Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File:                     8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier:          sUsCZWDi3nxqnoiyI2cq1DSbX/objRApNNnEEKxfRYA=
Subject key identifier:   66:4D:E1:3D:53:3A:83:B9:60:A7:88:54:C3:5E:0E:F6:E2:00:31:A7
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer:       /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial:       0194BCAA0E6FD186011E2429CCA9AFBB1F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number:          144F
Signing time:             Fri 31 Jan 2025 14:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:48 +0000
Files and hashes:         1: 1-EakDslaNRpTq_FkHTetVS2AKls.roa (hash: pQAdijdP1MRJ6MZWkgZfC/HELIZkwCbNUBB05ErTvT8=)
                          2: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: kdaha81LAPgKtrkI3LAt2HM8JzRQE8NWK/DZXOYrp9M=)
                          3: GVBBQxMRVM5Prl-352Er5-uu-fo.roa (hash: +lFuFlkpAKOd4QXUMkWYct6IPIsJLJLhmlMRZAyakUA=)
                          4: OBolhnloBmPcHeiFFTvCer3P7KE.roa (hash: e0LNQZL39IyRivNQjrXAsaIJaGdolHnOAKHDatnT5/M=)
                          5: jrsWvtKDbim-0xwbgyCLh8-IQIg.roa (hash: 8fOtemWRA57Q/bkYzCsyF8nO3z/ZjI+VJ9Zlqt6CzZU=)
                          6: qt2B9liCpwSR_E8GfbCruMdnpBo.roa (hash: CF1z3BDp9bFyIKxpZPZ22pqi8yr0EYCmZLPU2JJFROQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0e:6f:d1:86:01:1e:24:29:cc:a9:af:bb:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
        Validity
            Not Before: Jan 31 14:00:48 2025 GMT
            Not After : Feb  1 14:00:48 2025 GMT
        Subject: CN=664de13d533a83b960a78854c35e0ef6e20031a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:da:6b:8b:b9:27:13:83:50:87:9e:94:a2:da:
                    6a:38:17:d2:46:a7:cc:a8:5f:bb:9e:87:ac:3a:32:
                    c0:99:88:85:d7:a7:ed:f9:f7:bb:2f:9a:f7:b3:91:
                    06:d0:b5:26:5d:44:c3:a5:90:fd:94:5e:33:c6:d9:
                    0c:c9:87:d8:d8:c2:f8:0b:eb:c4:7e:8d:68:f3:28:
                    b2:d2:f0:d9:d4:61:bf:f4:7b:f3:5d:90:b8:8d:e4:
                    e6:9e:71:85:f7:24:d0:e2:13:7a:0d:ff:df:e1:51:
                    79:a0:1d:7e:3f:9e:8f:0e:d4:8d:00:04:aa:af:d1:
                    80:19:da:36:ed:37:17:19:ec:36:42:49:74:64:12:
                    4b:e9:9c:8a:f8:a6:1d:a7:13:ac:c9:16:76:72:e1:
                    3b:0e:37:0c:04:a4:2c:fd:f2:bd:e9:43:a3:98:99:
                    73:9e:84:3a:57:56:39:74:ca:04:03:0e:07:de:7e:
                    ab:c6:5f:95:d0:93:05:a1:cd:b9:ec:5a:56:b6:9e:
                    08:ae:fb:a4:fc:b0:96:b1:b9:52:e7:61:11:00:b5:
                    b5:63:6c:ee:1d:e7:2d:91:65:3f:9a:d2:ae:2d:e6:
                    03:78:30:b2:71:cd:46:69:07:48:e4:85:ea:6e:14:
                    cb:1d:07:f7:d7:15:33:5d:cd:c7:c7:1d:3b:1c:46:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4D:E1:3D:53:3A:83:B9:60:A7:88:54:C3:5E:0E:F6:E2:00:31:A7
            X509v3 Authority Key Identifier:
                keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:a9:07:c7:76:bd:2c:e7:1b:3b:21:91:e1:97:23:77:50:
         9b:b2:81:34:aa:db:ff:63:21:67:0d:82:c3:5c:10:9a:7d:20:
         a4:63:e9:05:07:50:bc:95:73:2f:2e:52:e2:bb:c4:fd:46:73:
         da:9d:eb:23:5c:d9:27:b0:cf:e0:3d:1f:c4:db:a1:80:5f:b5:
         36:35:5c:1e:b6:7c:9a:75:16:b9:38:d8:13:35:ca:b0:d1:a9:
         2b:c5:97:ec:35:74:ae:cd:e9:39:28:65:ee:1c:12:b1:3b:3f:
         8f:61:81:83:ff:f5:de:64:dd:bc:cd:88:e1:a7:a6:19:b2:27:
         1e:75:f4:59:82:85:9e:41:9f:9d:49:19:cd:0b:75:a7:fa:1b:
         9b:4d:5a:28:3a:51:47:8d:44:97:85:14:00:26:03:34:7b:e0:
         c5:8a:41:a7:46:69:61:e9:fe:71:eb:ac:5d:62:56:d8:2d:a9:
         e7:a3:2e:9c:eb:31:91:71:96:b0:2e:13:06:18:51:2d:7e:92:
         32:22:a5:f0:18:78:e4:16:5f:e4:bb:09:64:6a:77:10:86:e3:
         16:fd:cc:6e:02:87:bc:50:f1:ce:01:f9:76:91:98:0b:af:a7:
         44:1e:3b:a5:1e:e1:8a:37:6f:4b:fd:87:d8:fd:5f:e7:d9:9c:
         00:34:94:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qg5v0YYBHiQpzKmvux8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDc5YjgzYzUyMGQ3ODQ0NDVjMjQ4MjhiYWI2MzNmMGQ3
MDJjZjMwHhcNMjUwMTMxMTQwMDQ4WhcNMjUwMjAxMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg2NjRkZTEzZDUzM2E4M2I5NjBhNzg4NTRjMzVlMGVmNmUyMDAzMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdpri7knE4NQh56UotpqOBfSRqfM
qF+7noesOjLAmYiF16ft+fe7L5r3s5EG0LUmXUTDpZD9lF4zxtkMyYfY2ML4C+vE
fo1o8yiy0vDZ1GG/9HvzXZC4jeTmnnGF9yTQ4hN6Df/f4VF5oB1+P56PDtSNAASq
r9GAGdo27TcXGew2Qkl0ZBJL6ZyK+KYdpxOsyRZ2cuE7DjcMBKQs/fK96UOjmJlz
noQ6V1Y5dMoEAw4H3n6rxl+V0JMFoc257FpWtp4Irvuk/LCWsblS52ERALW1Y2zu
HectkWU/mtKuLeYDeDCycc1GaQdI5IXqbhTLHQf31xUzXc3Hxx07HEadFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZN4T1TOoO5YKeIVMNeDvbiADGnMB8GA1UdIwQY
MBaAFPFHm4PFINeERFwkgourYz8NcCzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEt
YmRkNGFmNWYzNWQxLzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hOTdlMjEtYjVmZS00YTU2LWE5OGEtYmRkNGFmNWYzNWQx
LzEvOFVlYmc4VWcxNFJFWENTQ2k2dGpQdzF3TFBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhi6pB8d2
vSznGzshkeGXI3dQm7KBNKrb/2MhZw2Cw1wQmn0gpGPpBQdQvJVzLy5S4rvE/UZz
2p3rI1zZJ7DP4D0fxNuhgF+1NjVcHrZ8mnUWuTjYEzXKsNGpK8WX7DV0rs3pOShl
7hwSsTs/j2GBg//13mTdvM2I4aemGbInHnX0WYKFnkGfnUkZzQt1p/obm01aKDpR
R41El4UUACYDNHvgxYpBp0ZpYen+ceusXWJW2C2p56MunOsxkXGWsC4TBhhRLX6S
MiKl8Bh45BZf5LsJZGp3EIbjFv3MbgKHvFDxzgH5dpGYC6+nRB47pR7hijdvS/2H
2P1f59mcADSUHQ==
-----END CERTIFICATE-----