Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          Ihb4f3JvXaoNzdUXsePSphF0OLwQJU0PLlyh0K1lMVg=
Subject key identifier:   5B:6D:FB:8D:97:24:CB:AE:0C:C7:1E:6D:B4:86:63:4B:C8:30:04:B2
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       0194BC7317779FE0A6068E95C84795FFD330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 13:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:46 +0000
Files and hashes:         1: 6ZwG_Y60Ty5PTqTrDlKsyphblXQ.roa (hash: vR97+OeUXCCOXRpSdGW1/Y4Sp/FefDWwnMJQ9Jni4rk=)
                          2: BGdD8LDEAedO7LkZulNO0on6BtA.roa (hash: 5JKMac3WduBMBCnJzqk90kK6WJ4PSh8kMPbmsKHD+wc=)
                          3: Bs46C8G9Xvlaiic-U_vabhAJhco.roa (hash: 3sJguMlQk0GQr3vKdqIN2WvzrXMmi6x68HlsMnn5UuM=)
                          4: D5iZPHtIHYKSLlUoRqhHam3z4fw.roa (hash: iQxb5JVe2tNY+bNton8d20CXKpbqyN/eHLh+5EoqEaI=)
                          5: Rl9152Qvb_u7j8K6moXvloqlxuw.roa (hash: 7VxgCsm28hyqe3FM8bfzznGaU0K/XnvaJIfEnQlGvZI=)
                          6: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: tShCzXmdbZVmXXlRi2VupqexWLVnReYDrvizxStqSXc=)
                          7: bkbeFY-foKd3saHxL2Ms4IvaWZI.roa (hash: Pb5Tubkcy9LxO6t4tf4Rf3p3iIfsYoVtUzwvSZ29zs0=)
                          8: h13V4d_ekYYA6uv0-jBvE7ljXgg.roa (hash: 64VEKJzZ2W6+uSgCoWExxMNGZCghiQUddh02slxkwlI=)
                          9: y4ffehEhJcuHU2W4RqSmsYxzQlg.roa (hash: stMeXk1cas0IbSmXY2+Qqlw++LVpL1MZDKLPTnxrrwY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:17:77:9f:e0:a6:06:8e:95:c8:47:95:ff:d3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Jan 31 13:00:46 2025 GMT
            Not After : Feb  1 13:00:46 2025 GMT
        Subject: CN=5b6dfb8d9724cbae0cc71e6db486634bc83004b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d0:06:b6:45:79:12:e8:9a:f5:69:e4:2b:05:
                    a3:c9:24:52:06:c7:60:5c:ff:32:3a:d3:3f:e5:f1:
                    33:6b:da:4c:11:7c:af:f5:bd:b4:e8:0d:4b:46:f0:
                    1a:c1:46:15:9f:c3:71:a3:ac:36:93:4a:e4:39:29:
                    32:91:21:18:9c:f3:96:95:81:9c:8f:94:46:de:27:
                    85:a0:4d:bc:c7:96:c7:ba:8b:c7:35:f5:d5:24:f9:
                    f7:20:91:99:a7:b0:f0:62:ca:11:fc:6a:b5:54:1a:
                    24:b0:dd:1c:bb:41:3a:6a:98:ef:65:90:ba:b7:ec:
                    8f:0e:63:ac:d6:10:76:3f:9a:6e:e0:53:24:42:e7:
                    4c:e9:b8:38:dd:b4:2f:fb:03:87:2b:8c:35:d8:73:
                    63:e2:e9:bb:42:d4:83:db:0f:24:bb:b0:c5:55:11:
                    66:82:7d:1e:14:98:2b:8c:33:aa:8b:be:f3:0c:fe:
                    c3:51:b8:b2:5d:ae:d8:31:1f:24:1f:8b:da:6d:5d:
                    a1:26:6d:62:06:67:6b:9f:47:e0:22:f3:06:3c:91:
                    6c:f8:e7:c3:b9:0d:27:2f:0f:13:b6:77:55:e9:a4:
                    44:c3:0e:85:c4:1c:f6:cb:f0:f7:e9:68:f8:7e:d8:
                    c0:07:6c:85:9a:40:73:eb:a5:2a:a1:8b:d5:60:15:
                    5c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:6D:FB:8D:97:24:CB:AE:0C:C7:1E:6D:B4:86:63:4B:C8:30:04:B2
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d1:02:67:79:93:5a:b5:9e:c4:0e:6c:cb:78:fa:f8:45:1d:
         2f:01:07:1b:11:a4:bb:ca:18:38:e1:33:38:20:d6:34:0a:c6:
         20:f5:a5:79:6d:c9:38:52:b9:d3:99:38:66:79:82:e5:1b:f8:
         3c:a5:8c:7e:ca:1f:32:61:58:b2:c1:62:8f:71:b0:c3:83:e8:
         b0:e8:d1:f6:90:b9:fe:8d:da:ad:68:a3:f8:a4:fc:0b:bd:0f:
         35:e5:97:dd:8c:0c:f4:31:22:8e:6c:85:f4:bf:c0:9f:41:ca:
         3b:f4:62:98:38:56:4f:bd:45:9c:53:be:6f:0d:ef:17:49:95:
         c9:e9:75:40:8f:a3:9c:20:67:d6:d7:30:2f:71:bf:b2:0c:89:
         cf:14:97:69:0d:71:a3:a4:73:50:bc:67:b3:ad:52:67:cc:2e:
         57:17:91:1c:a0:05:bb:ad:8c:15:4c:b3:47:71:a9:6f:d3:33:
         c5:f4:ad:5d:36:13:20:02:b2:ee:f3:38:11:02:f9:4e:7e:da:
         49:3f:57:f3:00:93:29:54:ff:b4:61:15:e2:93:61:6f:42:a5:
         85:4a:0f:d9:c1:cd:20:7f:6e:3c:34:33:df:8d:09:42:1c:e7:
         c8:ee:1e:de:3e:9d:53:f5:db:bc:63:c9:35:6a:2b:41:b5:01:
         ce:5a:17:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cxd3n+CmBo6VyEeV/9MwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk
ZWZlNzEwHhcNMjUwMTMxMTMwMDQ2WhcNMjUwMjAxMTMwMDQ2WjAzMTEwLwYDVQQD
Eyg1YjZkZmI4ZDk3MjRjYmFlMGNjNzFlNmRiNDg2NjM0YmM4MzAwNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9AGtkV5Euia9WnkKwWjySRSBsdg
XP8yOtM/5fEza9pMEXyv9b206A1LRvAawUYVn8Nxo6w2k0rkOSkykSEYnPOWlYGc
j5RG3ieFoE28x5bHuovHNfXVJPn3IJGZp7DwYsoR/Gq1VBoksN0cu0E6apjvZZC6
t+yPDmOs1hB2P5pu4FMkQudM6bg43bQv+wOHK4w12HNj4um7QtSD2w8ku7DFVRFm
gn0eFJgrjDOqi77zDP7DUbiyXa7YMR8kH4vabV2hJm1iBmdrn0fgIvMGPJFs+OfD
uQ0nLw8TtndV6aREww6FxBz2y/D36Wj4ftjAB2yFmkBz66UqoYvVYBVcEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtt+42XJMuuDMcebbSGY0vIMASyMB8GA1UdIwQY
MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt
Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx
LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdECZ3mT
WrWexA5sy3j6+EUdLwEHGxGku8oYOOEzOCDWNArGIPWleW3JOFK505k4ZnmC5Rv4
PKWMfsofMmFYssFij3Gww4PosOjR9pC5/o3arWij+KT8C70PNeWX3YwM9DEijmyF
9L/An0HKO/RimDhWT71FnFO+bw3vF0mVyel1QI+jnCBn1tcwL3G/sgyJzxSXaQ1x
o6RzULxns61SZ8wuVxeRHKAFu62MFUyzR3Gpb9MzxfStXTYTIAKy7vM4EQL5Tn7a
ST9X8wCTKVT/tGEV4pNhb0KlhUoP2cHNIH9uPDQz340JQhznyO4e3j6dU/XbvGPJ
NWorQbUBzloX3w==
-----END CERTIFICATE-----