Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
File:                     Xo08C2QUychuPJSnFN-yactekWk.mft (raw, json)
Hash identifier:          pUh1X6vmbuwOnJ72QNKxMI1nkWCpoWNhNubhKrJ05as=
Subject key identifier:   15:71:C0:2A:66:4B:53:B5:94:07:BA:E3:3A:31:49:AE:55:83:8F:24
Authority key identifier: 5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69
Certificate issuer:       /CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
Certificate serial:       0195E00FC320602C299AA4D71264F5CEE3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 04:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:24 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:24 +0000
Files and hashes:         1: 1-tY6XrpLl6k8z4SEpjbzLTNn-Ts.roa (hash: NgyRH1HoSM4A0oGw3/Fq5tCBEmQWMjuDp+Z3SYU6zV0=)
                          2: H6gjp969pDik2dbvAHkeDvA39EU.roa (hash: uTBwtnz4xC6ZHA5AOiAmoUrvWCrVfYHdQ+TO4uHFF8M=)
                          3: Xo08C2QUychuPJSnFN-yactekWk.crl (hash: xsYRjMKNKLOiDGuQLLsGWOPXmGlNDT5xEtF0Ix8lkY4=)
                          4: lZXduURQIAy8fdzIUaz-JWRizD4.roa (hash: vA2TeloqgyuxxL+VT++WEALS/lCOLQ2+y5IcVHn+2Aw=)
                          5: oM8IOquHIgB1YBWLpM1pmBbc7O8.roa (hash: IV7XgqctfzxaP5G+ON8fYqKcchsupNcGfIWY1I+WU3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:c3:20:60:2c:29:9a:a4:d7:12:64:f5:ce:e3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d3c0b6414c9c86e3c94a714dfb269cb5e9169
        Validity
            Not Before: Mar 29 04:01:24 2025 GMT
            Not After : Mar 30 04:01:24 2025 GMT
        Subject: CN=1571c02a664b53b59407bae33a3149ae55838f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:12:33:bb:17:9a:68:52:38:7d:24:8c:ba:
                    16:6e:4b:ce:21:fc:22:cb:bb:15:17:b1:50:90:d4:
                    30:4b:41:5b:13:df:ed:d5:0a:fb:9b:ff:bc:8f:0d:
                    66:8f:c9:65:5c:15:12:1a:48:ae:e8:59:85:bf:e6:
                    22:06:82:d6:0a:dd:48:e4:68:65:8d:db:cc:19:69:
                    b4:34:c2:66:7f:2e:fe:a2:85:4d:98:df:04:f9:08:
                    a3:0a:26:75:b4:61:4c:e2:14:08:32:d1:79:97:f1:
                    75:ac:94:cb:24:34:ef:45:dc:89:08:61:82:fb:ee:
                    9f:da:c7:a9:ea:20:36:df:39:e2:06:b9:dd:af:24:
                    c6:59:e3:8a:20:b4:0c:78:20:bb:20:65:e2:15:f7:
                    08:03:02:8f:a0:92:bc:4a:86:62:f8:b5:87:c1:53:
                    5f:36:0e:0f:98:f9:45:c8:c6:98:d4:2a:e8:b8:a9:
                    70:a2:94:92:a2:ea:82:26:da:fd:34:fe:0a:93:50:
                    0f:85:24:dc:d5:d6:5b:92:2d:c4:a4:07:0a:3c:ab:
                    05:60:77:60:40:eb:72:e8:fb:f3:78:47:de:e2:75:
                    10:01:a7:9e:a9:ec:97:0c:2a:17:ab:b1:a1:45:b9:
                    ae:c3:64:62:c6:be:17:62:d3:31:38:c2:5c:c3:74:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:71:C0:2A:66:4B:53:B5:94:07:BA:E3:3A:31:49:AE:55:83:8F:24
            X509v3 Authority Key Identifier:
                keyid:5E:8D:3C:0B:64:14:C9:C8:6E:3C:94:A7:14:DF:B2:69:CB:5E:91:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo08C2QUychuPJSnFN-yactekWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ec3531-82f8-4b4d-b590-23430950609c/1/Xo08C2QUychuPJSnFN-yactekWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:ba:36:dc:bc:3d:0e:4b:e1:a3:3a:e4:0b:80:3b:ab:06:89:
         ed:b0:96:3a:32:27:b0:2a:6a:d2:c7:97:a8:40:44:60:42:7a:
         e0:7b:46:83:fd:e6:f9:a0:5f:14:3c:d8:09:a0:72:86:27:8f:
         6c:ae:2d:ce:37:76:56:ee:6a:dd:1d:0a:16:2f:ec:7f:2a:d2:
         c3:d4:c6:0d:7f:91:08:7b:e5:82:db:a1:83:fe:6c:b6:49:d3:
         79:8b:07:e2:94:82:4c:a8:28:14:77:ad:1f:d2:02:bf:86:18:
         f4:67:83:7c:96:a8:dd:f3:64:e8:9b:e8:9f:3a:48:19:50:47:
         ca:0d:3d:04:65:67:99:62:a5:c4:f7:92:b9:9e:fc:71:7d:11:
         07:34:08:c9:e7:63:70:7b:c8:2c:6e:09:05:af:38:7a:0e:28:
         e2:ee:e9:43:80:42:63:6d:58:7b:ac:c2:27:e7:a4:d1:96:2e:
         eb:71:79:3b:a7:c3:80:4d:73:81:ee:87:6c:43:01:83:d7:b7:
         23:de:ba:8d:bf:73:6b:36:75:e2:48:5b:f4:4f:71:2a:3c:74:
         64:50:77:c9:af:16:9c:01:71:41:9d:37:b4:9d:d7:77:60:2f:
         29:ba:34:b1:31:d9:dc:fa:37:e5:5d:fb:3a:1c:20:a1:ba:11:
         a6:ca:58:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgD8MgYCwpmqTXEmT1zuO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQzYzBiNjQxNGM5Yzg2ZTNjOTRhNzE0ZGZiMjY5Y2I1
ZTkxNjkwHhcNMjUwMzI5MDQwMTI0WhcNMjUwMzMwMDQwMTI0WjAzMTEwLwYDVQQD
EygxNTcxYzAyYTY2NGI1M2I1OTQwN2JhZTMzYTMxNDlhZTU1ODM4ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2YSM7sXmmhSOH0kjLoWbkvOIfwi
y7sVF7FQkNQwS0FbE9/t1Qr7m/+8jw1mj8llXBUSGkiu6FmFv+YiBoLWCt1I5Ghl
jdvMGWm0NMJmfy7+ooVNmN8E+QijCiZ1tGFM4hQIMtF5l/F1rJTLJDTvRdyJCGGC
++6f2sep6iA23zniBrndryTGWeOKILQMeCC7IGXiFfcIAwKPoJK8SoZi+LWHwVNf
Ng4PmPlFyMaY1CrouKlwopSSouqCJtr9NP4Kk1APhSTc1dZbki3EpAcKPKsFYHdg
QOty6PvzeEfe4nUQAaeeqeyXDCoXq7GhRbmuw2Rixr4XYtMxOMJcw3QN2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVxwCpmS1O1lAe64zoxSa5Vg48kMB8GA1UdIwQY
MBaAFF6NPAtkFMnIbjyUpxTfsmnLXpFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAt
MjM0MzA5NTA2MDljLzEvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lYzM1MzEtODJmOC00YjRkLWI1OTAtMjM0MzA5NTA2MDlj
LzEvWG8wOEMyUVV5Y2h1UEpTbkZOLXlhY3Rla1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALro23Lw9
DkvhozrkC4A7qwaJ7bCWOjInsCpq0seXqEBEYEJ64HtGg/3m+aBfFDzYCaByhieP
bK4tzjd2Vu5q3R0KFi/sfyrSw9TGDX+RCHvlgtuhg/5stknTeYsH4pSCTKgoFHet
H9ICv4YY9GeDfJao3fNk6JvonzpIGVBHyg09BGVnmWKlxPeSuZ78cX0RBzQIyedj
cHvILG4JBa84eg4o4u7pQ4BCY21Ye6zCJ+ek0ZYu63F5O6fDgE1zge6HbEMBg9e3
I966jb9zazZ14khb9E9xKjx0ZFB3ya8WnAFxQZ03tJ3Xd2AvKbo0sTHZ3Po35V37
OhwgoboRpspYbw==
-----END CERTIFICATE-----