Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
File:                     uxkNECrJYDtAWzY3TUKYaGBJN68.mft (raw, json)
Hash identifier:          bWCJ4hs4vk2ozZpr78wsyKXnDfo2jrG8XuXXRIA+jSs=
Subject key identifier:   77:72:69:B0:29:37:5C:52:BA:BC:01:BB:49:A4:F3:AB:3B:D9:E6:C2
Authority key identifier: BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF
Certificate issuer:       /CN=bb190d102ac9603b405b36374d429868604937af
Certificate serial:       0195E122124F4C725BB5AE192CD6A27527E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft
Manifest number:          14C7
Signing time:             Sat 29 Mar 2025 09:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:01 +0000
Files and hashes:         1: KHPRuQDdd-kWMT7LTpUd4Jl5CLc.roa (hash: HHEh/ZmjNau8OqCWaktRrOiEVjCo5faN7oV96b1l4Q8=)
                          2: XFCSXye-JnBOg9hkUt9_8ox3-Uw.roa (hash: FoESmWnbukcz+6JNvVonKCdjus3ZKbyt/TOI4oU59NU=)
                          3: uxkNECrJYDtAWzY3TUKYaGBJN68.crl (hash: DYit+Ccg04e6s0Tfs0siB0FXEouSZIIQo3S94ERX9j4=)
                          4: znWJMiIkbWYiZH5TnewK7kB2zlM.roa (hash: RcLXWJX+JRUva9upa5qvKXN11LB1V2q/utprJ1zUPOo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:12:4f:4c:72:5b:b5:ae:19:2c:d6:a2:75:27:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb190d102ac9603b405b36374d429868604937af
        Validity
            Not Before: Mar 29 09:01:01 2025 GMT
            Not After : Mar 30 09:01:01 2025 GMT
        Subject: CN=777269b029375c52babc01bb49a4f3ab3bd9e6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:86:f8:cb:e3:54:c2:d1:9c:08:ff:60:4d:
                    47:db:62:f7:90:73:3b:40:8c:3b:51:a9:a9:5c:13:
                    21:c1:39:67:63:50:75:98:aa:e5:d7:89:a6:8c:c7:
                    c8:a5:d8:97:06:d2:67:0a:09:a0:49:80:d7:c3:bf:
                    ee:a6:f2:4d:33:ab:57:d3:d3:26:86:7f:73:82:8f:
                    45:17:32:10:84:0b:77:46:f6:17:48:8a:05:e8:e9:
                    18:2a:71:fd:f3:b4:81:38:d7:56:ad:21:c3:44:80:
                    51:a0:e1:1d:8e:97:da:e2:e6:5d:15:0c:c2:46:37:
                    d3:c1:23:e5:e8:9d:13:20:54:7c:7f:d7:f3:5d:25:
                    c9:b0:5c:db:03:d8:ec:cb:f5:d7:2c:9b:8d:e5:65:
                    8c:26:eb:5e:8c:17:ce:18:61:1a:ae:2a:18:da:98:
                    6e:b4:5b:43:70:3c:1a:81:fa:0c:27:f6:91:4a:ad:
                    51:97:ae:64:e5:61:b8:de:4f:06:57:e7:85:1e:90:
                    5d:9e:ca:08:82:f5:d5:dd:90:72:22:53:28:99:bd:
                    c1:7a:ac:97:67:0c:0b:0a:92:62:f7:16:62:2c:b4:
                    8d:0e:a6:83:37:5a:4f:8e:9a:41:0b:fc:75:9a:27:
                    91:92:16:e6:b5:f1:2e:64:8b:ff:5f:9b:2d:20:cc:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:72:69:B0:29:37:5C:52:BA:BC:01:BB:49:A4:F3:AB:3B:D9:E6:C2
            X509v3 Authority Key Identifier:
                keyid:BB:19:0D:10:2A:C9:60:3B:40:5B:36:37:4D:42:98:68:60:49:37:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uxkNECrJYDtAWzY3TUKYaGBJN68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6369e6-2304-4922-afdf-e93e2eba69b9/1/uxkNECrJYDtAWzY3TUKYaGBJN68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:d1:67:9a:fb:99:10:82:71:a0:05:07:9c:38:90:51:f2:e7:
         fa:ed:46:14:bb:22:55:7c:f3:18:b0:b2:37:f7:b2:36:ce:c7:
         80:24:5d:c6:48:72:97:68:31:d6:56:5e:c6:47:2c:0b:37:68:
         ac:0f:05:b7:c3:69:f0:00:c5:09:b0:45:09:3f:26:86:27:e5:
         59:db:35:39:62:8a:d5:e0:6d:c5:a0:7b:12:a4:7e:8c:db:7b:
         66:ae:cf:ec:87:c6:08:30:47:9a:1f:45:09:c7:2d:df:f4:dd:
         b4:0e:4d:49:24:49:b0:ce:6a:0b:3a:82:12:a6:22:6f:64:75:
         14:1c:0f:99:e7:5b:31:bd:31:25:cd:87:3c:a5:1f:82:12:5d:
         62:2d:ba:73:f0:c3:c2:11:4c:fd:2e:03:4f:c7:50:1f:1d:0b:
         7a:e9:cf:35:d6:f4:c7:ac:e9:98:70:75:5e:31:46:5a:31:6d:
         74:1d:5f:54:23:70:06:a7:44:f0:de:c7:07:71:c3:73:44:ce:
         d7:d3:27:72:1c:e0:2b:f3:d2:ea:bf:31:a0:7c:a2:31:14:a2:
         dc:0c:7f:6c:9e:c0:55:a1:3b:54:7a:6a:db:88:ef:59:be:ac:
         17:46:b8:aa:24:29:6f:87:b9:88:9a:20:3c:49:88:76:38:97:
         da:b8:fe:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIhJPTHJbta4ZLNaidSfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMTkwZDEwMmFjOTYwM2I0MDViMzYzNzRkNDI5ODY4NjA0
OTM3YWYwHhcNMjUwMzI5MDkwMTAxWhcNMjUwMzMwMDkwMTAxWjAzMTEwLwYDVQQD
Eyg3NzcyNjliMDI5Mzc1YzUyYmFiYzAxYmI0OWE0ZjNhYjNiZDllNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv2G+MvjVMLRnAj/YE1H22L3kHM7
QIw7UampXBMhwTlnY1B1mKrl14mmjMfIpdiXBtJnCgmgSYDXw7/upvJNM6tX09Mm
hn9zgo9FFzIQhAt3RvYXSIoF6OkYKnH987SBONdWrSHDRIBRoOEdjpfa4uZdFQzC
RjfTwSPl6J0TIFR8f9fzXSXJsFzbA9jsy/XXLJuN5WWMJutejBfOGGEarioY2phu
tFtDcDwagfoMJ/aRSq1Rl65k5WG43k8GV+eFHpBdnsoIgvXV3ZByIlMomb3BeqyX
ZwwLCpJi9xZiLLSNDqaDN1pPjppBC/x1mieRkhbmtfEuZIv/X5stIMz4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdyabApN1xSurwBu0mk86s72ebCMB8GA1UdIwQY
MBaAFLsZDRAqyWA7QFs2N01CmGhgSTevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYt
ZTkzZTJlYmE2OWI5LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MzY5ZTYtMjMwNC00OTIyLWFmZGYtZTkzZTJlYmE2OWI5
LzEvdXhrTkVDckpZRHRBV3pZM1RVS1lhR0JKTjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyNFnmvuZ
EIJxoAUHnDiQUfLn+u1GFLsiVXzzGLCyN/eyNs7HgCRdxkhyl2gx1lZexkcsCzdo
rA8Ft8Np8ADFCbBFCT8mhiflWds1OWKK1eBtxaB7EqR+jNt7Zq7P7IfGCDBHmh9F
Ccct3/TdtA5NSSRJsM5qCzqCEqYib2R1FBwPmedbMb0xJc2HPKUfghJdYi26c/DD
whFM/S4DT8dQHx0LeunPNdb0x6zpmHB1XjFGWjFtdB1fVCNwBqdE8N7HB3HDc0TO
19MnchzgK/PS6r8xoHyiMRSi3Ax/bJ7AVaE7VHpq24jvWb6sF0a4qiQpb4e5iJog
PEmIdjiX2rj+Gg==
-----END CERTIFICATE-----