Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
File:                     ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft (raw, json)
Hash identifier:          BWCvoeHOccWCvt37fbgXoMDaBHWCjXOLqddemLfIj5s=
Subject key identifier:   96:C9:06:FD:C0:94:3D:86:C6:50:7C:79:89:9C:4F:EC:D5:AA:AE:88
Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B
Certificate issuer:       /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
Certificate serial:       0194BD1765FD12E57458BAC57436A206A267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft
Manifest number:          05FA
Signing time:             Fri 31 Jan 2025 16:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:14 +0000
Files and hashes:         1: 9qqw5-kT_WV_X39A7wZIImdbzHo.roa (hash: /+5dGBlEHLXX+0YtcqdadMo/w6B/YFbkAqy9tbmNdEg=)
                          2: D-sLa7SP7XelLhZGOPS-ls06iHQ.roa (hash: O/tqtREZzKy5oPDokpycb2qRKRocKJlF54vVhaheJr4=)
                          3: XI8GYNvzBktqANN3ULY6yNPZsp4.roa (hash: 0Mxp84Xa3ZGuCVESuvLHwIOTltEO7ZBfIp1LcrOP0ho=)
                          4: eRUACPCXV-4Ib9JOJdpUbWI_TYw.roa (hash: h9bviEq7QynmkHeqFVqOAhXJmtcEK3L94GyVb2n9ZXc=)
                          5: hJkdSoDXpzIKTUPp93OLm4_CfgM.roa (hash: GAALV0VthJPoxa0vb/cdFv6fAU1JjHbthL2uNWZeyCc=)
                          6: ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl (hash: Beu53JBwOXDEwivr0YXWCKqbFC4DXm/QxPRrvHr7Q6Q=)
                          7: yLW-Wxb-WEK3SlgHfRgcFULgwtU.roa (hash: 47c/8wbrDeeCgPSJoS7prqWBSvhn47quuwVKT8eb4AA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:65:fd:12:e5:74:58:ba:c5:74:36:a2:06:a2:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b
        Validity
            Not Before: Jan 31 16:00:14 2025 GMT
            Not After : Feb  1 16:00:14 2025 GMT
        Subject: CN=96c906fdc0943d86c6507c79899c4fecd5aaae88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:cc:73:1b:57:0d:2d:5e:22:bc:b0:74:2a:
                    3e:0e:29:b8:ec:4e:f2:0b:5b:5f:d5:7f:1a:f7:db:
                    0f:f1:ac:b9:03:d4:a6:ca:4a:94:b9:6f:f9:4f:ea:
                    2c:bc:05:77:db:ee:75:61:70:56:58:52:a3:59:57:
                    6f:a0:d0:1b:12:57:c3:28:bf:27:d2:00:82:34:c9:
                    43:4f:3f:b8:2d:24:e7:6d:ae:bb:7b:a1:7d:28:5b:
                    a7:ff:3b:27:98:37:66:b5:91:07:5c:79:96:94:44:
                    cd:87:12:c7:f6:6a:0f:ba:35:67:11:20:d6:b7:9b:
                    e8:10:cb:e0:88:e1:8d:95:1d:23:f3:46:77:27:70:
                    c1:2e:3d:4d:57:13:32:a9:c7:61:28:ae:4c:e7:17:
                    d7:8e:6c:95:e4:e3:12:00:c2:bb:ee:33:ac:8c:79:
                    2f:30:86:9a:73:cb:32:16:cb:21:3e:41:eb:f4:df:
                    17:a6:6d:db:2d:ee:e3:18:5f:31:2d:9f:af:0a:92:
                    3e:7f:88:98:fd:01:82:26:8f:c1:57:36:fe:d0:6c:
                    14:8d:00:7b:ed:01:c7:75:2a:8d:02:88:2b:62:32:
                    9a:fd:33:94:0b:77:7f:a6:46:13:25:01:6e:77:d3:
                    47:2d:74:3f:db:5a:c5:fb:a2:3c:d1:1f:6f:ea:7f:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C9:06:FD:C0:94:3D:86:C6:50:7C:79:89:9C:4F:EC:D5:AA:AE:88
            X509v3 Authority Key Identifier:
                keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:84:82:2c:d7:49:31:48:be:3b:45:f4:d3:0d:c0:e3:b0:33:
         81:f4:39:0a:ee:cf:ce:ba:08:a4:92:4f:23:fb:0e:dc:85:4d:
         e9:dd:f2:ce:52:22:99:16:cb:d0:19:d8:4d:6a:6d:00:ec:46:
         23:71:88:15:31:cb:5a:bc:e0:a8:a3:b1:9c:65:d6:b2:39:27:
         a2:88:3b:fa:b8:2c:d3:db:f5:8c:97:37:c1:0b:d3:ea:5d:64:
         e8:e7:e6:15:e0:48:41:33:f9:6b:ca:81:a8:48:9b:e4:99:90:
         ac:66:96:c8:25:1a:35:c5:2d:96:a9:4a:66:d2:d5:a1:2e:5d:
         c7:9f:57:6a:e7:79:fd:b3:8f:cc:15:7f:c9:68:50:52:73:b3:
         f6:03:17:63:73:50:10:51:4f:8a:c2:65:fa:a0:6f:54:55:2d:
         45:ad:4e:65:dc:a0:35:d6:93:d3:2f:c4:60:a1:08:94:5d:e8:
         55:6b:62:83:55:d0:ac:f0:35:46:ce:aa:7f:8f:c9:5f:ff:45:
         e1:6c:92:2f:b6:f3:ee:44:97:55:02:e1:f5:6d:da:a2:e3:e1:
         41:0b:9c:35:29:23:cf:a1:e7:24:5a:b3:a7:92:d3:ec:d9:c3:
         1d:d0:4f:f7:de:e3:1c:f5:fa:5c:67:b7:3e:1a:f0:3e:e3:8f:
         ac:0a:ed:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F2X9EuV0WLrFdDaiBqJnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0
N2RiMGIwHhcNMjUwMTMxMTYwMDE0WhcNMjUwMjAxMTYwMDE0WjAzMTEwLwYDVQQD
Eyg5NmM5MDZmZGMwOTQzZDg2YzY1MDdjNzk4OTljNGZlY2Q1YWFhZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppDMcxtXDS1eIrywdCo+Dim47E7y
C1tf1X8a99sP8ay5A9SmykqUuW/5T+osvAV32+51YXBWWFKjWVdvoNAbElfDKL8n
0gCCNMlDTz+4LSTnba67e6F9KFun/zsnmDdmtZEHXHmWlETNhxLH9moPujVnESDW
t5voEMvgiOGNlR0j80Z3J3DBLj1NVxMyqcdhKK5M5xfXjmyV5OMSAMK77jOsjHkv
MIaac8syFsshPkHr9N8Xpm3bLe7jGF8xLZ+vCpI+f4iY/QGCJo/BVzb+0GwUjQB7
7QHHdSqNAogrYjKa/TOUC3d/pkYTJQFud9NHLXQ/21rF+6I80R9v6n8V2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbJBv3AlD2GxlB8eYmcT+zVqq6IMB8GA1UdIwQY
MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt
ZDE5NmY5MjkxNzMyLzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy
LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACISCLNdJ
MUi+O0X00w3A47AzgfQ5Cu7PzroIpJJPI/sO3IVN6d3yzlIimRbL0BnYTWptAOxG
I3GIFTHLWrzgqKOxnGXWsjknoog7+rgs09v1jJc3wQvT6l1k6OfmFeBIQTP5a8qB
qEib5JmQrGaWyCUaNcUtlqlKZtLVoS5dx59Xaud5/bOPzBV/yWhQUnOz9gMXY3NQ
EFFPisJl+qBvVFUtRa1OZdygNdaT0y/EYKEIlF3oVWtig1XQrPA1Rs6qf4/JX/9F
4WySL7bz7kSXVQLh9W3aouPhQQucNSkjz6HnJFqzp5LT7NnDHdBP997jHPX6XGe3
PhrwPuOPrArtMA==
-----END CERTIFICATE-----