Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
File:                     EFQ6UZfrJUREfp02s-vxRFLHd-s.mft (raw, json)
Hash identifier:          LVG1exSzFtpDKCSEJw/oMOHd+ScZR/dkYeHhHC34tJo=
Subject key identifier:   1A:F6:A0:DF:50:9C:64:EB:CE:09:DF:DC:E9:4F:E9:98:C5:FA:F8:33
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Certificate issuer:       /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial:       0194BC04F3B5C2909E861953174C4815BAD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 11:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:28 +0000
Files and hashes:         1: EFQ6UZfrJUREfp02s-vxRFLHd-s.crl (hash: 0qTZHPvccKGUBuEjcEeZSgWM+wlcI2AfHFMc/eR1GPs=)
                          2: O7lEAqmJ6RVW6ZUznCOtA8Wqr_U.roa (hash: 1bSxYn5Oc7EjOQaFfznp7ul3zLl0SKUWaiYKT6AxWVI=)
                          3: USGB4EfibArvmHzd6YayMlE_4Ts.roa (hash: QP2OBD46ZcKAmd7iDiZKVRRwOA0LwH3cIZJcmun1SiE=)
                          4: WfSIoxcGiNbq5oGvcE0eiwRzwaI.roa (hash: 4+ITlETEk/svEAAS/Kisuuoh14YPCP7V8PSGJ6x5Okw=)
                          5: lnnez22JWNJd2WeZ5gJhM-lXVrk.roa (hash: /nXGCYPW3MVBYSZbtf5SJkkLnnjwK5da+GKvEPkj/WA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f3:b5:c2:90:9e:86:19:53:17:4c:48:15:ba:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
        Validity
            Not Before: Jan 31 11:00:28 2025 GMT
            Not After : Feb  1 11:00:28 2025 GMT
        Subject: CN=1af6a0df509c64ebce09dfdce94fe998c5faf833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:87:3c:f2:98:6c:81:21:d0:61:b5:ce:7d:e5:
                    ff:60:0f:c0:3f:f7:ba:db:98:81:77:c4:79:9e:26:
                    6c:e7:e3:e1:d2:c4:83:93:54:3a:84:d5:f4:43:58:
                    59:e6:a7:cd:3d:26:e5:5e:f4:25:e9:04:45:51:34:
                    52:90:99:d2:71:60:b2:fc:1d:4b:01:69:cf:08:f8:
                    a1:2a:25:07:dd:72:08:de:f3:6b:14:67:28:c4:c6:
                    cb:80:e5:9d:c7:a4:8b:fa:ab:ec:33:e3:9c:94:30:
                    10:a1:c4:40:cd:e1:c4:aa:50:45:2a:9b:4b:fc:74:
                    c6:4e:51:7b:b3:fb:3d:bb:56:bf:80:1a:0f:61:9f:
                    68:33:b9:c0:dc:6c:a6:45:be:07:3c:95:f9:ed:8d:
                    4b:d8:61:58:fa:ed:ca:b7:18:25:96:c8:46:81:4a:
                    00:4a:f4:d2:57:1c:1c:c5:38:55:ef:cf:84:b4:38:
                    c2:ed:e0:3d:f2:c5:2c:cf:e3:de:0c:1b:1b:60:a4:
                    e2:a3:e7:0b:aa:32:99:cf:c1:19:0f:ef:e4:82:4e:
                    b0:56:0e:25:54:fd:20:e8:ed:e0:3c:97:28:43:4c:
                    d9:c7:27:5a:94:77:ff:7b:0d:9c:ca:48:cc:9d:b8:
                    1c:37:b1:3e:d6:e6:10:e9:a4:aa:d3:b7:89:2f:e2:
                    2c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F6:A0:DF:50:9C:64:EB:CE:09:DF:DC:E9:4F:E9:98:C5:FA:F8:33
            X509v3 Authority Key Identifier:
                keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6b:a7:2e:34:92:34:ee:da:8b:2b:c6:5f:0e:db:62:56:67:
         5e:6e:67:64:57:ae:f3:ec:01:ee:bd:00:10:25:66:1a:3c:16:
         4b:e4:80:39:41:f8:e0:73:31:ae:a2:4a:71:34:9c:01:3c:55:
         a1:08:f5:7d:82:4c:38:bd:7e:10:41:e5:c6:88:8f:3a:7c:7f:
         68:d0:0f:49:7d:04:45:ce:21:1f:ed:cb:b8:9f:ff:7a:df:7b:
         84:ab:34:e2:77:fd:46:4a:22:01:da:8b:cd:4b:1f:9b:fa:33:
         32:8d:2c:52:51:b5:bd:74:94:cc:7b:8c:c8:90:53:07:59:9b:
         e3:75:c0:e3:af:bc:5c:65:f7:88:c9:54:d6:96:92:19:dc:57:
         f7:74:82:b6:9c:73:0e:5e:3c:a8:ad:b1:6f:10:e9:e0:c2:58:
         53:18:d7:10:03:e3:fe:27:5d:52:23:e5:b7:3f:1c:1b:7f:45:
         8a:18:56:1f:35:bb:a1:b5:f1:61:6f:d5:17:60:18:0c:ea:60:
         9f:f2:bf:18:b4:0a:62:9a:d5:80:5c:0e:4c:96:77:53:1e:56:
         43:a6:8e:fa:2e:ca:e7:95:0b:98:48:0d:89:bd:81:1f:00:a1:
         ed:9a:29:98:01:ed:de:bd:ee:15:e6:7b:df:09:65:67:11:dd:
         91:e6:92:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPO1wpCehhlTF0xIFbrQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTQzYTUxOTdlYjI1NDQ0NDdlOWQzNmIzZWJmMTQ0NTJj
Nzc3ZWIwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EygxYWY2YTBkZjUwOWM2NGViY2UwOWRmZGNlOTRmZTk5OGM1ZmFmODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoc88phsgSHQYbXOfeX/YA/AP/e6
25iBd8R5niZs5+Ph0sSDk1Q6hNX0Q1hZ5qfNPSblXvQl6QRFUTRSkJnScWCy/B1L
AWnPCPihKiUH3XII3vNrFGcoxMbLgOWdx6SL+qvsM+OclDAQocRAzeHEqlBFKptL
/HTGTlF7s/s9u1a/gBoPYZ9oM7nA3GymRb4HPJX57Y1L2GFY+u3KtxgllshGgUoA
SvTSVxwcxThV78+EtDjC7eA98sUsz+PeDBsbYKTio+cLqjKZz8EZD+/kgk6wVg4l
VP0g6O3gPJcoQ0zZxydalHf/ew2cykjMnbgcN7E+1uYQ6aSq07eJL+IswwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBr2oN9QnGTrzgnf3OlP6ZjF+vgzMB8GA1UdIwQY
MBaAFBBUOlGX6yVERH6dNrPr8URSx3frMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmIt
ZjdlMGM1ZTI3MDJlLzEvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8xYmU3YmMtYjY0Mi00YTBkLThlNmItZjdlMGM1ZTI3MDJl
LzEvRUZRNlVaZnJKVVJFZnAwMnMtdnhSRkxIZC1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2unLjSS
NO7aiyvGXw7bYlZnXm5nZFeu8+wB7r0AECVmGjwWS+SAOUH44HMxrqJKcTScATxV
oQj1fYJMOL1+EEHlxoiPOnx/aNAPSX0ERc4hH+3LuJ//et97hKs04nf9RkoiAdqL
zUsfm/ozMo0sUlG1vXSUzHuMyJBTB1mb43XA46+8XGX3iMlU1paSGdxX93SCtpxz
Dl48qK2xbxDp4MJYUxjXEAPj/iddUiPltz8cG39FihhWHzW7obXxYW/VF2AYDOpg
n/K/GLQKYprVgFwOTJZ3Ux5WQ6aO+i7K55ULmEgNib2BHwCh7ZopmAHt3r3uFeZ7
3wllZxHdkeaS4g==
-----END CERTIFICATE-----