Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.mft
File:                     caUN148DxxEE1dGiYFipIHJOhZ4.mft (raw, json)
Hash identifier:          YPLZ0u9E/fzEp2Mv80lJu+axDiuOOXGDajyAueGy9cg=
Subject key identifier:   1D:93:A4:78:81:EF:F9:D7:C9:30:7B:84:94:1C:4E:EE:62:A8:DC:21
Authority key identifier: 71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E
Certificate issuer:       /CN=71a50dd78f03c71104d5d1a26058a920724e859e
Certificate serial:       018D893C9D96D99D07A34236D0488680E280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.mft
Manifest number:          107B
Signing time:             Thu 08 Feb 2024 15:01:07 +0000
Manifest this update:     Thu 08 Feb 2024 15:01:07 +0000
Manifest next update:     Fri 09 Feb 2024 15:01:07 +0000
Files and hashes:         1: N749z2dkpDzAhwSqqEV6Nz_j9mg.roa (hash: f1bkv1dmchjWMh/eobz5m/Ih6wuR970H864IoNhM550=)
                          2: caUN148DxxEE1dGiYFipIHJOhZ4.crl (hash: JK3pAl4UsKAVBrJkDNvfuXlK//kuczi4c6j7x3AmII8=)
                          3: pahW2y6ilcyZjxrKYKeGzw83Ujw.roa (hash: ManTp3UfYJWy1sFR0/fEkr/xby1jtRXVgKf+0U1Bkzc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:89:3c:9d:96:d9:9d:07:a3:42:36:d0:48:86:80:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a50dd78f03c71104d5d1a26058a920724e859e
        Validity
            Not Before: Feb  8 15:01:07 2024 GMT
            Not After : Feb  9 15:01:07 2024 GMT
        Subject: CN=1d93a47881eff9d7c9307b84941c4eee62a8dc21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:95:20:80:65:6a:c1:51:a7:4b:a2:07:5b:58:
                    26:7c:a6:ed:cb:8d:9b:b9:3e:f5:28:a3:d8:ce:0a:
                    d6:60:14:0f:a3:5a:21:e0:16:03:cb:c0:37:35:55:
                    cb:56:76:51:35:55:54:55:8a:34:69:8d:cc:40:6f:
                    a6:b5:eb:d2:ce:00:85:f7:98:1d:b1:ac:2a:06:8a:
                    4e:76:d9:8e:18:1e:42:88:23:2a:40:3a:3f:6b:f5:
                    e5:43:dc:6e:ff:45:4c:88:fb:44:61:15:fc:9a:99:
                    64:25:c0:66:0f:18:ed:03:83:56:bd:e3:fe:0b:44:
                    bf:5a:97:62:a5:da:f8:8d:09:71:a0:70:ee:b7:08:
                    cf:93:26:6f:fd:0e:ff:3e:26:73:42:0a:c7:d4:a8:
                    62:37:99:93:a5:31:82:21:0a:a6:c3:ae:90:92:a5:
                    cc:0c:f1:f7:66:b5:73:f9:70:3d:2c:6c:14:d2:8c:
                    fa:c6:97:88:ed:bf:30:73:f8:e1:85:a1:bd:fb:ef:
                    41:b9:da:ae:d4:99:f2:b9:44:15:bc:ec:54:26:b5:
                    ff:66:e2:9f:d7:f4:32:41:5e:db:d5:91:98:42:f2:
                    8e:d8:11:b3:2f:e9:dc:bf:c4:03:28:75:2f:1e:f6:
                    5d:16:30:77:5d:e1:60:63:c1:a3:e3:76:fe:4b:b4:
                    47:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:93:A4:78:81:EF:F9:D7:C9:30:7B:84:94:1C:4E:EE:62:A8:DC:21
            X509v3 Authority Key Identifier:
                keyid:71:A5:0D:D7:8F:03:C7:11:04:D5:D1:A2:60:58:A9:20:72:4E:85:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caUN148DxxEE1dGiYFipIHJOhZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fcec5c-88ef-4d11-9754-fdbfa5b6b373/1/caUN148DxxEE1dGiYFipIHJOhZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:1b:0f:53:e4:e7:c8:52:ec:f3:d5:1c:70:7d:b6:d8:aa:43:
         ce:94:41:63:6a:d6:15:c4:a6:c6:99:64:ea:a8:86:4a:04:85:
         95:d6:5c:23:e8:ee:d3:ab:e7:a8:53:cf:60:11:d5:41:70:fc:
         2b:77:6f:a0:23:30:93:93:be:f9:94:ff:a3:b7:70:23:54:9e:
         dd:71:87:b7:97:4d:bb:cc:86:08:fc:10:0f:8d:25:8c:3a:af:
         9a:ea:5a:03:81:55:57:04:9d:de:2c:81:02:83:cf:c1:d1:fe:
         02:cd:ab:fc:df:66:92:94:56:d0:d3:46:46:8b:cd:4e:56:47:
         3d:21:ae:ae:ed:e2:a0:72:ce:0d:8e:41:ff:37:77:75:a5:7a:
         d6:96:28:e5:d4:17:7c:cd:bf:f9:6e:29:28:55:77:c3:79:62:
         7e:73:e8:fe:a0:64:ee:8f:f7:e7:fd:4a:6a:b5:6a:24:40:2f:
         74:59:a9:4f:58:f6:66:e1:7d:c6:71:ee:08:7e:94:78:49:78:
         b8:8f:1b:ae:5c:a4:b2:e0:a9:16:b6:1f:be:ac:7b:aa:b0:c0:
         45:37:a0:a9:f5:54:a7:d0:a4:4c:55:13:8c:96:95:5d:79:ed:
         de:b8:5e:a1:2a:be:32:84:af:50:31:8f:16:dc:cc:1c:d0:cd:
         e6:7e:0b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2JPJ2W2Z0Ho0I20EiGgOKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTUwZGQ3OGYwM2M3MTEwNGQ1ZDFhMjYwNThhOTIwNzI0
ZTg1OWUwHhcNMjQwMjA4MTUwMTA3WhcNMjQwMjA5MTUwMTA3WjAzMTEwLwYDVQQD
EygxZDkzYTQ3ODgxZWZmOWQ3YzkzMDdiODQ5NDFjNGVlZTYyYThkYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJUggGVqwVGnS6IHW1gmfKbty42b
uT71KKPYzgrWYBQPo1oh4BYDy8A3NVXLVnZRNVVUVYo0aY3MQG+mtevSzgCF95gd
sawqBopOdtmOGB5CiCMqQDo/a/XlQ9xu/0VMiPtEYRX8mplkJcBmDxjtA4NWveP+
C0S/Wpdipdr4jQlxoHDutwjPkyZv/Q7/PiZzQgrH1KhiN5mTpTGCIQqmw66QkqXM
DPH3ZrVz+XA9LGwU0oz6xpeI7b8wc/jhhaG9++9Budqu1JnyuUQVvOxUJrX/ZuKf
1/QyQV7b1ZGYQvKO2BGzL+ncv8QDKHUvHvZdFjB3XeFgY8Gj43b+S7RHpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2TpHiB7/nXyTB7hJQcTu5iqNwhMB8GA1UdIwQY
MBaAFHGlDdePA8cRBNXRomBYqSByToWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FVTjE0OER4eEVFMWRHaVlGaXBJSEpPaFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mY2VjNWMtODhlZi00ZDExLTk3NTQt
ZmRiZmE1YjZiMzczLzEvY2FVTjE0OER4eEVFMWRHaVlGaXBJSEpPaFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy9mY2VjNWMtODhlZi00ZDExLTk3NTQtZmRiZmE1YjZiMzcz
LzEvY2FVTjE0OER4eEVFMWRHaVlGaXBJSEpPaFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthsPU+Tn
yFLs89UccH222KpDzpRBY2rWFcSmxplk6qiGSgSFldZcI+ju06vnqFPPYBHVQXD8
K3dvoCMwk5O++ZT/o7dwI1Se3XGHt5dNu8yGCPwQD40ljDqvmupaA4FVVwSd3iyB
AoPPwdH+As2r/N9mkpRW0NNGRovNTlZHPSGuru3ioHLODY5B/zd3daV61pYo5dQX
fM2/+W4pKFV3w3lifnPo/qBk7o/35/1KarVqJEAvdFmpT1j2ZuF9xnHuCH6UeEl4
uI8brlyksuCpFrYfvqx7qrDARTegqfVUp9CkTFUTjJaVXXnt3rheoSq+MoSvUDGP
FtzMHNDN5n4Lcw==
-----END CERTIFICATE-----