Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.mft
File:                     op2XUfNnX1EzJzTaaOqWAmAEWxI.mft (raw, json)
Hash identifier:          m8Boi2fPapxEPdbi9M9RrnGJEcrm54hBxBSAP545MmA=
Subject key identifier:   63:E3:C2:39:DF:03:80:25:4D:F2:93:15:5E:FB:3A:87:E5:E2:0D:B5
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Certificate issuer:       /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial:       01922FEC2525653D1DC2FE7681FC12CD2BA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.mft
Manifest number:          12EE
Signing time:             Thu 26 Sep 2024 20:00:57 +0000
Manifest this update:     Thu 26 Sep 2024 20:00:57 +0000
Manifest next update:     Fri 27 Sep 2024 20:00:57 +0000
Files and hashes:         1: 1x8ItEQj2mQsB35uNuPLvwWQgaQ.roa (hash: ukm6yvjdeG8NN6QI+2eRf+awxHOJD3BXLJ0B46SkMao=)
                          2: op2XUfNnX1EzJzTaaOqWAmAEWxI.crl (hash: V2Ty2Ui+iOUH0C9ryXhwdWLj0UmXsn562VxX1UBjX54=)
                          3: qRNG7CQeHpjD8TfKqnzuHk2fscU.roa (hash: nzrRNQqrio1tkYOIZODLWIMq8ICFVhpxRc55koraZXU=)
                          4: tqzWCLxo8Ga1g23bhi5jEx1mUPQ.roa (hash: kgdYBR3R2J7BzCHmBVwhkMSu2dsdmbUjm01aISA7VR8=)
                          5: uAkyPz2FoGqErHRq64ixWZHBaHY.roa (hash: 6QlxpkgRU34Vxu/ftztgk4lwStV7vrge0BHVTzstoAg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:ec:25:25:65:3d:1d:c2:fe:76:81:fc:12:cd:2b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
        Validity
            Not Before: Sep 26 20:00:57 2024 GMT
            Not After : Sep 27 20:00:57 2024 GMT
        Subject: CN=63e3c239df0380254df293155efb3a87e5e20db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:0f:b6:45:62:52:ca:e8:68:53:e2:52:2b:
                    c6:fe:46:9d:9e:b2:10:d5:f7:a1:0c:7d:11:f4:6d:
                    0a:c4:19:26:6c:0e:7d:09:35:b6:4c:da:08:1a:e3:
                    05:65:f2:9c:ca:e8:06:bb:67:b8:10:5a:81:aa:7f:
                    ce:fe:78:fb:62:59:ba:88:0f:d5:9e:b1:8a:92:0a:
                    31:9a:44:d8:fc:de:e0:11:e9:06:b1:8b:c6:38:2d:
                    ff:c7:46:5c:24:86:52:6c:1f:f2:e4:ae:7a:80:ad:
                    34:dd:30:ed:31:b7:47:ef:30:45:de:0b:69:75:d0:
                    22:4b:20:5f:6b:ef:ea:07:e9:30:84:07:f4:51:e3:
                    1e:47:1a:e6:a7:1b:f0:72:17:c2:92:26:f7:6b:d4:
                    91:7c:9c:50:7b:e4:4b:35:ad:8d:0b:d3:40:d5:0b:
                    df:2d:e4:3b:ea:77:8c:4e:a5:df:d3:b9:e2:52:57:
                    32:89:65:94:a6:6e:14:9b:f3:83:14:a9:d1:b1:dc:
                    0a:28:22:fa:03:74:ee:92:45:8e:91:4f:bd:6f:74:
                    ed:8c:59:1f:f5:44:66:e4:c6:2f:c1:f9:5f:62:18:
                    c0:6f:98:be:28:b7:ec:51:cd:ae:72:d7:f9:b6:4c:
                    54:e0:cf:4b:d1:2c:e8:4f:24:89:2f:13:e2:18:dc:
                    bf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E3:C2:39:DF:03:80:25:4D:F2:93:15:5E:FB:3A:87:E5:E2:0D:B5
            X509v3 Authority Key Identifier:
                keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:33:89:7b:ad:2c:51:6b:1e:25:41:01:68:d6:4c:f6:bd:3c:
         85:57:f2:44:c2:f1:a4:bf:69:f9:a7:6d:39:62:49:ea:f2:98:
         4f:d4:42:7e:07:1e:ff:9d:8e:a1:e3:97:03:c7:52:01:c9:36:
         ae:c0:ea:a8:ff:46:b9:a1:67:60:33:6c:d4:6c:35:9c:ef:10:
         c7:e5:7d:c4:5e:0a:70:30:6d:de:37:4c:d9:0f:a5:23:c9:02:
         53:df:cd:be:76:18:8e:c2:5a:a4:3e:95:5a:fb:2a:d3:97:bf:
         7a:15:b6:20:1a:6d:74:09:10:d8:d4:10:12:74:83:71:0c:34:
         eb:0e:30:45:5e:58:ae:4d:eb:07:1b:d4:f3:b5:c7:cb:3c:dd:
         6d:32:52:d8:4e:50:2b:8a:6f:de:99:83:7d:83:e1:01:2a:ed:
         cb:d6:43:80:91:bd:a5:e7:65:aa:9b:ea:21:37:b2:6f:9d:18:
         f5:a8:7f:50:ed:f5:a4:a0:32:e1:84:d8:f6:a7:93:a6:ec:6d:
         7c:cc:a4:df:46:23:de:bc:14:13:0d:68:fa:94:2b:a3:a2:c3:
         4f:fd:b2:71:55:34:f3:1f:71:4e:fb:12:5d:35:ef:25:4f:0b:
         20:11:13:86:35:72:7f:c0:ff:ce:e9:8a:9d:b2:86:36:ca:2e:
         50:ef:63:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIv7CUlZT0dwv52gfwSzSujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOWQ5NzUxZjM2NzVmNTEzMzI3MzRkYTY4ZWE5NjAyNjAw
NDViMTIwHhcNMjQwOTI2MjAwMDU3WhcNMjQwOTI3MjAwMDU3WjAzMTEwLwYDVQQD
Eyg2M2UzYzIzOWRmMDM4MDI1NGRmMjkzMTU1ZWZiM2E4N2U1ZTIwZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUcPtkViUsroaFPiUivG/kadnrIQ
1fehDH0R9G0KxBkmbA59CTW2TNoIGuMFZfKcyugGu2e4EFqBqn/O/nj7Ylm6iA/V
nrGKkgoxmkTY/N7gEekGsYvGOC3/x0ZcJIZSbB/y5K56gK003TDtMbdH7zBF3gtp
ddAiSyBfa+/qB+kwhAf0UeMeRxrmpxvwchfCkib3a9SRfJxQe+RLNa2NC9NA1Qvf
LeQ76neMTqXf07niUlcyiWWUpm4Um/ODFKnRsdwKKCL6A3TukkWOkU+9b3TtjFkf
9URm5MYvwflfYhjAb5i+KLfsUc2uctf5tkxU4M9L0SzoTySJLxPiGNy/FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPjwjnfA4AlTfKTFV77Oofl4g21MB8GA1UdIwQY
MBaAFKKdl1HzZ19RMyc02mjqlgJgBFsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMt
MDc5YmEwNTcwZjc1LzEvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMtMDc5YmEwNTcwZjc1
LzEvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzOJe60s
UWseJUEBaNZM9r08hVfyRMLxpL9p+adtOWJJ6vKYT9RCfgce/52OoeOXA8dSAck2
rsDqqP9GuaFnYDNs1Gw1nO8Qx+V9xF4KcDBt3jdM2Q+lI8kCU9/NvnYYjsJapD6V
Wvsq05e/ehW2IBptdAkQ2NQQEnSDcQw06w4wRV5Yrk3rBxvU87XHyzzdbTJS2E5Q
K4pv3pmDfYPhASrty9ZDgJG9pedlqpvqITeyb50Y9ah/UO31pKAy4YTY9qeTpuxt
fMyk30Yj3rwUEw1o+pQro6LDT/2ycVU08x9xTvsSXTXvJU8LIBEThjVyf8D/zumK
nbKGNsouUO9jLA==
-----END CERTIFICATE-----