Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File:                     AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier:          CCUU6xT+kj+6pAXw/Hi/fmJgIAJ/Lpjn+xP3DOdXJbA=
Subject key identifier:   C0:78:3E:C7:42:DD:A7:CD:A2:C4:03:0A:D4:09:1A:F4:29:1F:EC:FB
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       0194BD85980CBF558EE38E5C93FECBF52C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number:          149E
Signing time:             Fri 31 Jan 2025 18:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:36 +0000
Files and hashes:         1: 1-8VgH2fi815OlatQomHxy8-dD4E.roa (hash: 8ksSnVST3ZGWixcJvhBw6VcWV4VWqoHJbJKO1llQoHQ=)
                          2: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: Jiz6f7onKVrTSOejPNxBfa0GWjQSpPrat2Cj57WBWSo=)
                          3: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
                          4: a2opnLjAdetXY_1JtX6e5k1djAk.roa (hash: JHmWYExOHBSKedqf+sSdese/XJZ0oxQzlwRK0J1GOlU=)
                          5: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:98:0c:bf:55:8e:e3:8e:5c:93:fe:cb:f5:2c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Jan 31 18:00:36 2025 GMT
            Not After : Feb  1 18:00:36 2025 GMT
        Subject: CN=c0783ec742dda7cda2c4030ad4091af4291fecfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:20:df:dd:66:f7:a7:28:ba:76:6c:d6:5d:
                    fd:72:3c:35:17:51:c1:c0:68:76:76:af:79:76:89:
                    ce:45:d7:9e:4a:4e:b6:b2:a5:3a:91:ed:ef:82:ff:
                    13:cb:37:f6:45:2d:ad:a1:28:9d:b2:7b:a5:f7:3c:
                    90:53:8f:2d:f3:69:00:02:01:ad:42:e9:47:62:a5:
                    0e:42:63:8b:d9:94:7a:49:82:44:a2:b7:01:33:4f:
                    c2:82:d4:78:4d:50:72:2a:db:c4:13:53:00:cd:d9:
                    d0:2e:1f:08:38:28:11:46:c5:7c:b4:0c:46:7c:5b:
                    f5:dc:08:84:63:29:43:30:ce:5c:57:2f:61:64:82:
                    d2:59:17:bd:e7:25:69:fc:23:c1:a8:b9:9e:d2:09:
                    d3:a4:c3:dd:48:f2:38:06:90:e1:75:7e:2b:bd:76:
                    57:d1:0e:1b:15:4e:18:69:ed:00:41:09:75:0f:7e:
                    a3:87:19:91:c4:e9:36:e7:cd:83:5c:a3:7d:91:53:
                    91:78:b9:e7:99:ef:1b:dc:48:f6:08:74:e0:f2:0c:
                    97:ef:8a:43:59:53:99:4d:a4:d6:bb:86:35:db:27:
                    e3:5e:b6:b2:6e:1b:0e:ec:e9:65:6d:47:c4:29:06:
                    7a:8d:5b:c8:da:a2:51:69:bd:00:84:92:f3:be:dd:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:78:3E:C7:42:DD:A7:CD:A2:C4:03:0A:D4:09:1A:F4:29:1F:EC:FB
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d1:5f:f7:b7:af:0a:a6:97:28:c2:1e:78:00:ee:fd:12:a9:
         b9:ff:42:67:9a:37:5e:4e:b2:fd:e8:59:c6:6b:f5:ba:d8:c1:
         70:e3:a2:11:d5:dd:3d:51:31:d1:0a:be:01:26:18:33:86:42:
         08:07:f7:57:42:3e:e2:4d:0e:3c:c5:14:7d:10:74:c2:17:ba:
         46:4d:1d:c3:f3:a9:24:77:6c:f0:ec:4a:49:bb:f1:98:ec:3c:
         0c:43:8b:4e:eb:94:af:1f:2a:54:83:cf:ab:2e:6b:9d:fa:06:
         87:1d:f9:53:53:91:8f:2c:bf:ef:d2:0f:b3:e1:e6:3c:0a:7d:
         8b:53:73:3d:31:3c:d5:93:c1:fa:ef:53:67:de:3a:84:5c:18:
         ed:ef:8b:d4:dc:b0:c3:12:ce:ca:28:4f:26:05:a5:5c:55:fe:
         59:82:f9:fd:4f:e4:37:fa:f4:f4:d2:d3:e7:2f:fa:9f:e5:9c:
         26:8c:13:89:86:72:a4:0b:10:19:8d:a5:c0:7d:bb:d8:94:64:
         ca:c4:df:8f:28:df:a1:09:66:da:07:55:24:de:82:df:6c:1a:
         fe:2c:0d:8e:54:30:4a:1f:f8:f5:8e:c9:9b:25:be:a8:c6:93:
         41:c6:ad:08:a9:77:79:39:39:e6:86:37:90:88:44:e8:a9:db:
         be:8a:3a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZgMv1WO445ck/7L9SyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjUwMTMxMTgwMDM2WhcNMjUwMjAxMTgwMDM2WjAzMTEwLwYDVQQD
EyhjMDc4M2VjNzQyZGRhN2NkYTJjNDAzMGFkNDA5MWFmNDI5MWZlY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Eg391m96counZs1l39cjw1F1HB
wGh2dq95donORdeeSk62sqU6ke3vgv8Tyzf2RS2toSidsnul9zyQU48t82kAAgGt
QulHYqUOQmOL2ZR6SYJEorcBM0/CgtR4TVByKtvEE1MAzdnQLh8IOCgRRsV8tAxG
fFv13AiEYylDMM5cVy9hZILSWRe95yVp/CPBqLme0gnTpMPdSPI4BpDhdX4rvXZX
0Q4bFU4Yae0AQQl1D36jhxmRxOk2582DXKN9kVOReLnnme8b3Ej2CHTg8gyX74pD
WVOZTaTWu4Y12yfjXraybhsO7OllbUfEKQZ6jVvI2qJRab0AhJLzvt3d5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB4PsdC3afNosQDCtQJGvQpH+z7MB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNFf97ev
CqaXKMIeeADu/RKpuf9CZ5o3Xk6y/ehZxmv1utjBcOOiEdXdPVEx0Qq+ASYYM4ZC
CAf3V0I+4k0OPMUUfRB0whe6Rk0dw/OpJHds8OxKSbvxmOw8DEOLTuuUrx8qVIPP
qy5rnfoGhx35U1ORjyy/79IPs+HmPAp9i1NzPTE81ZPB+u9TZ946hFwY7e+L1Nyw
wxLOyihPJgWlXFX+WYL5/U/kN/r09NLT5y/6n+WcJowTiYZypAsQGY2lwH272JRk
ysTfjyjfoQlm2gdVJN6C32wa/iwNjlQwSh/49Y7JmyW+qMaTQcatCKl3eTk55oY3
kIhE6Knbvoo6Uw==
-----END CERTIFICATE-----