Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File:                     izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier:          7+cLGvo7O+w9f1wAjqROKQWzXIaqDUbsoyymCcB9weQ=
Subject key identifier:   EE:A7:C4:1F:EC:B7:DC:FD:F7:A3:82:6C:8D:C9:DE:3F:41:19:18:21
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       0194BCA9B7537E3D5624AFA89E7C7E51B6F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number:          B7
Signing time:             Fri 31 Jan 2025 14:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:26 +0000
Files and hashes:         1: 2UfPzCUEFBT4GTTBD8DpSG8Widw.roa (hash: md40kJMzLhzKxWLu+ssLx8oIw+JPIJwmEoXWCMIsj80=)
                          2: 3NYFMMsqNfNq6B1YUyXTcG2g66g.roa (hash: E3MjQNHZqY+9m8jL9NYCUSvIeGS3dC0fMAaBITiQsCc=)
                          3: 65cSXHWpDSoAs2eJo9JLwSMC-hs.roa (hash: gfJRAfiAuRFb+mEdtXP6jttw5570xjHLebwDmVfPlUM=)
                          4: 7kKSaAtQXvDLxwmG8fXQOn55Hqc.roa (hash: n35NkTrat87tb6sIPNodtWYURoQL2+S5Rf278Lk3fT8=)
                          5: 7zblY6BCctcdXpwbMm0_34faYRo.roa (hash: KtSwIWqX9DCBmW5nrwDdLWyypLR6MruYPOwSSMaK4MM=)
                          6: 9xvozV0Sfo7a-oMrkY2fIOco-E4.roa (hash: 2VRW6dlLND2Lp3xRLbodxSsSzYG05UKUdmznQXQmzOM=)
                          7: J7ETPWoz6PcKZiDENKdc7eg0G3E.roa (hash: pWE9GZh1hbb+a6dmiouPzsW10XU9kJ/ykBSv44CMcgY=)
                          8: JjSC1c-dxbhZ1-0TIYGzucKMyrU.roa (hash: dTg08B1nZ0yFwN7PyT4kqTj90lvSlhl8jReK9JH6Om4=)
                          9: JsAaKOXPAzv8c6ynf1XNRV8bD-U.roa (hash: UzEqnOFZAEUclpd297khNmJjnQ7g7Bp2gMA71gdOr9M=)
                          10: K6BqTeCnFAwbc4jI0igEhaoB-bI.roa (hash: 9mf95x7Fe5uxd8ztdTfDiOpMq116cpUQ+VlK8ttuWOM=)
                          11: ORnPU3XYj8INr1PwrAlRT4r5P08.roa (hash: 7r6XU5dOhFKsfQf25nxALrdSf51+9VTJXHTPK5W03mE=)
                          12: PMSzvBZXCQcbqDlQ7LkXczX07ew.roa (hash: BKwzNbm6jaB2DOhJMC6nNk1qNsO21mTiLHciEQyaOw0=)
                          13: RWq3qfHPjOZ2jHDy6vXPMPpjVhw.roa (hash: STGfb4NKoffBcN86pHhj3xDY/s0B4apYNcixRHQ3knI=)
                          14: RnMmTUeUrFq-zSipvkigbapyiBc.roa (hash: 0skm66saBLa2ssLmOx4tITBYx87gDv/XfeUh7LBO3IE=)
                          15: WgYjeGzNVzebf_6CGezjfRx351k.roa (hash: 2B8IsU5fh45X0FKQLNQIOkGyG+H5i9wVgOoC/d8MsAc=)
                          16: YlAQYHKswIx5RRtI3kgTMKsZmbI.roa (hash: x+qjsBLUGDSVTqsQB6f/TIag14hJeaxffgH4AsDBU9E=)
                          17: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: sOeau0w2Xb7qFGcHFiNnRQ0yyqbJPd3oJogr+uwnGCo=)
                          18: l2XyrGa2RugpHIKECpxmeaE7wM4.roa (hash: /wG0TKm7CBXBKobF8UqBXlGo366uUiNEomwA3rAAVTA=)
                          19: mt9-6rSUcH6hUF98CRI3MdqAD3I.roa (hash: 4E9AP6C3lQ2iznqOSjmY1UFt39fjC7jDO+UUSFX6E7I=)
                          20: q86UqnEtXL58Ig2MeLPrIZC1ct4.roa (hash: NM86Ks5qh6cn8N2PzS7cLmPIGv1JbTXkmoMoJMYEo1Q=)
                          21: rLFXbl__3TAOb3S5Cx0KvKn5se8.roa (hash: JoWfelx8Wab0+mon7O7zO9ngmwLQkIC05SIGqXCeWe8=)
                          22: s05ooAExVN5UYLfeB1g43Qq4g-o.roa (hash: 95/ol5UxoeQqj83ztmMnuf/QD+icG9evXG92UAiQSMI=)
                          23: wZDSImAD8aOgmZ7UJoeeGMLOGmo.roa (hash: lMctKIwsXf7q4VxyGflxjXdTB+7ijRrkfvY4gKPSmWQ=)
                          24: xjB9L3n6ciajEXNtLdgWwzhRmuA.roa (hash: tTqpbZ8+o3Pvw8mVlaHD0xRG7XMwhhkV2BeICHSG6CU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b7:53:7e:3d:56:24:af:a8:9e:7c:7e:51:b6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Jan 31 14:00:26 2025 GMT
            Not After : Feb  1 14:00:26 2025 GMT
        Subject: CN=eea7c41fecb7dcfdf7a3826c8dc9de3f41191821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:65:c3:eb:74:e1:fd:a0:6d:c5:e8:9b:62:7e:
                    70:68:83:0d:15:65:fb:bd:79:b8:10:21:e1:63:2b:
                    cc:fe:52:f4:f8:f5:94:84:9e:dc:83:76:6e:9f:46:
                    9e:04:27:26:5b:e1:47:2c:17:4e:79:4a:f8:6c:e1:
                    17:eb:12:b6:1e:46:f2:61:9e:3a:6c:58:b1:53:af:
                    2f:b8:b0:c7:6a:c2:71:33:c7:d9:e3:c6:ae:24:db:
                    a3:b4:0e:91:50:a5:46:58:d6:97:1b:5f:27:8e:d9:
                    14:44:95:22:e7:59:b4:7b:1a:d2:e9:7c:42:38:38:
                    6e:f4:7d:60:85:2b:8e:a2:ae:33:7a:4f:4b:87:e0:
                    4c:7a:b2:d1:70:fd:0b:52:e6:27:34:64:70:cc:c8:
                    50:a8:16:9a:c5:98:cb:59:8e:ee:1e:1f:ed:2b:ef:
                    4a:72:12:fa:06:08:9c:39:a9:0e:41:e3:cb:d2:29:
                    42:8d:ed:38:63:97:af:84:54:6e:12:38:72:66:b0:
                    14:ce:64:b6:bb:e6:3f:05:26:df:7e:59:f4:a2:f9:
                    cf:99:a7:c3:62:f3:bd:b3:7b:44:b9:f0:e2:1f:24:
                    91:75:a9:28:3f:b3:c7:35:df:55:fa:32:b7:63:45:
                    59:3c:91:3f:11:97:58:6d:ef:81:c9:f0:57:3f:17:
                    15:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A7:C4:1F:EC:B7:DC:FD:F7:A3:82:6C:8D:C9:DE:3F:41:19:18:21
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:c7:54:39:6d:4f:5b:38:3e:62:66:16:4d:92:e6:53:65:
         4e:27:21:e0:e9:2b:b2:e9:5b:9a:79:ff:52:a1:86:ca:9b:09:
         4b:4b:7e:02:d4:1a:00:f1:40:71:02:00:12:d1:73:5e:8d:f5:
         7c:8f:da:81:5f:4c:7b:b6:99:16:27:5c:c0:ee:6d:b3:5b:73:
         26:42:2a:d2:8f:f4:10:5e:e8:7f:4a:83:73:a3:48:06:76:4a:
         65:7c:39:15:ae:5a:85:f0:75:32:7f:98:df:8a:16:cc:3b:a0:
         98:2d:4e:ec:30:ca:2f:3b:6f:4c:60:6d:be:c7:cd:a0:7a:3d:
         04:bb:be:01:9f:0f:5a:69:a5:88:65:2a:79:00:84:23:f7:2d:
         b7:d2:af:ee:d2:de:16:11:ff:fa:e5:76:be:9b:f8:96:33:ab:
         45:17:64:7f:92:09:7b:31:a3:8a:6f:ca:83:b5:58:44:3e:05:
         19:af:a9:3a:72:61:26:63:c3:f7:0a:41:0d:7c:34:d4:b5:f3:
         81:ad:a2:fb:0b:d9:28:36:cb:e3:b2:35:90:c8:1b:17:a3:ab:
         14:ed:30:d3:12:cf:41:4d:33:24:9e:b5:b2:d9:88:f7:20:41:
         0c:ff:7d:20:0a:6d:63:ee:05:8a:b6:e0:62:e6:24:4c:0e:f3:
         97:7e:28:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbdTfj1WJK+onnx+UbbyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjUwMTMxMTQwMDI2WhcNMjUwMjAxMTQwMDI2WjAzMTEwLwYDVQQD
EyhlZWE3YzQxZmVjYjdkY2ZkZjdhMzgyNmM4ZGM5ZGUzZjQxMTkxODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGXD63Th/aBtxeibYn5waIMNFWX7
vXm4ECHhYyvM/lL0+PWUhJ7cg3Zun0aeBCcmW+FHLBdOeUr4bOEX6xK2HkbyYZ46
bFixU68vuLDHasJxM8fZ48auJNujtA6RUKVGWNaXG18njtkURJUi51m0exrS6XxC
ODhu9H1ghSuOoq4zek9Lh+BMerLRcP0LUuYnNGRwzMhQqBaaxZjLWY7uHh/tK+9K
chL6BgicOakOQePL0ilCje04Y5evhFRuEjhyZrAUzmS2u+Y/BSbffln0ovnPmafD
YvO9s3tEufDiHySRdakoP7PHNd9V+jK3Y0VZPJE/EZdYbe+ByfBXPxcVbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6nxB/st9z996OCbI3J3j9BGRghMB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLfHVDlt
T1s4PmJmFk2S5lNlTich4Okrsulbmnn/UqGGypsJS0t+AtQaAPFAcQIAEtFzXo31
fI/agV9Me7aZFidcwO5ts1tzJkIq0o/0EF7of0qDc6NIBnZKZXw5Fa5ahfB1Mn+Y
34oWzDugmC1O7DDKLztvTGBtvsfNoHo9BLu+AZ8PWmmliGUqeQCEI/ctt9Kv7tLe
FhH/+uV2vpv4ljOrRRdkf5IJezGjim/Kg7VYRD4FGa+pOnJhJmPD9wpBDXw01LXz
ga2i+wvZKDbL47I1kMgbF6OrFO0w0xLPQU0zJJ61stmI9yBBDP99IAptY+4Firbg
YuYkTA7zl34oRw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:04 2025 by rpki-client