Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File:                     8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier:          lhtVtuKwN/E/TOJYtG3MRuqAcbRDTshK9RH1KMINZfI=
Subject key identifier:   17:9E:F3:E3:1B:EE:02:C6:36:4A:18:2B:04:FA:00:F4:2D:74:11:E4
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer:       /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial:       0195E190832FAD9AB9E522A3DF3E5EF05032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number:          0BB9
Signing time:             Sat 29 Mar 2025 11:01:39 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:39 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:39 +0000
Files and hashes:         1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: adyVLMDYHBBaI4Zw1GQF+RQPrlb4zF2Iadj/6En7EDg=)
                          2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:83:2f:ad:9a:b9:e5:22:a3:df:3e:5e:f0:50:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
        Validity
            Not Before: Mar 29 11:01:39 2025 GMT
            Not After : Mar 30 11:01:39 2025 GMT
        Subject: CN=179ef3e31bee02c6364a182b04fa00f42d7411e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:79:1b:29:31:17:22:81:c4:8f:c8:8a:83:b4:
                    1c:43:52:59:7c:d8:54:fc:e1:83:ab:7f:b4:97:1c:
                    84:76:5e:d1:82:c1:a9:47:43:e6:db:9d:98:52:ea:
                    42:14:d4:69:52:dc:8a:c3:37:12:58:8c:65:94:47:
                    9b:14:5c:11:b6:2f:8c:4e:0d:26:26:4a:6b:4b:61:
                    7b:68:67:d9:4d:23:1f:19:af:fc:db:86:88:38:7a:
                    f6:5c:ae:e3:d8:cd:0b:7b:d5:e3:08:e4:40:c4:2f:
                    d5:67:08:11:6c:97:64:53:bb:84:0a:49:50:97:c3:
                    95:4d:fa:9b:54:80:0d:7c:6f:8a:93:4f:28:38:49:
                    70:50:a1:0c:f2:73:57:53:e9:3d:6c:f1:f4:6c:71:
                    62:71:61:95:42:a3:93:60:58:d8:3c:fd:6f:bc:c4:
                    78:08:db:ca:13:42:b5:b1:82:7c:ba:dd:1e:36:93:
                    52:9a:e6:67:ee:fd:7a:19:2c:92:13:fc:8d:77:45:
                    6e:ab:4c:ae:ba:11:32:b5:17:2d:0d:1c:f8:a5:a8:
                    94:88:f3:d2:a8:27:2a:f2:f1:79:2b:e5:d6:c8:2e:
                    ae:71:c2:2d:59:e3:b1:b3:c3:a7:6f:46:b6:c3:d6:
                    aa:6d:20:5c:fb:cf:f8:83:ca:04:cb:6b:72:dc:cb:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:F3:E3:1B:EE:02:C6:36:4A:18:2B:04:FA:00:F4:2D:74:11:E4
            X509v3 Authority Key Identifier:
                keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:88:36:63:9b:fd:da:ad:b2:d5:06:16:f6:d0:67:9f:11:6a:
         de:13:d6:56:f4:9c:50:ff:62:ac:9e:4e:a4:78:2b:df:46:1a:
         9e:71:c2:bf:54:a0:ed:fa:ba:ac:6b:5e:e8:72:9d:0c:23:91:
         c0:96:ec:81:1f:34:53:c8:29:18:98:92:50:7b:0e:ac:47:d5:
         7e:96:4c:bc:27:cf:f8:77:c5:eb:58:e7:aa:62:08:70:8e:19:
         34:46:a9:70:08:cf:e2:ff:8b:2d:67:03:35:1f:b2:c6:18:b1:
         e8:d5:71:54:d9:e5:3f:47:55:bc:ff:5a:b7:bc:d1:04:b7:9f:
         6a:c4:08:55:c0:eb:1c:36:be:96:f5:0d:21:fe:ba:a4:9a:42:
         fd:98:be:53:a8:5c:d5:f2:ed:b1:42:6c:4f:d5:d1:b8:7a:71:
         b7:1a:d9:89:6e:a9:64:7f:8f:a4:27:20:82:10:3d:5a:75:14:
         db:39:3e:4b:94:47:0e:92:38:9a:07:e6:39:15:09:0a:19:14:
         6c:2f:9d:68:49:08:91:98:32:c8:1b:eb:b9:e4:e4:5f:bf:37:
         e5:52:54:6a:d9:50:00:46:5f:42:fc:3d:ba:73:be:0c:bc:c7:
         81:c6:0b:7b:4c:07:a7:e9:40:ba:ee:85:6d:a5:6b:b4:44:68:
         88:3a:c6:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkIMvrZq55SKj3z5e8FAyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDVkNDRhMWVlMDU4NTNjZDU4OTI2NTQzMzRiMWYyMWNl
ODI2ZDQwHhcNMjUwMzI5MTEwMTM5WhcNMjUwMzMwMTEwMTM5WjAzMTEwLwYDVQQD
EygxNzllZjNlMzFiZWUwMmM2MzY0YTE4MmIwNGZhMDBmNDJkNzQxMWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHkbKTEXIoHEj8iKg7QcQ1JZfNhU
/OGDq3+0lxyEdl7RgsGpR0Pm252YUupCFNRpUtyKwzcSWIxllEebFFwRti+MTg0m
JkprS2F7aGfZTSMfGa/824aIOHr2XK7j2M0Le9XjCORAxC/VZwgRbJdkU7uECklQ
l8OVTfqbVIANfG+Kk08oOElwUKEM8nNXU+k9bPH0bHFicWGVQqOTYFjYPP1vvMR4
CNvKE0K1sYJ8ut0eNpNSmuZn7v16GSySE/yNd0Vuq0yuuhEytRctDRz4paiUiPPS
qCcq8vF5K+XWyC6uccItWeOxs8Onb0a2w9aqbSBc+8/4g8oEy2ty3MvLzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBee8+Mb7gLGNkoYKwT6APQtdBHkMB8GA1UdIwQY
MBaAFPFF1Eoe4FhTzViSZUM0sfIc6CbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYt
M2RiY2RmNzc5ZjI0LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80ZjgxMzUtYWEyNC00NGE0LWE1NDYtM2RiY2RmNzc5ZjI0
LzEvOFVYVVNoN2dXRlBOV0pKbFF6U3g4aHpvSnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYg2Y5v9
2q2y1QYW9tBnnxFq3hPWVvScUP9irJ5OpHgr30YannHCv1Sg7fq6rGte6HKdDCOR
wJbsgR80U8gpGJiSUHsOrEfVfpZMvCfP+HfF61jnqmIIcI4ZNEapcAjP4v+LLWcD
NR+yxhix6NVxVNnlP0dVvP9at7zRBLefasQIVcDrHDa+lvUNIf66pJpC/Zi+U6hc
1fLtsUJsT9XRuHpxtxrZiW6pZH+PpCcgghA9WnUU2zk+S5RHDpI4mgfmORUJChkU
bC+daEkIkZgyyBvrueTkX7835VJUatlQAEZfQvw9unO+DLzHgcYLe0wHp+lAuu6F
baVrtERoiDrG9A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:43 2025 by rpki-client