Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
File:                     iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft (raw, json)
Hash identifier:          mAtqp1LKEedgc/xwvXw7l+3SdB2nPEmJXTHvvc2mWWw=
Subject key identifier:   23:F2:EB:8F:2E:5F:F4:33:98:8C:0C:13:9C:5E:55:AF:5C:C5:07:3C
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Certificate issuer:       /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial:       0195E04665BF6A11129703F91C2B56C27131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
Manifest number:          14D0
Signing time:             Sat 29 Mar 2025 05:01:04 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:04 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:04 +0000
Files and hashes:         1: 1hGfq7Np-lC5zqkd-UT0koXInYM.roa (hash: IolKuhXpkJOZaKvUYrnuFzhweh0wUA9JjzSA29FK4X0=)
                          2: OKSpYrLatEWj0ajOMlnkl0RP5oU.roa (hash: A3Q0jZ1iyPESI+l4cyY/4KEw8Naq+QWll8F7NuPp7jY=)
                          3: PLd2rwZg3BIFbLdVMuwtqawwJvA.roa (hash: gUsiRiMGcsZ6xvt9E4RkFX3vwnGKGG3T/EDvqaLktLs=)
                          4: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (hash: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=)
                          5: Te2XnOHoF3kxEXlzUZBzf1wEQAw.roa (hash: MqV2PMMmoiIdPWIHn+RrSp4UgSOKiV5NzoDXudREYfo=)
                          6: UYdwUM3DfeHmFmZCeWtOn3yoNG4.roa (hash: BZ3e9G1LFxjJ3lhwzouEb+QxxMJLc2utfmKL1mbzfmY=)
                          7: iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl (hash: GffEGbvsPCi9UznBq+4VlP65u4o0/MISTtpZycNupd0=)
                          8: qDeEtGfZREAKrCYzj77GIoMaflI.roa (hash: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=)
                          9: rjPYT3hASUgJ6V6pMv8rczg7wDI.roa (hash: gjugzVDut3tOkBALsAOUch2hCi+rlYTeCTT5ZsnsEbg=)
                          10: w4BFMIHTNaFjHcRjMoBiDbI7zmk.roa (hash: vJoeMgJNOYp1THBJib5QAyACrsySmDjtx1d5b0MPo9k=)
                          11: xgdaw_rveHEK5d7Lv8gByebbpYM.roa (hash: EozZHq6IPOfxAVYv3DQOy1kcFkmojoflMd4HHwmO24Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:65:bf:6a:11:12:97:03:f9:1c:2b:56:c2:71:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
        Validity
            Not Before: Mar 29 05:01:04 2025 GMT
            Not After : Mar 30 05:01:04 2025 GMT
        Subject: CN=23f2eb8f2e5ff433988c0c139c5e55af5cc5073c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:16:8c:52:8e:4f:5b:1a:46:9a:96:48:f6:
                    dc:3d:7e:12:c7:b3:94:8f:58:6b:08:af:77:d6:14:
                    9c:4c:23:d5:8f:3e:3b:13:09:43:39:18:6f:b1:7f:
                    7a:da:ef:4e:71:8d:38:7b:f9:f0:bb:c9:0a:8b:33:
                    d2:23:b8:f1:c8:63:c9:ef:2c:59:ec:78:be:3c:60:
                    b1:ca:4e:24:7b:fb:3b:7e:f1:a9:dd:a1:ab:f9:c2:
                    0f:09:c7:4e:e4:f1:46:8e:d2:e2:e0:d9:bf:50:89:
                    70:7a:f7:e8:c2:2a:30:ea:69:43:44:10:87:38:94:
                    34:84:6a:37:73:93:e9:77:29:c6:88:ab:8f:d7:eb:
                    44:50:97:28:15:d0:61:8c:ef:84:d8:82:7f:79:d3:
                    3f:00:82:2e:da:8d:74:bc:28:8a:eb:01:87:7e:fb:
                    9b:46:fb:5d:b0:91:53:92:87:8d:fa:e6:49:c1:43:
                    7a:3d:73:14:72:78:3c:e8:44:83:17:9c:f8:f7:f2:
                    7a:fb:f0:05:af:c3:56:4b:c6:d8:42:07:98:e1:50:
                    3b:81:2c:6e:a0:91:40:d1:c8:83:1e:78:a1:dd:45:
                    21:29:1e:30:3e:f2:36:d4:03:1a:7e:6f:bd:73:56:
                    07:81:67:2c:75:c9:ea:3e:fc:42:ad:ad:24:0e:ac:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F2:EB:8F:2E:5F:F4:33:98:8C:0C:13:9C:5E:55:AF:5C:C5:07:3C
            X509v3 Authority Key Identifier:
                keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:54:4a:30:9b:a4:86:d2:48:73:f7:29:91:e6:04:47:c7:5a:
         85:2e:c1:a4:77:f8:84:ca:41:5b:45:4e:44:48:8c:33:9f:54:
         d0:67:28:a2:62:5b:1e:48:92:dc:ed:8c:19:38:f5:45:83:6e:
         7b:98:ea:d8:a4:fd:53:99:18:22:5c:f9:08:32:18:09:09:90:
         2e:b8:62:72:f4:7e:4d:a1:a8:34:ef:2a:7d:f8:e8:10:0b:a1:
         48:61:ed:0c:1f:f7:16:d1:99:0d:93:33:19:7c:1f:34:23:b0:
         73:38:6f:ed:c7:b6:83:47:e2:ed:27:2a:e0:79:68:08:88:b6:
         58:b2:06:df:67:00:a0:de:0e:9f:ee:4e:eb:e9:b0:50:25:3d:
         89:74:18:29:a2:1d:ea:7b:15:ce:80:b1:21:d7:df:a8:f1:11:
         2f:d1:28:bb:b6:f1:27:bd:df:2a:4e:22:35:9d:2b:33:b8:9b:
         f1:8b:99:aa:de:d9:6c:36:97:3d:cc:ab:9e:9e:c5:2c:10:1a:
         20:7f:8e:33:7b:1e:cf:58:3d:c0:e1:21:33:11:b9:fa:e4:bd:
         14:2f:59:a7:9f:00:23:64:4a:a1:52:44:1c:16:7f:d4:4b:03:
         49:26:ab:8d:b8:76:03:50:71:9f:8b:2c:12:04:de:0b:e5:be:
         55:04:78:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgRmW/ahESlwP5HCtWwnExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez
ZGY5MjIwHhcNMjUwMzI5MDUwMTA0WhcNMjUwMzMwMDUwMTA0WjAzMTEwLwYDVQQD
EygyM2YyZWI4ZjJlNWZmNDMzOTg4YzBjMTM5YzVlNTVhZjVjYzUwNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOQWjFKOT1saRpqWSPbcPX4Sx7OU
j1hrCK931hScTCPVjz47EwlDORhvsX962u9OcY04e/nwu8kKizPSI7jxyGPJ7yxZ
7Hi+PGCxyk4ke/s7fvGp3aGr+cIPCcdO5PFGjtLi4Nm/UIlwevfowiow6mlDRBCH
OJQ0hGo3c5PpdynGiKuP1+tEUJcoFdBhjO+E2IJ/edM/AIIu2o10vCiK6wGHfvub
RvtdsJFTkoeN+uZJwUN6PXMUcng86ESDF5z49/J6+/AFr8NWS8bYQgeY4VA7gSxu
oJFA0ciDHnih3UUhKR4wPvI21AMafm+9c1YHgWcsdcnqPvxCra0kDqxUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPy648uX/QzmIwME5xeVa9cxQc8MB8GA1UdIwQY
MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFRKMJuk
htJIc/cpkeYER8dahS7BpHf4hMpBW0VOREiMM59U0GcoomJbHkiS3O2MGTj1RYNu
e5jq2KT9U5kYIlz5CDIYCQmQLrhicvR+TaGoNO8qffjoEAuhSGHtDB/3FtGZDZMz
GXwfNCOwczhv7ce2g0fi7Scq4HloCIi2WLIG32cAoN4On+5O6+mwUCU9iXQYKaId
6nsVzoCxIdffqPERL9Eou7bxJ73fKk4iNZ0rM7ib8YuZqt7ZbDaXPcyrnp7FLBAa
IH+OM3sez1g9wOEhMxG5+uS9FC9Zp58AI2RKoVJEHBZ/1EsDSSarjbh2A1Bxn4ss
EgTeC+W+VQR4LQ==
-----END CERTIFICATE-----