:bf:44:a6:f1:33:a6:7d:69:a5:87:d4:a7:cf:3b:6b:21:
         f3:af:d2:da:1d:56:99:9c:a7:c0:36:81:45:ce:b5:e7:8c:90:
         7e:6a:73:a5:ec:59:71:5f:94:49:c1:0d:23:1a:38:76:1d:09:
         d1:ba:44:73:3b:fc:a8:b6:6b:a6:ca:b0:9b:cd:48:31:a4:4c:
         98:24:82:67:fc:98:fe:9a:cf:fe:ae:e3:df:92:24:5c:34:fd:
         4c:a4:f2:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY4SkmdP1QY7/Q+3hULdoqeGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZTQ5ODI4OTI2ZmM2MWM3ZjZiNzdlOWEzZDhmZDAzNmU0
NjM4NDUwHhcNMjQwMzA2MDcwMjQ4WhcNMjQwMzA3MDcwMjQ4WjAzMTEwLwYDVQQD
EyhjYWYzZDQ3OWM0ZDM0OWU0NWVmZGYzZjA0YTdkMTU0ZjJiYTc3ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqTNa4ChNfifJnD4FJFGpQaqFexJ
cqKptJi8JTFdd5cdVNiVAZQQ5chumz9bkS9gBti7xTlyJznPZ0eoiQ5bHE1iz/FG
xTmDrV3VasF473wmO9CIfkXWCWEDS7PKG9RJ/T76SGDEFrfScqmtZ0bjwQlXCkGV
dAn8q8tO34aq1qgjXyhIrk5JSD7diMwDpBGxvZMqNHebdNYDi9WSk4IkA58gYaIk
7klnusk/eWFU63tjEnkxiy0LGKomByf4XzyHOeacT9yIKNbDbrCnmJtmJegpZKCM
dV/zvZEATsXsH6cQFuMmFbvtwA+DZdQ+cHEN0w9V5DCavcL7iDE7Lap/sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrz1HnE00nkXv3z8Ep9FU8rp31cMB8GA1UdIwQY
MBaAFKLkmCiSb8Ycf2t36aPY/QNuRjhFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3VTWUtKSnZ4aHhfYTNmcG85ajlBMjVHT0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jZmZlN2ItNjk2Yy00YTE4LThjNDAt
NjQxYTM0OTk1NjViLzEvb3VTWUtKSnZ4aHhfYTNmcG85ajlBMjVHT0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9jZmZlN2ItNjk2Yy00YTE4LThjNDAtNjQxYTM0OTk1NjVi
LzEvb3VTWUtKSnZ4aHhfYTNmcG85ajlBMjVHT0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsD+KMbJ
nme8QeYxMXDkqGVb0EZqXmlqsUp2PpxE7raP/fYz7jNvMhDx/UPumwCAVVbbKCOt
Rb42Q/CBTvlhO69sLNKNwK7nwMMopg+49nzYWJ9gRpdeCJu2X2O7lKw5EQHQbEBX
xHjUasZbU7JkIYA3+P8adSnlPn3fdFnW96buAfIo3ZLhUz+FAKoYPcvHE8Fdg5Uy
cSxHLIOKZY8Qh5zb1TS/RKbxM6Z9aaWH1KfPO2sh86/S2h1WmZynwDaBRc6154yQ
fmpzpexZcV+UScENIxo4dh0J0bpEczv8qLZrpsqwm81IMaRMmCSCZ/yY/prP/q7j
35IkXDT9TKTy5Q==
-----END CERTIFICATE-----