Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
File:                     ysIWQb28-sJMVLakhZSDxeQWQLY.mft (raw, json)
Hash identifier:          cTcIMJulT1Ry/vR/TBTpOT5qHHxpxp7cvHqfPiQuQcE=
Subject key identifier:   BE:C2:B5:CF:C2:C8:17:3C:B8:D9:8C:4D:8F:A3:79:5C:DC:63:54:C8
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Certificate issuer:       /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial:       0195E0EB0AD47913AFBED5262A09A2707846
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 08:00:54 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:54 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:54 +0000
Files and hashes:         1: 2Oc3FqLDZOIsZ3-ChpBNgzAI1qA.roa (hash: ngieeqkZH2PetACTisY+FlZAWILVipXJYp8vJQiZ9t4=)
                          2: 8h-VrH2OLGuzooixz2EHGOzGj7c.roa (hash: j9xYGg1A7OFK4mnjxkQLlnHkLT4I6Te+j3atszApNdQ=)
                          3: x3vXcqd4rOe3aN_H50pQssbociA.roa (hash: KHAoiYRVl8v/BdqhdcKxO0EIBKUpuD3RXPz3naD0K1c=)
                          4: ysIWQb28-sJMVLakhZSDxeQWQLY.crl (hash: 7lBQZA80fzwzgl0Du8Ieib74pPzMTPZw7XpIPvKm4Eo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:0a:d4:79:13:af:be:d5:26:2a:09:a2:70:78:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
        Validity
            Not Before: Mar 29 08:00:54 2025 GMT
            Not After : Mar 30 08:00:54 2025 GMT
        Subject: CN=bec2b5cfc2c8173cb8d98c4d8fa3795cdc6354c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:30:68:91:43:b3:4d:b1:53:4f:c9:d9:b8:
                    e8:ef:2e:be:97:6f:da:c9:10:c8:c0:6c:cd:15:08:
                    6e:ee:ee:f7:81:05:96:8d:b8:32:4b:63:6b:a6:18:
                    0e:b5:0a:93:25:c2:72:20:4b:c6:ee:b2:f6:ee:ad:
                    34:7a:ee:c0:df:68:81:d7:5c:71:82:cf:ad:e3:d2:
                    aa:ea:25:76:c8:49:60:33:43:8c:8b:8f:5b:59:f3:
                    13:42:61:42:2a:d3:7f:f8:f1:1b:a5:8c:65:c6:5d:
                    fa:ca:71:b6:fd:dd:99:89:9c:62:9f:3f:95:d5:69:
                    f9:97:ad:7b:9a:91:b3:aa:ca:e9:38:14:a6:78:be:
                    c1:ae:28:ad:98:a8:e6:43:cb:f9:6e:6f:30:e5:e5:
                    02:33:3d:4a:40:11:6d:35:f4:92:d2:cb:2c:df:4c:
                    6d:04:85:e8:1a:f5:d8:1c:c2:91:50:aa:49:9b:f7:
                    22:1c:ef:82:48:ee:93:7a:d0:a2:a8:3a:05:97:f2:
                    b1:5b:74:64:63:3d:5f:32:35:95:19:6f:da:29:6d:
                    8d:59:ec:72:ca:5d:fc:75:65:72:73:3d:e0:69:1f:
                    1a:c9:ef:cc:6d:dd:36:cb:c3:cf:70:b1:52:1e:5d:
                    42:5c:f5:dc:f0:78:fe:67:07:35:4a:f5:fd:c3:8d:
                    eb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C2:B5:CF:C2:C8:17:3C:B8:D9:8C:4D:8F:A3:79:5C:DC:63:54:C8
            X509v3 Authority Key Identifier:
                keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e4:9c:3a:dd:7c:4d:57:f8:85:11:8e:18:4e:6e:f9:5b:1b:
         b2:04:e0:b1:e3:a5:58:3a:d1:74:a5:be:4d:67:38:69:91:19:
         13:25:65:8c:18:66:29:70:e1:e2:c4:ae:ea:26:aa:6e:3e:d3:
         d8:d8:d1:cf:4f:fd:18:9d:4e:a1:05:c6:b4:d8:df:1b:ff:b2:
         9b:ee:43:8c:95:e7:79:90:61:1f:48:82:2f:ad:8c:2e:c3:12:
         90:55:4b:d4:db:61:4a:a7:51:4f:d0:32:79:12:c2:98:6f:a0:
         96:1f:7a:d2:de:df:9a:30:7f:cb:93:a0:8a:f5:cf:1d:73:ea:
         42:d7:fc:ff:de:4b:17:ad:39:1e:7a:3a:71:4a:19:cf:c8:ae:
         aa:5a:ee:ac:5d:0f:80:1d:ce:97:cf:0c:a2:c2:77:ee:b6:da:
         ba:c6:2c:68:46:9a:a2:70:61:2e:72:55:d9:a2:1f:99:3c:31:
         87:e2:db:2d:be:c0:31:6d:f6:92:57:8a:e8:97:ea:2a:7d:4b:
         df:8c:56:49:07:f5:fb:ce:f4:ab:a0:d6:e7:f8:a5:61:93:26:
         d3:76:a8:76:7e:f7:02:90:a9:69:13:3a:c0:ed:70:31:0b:4f:
         4a:6c:fe:2b:72:e7:5c:0a:a9:1b:75:bf:ff:b6:be:6f:df:bd:
         d1:78:47:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg6wrUeROvvtUmKgmicHhGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzIxNjQxYmRiY2ZhYzI0YzU0YjZhNDg1OTQ4M2M1ZTQx
NjQwYjYwHhcNMjUwMzI5MDgwMDU0WhcNMjUwMzMwMDgwMDU0WjAzMTEwLwYDVQQD
EyhiZWMyYjVjZmMyYzgxNzNjYjhkOThjNGQ4ZmEzNzk1Y2RjNjM1NGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkUwaJFDs02xU0/J2bjo7y6+l2/a
yRDIwGzNFQhu7u73gQWWjbgyS2NrphgOtQqTJcJyIEvG7rL27q00eu7A32iB11xx
gs+t49Kq6iV2yElgM0OMi49bWfMTQmFCKtN/+PEbpYxlxl36ynG2/d2ZiZxinz+V
1Wn5l617mpGzqsrpOBSmeL7BriitmKjmQ8v5bm8w5eUCMz1KQBFtNfSS0sss30xt
BIXoGvXYHMKRUKpJm/ciHO+CSO6TetCiqDoFl/KxW3RkYz1fMjWVGW/aKW2NWexy
yl38dWVycz3gaR8aye/Mbd02y8PPcLFSHl1CXPXc8Hj+Zwc1SvX9w43rjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7Ctc/CyBc8uNmMTY+jeVzcY1TIMB8GA1UdIwQY
MBaAFMrCFkG9vPrCTFS2pIWUg8XkFkC2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUt
OGFiZjVlZTZjNGFkLzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84NzdlNDAtNmNhMS00YTJiLTg5YTUtOGFiZjVlZTZjNGFk
LzEveXNJV1FiMjgtc0pNVkxha2haU0R4ZVFXUUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuScOt18
TVf4hRGOGE5u+VsbsgTgseOlWDrRdKW+TWc4aZEZEyVljBhmKXDh4sSu6iaqbj7T
2NjRz0/9GJ1OoQXGtNjfG/+ym+5DjJXneZBhH0iCL62MLsMSkFVL1NthSqdRT9Ay
eRLCmG+glh960t7fmjB/y5OgivXPHXPqQtf8/95LF605Hno6cUoZz8iuqlrurF0P
gB3Ol88MosJ37rbausYsaEaaonBhLnJV2aIfmTwxh+LbLb7AMW32kleK6JfqKn1L
34xWSQf1+870q6DW5/ilYZMm03aodn73ApCpaRM6wO1wMQtPSmz+K3LnXAqpG3W/
/7a+b9+90XhHfw==
-----END CERTIFICATE-----