Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          UDDGE65uu0DHIkxDn2pFbylHVyy9SzFuE/fw1WW06LY=
Subject key identifier:   60:9C:37:0C:A3:80:6D:6E:D1:6B:E0:18:06:A9:93:81:0B:22:7F:A0
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       0195E00F97110C9F194918060F7E3C740E47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          14F0
Signing time:             Sat 29 Mar 2025 04:01:12 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:12 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:12 +0000
Files and hashes:         1: NiGYqg5TAswBXGUoDDk3K-vSfzg.roa (hash: oBryaxq11NqGZi9VWM48AWdrC2u99cuTtHQY7Z60FIs=)
                          2: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (hash: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=)
                          3: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (hash: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=)
                          4: bjCT3AVcMSsUvzlUV22vDpDgm88.roa (hash: x4ngTz88Z2Xqe2E3hfhNz2+VZin5gGJSvgjTiP2om64=)
                          5: fkq-oahmsSqrVUTtF-STfDckmnU.roa (hash: mVtrIUuQCxsrmw0YepuR3MHRKtv6BfBxn8f0qa7KMLk=)
                          6: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: 55IBM/bpkXBrj/1//uyfw5Y3gVc67pwm4YXItuctipE=)
                          7: u7Bic-zzMP1Iys3M73ZkiMffy74.roa (hash: PFfJrw/TlR3YpR2p/4mJqLKX4yyUo6fGvlNS1uayrpc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:97:11:0c:9f:19:49:18:06:0f:7e:3c:74:0e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Mar 29 04:01:12 2025 GMT
            Not After : Mar 30 04:01:12 2025 GMT
        Subject: CN=609c370ca3806d6ed16be01806a993810b227fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:0e:11:96:10:60:b9:64:49:e6:a8:a5:81:
                    a0:88:cf:6d:ba:43:64:84:43:e1:ab:2e:14:21:21:
                    43:bf:54:ff:f9:3f:f1:80:be:e9:4d:c6:0e:6b:a2:
                    c2:46:1e:d4:1d:2a:02:91:2c:3e:93:01:2d:7d:5f:
                    ab:6c:ed:39:db:29:4e:be:1f:e3:e7:4a:c1:9e:ca:
                    11:74:a3:4a:09:cc:41:36:fd:a8:16:c4:05:42:37:
                    1a:86:37:a3:97:f9:fa:0f:8b:66:d6:b4:91:63:3a:
                    e9:ae:d3:b1:a2:52:2e:d5:42:3b:23:cd:7d:9e:19:
                    f9:e7:5e:0e:23:53:46:29:d1:9c:0a:a4:f1:3c:ab:
                    f1:a0:26:b8:07:27:0d:11:31:1a:0d:b1:2b:24:21:
                    de:60:01:f7:96:67:3b:24:97:b6:b0:cb:32:2b:43:
                    2f:de:42:ec:1b:27:72:69:f4:75:16:e8:43:15:c7:
                    d5:8d:8e:c0:35:ff:88:e6:f3:2c:d7:1b:9b:81:35:
                    e5:70:46:07:c6:62:4f:62:ad:d5:cd:8c:b8:69:9e:
                    26:28:f2:aa:fc:5a:78:5b:92:e8:5b:41:ba:d5:0d:
                    81:69:a6:57:a8:d6:81:cd:21:70:67:29:c7:88:be:
                    14:fd:ba:ee:3d:0a:b7:4b:7e:7b:5a:9a:86:8c:9c:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9C:37:0C:A3:80:6D:6E:D1:6B:E0:18:06:A9:93:81:0B:22:7F:A0
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2e:77:60:73:c9:bb:97:27:ee:75:55:61:dc:43:43:a3:9e:
         24:ef:4f:d7:52:3e:09:9d:15:ad:54:fb:00:d2:fc:f1:bf:96:
         6d:0a:eb:22:ab:07:40:7f:22:b6:c3:d7:c0:45:4d:e3:97:a1:
         3a:0a:d5:60:cf:5d:b0:0f:a1:e0:0a:f9:43:13:c9:f0:1f:00:
         b3:d0:39:fe:4e:90:9d:f7:23:3a:7d:89:73:ca:28:f8:44:68:
         43:c3:55:7b:50:81:97:bb:04:c1:bf:89:ea:e9:02:31:6c:6a:
         d2:f5:18:6a:a5:f0:64:90:c9:7e:52:0f:03:92:5c:46:03:a8:
         0b:ce:d4:ed:0b:21:76:e8:bc:e2:c9:9f:bc:fd:53:59:57:1f:
         8c:96:c8:e2:06:34:39:18:05:b2:0e:a9:ef:fa:d7:a6:94:02:
         a7:0d:aa:2d:f9:78:a1:70:67:b8:dd:d5:8d:90:fe:15:d3:84:
         d9:a6:7f:dd:3b:d1:8f:d2:65:bb:4c:4b:27:62:d1:0f:28:c3:
         cd:54:a8:10:d5:62:6d:87:35:90:52:36:68:80:4e:d3:b3:42:
         ff:bc:dc:0b:e6:35:16:21:77:6b:ef:1e:4f:e0:88:00:43:bb:
         ab:e7:d3:d2:f6:4a:08:62:94:9a:48:a8:af:92:42:82:51:00:
         3f:91:14:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD5cRDJ8ZSRgGD348dA5HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy
NWM0NDkwHhcNMjUwMzI5MDQwMTEyWhcNMjUwMzMwMDQwMTEyWjAzMTEwLwYDVQQD
Eyg2MDljMzcwY2EzODA2ZDZlZDE2YmUwMTgwNmE5OTM4MTBiMjI3ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8wOEZYQYLlkSeaopYGgiM9tukNk
hEPhqy4UISFDv1T/+T/xgL7pTcYOa6LCRh7UHSoCkSw+kwEtfV+rbO052ylOvh/j
50rBnsoRdKNKCcxBNv2oFsQFQjcahjejl/n6D4tm1rSRYzrprtOxolIu1UI7I819
nhn5514OI1NGKdGcCqTxPKvxoCa4BycNETEaDbErJCHeYAH3lmc7JJe2sMsyK0Mv
3kLsGydyafR1FuhDFcfVjY7ANf+I5vMs1xubgTXlcEYHxmJPYq3VzYy4aZ4mKPKq
/Fp4W5LoW0G61Q2BaaZXqNaBzSFwZynHiL4U/bruPQq3S357WpqGjJyiIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCcNwyjgG1u0WvgGAapk4ELIn+gMB8GA1UdIwQY
MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt
Njk4OTBjODI5ZTMzLzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz
LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHC53YHPJ
u5cn7nVVYdxDQ6OeJO9P11I+CZ0VrVT7ANL88b+WbQrrIqsHQH8itsPXwEVN45eh
OgrVYM9dsA+h4Ar5QxPJ8B8As9A5/k6QnfcjOn2Jc8oo+ERoQ8NVe1CBl7sEwb+J
6ukCMWxq0vUYaqXwZJDJflIPA5JcRgOoC87U7Qshdui84smfvP1TWVcfjJbI4gY0
ORgFsg6p7/rXppQCpw2qLfl4oXBnuN3VjZD+FdOE2aZ/3TvRj9Jlu0xLJ2LRDyjD
zVSoENVibYc1kFI2aIBO07NC/7zcC+Y1FiF3a+8eT+CIAEO7q+fT0vZKCGKUmkio
r5JCglEAP5EUwA==
-----END CERTIFICATE-----