Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
File:                     kvSxwL-61GuBHu5Wihj7qhSp1oc.mft (raw, json)
Hash identifier:          kcDAiGQSWwq5GkI6wMees8j9jNNNzQDGclH2o8YzhVE=
Subject key identifier:   A2:CC:40:B7:60:A0:81:48:A8:63:B2:2A:04:CA:C2:E4:25:C9:00:1F
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Certificate issuer:       /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial:       0194BCE09002B59EAF5A3D03B3195AA9A2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 15:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:20 +0000
Files and hashes:         1: 0BEzsazQz-3-fzZOXUBzFR9-SEA.roa (hash: xJdvyBzFJCzDNWN1w4SpJl++kA85g2jY9KiUG4fQa2E=)
                          2: 1-Oq1-4hF4yCcXZpsJGDusj_hVz4.roa (hash: OUB6/BRumx2Zsh75d5vBwXiCTv8Msk13LqoxzZruX1k=)
                          3: 8tP5koea75iLq4fzJTwOilUzRew.roa (hash: nuWcmB+t6L5mbRuVr1gjXyaKkJjO2CWP61eKOZ9j5qA=)
                          4: Q39EicWKCAbcPFSCPOWxVuicNBs.roa (hash: xkLxxvpElKUg8h/PAkiiPnxY3jd1NXP1Ti2bF3eI0Qw=)
                          5: YTyyNdEqtE7TLFnb5kSYtSXQ6C0.roa (hash: 5KsxEGAO2miZS2qYCAKx62LCPIMduhWMuoqvvhKuiRU=)
                          6: d8pyP86Y6uwqz1d9ZUqrw3D4VrQ.roa (hash: rdq5z21gij6clSNE/4yKomwJ24Ycc5gYpA5zAtS7MBw=)
                          7: hLpPT363pnl477GGqc5nq4BfcT0.roa (hash: BX64RFEmiS7zTWdQnQw6dnEj3jYNCJBQmKLpW7F/EpQ=)
                          8: jNmr_uA5Ik1ev1kitS3H0XRfSs0.roa (hash: MWQMJNqYJOs+qGkZcyXQIyfm7wzm6V1fSmAClA7kRpk=)
                          9: kvSxwL-61GuBHu5Wihj7qhSp1oc.crl (hash: iTtJRbTknOhnrIW2E/H1Zo0PtH7h+9vTrSVeZDbyV04=)
                          10: o53Asxejm11sb8YF2NlsCql1ybY.roa (hash: F+bQ4Enys65hQ07aHbKIp+uPwSt+gBE59SdxChGuPUY=)
                          11: tCAzKxpLrkmFMZR4RRCQd9p1ADo.roa (hash: SCXqn9Sk4hWHzAcns5LvAAZM9YZ7kblGiEWX7nVj190=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:90:02:b5:9e:af:5a:3d:03:b3:19:5a:a9:a2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
        Validity
            Not Before: Jan 31 15:00:20 2025 GMT
            Not After : Feb  1 15:00:20 2025 GMT
        Subject: CN=a2cc40b760a08148a863b22a04cac2e425c9001f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:07:78:42:c1:0d:8b:4b:57:e5:d3:aa:f2:ca:
                    55:f5:63:0a:3f:77:5d:d4:46:3f:89:17:c0:80:9f:
                    dc:36:74:c1:0c:15:c9:74:b3:09:d9:12:c0:3b:50:
                    36:06:30:2a:7e:9f:21:08:c6:4c:bf:33:64:3d:f2:
                    38:6f:48:6c:12:84:d5:81:24:bf:2b:52:20:68:6a:
                    f8:f0:11:c2:e0:12:51:32:c4:01:bb:52:69:c7:95:
                    3e:c9:1f:7f:cf:15:13:fe:f4:5a:3a:73:c5:17:5b:
                    db:c8:23:c4:de:f1:db:23:18:8f:89:4f:04:4d:1c:
                    d9:90:f3:60:b0:79:da:32:3a:1f:6d:6c:4e:56:50:
                    ee:5f:c9:a6:47:ae:a2:54:98:46:7c:a0:e7:76:c1:
                    b9:5a:0a:b9:39:a3:f1:4a:9e:e2:86:f4:7c:68:e9:
                    d3:bf:9f:b0:57:5f:09:db:0f:a4:75:59:47:61:a8:
                    28:93:97:85:36:09:f4:d5:ee:ac:50:f2:82:52:09:
                    46:70:ae:8e:3a:0b:a2:e3:4d:36:34:5a:c5:90:1f:
                    16:94:42:7b:8e:61:a8:7d:61:84:10:86:ff:20:fd:
                    26:11:e1:e6:c0:77:2c:87:15:f0:7d:bb:30:82:62:
                    2c:99:1c:f6:1b:cc:10:08:c4:c3:fd:d7:c2:f4:a6:
                    f4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:CC:40:B7:60:A0:81:48:A8:63:B2:2A:04:CA:C2:E4:25:C9:00:1F
            X509v3 Authority Key Identifier:
                keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:1b:d8:7d:e1:0e:ed:ed:f3:da:b4:84:91:c8:62:5a:59:35:
         5b:e4:5c:c2:aa:53:a6:0d:ad:7e:dc:02:f1:92:c4:35:79:12:
         3c:b4:a7:c1:dd:e8:c7:86:46:22:40:48:92:4d:35:3b:4c:48:
         5b:1e:59:7b:3f:38:d8:6b:74:a2:48:af:d4:14:36:89:27:80:
         3f:d3:29:10:51:f4:1e:69:68:2e:7b:ff:83:87:90:41:79:3f:
         45:ee:9c:15:6a:f0:1b:89:28:f5:07:fa:80:cc:a4:ee:0a:35:
         66:ce:47:4f:8c:06:43:e6:3b:27:c8:a8:cc:ed:aa:c5:35:70:
         e4:14:b4:c0:e9:aa:96:d2:35:0d:24:27:f4:5c:b7:e0:06:e0:
         f7:6f:71:38:0e:50:50:22:08:93:85:93:f4:f9:a9:bc:34:3d:
         22:6c:2b:e2:af:1b:a2:df:4a:24:57:0c:82:b5:d7:3b:c7:9e:
         0f:4b:47:60:fd:7a:9f:a0:1f:c9:1d:db:1c:76:2f:17:b7:fa:
         f6:7c:23:15:15:ea:4b:0c:d8:bc:8f:a2:4a:d6:55:a5:64:45:
         1d:6a:f5:56:4a:8b:b8:a6:9b:f7:aa:26:0d:f3:9e:5f:cb:c0:
         2a:b7:64:b4:48:d8:1f:d0:85:1a:3a:22:2b:1a:0e:86:1e:e8:
         c3:a7:64:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JACtZ6vWj0DsxlaqaKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjUwMTMxMTUwMDIwWhcNMjUwMjAxMTUwMDIwWjAzMTEwLwYDVQQD
EyhhMmNjNDBiNzYwYTA4MTQ4YTg2M2IyMmEwNGNhYzJlNDI1YzkwMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ad4QsENi0tX5dOq8spV9WMKP3dd
1EY/iRfAgJ/cNnTBDBXJdLMJ2RLAO1A2BjAqfp8hCMZMvzNkPfI4b0hsEoTVgSS/
K1IgaGr48BHC4BJRMsQBu1Jpx5U+yR9/zxUT/vRaOnPFF1vbyCPE3vHbIxiPiU8E
TRzZkPNgsHnaMjofbWxOVlDuX8mmR66iVJhGfKDndsG5Wgq5OaPxSp7ihvR8aOnT
v5+wV18J2w+kdVlHYagok5eFNgn01e6sUPKCUglGcK6OOgui4002NFrFkB8WlEJ7
jmGofWGEEIb/IP0mEeHmwHcshxXwfbswgmIsmRz2G8wQCMTD/dfC9Kb03QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLMQLdgoIFIqGOyKgTKwuQlyQAfMB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxvYfeEO
7e3z2rSEkchiWlk1W+RcwqpTpg2tftwC8ZLENXkSPLSnwd3ox4ZGIkBIkk01O0xI
Wx5Zez842Gt0okiv1BQ2iSeAP9MpEFH0HmloLnv/g4eQQXk/Re6cFWrwG4ko9Qf6
gMyk7go1Zs5HT4wGQ+Y7J8iozO2qxTVw5BS0wOmqltI1DSQn9Fy34Abg929xOA5Q
UCIIk4WT9PmpvDQ9Imwr4q8bot9KJFcMgrXXO8eeD0tHYP16n6AfyR3bHHYvF7f6
9nwjFRXqSwzYvI+iStZVpWRFHWr1VkqLuKab96omDfOeX8vAKrdktEjYH9CFGjoi
KxoOhh7ow6dkgA==
-----END CERTIFICATE-----