Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
File:                     lD4_SFbawqAFw6UjRxFN7EU5NLg.mft (raw, json)
Hash identifier:          XJOwQ9quvNnvt74EQ61obJ8uV0QEjbpBVnW/sN6XIHA=
Subject key identifier:   94:71:35:2B:7D:CB:4B:84:BA:70:B8:7F:27:98:76:CA:61:D2:8E:72
Authority key identifier: 94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8
Certificate issuer:       /CN=943e3f4856dac2a005c3a52347114dec453934b8
Certificate serial:       0195DFD89D7CE65652513394A7BAB3AB0EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft
Manifest number:          14CE
Signing time:             Sat 29 Mar 2025 03:01:09 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:09 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:09 +0000
Files and hashes:         1: 1-wnHFiYjnB24GxLV0meyzqsLFuM.roa (hash: LOVK3lUPwn84ZhS3ik+53n7gRvihYYPhPwXZjIMuf0A=)
                          2: WkUeJeS2VIWyHMQB6OP6WxpRtuE.roa (hash: moR9C1uw6Uz7LXM37ENpKv40O3dD16LP7ICWKr7IDI0=)
                          3: Z0VohfzyIiLuyi-Hcs3EfPggoAs.roa (hash: dePmJdyQAMKfk9z1bRk5VV+9WiuJD5hNdYIl1QjUe2w=)
                          4: _9QXHDXD2W0fy8-Ix1_61oUgOdw.roa (hash: PBxel1cKi46iaG0YRLkS2zvm3xWWCreZ2nu/52SigQM=)
                          5: djxHGgUqKdNcqVM8z_uuH6OIUlc.roa (hash: wgIdr0CUuczPiiAnFOZrV9fosozOElD12J6XrjtfSGs=)
                          6: lD4_SFbawqAFw6UjRxFN7EU5NLg.crl (hash: RCcy4fPJ6wymu2NbgM9ucMLtlMcc2zsAEFs718Pgy5I=)
                          7: vgcjTeJgjqzs04Lo8DPrBtZnGbs.roa (hash: iV57rW45EBrtatSEbslptILthc80jn2LQS91fPeJvUo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:9d:7c:e6:56:52:51:33:94:a7:ba:b3:ab:0e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943e3f4856dac2a005c3a52347114dec453934b8
        Validity
            Not Before: Mar 29 03:01:09 2025 GMT
            Not After : Mar 30 03:01:09 2025 GMT
        Subject: CN=9471352b7dcb4b84ba70b87f279876ca61d28e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:59:55:ce:64:cb:86:15:b3:38:bb:3d:d8:67:
                    12:de:04:7c:af:24:7c:b3:f0:95:87:16:b9:49:27:
                    63:7f:54:b7:14:93:e3:37:d5:49:8b:30:7a:e1:d9:
                    85:f9:57:ed:b9:66:18:0c:2b:1e:96:f7:90:4e:4b:
                    6a:bd:9f:d6:c4:9c:bd:5d:9f:7c:ba:4c:06:be:b2:
                    b6:2d:4d:f9:cb:b6:4f:48:6b:50:d1:63:9b:b1:7e:
                    1f:8c:56:81:ac:a9:0e:30:e6:95:92:76:e2:f5:39:
                    82:26:c8:fd:6f:6f:1c:09:2d:59:ca:31:d7:b9:72:
                    bb:fc:72:d1:13:6a:e8:99:d9:ab:c3:d9:68:b5:ec:
                    9a:b5:f8:4b:97:c4:d9:d8:5d:36:c5:fa:3b:99:bf:
                    04:2d:9a:b3:1a:d8:66:5d:6d:b6:42:0a:f6:df:46:
                    aa:a2:d7:dc:48:66:da:d4:0d:d2:0b:2b:bf:7c:64:
                    fc:a7:3f:f4:d8:39:52:d0:65:d2:2a:ea:34:ab:e1:
                    1a:19:7e:c4:dd:71:c8:a2:9b:cb:bc:da:dd:2e:58:
                    32:2b:71:c6:de:fb:97:e7:bb:73:6a:59:2f:02:2d:
                    8e:8d:82:5d:1f:e2:8e:75:e4:9d:fa:8e:2c:f7:48:
                    d5:42:a7:65:07:7d:4e:48:00:2a:71:2a:ea:5c:99:
                    c0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:71:35:2B:7D:CB:4B:84:BA:70:B8:7F:27:98:76:CA:61:D2:8E:72
            X509v3 Authority Key Identifier:
                keyid:94:3E:3F:48:56:DA:C2:A0:05:C3:A5:23:47:11:4D:EC:45:39:34:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lD4_SFbawqAFw6UjRxFN7EU5NLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8c1544-7cf2-4871-a1df-0253d04fb8ff/1/lD4_SFbawqAFw6UjRxFN7EU5NLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:5a:c3:5a:36:9b:4a:9b:d0:04:55:cc:c8:a1:54:03:4a:08:
         3c:03:3e:b0:f7:38:90:08:63:74:42:d1:12:89:f5:22:e4:b2:
         ed:d0:4d:61:a8:1d:9a:a3:c0:26:f7:44:06:73:7c:8f:d3:95:
         a1:58:bf:ad:f9:cb:0f:2a:cf:e0:2a:ec:49:77:93:ed:5b:db:
         e6:a9:bf:58:ab:07:51:ef:b1:4c:f6:d9:7f:a9:7a:0e:6c:90:
         45:a3:02:34:ea:b0:e1:f7:3e:85:12:27:fd:88:ea:67:b0:86:
         b5:8a:a8:83:7d:ef:32:56:17:02:4d:19:61:41:59:83:fe:89:
         03:46:b5:d7:09:f5:31:18:2d:99:e3:68:df:a1:00:60:ee:2a:
         59:99:d1:81:b6:5b:e3:96:f1:ef:da:84:75:8b:0a:92:90:a7:
         c3:9b:ec:c0:3f:c4:14:09:8f:76:ac:64:51:3a:c8:c2:81:88:
         78:fc:84:38:e2:ee:cb:c9:0a:48:cb:89:bf:5c:54:c8:91:5d:
         db:84:ce:c0:8d:0a:89:d5:5c:c0:43:09:25:b6:10:1f:0b:86:
         f0:1a:d9:c9:50:e9:58:5a:d1:e7:65:3a:cc:29:ae:f6:c9:af:
         e5:e9:65:9e:81:d9:01:71:b5:4c:c2:16:33:2f:8a:aa:b6:70:
         97:22:15:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2J185lZSUTOUp7qzqw65MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0M2UzZjQ4NTZkYWMyYTAwNWMzYTUyMzQ3MTE0ZGVjNDUz
OTM0YjgwHhcNMjUwMzI5MDMwMTA5WhcNMjUwMzMwMDMwMTA5WjAzMTEwLwYDVQQD
Eyg5NDcxMzUyYjdkY2I0Yjg0YmE3MGI4N2YyNzk4NzZjYTYxZDI4ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1llVzmTLhhWzOLs92GcS3gR8ryR8
s/CVhxa5SSdjf1S3FJPjN9VJizB64dmF+VftuWYYDCselveQTktqvZ/WxJy9XZ98
ukwGvrK2LU35y7ZPSGtQ0WObsX4fjFaBrKkOMOaVknbi9TmCJsj9b28cCS1ZyjHX
uXK7/HLRE2romdmrw9loteyatfhLl8TZ2F02xfo7mb8ELZqzGthmXW22Qgr230aq
otfcSGba1A3SCyu/fGT8pz/02DlS0GXSKuo0q+EaGX7E3XHIopvLvNrdLlgyK3HG
3vuX57tzalkvAi2OjYJdH+KOdeSd+o4s90jVQqdlB31OSAAqcSrqXJnAiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRxNSt9y0uEunC4fyeYdsph0o5yMB8GA1UdIwQY
MBaAFJQ+P0hW2sKgBcOlI0cRTexFOTS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYt
MDI1M2QwNGZiOGZmLzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84YzE1NDQtN2NmMi00ODcxLWExZGYtMDI1M2QwNGZiOGZm
LzEvbEQ0X1NGYmF3cUFGdzZValJ4Rk43RVU1TkxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY1rDWjab
SpvQBFXMyKFUA0oIPAM+sPc4kAhjdELREon1IuSy7dBNYagdmqPAJvdEBnN8j9OV
oVi/rfnLDyrP4CrsSXeT7Vvb5qm/WKsHUe+xTPbZf6l6DmyQRaMCNOqw4fc+hRIn
/YjqZ7CGtYqog33vMlYXAk0ZYUFZg/6JA0a11wn1MRgtmeNo36EAYO4qWZnRgbZb
45bx79qEdYsKkpCnw5vswD/EFAmPdqxkUTrIwoGIePyEOOLuy8kKSMuJv1xUyJFd
24TOwI0KidVcwEMJJbYQHwuG8BrZyVDpWFrR52U6zCmu9smv5ellnoHZAXG1TMIW
My+KqrZwlyIV9Q==
-----END CERTIFICATE-----