Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
File:                     9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json)
Hash identifier:          0KCXyFPp/N0OXtVHxfLlTAQOiz0gVJWbabc7A4MK+Rk=
Subject key identifier:   B0:D0:BF:0C:07:BB:68:7A:61:84:03:5A:65:E9:6F:90:E2:67:9E:FC
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Certificate issuer:       /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial:       0195DFD931266FA51D038DEA9B6495BB6E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
Manifest number:          14CE
Signing time:             Sat 29 Mar 2025 03:01:47 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:47 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:47 +0000
Files and hashes:         1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=)
                          2: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=)
                          3: 98--VYzYQvmDhok_sN0s894_jjs.roa (hash: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=)
                          4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: MIN3JJ+txFRJNR9tmjjoSl8EF5SyroPK4LMZUV8qI58=)
                          5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=)
                          6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:31:26:6f:a5:1d:03:8d:ea:9b:64:95:bb:6e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
        Validity
            Not Before: Mar 29 03:01:47 2025 GMT
            Not After : Mar 30 03:01:47 2025 GMT
        Subject: CN=b0d0bf0c07bb687a6184035a65e96f90e2679efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1b:ce:05:d3:7e:51:38:5c:e6:48:07:09:60:
                    47:c4:8a:e1:33:c2:56:43:52:19:49:08:16:34:3e:
                    fb:3c:e2:ac:ce:18:f6:c6:d9:12:74:d6:09:8e:75:
                    05:2d:fc:a9:ad:2c:3d:f4:39:18:17:56:f7:7b:e5:
                    c2:d2:bf:fc:df:7d:b6:fd:91:bf:71:bb:c9:c3:3c:
                    d5:17:f9:bb:b9:bd:9e:c5:80:f9:ce:d7:e8:30:b9:
                    8e:f1:3f:2c:f1:42:da:61:9e:fc:9a:28:86:6e:77:
                    11:54:b6:df:10:ae:8a:c4:a8:99:d5:fe:be:5f:e5:
                    55:06:3b:39:31:74:69:35:92:8e:4b:df:8b:1a:f3:
                    0a:4d:b2:1b:39:ee:65:0a:b0:f8:d0:7a:57:28:c1:
                    0e:48:ad:bd:ed:c4:c3:70:fd:ce:d9:45:66:f5:06:
                    e7:45:9a:15:11:15:24:61:38:aa:0c:50:b1:13:45:
                    4b:ab:39:7d:56:dc:c2:e8:19:5c:79:3d:92:44:8c:
                    fe:73:e2:85:47:fa:62:f8:af:2f:a6:95:bb:f7:40:
                    5d:6f:a0:08:ac:38:fb:ec:fb:60:cc:f1:b7:49:54:
                    74:88:7c:6f:be:bc:3e:f3:3a:69:10:15:35:6a:ef:
                    a4:b5:33:98:f5:1a:97:53:d3:2b:0d:7b:00:67:65:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D0:BF:0C:07:BB:68:7A:61:84:03:5A:65:E9:6F:90:E2:67:9E:FC
            X509v3 Authority Key Identifier:
                keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:de:e6:e7:4b:23:f1:ae:8c:e6:dc:64:94:41:1d:59:d2:40:
         09:dc:bf:ee:55:42:93:28:b3:a9:25:17:43:3b:cc:83:e7:ba:
         27:7a:e8:51:6b:96:d8:9a:b4:43:a4:b8:00:7b:63:ac:3e:9f:
         c9:6a:3e:6f:a4:a6:fe:2e:5f:d1:b1:18:2e:25:78:8a:2d:42:
         ea:b2:d6:46:46:52:e7:6d:a6:ee:3f:3a:06:e0:10:3d:fb:6d:
         ec:59:a6:1e:02:80:c6:1a:43:b4:a7:5d:53:02:b3:2f:d5:bc:
         bf:4e:2f:88:22:b7:d4:66:03:dc:3f:c0:cb:24:35:f4:7c:3b:
         b4:2d:64:b7:00:6a:2d:36:52:22:1e:fd:ed:7a:16:08:07:a4:
         06:0b:f3:c6:ca:0b:f1:a8:d2:cf:77:af:f9:d1:d2:8a:94:a0:
         32:52:70:b4:2f:f9:84:6b:bf:d5:42:0a:dc:17:3a:d0:32:e8:
         a3:8a:d3:09:f5:44:20:27:ef:43:6f:34:0b:18:b8:9a:7c:68:
         38:24:fb:9a:2f:0a:b2:71:71:0d:0f:f6:21:a4:8d:ee:13:3d:
         51:7c:c6:43:d5:ca:38:1d:c8:66:17:64:90:36:bf:19:a1:42:
         39:fb:97:a5:67:26:e5:29:a1:c5:1a:8e:b0:24:1f:30:5e:19:
         8f:53:cb:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2TEmb6UdA43qm2SVu25XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm
ZmM3YzAwHhcNMjUwMzI5MDMwMTQ3WhcNMjUwMzMwMDMwMTQ3WjAzMTEwLwYDVQQD
EyhiMGQwYmYwYzA3YmI2ODdhNjE4NDAzNWE2NWU5NmY5MGUyNjc5ZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxvOBdN+UThc5kgHCWBHxIrhM8JW
Q1IZSQgWND77POKszhj2xtkSdNYJjnUFLfyprSw99DkYF1b3e+XC0r/83322/ZG/
cbvJwzzVF/m7ub2exYD5ztfoMLmO8T8s8ULaYZ78miiGbncRVLbfEK6KxKiZ1f6+
X+VVBjs5MXRpNZKOS9+LGvMKTbIbOe5lCrD40HpXKMEOSK297cTDcP3O2UVm9Qbn
RZoVERUkYTiqDFCxE0VLqzl9VtzC6BlceT2SRIz+c+KFR/pi+K8vppW790Bdb6AI
rDj77PtgzPG3SVR0iHxvvrw+8zppEBU1au+ktTOY9RqXU9MrDXsAZ2Va0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDQvwwHu2h6YYQDWmXpb5DiZ578MB8GA1UdIwQY
MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt
YTZkNDVlZjdkMjI3LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3
LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATd7m50sj
8a6M5txklEEdWdJACdy/7lVCkyizqSUXQzvMg+e6J3roUWuW2Jq0Q6S4AHtjrD6f
yWo+b6Sm/i5f0bEYLiV4ii1C6rLWRkZS522m7j86BuAQPftt7FmmHgKAxhpDtKdd
UwKzL9W8v04viCK31GYD3D/AyyQ19Hw7tC1ktwBqLTZSIh797XoWCAekBgvzxsoL
8ajSz3ev+dHSipSgMlJwtC/5hGu/1UIK3Bc60DLoo4rTCfVEICfvQ280Cxi4mnxo
OCT7mi8KsnFxDQ/2IaSN7hM9UXzGQ9XKOB3IZhdkkDa/GaFCOfuXpWcm5SmhxRqO
sCQfMF4Zj1PL2A==
-----END CERTIFICATE-----