Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
File:                     MQsFJRN4mUz6gIjSO27u1Onmqwg.mft (raw, json)
Hash identifier:          t3mxZwLoXBs3wJUQ8wcCNq+A1zHNA61k2QR3cq3X/C4=
Subject key identifier:   7D:09:6F:8B:B4:3A:3B:F6:D9:E1:D6:1A:DF:46:27:86:CF:6D:4F:EA
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Certificate issuer:       /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial:       0194BC3BC9F0359C7126F423E4ECD6F1C37C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
Manifest number:          0B6D
Signing time:             Fri 31 Jan 2025 12:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:22 +0000
Files and hashes:         1: 59d3PdJCULjs4_4j0Pq3kDdHdgk.roa (hash: WpHyMpfUDziVYZlQft4BRU7sTsf5P29/Ozm59gpC8kc=)
                          2: 6LDl214tdgRqDXeipMWDYC6MczE.roa (hash: 6iTRq4SWdTYbbcVZs0aR+/CjpsQmsoJjLSF+hCyuqqc=)
                          3: 9lN7dlDX3E71wSCMtnCUL3i762k.roa (hash: PK7Bs+uxjjNwmQbjd0qP17GmCFFEEyTI74qIrN4mbzY=)
                          4: FGOmap9I6AXdQJiM1KsqjmUGkJ0.roa (hash: PpIBU7AvrwrLC4Tf6En49ApHeIUhbBTQkm9GyHE5ksk=)
                          5: MQsFJRN4mUz6gIjSO27u1Onmqwg.crl (hash: n9RwGIMUCjrnbLjiAKvV4iNNd8jGd+t7Dv5gxP502CQ=)
                          6: V1aKAeRzKiAfxQwmZqLiwau1Afc.roa (hash: uOqJXqZXJEKHIgf9RgAP09YH0XSJp9FEPHY/lnYPqVM=)
                          7: x02wwRJLWXkhho02hs7In5F9tAw.roa (hash: tCAs80Mhnn5ZbsqK3yFV+a3nsSOqYzSlvn1Cj5qDFLA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c9:f0:35:9c:71:26:f4:23:e4:ec:d6:f1:c3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
        Validity
            Not Before: Jan 31 12:00:22 2025 GMT
            Not After : Feb  1 12:00:22 2025 GMT
        Subject: CN=7d096f8bb43a3bf6d9e1d61adf462786cf6d4fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:52:db:92:f7:8e:4a:79:85:35:e9:c5:ad:75:
                    69:c2:84:04:28:54:47:04:3a:6d:e9:31:2b:cc:93:
                    43:d8:46:b3:e8:46:3e:d5:58:d2:da:bf:1a:fe:f2:
                    18:e5:36:7f:71:30:cc:64:ce:17:75:8b:37:57:bc:
                    d6:34:0a:80:f6:5e:bf:2e:3e:26:a5:95:74:e5:0c:
                    af:82:b8:2e:62:5b:5a:92:09:a4:3f:24:99:6c:a3:
                    df:40:4c:fb:19:63:d4:99:94:0f:5d:bf:3b:a0:f7:
                    63:cc:9e:c8:5d:68:56:d0:06:4c:d0:de:f9:d6:69:
                    08:54:b9:57:6d:c5:9a:ca:16:86:02:3a:7d:5c:61:
                    da:61:1e:d2:28:1a:60:5a:6d:a0:71:6f:74:3a:80:
                    6a:fa:93:f1:36:b4:b8:e7:cc:f5:1d:56:53:66:ef:
                    3a:15:db:22:e3:45:99:7a:d3:d2:82:ec:30:a8:f9:
                    2e:1c:94:6a:8d:97:24:13:4e:72:79:9c:e2:79:fb:
                    35:04:24:a8:3d:5f:a2:eb:2c:02:a1:73:2f:66:98:
                    4a:8a:f1:a0:84:56:a0:87:fd:c2:15:94:04:04:01:
                    00:84:c9:00:bb:9c:34:29:88:85:ce:58:23:41:7e:
                    48:8f:61:57:9f:98:da:65:f4:10:8f:a1:77:b6:a8:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:09:6F:8B:B4:3A:3B:F6:D9:E1:D6:1A:DF:46:27:86:CF:6D:4F:EA
            X509v3 Authority Key Identifier:
                keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:96:d5:9a:c9:df:9c:d7:64:18:39:bb:27:ba:86:9f:cc:
         93:dc:9c:9a:06:4f:68:46:23:ce:39:56:21:28:c5:f0:45:27:
         97:fb:8f:05:a8:c0:ee:8c:2d:89:ca:64:95:2e:88:da:8c:5a:
         ae:87:63:4c:3d:ea:19:74:bf:f4:2c:12:08:f9:b2:24:fe:e4:
         b0:56:af:c6:31:69:be:16:55:85:57:7f:f6:b0:aa:37:a0:db:
         16:d5:6e:d5:25:d4:0e:51:2a:77:00:02:be:2a:d9:6b:fd:76:
         32:f0:58:3f:3b:f9:50:b2:0d:45:41:18:7b:ea:b4:c0:72:e9:
         76:de:86:3c:0e:5b:7e:fc:69:ed:53:9f:d7:12:d8:3b:68:ad:
         a5:47:b8:91:e5:d9:7e:b6:ed:58:d3:88:4c:87:c2:7d:b9:7e:
         0a:c9:17:9a:9d:f1:a6:9e:bd:60:e9:e2:44:42:d6:31:1f:51:
         ee:d8:ab:23:ea:1e:1d:a9:ee:97:d7:6e:f3:d6:01:ea:79:2e:
         f2:00:8a:35:3f:15:ea:da:18:3a:3f:df:26:fe:39:ef:e0:95:
         df:21:d5:06:01:a8:f5:f6:6c:1b:3e:42:08:fc:eb:78:e8:13:
         8d:06:6c:bb:8f:ec:bb:38:99:07:99:88:60:83:43:48:6f:bb:
         ad:87:c1:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O8nwNZxxJvQj5OzW8cN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMGIwNTI1MTM3ODk5NGNmYTgwODhkMjNiNmVlZWQ0ZTll
NmFiMDgwHhcNMjUwMTMxMTIwMDIyWhcNMjUwMjAxMTIwMDIyWjAzMTEwLwYDVQQD
Eyg3ZDA5NmY4YmI0M2EzYmY2ZDllMWQ2MWFkZjQ2Mjc4NmNmNmQ0ZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFLbkveOSnmFNenFrXVpwoQEKFRH
BDpt6TErzJND2Eaz6EY+1VjS2r8a/vIY5TZ/cTDMZM4XdYs3V7zWNAqA9l6/Lj4m
pZV05QyvgrguYltakgmkPySZbKPfQEz7GWPUmZQPXb87oPdjzJ7IXWhW0AZM0N75
1mkIVLlXbcWayhaGAjp9XGHaYR7SKBpgWm2gcW90OoBq+pPxNrS458z1HVZTZu86
Fdsi40WZetPSguwwqPkuHJRqjZckE05yeZziefs1BCSoPV+i6ywCoXMvZphKivGg
hFagh/3CFZQEBAEAhMkAu5w0KYiFzlgjQX5Ij2FXn5jaZfQQj6F3tqh7CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0Jb4u0Ojv22eHWGt9GJ4bPbU/qMB8GA1UdIwQY
MBaAFDELBSUTeJlM+oCI0jtu7tTp5qsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVFzRkpSTjRtVXo2Z0lqU08yN3UxT25tcXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NzE0ODYtYmVlMy00MjRhLWIzNDEt
N2NmZGYyZGY2NjMyLzEvTVFzRkpSTjRtVXo2Z0lqU08yN3UxT25tcXdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NzE0ODYtYmVlMy00MjRhLWIzNDEtN2NmZGYyZGY2NjMy
LzEvTVFzRkpSTjRtVXo2Z0lqU08yN3UxT25tcXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnyW1ZrJ
35zXZBg5uye6hp/Mk9ycmgZPaEYjzjlWISjF8EUnl/uPBajA7owticpklS6I2oxa
rodjTD3qGXS/9CwSCPmyJP7ksFavxjFpvhZVhVd/9rCqN6DbFtVu1SXUDlEqdwAC
virZa/12MvBYPzv5ULINRUEYe+q0wHLpdt6GPA5bfvxp7VOf1xLYO2itpUe4keXZ
frbtWNOITIfCfbl+CskXmp3xpp69YOniRELWMR9R7tirI+oeHanul9du89YB6nku
8gCKNT8V6toYOj/fJv457+CV3yHVBgGo9fZsGz5CCPzreOgTjQZsu4/suziZB5mI
YINDSG+7rYfBMg==
-----END CERTIFICATE-----