Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
File:                     orEujfOr1VWfnPloCvZd0WWJ3oY.mft (raw, json)
Hash identifier:          umWvn8wmGT9Sn8xu+zUbRTXZYB5q0z6dUMvpRL1hSpI=
Subject key identifier:   56:D3:5E:B0:BA:06:32:16:E4:DB:30:EC:B1:A7:82:DC:3E:5E:9B:E6
Authority key identifier: A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86
Certificate issuer:       /CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
Certificate serial:       0194BC3C4F8C35609985730730B0F6CFF215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 12:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:56 +0000
Files and hashes:         1: 7Msd020-lTb3NDPu0wOtsvEU5Dk.roa (hash: dfVqgLyKdA37ClDslcVfTHo3hZAFTQ8SdbwI91UsZXc=)
                          2: OcAvtCfGeHAKogvTrE4zVIYXhXs.roa (hash: ytTb8Vp57MsWC+qg8DRVK13nEW8nfvpJJgza5MGPgYA=)
                          3: UTD25HSfDCitfEF77H0gTbBbKYg.roa (hash: JlSU0P58p4ohrtWd9vf+kXPT1uTSHo3mBZt0nA+3jpA=)
                          4: aEWr6-EqtkKVBn1aiC7rHdjKt8Y.roa (hash: crXyg1I0M6v1iZUeG0Vpk1mS5J8AlR2ziEDMO6PLwNs=)
                          5: hnuqfuqQFfls7WsQI7eQEfSUik0.roa (hash: 4glBckXjWMe5XR/kJnErYQjsYivbggBDZAVbZrhZteQ=)
                          6: i7sGnx93z5ToyiS1WZHxfFDOt2Y.roa (hash: zbLGd9ly7dB9bjJgAy7rLwK61cdvZID5dUKiv5voqUg=)
                          7: orEujfOr1VWfnPloCvZd0WWJ3oY.crl (hash: NmIjhTITVMIxZT2ILbVViNj4CWue3B9sv3PYKOSOfRM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:4f:8c:35:60:99:85:73:07:30:b0:f6:cf:f2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b12e8df3abd5559f9cf9680af65dd16589de86
        Validity
            Not Before: Jan 31 12:00:56 2025 GMT
            Not After : Feb  1 12:00:56 2025 GMT
        Subject: CN=56d35eb0ba063216e4db30ecb1a782dc3e5e9be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:65:61:2f:8a:5f:a9:2b:97:40:64:ad:a6:
                    82:55:12:4f:e8:6c:d2:a5:62:51:f7:ab:2c:de:3a:
                    8d:68:8a:ca:77:c0:54:ef:94:77:26:54:37:da:81:
                    08:42:9c:56:27:59:dc:a9:52:59:9c:95:14:73:92:
                    a5:eb:93:97:bd:17:05:2c:e8:69:98:cd:38:38:50:
                    b6:21:78:dd:e4:cb:cf:79:35:9a:e6:f0:4a:4e:f1:
                    69:8a:ba:6a:bf:f0:ac:ab:7b:fa:4d:5d:1f:b1:fb:
                    f3:9f:17:62:70:24:4b:b8:bf:b0:41:fb:cc:fe:a9:
                    db:ef:2f:db:9c:0e:b3:31:6a:43:35:4a:83:d9:d5:
                    b7:48:b5:3b:32:f8:e7:55:52:35:ba:f9:e5:1a:f3:
                    d1:a9:4b:e1:5c:a2:6a:c5:d0:b9:02:17:64:bc:3e:
                    d1:8e:3c:1a:86:af:ed:39:59:99:af:78:1f:62:47:
                    5a:cf:e1:fd:cc:d7:6d:05:05:74:74:72:d5:6e:ff:
                    52:68:0f:73:14:e3:b2:94:5f:aa:c7:2f:f5:21:98:
                    cc:e9:a0:72:ab:15:30:1b:df:6b:b2:a6:22:56:0e:
                    9b:58:3c:16:d6:ca:7d:0f:e5:d3:a3:d5:0b:d1:59:
                    98:34:66:1e:35:4c:7c:74:34:ca:4f:09:6f:3a:12:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D3:5E:B0:BA:06:32:16:E4:DB:30:EC:B1:A7:82:DC:3E:5E:9B:E6
            X509v3 Authority Key Identifier:
                keyid:A2:B1:2E:8D:F3:AB:D5:55:9F:9C:F9:68:0A:F6:5D:D1:65:89:DE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orEujfOr1VWfnPloCvZd0WWJ3oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ec44ea-ef43-4b3a-a69a-b4cb637da8c3/1/orEujfOr1VWfnPloCvZd0WWJ3oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a4:05:56:43:a2:e9:20:3b:fb:ef:1d:f0:ff:11:14:34:17:
         b6:2f:bd:10:16:d2:19:7d:e0:2e:3f:d5:8a:00:9a:81:b4:d9:
         e2:22:a3:df:dd:d7:e3:0c:23:24:82:4b:10:3c:ea:d7:c9:55:
         82:6e:5c:6e:44:9a:b7:9f:17:d2:2a:1a:6c:64:13:06:61:d0:
         77:32:a4:cc:32:b9:66:89:2a:48:cb:37:5c:f9:0c:67:1d:25:
         6d:0f:48:b5:bc:88:ab:d0:d6:2a:e3:f7:54:bf:59:77:65:55:
         19:d6:e9:66:13:11:2e:29:82:6f:d0:e5:c1:9c:26:a9:d8:f6:
         37:62:61:15:28:54:42:4b:af:79:66:eb:e0:b6:14:41:68:dc:
         a0:6c:8c:cf:d2:42:f7:20:81:3a:df:be:ea:73:b6:6e:5c:40:
         e2:7a:70:71:5e:0a:ad:49:4f:62:43:b4:4d:af:fd:2f:cb:d7:
         c4:6c:9b:8c:4c:76:9f:6c:25:bd:51:ce:7c:5f:4b:82:60:d8:
         4b:1e:10:9b:6a:f5:34:59:7b:56:84:df:4c:88:38:df:f7:53:
         ae:a5:7a:f5:3b:77:b7:31:fd:7b:48:37:23:ce:bd:6a:2f:b5:
         62:dd:39:d6:49:e0:49:00:41:aa:23:c9:26:2f:4a:72:a5:ee:
         25:fe:a3:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PE+MNWCZhXMHMLD2z/IVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYjEyZThkZjNhYmQ1NTU5ZjljZjk2ODBhZjY1ZGQxNjU4
OWRlODYwHhcNMjUwMTMxMTIwMDU2WhcNMjUwMjAxMTIwMDU2WjAzMTEwLwYDVQQD
Eyg1NmQzNWViMGJhMDYzMjE2ZTRkYjMwZWNiMWE3ODJkYzNlNWU5YmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cZlYS+KX6krl0BkraaCVRJP6GzS
pWJR96ss3jqNaIrKd8BU75R3JlQ32oEIQpxWJ1ncqVJZnJUUc5Kl65OXvRcFLOhp
mM04OFC2IXjd5MvPeTWa5vBKTvFpirpqv/Csq3v6TV0fsfvznxdicCRLuL+wQfvM
/qnb7y/bnA6zMWpDNUqD2dW3SLU7MvjnVVI1uvnlGvPRqUvhXKJqxdC5AhdkvD7R
jjwahq/tOVmZr3gfYkdaz+H9zNdtBQV0dHLVbv9SaA9zFOOylF+qxy/1IZjM6aBy
qxUwG99rsqYiVg6bWDwW1sp9D+XTo9UL0VmYNGYeNUx8dDTKTwlvOhJSXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbTXrC6BjIW5Nsw7LGngtw+XpvmMB8GA1UdIwQY
MBaAFKKxLo3zq9VVn5z5aAr2XdFlid6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEt
YjRjYjYzN2RhOGMzLzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lYzQ0ZWEtZWY0My00YjNhLWE2OWEtYjRjYjYzN2RhOGMz
LzEvb3JFdWpmT3IxVldmblBsb0N2WmQwV1dKM29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqQFVkOi
6SA7++8d8P8RFDQXti+9EBbSGX3gLj/VigCagbTZ4iKj393X4wwjJIJLEDzq18lV
gm5cbkSat58X0ioabGQTBmHQdzKkzDK5ZokqSMs3XPkMZx0lbQ9ItbyIq9DWKuP3
VL9Zd2VVGdbpZhMRLimCb9DlwZwmqdj2N2JhFShUQkuveWbr4LYUQWjcoGyMz9JC
9yCBOt++6nO2blxA4npwcV4KrUlPYkO0Ta/9L8vXxGybjEx2n2wlvVHOfF9LgmDY
Sx4Qm2r1NFl7VoTfTIg43/dTrqV69Tt3tzH9e0g3I869ai+1Yt051kngSQBBqiPJ
Ji9KcqXuJf6jLQ==
-----END CERTIFICATE-----