Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          113eGPuEw+0OG36oeYQ3KMwJMoDZCGeCjZ/Cf7F9Qrs=
Subject key identifier:   F0:45:B3:06:BD:DE:73:40:4B:72:CD:DF:4E:3B:02:E9:7F:04:A4:9E
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       0194BCE0B38552BB2A73F5891FAF3FE4743C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          144B
Signing time:             Fri 31 Jan 2025 15:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:30 +0000
Files and hashes:         1: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: 7bEw7gTMBWLqo0DHa5VtbY8Bz1zbGIHZ7bgXBN4/tAI=)
                          2: 7hCd_HKEYkXLvNCBLfMsTezcRXs.roa (hash: U6tVugGWrDYmHCXTomFCnYlQyCN2W9AcT+utfrGkYmM=)
                          3: HK9YTPeAPa2mm7JsqVFDcEqWktE.roa (hash: pGFfaceKosL6QVYMO3oG4sR8CNlOKvbDd43IVlI91l4=)
                          4: SiUykNKTjaApyo1sqndO19rBYAs.roa (hash: jaR1D2Lqsnpc33UxJXomGKoF/S6s6EdMDhOpwvCqmiY=)
                          5: YxnLmhiEAoRIPwqx7D5pI2tVg0E.roa (hash: Z5VZl3NN5nIeNmBSmYIBYR811mPwFTzRI+uDPXf+8B0=)
                          6: dsVEniM-PjP3aF57gRKfJeGsuXA.roa (hash: rATVs9dRCK5irdzRkSY1vrtCfxCwPvZoSJA3EPbdN5Q=)
                          7: jNJogHc9h5lodSxhpjDRYEENUOM.roa (hash: O0aQYdB/pHChDSdymrPe8W/YPJRqMLBI8pg3+YHjgZ8=)
                          8: myrzpFPZKEFrMiKvWzGEDQDrl_I.roa (hash: J9rVlZg9Lutrp3UmbnqdopvJazmPd6IwXd6xHibeysc=)
                          9: pm4iWvL8z96fIGtjxaGjSXeRJT4.roa (hash: ZYVelcX+1GR4HDMDdE6U47zsAh6vEcuxWCIg/8E3uZE=)
                          10: qispPpKIlPSWV1rI1EAZQtlT-p0.roa (hash: sBtkCqwyGciPSktKwAiba5P4WFIxvlZFVG+B/hvcwgI=)
                          11: z1XxJmXXx8uVxhk9CwQJXiPqHzU.roa (hash: EaljD/90P2BfuVNTpmwdBC+zdctwtxvncMDcXLvuk10=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b3:85:52:bb:2a:73:f5:89:1f:af:3f:e4:74:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Jan 31 15:00:30 2025 GMT
            Not After : Feb  1 15:00:30 2025 GMT
        Subject: CN=f045b306bdde73404b72cddf4e3b02e97f04a49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:c8:ad:99:3c:37:4b:80:89:6d:77:37:52:
                    2f:84:08:2c:8a:7c:38:df:e0:fb:58:bc:7a:1e:ad:
                    3f:40:02:99:51:0d:7f:dd:19:ab:e4:b4:a1:1e:06:
                    07:45:30:40:fa:03:68:42:f1:17:1b:47:06:bd:ff:
                    3d:b3:8b:ce:83:c6:c0:f0:e2:b9:cb:4f:71:88:9f:
                    3a:30:45:cd:9d:8d:3a:5c:d0:17:0e:f8:f7:2d:8b:
                    0d:02:c7:d9:45:ea:55:4f:f9:77:4a:84:72:ab:cc:
                    8c:68:29:95:6a:99:29:2d:f0:4f:0f:bf:ec:2d:71:
                    4f:68:d6:a1:ed:a9:77:f7:7e:df:5b:91:ea:be:9a:
                    43:6e:bf:ae:b4:ad:45:7a:22:fc:d6:e0:07:e2:ce:
                    21:fb:1f:1f:9f:94:67:24:33:c6:82:cc:28:c3:26:
                    cc:bc:95:9b:15:da:1e:c2:5c:46:0b:62:de:75:75:
                    64:f2:0f:32:2e:91:ed:ee:02:a3:a6:e8:66:28:cf:
                    70:f2:f2:ef:b3:5b:08:a7:3e:ce:bc:69:24:34:ee:
                    37:d7:20:47:af:9c:f6:4d:fe:05:4c:25:7c:ab:07:
                    5e:a8:d0:e0:bf:dc:22:25:43:3f:a4:26:7e:f2:8b:
                    d6:07:2d:d6:ab:ae:c4:2d:f2:a7:03:6f:c8:00:37:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:45:B3:06:BD:DE:73:40:4B:72:CD:DF:4E:3B:02:E9:7F:04:A4:9E
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d4:25:e5:05:9d:6e:d8:ca:01:80:3f:fe:ad:7a:bb:41:8d:
         22:a5:8a:de:03:be:9a:29:a0:9a:bf:72:73:dd:28:d0:89:34:
         f9:74:f6:d8:d6:74:d1:8f:f7:04:5c:c2:80:4e:d0:be:90:29:
         8d:a5:34:53:60:cd:c7:fd:3e:aa:d1:99:97:de:b6:21:2b:f5:
         6c:3e:ed:e2:50:2f:78:31:1c:95:74:28:3a:99:51:43:18:08:
         e0:72:3d:a9:86:03:62:84:e6:2e:bf:75:be:ee:f2:f0:fd:e9:
         79:42:3a:77:ce:c9:ba:dc:76:80:24:50:ed:ba:8d:22:7a:52:
         89:d9:cd:6d:53:0e:63:35:47:84:37:a4:00:80:63:c5:9a:d0:
         60:58:8e:c0:01:86:38:ab:bc:b2:15:b9:c7:d1:d0:89:23:78:
         aa:b5:9f:c3:4f:60:4a:10:50:5f:54:39:6a:ce:50:f8:49:d7:
         1c:19:75:f7:f5:48:21:5b:8f:51:55:b5:0d:43:c6:11:db:f9:
         d4:a7:24:85:b0:1e:a7:7c:d7:35:56:3d:a7:dc:cc:bc:4c:6e:
         73:75:f9:f8:cb:5c:d7:62:ca:4b:e8:6c:ba:60:e4:bc:57:30:
         74:19:34:50:a8:59:1a:53:34:81:e3:b4:af:32:36:a3:02:9a:
         a1:da:ef:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LOFUrsqc/WJH68/5HQ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjUwMTMxMTUwMDMwWhcNMjUwMjAxMTUwMDMwWjAzMTEwLwYDVQQD
EyhmMDQ1YjMwNmJkZGU3MzQwNGI3MmNkZGY0ZTNiMDJlOTdmMDRhNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC3IrZk8N0uAiW13N1IvhAgsinw4
3+D7WLx6Hq0/QAKZUQ1/3Rmr5LShHgYHRTBA+gNoQvEXG0cGvf89s4vOg8bA8OK5
y09xiJ86MEXNnY06XNAXDvj3LYsNAsfZRepVT/l3SoRyq8yMaCmVapkpLfBPD7/s
LXFPaNah7al3937fW5HqvppDbr+utK1FeiL81uAH4s4h+x8fn5RnJDPGgswowybM
vJWbFdoewlxGC2LedXVk8g8yLpHt7gKjpuhmKM9w8vLvs1sIpz7OvGkkNO431yBH
r5z2Tf4FTCV8qwdeqNDgv9wiJUM/pCZ+8ovWBy3Wq67ELfKnA2/IADerwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBFswa93nNAS3LN3047Aul/BKSeMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtQl5QWd
btjKAYA//q16u0GNIqWK3gO+mimgmr9yc90o0Ik0+XT22NZ00Y/3BFzCgE7QvpAp
jaU0U2DNx/0+qtGZl962ISv1bD7t4lAveDEclXQoOplRQxgI4HI9qYYDYoTmLr91
vu7y8P3peUI6d87Jutx2gCRQ7bqNInpSidnNbVMOYzVHhDekAIBjxZrQYFiOwAGG
OKu8shW5x9HQiSN4qrWfw09gShBQX1Q5as5Q+EnXHBl19/VIIVuPUVW1DUPGEdv5
1KckhbAep3zXNVY9p9zMvExuc3X5+Mtc12LKS+hsumDkvFcwdBk0UKhZGlM0geO0
rzI2owKaodrvkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:04 2025 by rpki-client