Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          v4F6Z+TI4+XRSYa8o6x+gqxhw9gt+9pL+szn/dqnAnM=
Subject key identifier:   8E:12:A2:31:CE:30:1B:93:A0:92:5D:06:87:7D:98:32:13:43:A4:FF
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       0194BCE090DB47E8514B834C2152D4F42EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          0442
Signing time:             Fri 31 Jan 2025 15:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:21 +0000
Files and hashes:         1: 0Mvhcy66vg_hQj0H0BjuRhN8AEw.roa (hash: rLSJr6X2QsQeqUnzUxdyly3b6MStAcI5bnu/3/yjEXo=)
                          2: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: y+w18ZgoJojW4tjJmU4KxuOgwTz2BA+PjYFLvujwx0c=)
                          3: K-BqbESSRx3Yj4firy2GiSJYedk.roa (hash: ztU8/cjCw1EzlWd4zVd+Pf6WeSXNXfqcpp3+tX5nZDE=)
                          4: fRQm9txJEG9J9ZmTTymAf6TeYIA.roa (hash: w+UnfOFY87SloUZFNx3EhChlSsZ+Do6/267GREfdW2g=)
                          5: icJdEYHRoQ8a2HsX6tAswYTYm1I.roa (hash: yVJLCj9xlz6tDxLUrnxZtc8J67boCW3htMxhNuv+eUk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:90:db:47:e8:51:4b:83:4c:21:52:d4:f4:2e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Jan 31 15:00:21 2025 GMT
            Not After : Feb  1 15:00:21 2025 GMT
        Subject: CN=8e12a231ce301b93a0925d06877d98321343a4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:03:93:35:9f:1a:2a:59:15:e4:d1:4b:b7:
                    75:36:53:bc:ba:95:64:a1:5b:bf:42:11:58:92:32:
                    5b:be:0c:d2:92:bf:77:dd:0a:bc:56:79:cf:ef:ba:
                    84:3c:fb:b9:fe:f3:5a:a1:a9:e4:12:11:9b:91:52:
                    f3:d2:70:d1:b2:51:e3:08:81:53:ee:8f:2a:27:65:
                    94:04:bd:57:99:84:68:b3:0d:e4:2c:33:43:87:d3:
                    6a:98:55:ed:29:66:cf:db:b8:38:a0:1b:8e:d0:ea:
                    41:ad:cf:54:59:54:ea:7e:e9:a0:01:fc:de:a6:fc:
                    71:48:ee:aa:67:c8:66:10:e6:c3:45:1b:39:5b:78:
                    f6:29:b3:f7:ce:0c:7a:81:6e:32:07:59:76:ec:98:
                    42:4c:8c:8f:cd:92:26:68:52:d2:79:4a:09:88:a8:
                    bd:c0:61:9d:c3:99:a3:65:70:a0:02:08:bc:67:d0:
                    49:ac:4b:dc:91:07:1b:2c:93:5b:c2:c4:a1:ee:89:
                    43:6a:c6:c8:46:05:cb:f4:d0:96:2e:c4:75:17:e0:
                    f5:5b:ec:42:7d:8e:81:73:ad:f5:80:2e:f2:8b:dc:
                    1d:16:62:05:97:96:2d:f4:74:74:f8:be:5c:84:9e:
                    b8:2f:31:39:a0:75:ac:54:60:1a:28:e4:31:92:1e:
                    b8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:12:A2:31:CE:30:1B:93:A0:92:5D:06:87:7D:98:32:13:43:A4:FF
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:6a:e5:39:43:aa:17:4e:45:19:2d:c6:6d:17:b6:5e:21:
         73:3f:b5:06:d8:b9:b6:d9:8a:61:75:e6:b1:2b:1d:a1:03:63:
         6f:f1:76:a9:50:b5:1a:a4:b6:17:8d:46:39:68:9d:f5:fa:6f:
         5c:e3:fa:15:00:bc:b0:c5:77:74:6c:4a:94:94:cb:20:64:34:
         3b:be:48:d7:e7:e5:77:7d:9c:3f:b3:72:b7:25:f8:5b:a9:42:
         25:37:87:32:2a:33:db:91:ec:33:0d:53:c7:72:ca:5b:77:7b:
         f1:3e:aa:7d:8a:31:02:01:ed:c8:69:de:cc:4f:cf:c8:1e:3e:
         58:9f:8c:cc:ea:e2:5b:51:bf:3e:e2:96:71:f6:12:e7:fa:e2:
         58:2e:0a:5e:cb:24:f5:65:bd:f1:01:2f:34:f5:b7:fb:07:4b:
         8c:ac:13:27:bf:29:27:0e:50:f7:8a:78:ac:ee:e9:9d:a1:f5:
         bf:aa:51:b9:7b:a9:3e:f1:02:18:34:06:05:71:eb:33:03:4b:
         86:47:ee:b8:dc:3c:39:4a:fe:8d:98:e0:79:29:24:d1:c8:78:
         e7:06:ca:d7:01:47:e9:04:b3:93:eb:c7:d0:6a:3e:2b:ba:2b:
         dc:2f:80:aa:ae:92:e9:8a:76:c0:18:60:da:89:61:e2:ab:76:
         99:ed:1b:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JDbR+hRS4NMIVLU9C76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmU3OWQxNDc4ODI0MjJlYzI3NTQxN2RmZDJhZmZhOTNh
MDI3NTcwHhcNMjUwMTMxMTUwMDIxWhcNMjUwMjAxMTUwMDIxWjAzMTEwLwYDVQQD
Eyg4ZTEyYTIzMWNlMzAxYjkzYTA5MjVkMDY4NzdkOTgzMjEzNDNhNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPMDkzWfGipZFeTRS7d1NlO8upVk
oVu/QhFYkjJbvgzSkr933Qq8VnnP77qEPPu5/vNaoankEhGbkVLz0nDRslHjCIFT
7o8qJ2WUBL1XmYRosw3kLDNDh9NqmFXtKWbP27g4oBuO0OpBrc9UWVTqfumgAfze
pvxxSO6qZ8hmEObDRRs5W3j2KbP3zgx6gW4yB1l27JhCTIyPzZImaFLSeUoJiKi9
wGGdw5mjZXCgAgi8Z9BJrEvckQcbLJNbwsSh7olDasbIRgXL9NCWLsR1F+D1W+xC
fY6Bc631gC7yi9wdFmIFl5Yt9HR0+L5chJ64LzE5oHWsVGAaKOQxkh64aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4SojHOMBuToJJdBod9mDITQ6T/MB8GA1UdIwQY
MBaAFO6+edFHiCQi7CdUF9/Sr/qToCdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTIt
Mzg4MjNjMTQ0OWFmLzEvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTItMzg4MjNjMTQ0OWFm
LzEvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYk1q5TlD
qhdORRktxm0Xtl4hcz+1Bti5ttmKYXXmsSsdoQNjb/F2qVC1GqS2F41GOWid9fpv
XOP6FQC8sMV3dGxKlJTLIGQ0O75I1+fld32cP7NytyX4W6lCJTeHMioz25HsMw1T
x3LKW3d78T6qfYoxAgHtyGnezE/PyB4+WJ+MzOriW1G/PuKWcfYS5/riWC4KXssk
9WW98QEvNPW3+wdLjKwTJ78pJw5Q94p4rO7pnaH1v6pRuXupPvECGDQGBXHrMwNL
hkfuuNw8OUr+jZjgeSkk0ch45wbK1wFH6QSzk+vH0Go+K7or3C+Aqq6S6Yp2wBhg
2olh4qt2me0bjA==
-----END CERTIFICATE-----