Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
File:                     Mjq1upi-9dDZvQzqAxof4Td3pIY.mft (raw, json)
Hash identifier:          zSruxCproMIupD3vSWcVIsZRmLb3wMDuuTi43xAts2k=
Subject key identifier:   14:66:63:88:9F:D1:6D:53:9B:58:FB:A2:8F:EA:FB:9A:1D:75:9F:68
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Certificate issuer:       /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial:       0194BCAA3D9E5C981B4434CB2AFCC12EF411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 14:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 14:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 14:01:00 +0000
Files and hashes:         1: 1bbk3xQO4GAsakJYReXogLvLM4k.roa (hash: ma7JWfiezOV+JM83OPhYUisosrWCLMi3zSbBAzKD2O0=)
                          2: 4eUjU3FviKAA-8zjNHUXmCGN0-k.roa (hash: cYvBww/EyQVYauVbE6pk42UaaR9Wj899DGdPG2LUf3g=)
                          3: Mjq1upi-9dDZvQzqAxof4Td3pIY.crl (hash: hL6ZgHYKqjk2QdMJtxiEkOpz5eRL7kuwnAAJjmMop/o=)
                          4: P79q0XI6jMHcEUJUje7vbekXqMM.roa (hash: rfk192nc+MyT+AA9yTeZKZSIGbJXkqx89FY7vI7SgFM=)
                          5: qKUS3aWdXNKyGrEPIZqo9vOOxtM.roa (hash: aMMBOBw0agva6obgWYqVlq2psGGrS2vafTYjFkbH+48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:3d:9e:5c:98:1b:44:34:cb:2a:fc:c1:2e:f4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
        Validity
            Not Before: Jan 31 14:01:00 2025 GMT
            Not After : Feb  1 14:01:00 2025 GMT
        Subject: CN=146663889fd16d539b58fba28feafb9a1d759f68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ca:b0:6d:1e:bc:71:3d:b6:a0:40:f4:5d:70:
                    c8:be:0a:ae:52:d0:81:6f:92:77:b5:e4:5d:3c:50:
                    8b:d8:97:be:04:ae:10:4c:b1:0d:6c:b0:b2:1d:8d:
                    88:6f:ef:96:dd:fb:fe:66:da:0b:db:72:fc:90:c1:
                    84:0d:b3:0d:4c:ad:92:6b:52:c4:a7:d9:f7:9f:d1:
                    8c:70:26:7c:a6:f0:6f:f6:83:47:e7:f6:b1:b9:dd:
                    d3:bd:17:3b:4e:90:13:50:1c:58:39:53:55:e3:57:
                    9f:3c:e7:4e:b3:34:ca:d4:88:c1:5a:82:29:06:42:
                    de:1a:57:ca:78:45:44:cc:e7:a9:e9:90:6b:71:82:
                    35:06:fd:6f:a8:9e:89:ec:87:28:29:35:c8:1d:d7:
                    54:53:29:15:2e:84:77:41:06:22:25:ed:47:73:d0:
                    06:75:a8:32:db:b5:66:53:15:1c:30:50:37:c8:59:
                    8c:2b:9a:4a:e0:f8:57:29:42:4e:43:2b:38:cc:14:
                    84:b7:46:1f:60:f9:e8:d0:1a:e0:90:53:f7:61:29:
                    62:b9:bd:72:f8:e4:b0:9e:d9:48:e7:51:21:99:eb:
                    4a:f8:2f:7c:ee:fa:af:40:e5:e2:2d:e4:57:5b:5b:
                    f6:74:e7:85:b2:a4:4f:cd:b4:e9:63:78:d2:50:36:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:66:63:88:9F:D1:6D:53:9B:58:FB:A2:8F:EA:FB:9A:1D:75:9F:68
            X509v3 Authority Key Identifier:
                keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:a5:57:66:09:39:f3:1f:fc:d0:63:24:83:db:52:9f:77:
         3a:89:26:2c:0b:ba:cb:f8:92:f2:95:13:97:09:39:dc:c5:95:
         f2:93:1d:fb:a4:98:6e:ab:fb:3e:c4:43:ea:6d:15:35:19:d6:
         da:71:70:2a:10:97:5e:e7:c8:36:ba:20:ca:e4:55:fe:38:ed:
         70:3f:ab:40:5d:85:81:b9:81:e9:27:4c:c8:f4:97:43:e0:db:
         d4:a7:bf:ef:d7:df:5e:30:57:21:3f:bd:f5:f6:c2:2b:bf:09:
         c4:21:fe:fb:38:3e:1b:01:01:c7:f8:ec:f8:43:df:fe:d7:f2:
         14:20:ee:4a:94:39:fd:82:8f:3f:55:c8:f2:96:cc:d7:8f:7f:
         56:70:27:b9:9c:b1:6f:8f:25:b5:0d:d3:b8:ce:90:07:e3:ad:
         9d:08:86:87:5b:b4:59:e2:97:00:fd:74:27:9c:27:a5:3a:00:
         64:10:c5:cf:55:03:7e:50:3b:b2:8a:c3:0f:1d:0f:f9:40:dd:
         70:58:29:8f:1f:16:67:ad:6c:25:f6:e1:7e:58:d3:ef:7a:0b:
         54:75:30:93:f6:4d:5b:70:2c:69:0e:fb:1d:0d:aa:1e:dc:1d:
         05:2b:b8:ca:fd:f5:12:5c:6c:03:94:0c:c3:ed:b7:a1:b2:e5:
         9d:f0:f7:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qj2eXJgbRDTLKvzBLvQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyM2FiNWJhOThiZWY1ZDBkOWJkMGNlYTAzMWExZmUxMzc3
N2E0ODYwHhcNMjUwMTMxMTQwMTAwWhcNMjUwMjAxMTQwMTAwWjAzMTEwLwYDVQQD
EygxNDY2NjM4ODlmZDE2ZDUzOWI1OGZiYTI4ZmVhZmI5YTFkNzU5ZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsqwbR68cT22oED0XXDIvgquUtCB
b5J3teRdPFCL2Je+BK4QTLENbLCyHY2Ib++W3fv+ZtoL23L8kMGEDbMNTK2Sa1LE
p9n3n9GMcCZ8pvBv9oNH5/axud3TvRc7TpATUBxYOVNV41efPOdOszTK1IjBWoIp
BkLeGlfKeEVEzOep6ZBrcYI1Bv1vqJ6J7IcoKTXIHddUUykVLoR3QQYiJe1Hc9AG
dagy27VmUxUcMFA3yFmMK5pK4PhXKUJOQys4zBSEt0YfYPno0BrgkFP3YSliub1y
+OSwntlI51EhmetK+C987vqvQOXiLeRXW1v2dOeFsqRPzbTpY3jSUDbZSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRmY4if0W1Tm1j7oo/q+5oddZ9oMB8GA1UdIwQY
MBaAFDI6tbqYvvXQ2b0M6gMaH+E3d6SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQt
Zjk1MTI0OTllMDVjLzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQtZjk1MTI0OTllMDVj
LzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHf+lV2YJ
OfMf/NBjJIPbUp93OokmLAu6y/iS8pUTlwk53MWV8pMd+6SYbqv7PsRD6m0VNRnW
2nFwKhCXXufINrogyuRV/jjtcD+rQF2FgbmB6SdMyPSXQ+Db1Ke/79ffXjBXIT+9
9fbCK78JxCH++zg+GwEBx/js+EPf/tfyFCDuSpQ5/YKPP1XI8pbM149/VnAnuZyx
b48ltQ3TuM6QB+OtnQiGh1u0WeKXAP10J5wnpToAZBDFz1UDflA7sorDDx0P+UDd
cFgpjx8WZ61sJfbhfljT73oLVHUwk/ZNW3AsaQ77HQ2qHtwdBSu4yv31ElxsA5QM
w+23obLlnfD3+g==
-----END CERTIFICATE-----