Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
File:                     L1yrigmp_eI8ljX44WSu8J4XlIw.mft (raw, json)
Hash identifier:          eT0dX8gKrfXXvmR4QqjzFdmd1Qz8FZtLa1yRLDOvQO0=
Subject key identifier:   07:88:61:37:88:02:BB:28:23:ED:AE:8C:DA:94:DC:A1:5A:4C:27:52
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Certificate issuer:       /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial:       01941626E9BAAB79DD73F5DA82CA1E55662A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft
Manifest number:          0B4B
Signing time:             Mon 30 Dec 2024 06:00:36 +0000
Manifest this update:     Mon 30 Dec 2024 06:00:36 +0000
Manifest next update:     Tue 31 Dec 2024 06:00:36 +0000
Files and hashes:         1: 1-RxlRyygfeRidULSDCVw9BDLvoo.roa (hash: rNkZP9yBDG7yJ3OUbZEdFcMlQk31wrLry0/sX874pvk=)
                          2: 8XvK-NDwWqi2zT7WVWwfJ0UvfGQ.roa (hash: ZCqeEESlY+1q81I5AJQf/YIl/2ZM47zkQGSKNB63jy4=)
                          3: L1yrigmp_eI8ljX44WSu8J4XlIw.crl (hash: hgFLuDYoCR3RNE2fzesgsJaba9RK2hWoqNlQPwlJgxQ=)
                          4: YEPAMc2C5n1HYq7y7Fm47fB-KeU.roa (hash: 6b6+vRmLvazXoWjO3TGksOrw8a8+P1HF9PELH/IbSYI=)
                          5: Z17Ca-3wpAdAGyuZ8ZrakW830ts.roa (hash: IhQelhqe8/ukvLEB8DR833OQfz6lCebNXrejFEQA5y0=)
                          6: boagvGGXwtyavqY9YINUftTpDCQ.roa (hash: HDkwM7MWgvQB84M4s2SSZgu/WlqP6i+O4MHLkfp4H3U=)
                          7: iRM3yhwArCNGdHxOj9ATMR0HSDY.roa (hash: EUUcXUwbcO9iYrll3WCncmZTjysxorO7Ctu5GqgiZb8=)
                          8: m7bCfdzWhSAMvNkJ8Wi2-U6Rlp8.roa (hash: w5WwmE4hnTxjZzlvwsXIjFTsVJXWU/Wb1uBVsRDYsBI=)
                          9: n5LfsHWdx3NkIg-VlpX3NKdvstM.roa (hash: /P0Lk2du0GN/bK+GMxDFcSTxTHSOJIr75UXFkRgBvVA=)
                          10: q6lMLYBWWHaI77D3FXSw5Wr2ElE.roa (hash: RDjp+S5nCVNHZOUNOJBXdUN0SHwrIW2sMbv8OiahLGM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:16:26:e9:ba:ab:79:dd:73:f5:da:82:ca:1e:55:66:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
        Validity
            Not Before: Dec 30 06:00:36 2024 GMT
            Not After : Dec 31 06:00:36 2024 GMT
        Subject: CN=078861378802bb2823edae8cda94dca15a4c2752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:de:58:58:71:55:0f:1c:5c:eb:88:00:4c:d6:
                    89:97:5c:0f:26:a9:83:dc:7d:c4:f6:e1:ca:8d:78:
                    3a:54:3d:92:a7:c7:b5:ee:3a:a6:40:33:27:d4:a1:
                    27:fd:8b:42:1a:16:bc:27:d1:c9:d3:70:b6:b1:19:
                    bf:b6:e9:e0:63:cc:1f:44:0f:9f:76:7b:5c:bd:f3:
                    c5:1c:07:2d:6f:07:fa:ec:6d:bf:9d:e8:4d:fa:d1:
                    36:21:e5:46:a4:61:9b:27:e5:6c:26:69:ca:ad:a5:
                    7f:9d:51:4e:fa:5a:c4:b8:2f:9a:1f:96:80:be:86:
                    e3:3e:dd:49:3f:db:0a:27:c4:cd:5f:d0:59:39:6f:
                    5c:48:55:f2:6a:9b:89:24:82:84:e7:c9:cf:9a:a1:
                    a4:f0:bf:26:43:99:cd:71:04:3a:17:64:ab:e4:14:
                    7b:82:5b:c4:7e:5a:4d:ed:b5:f5:96:40:36:af:0e:
                    4b:64:7c:d6:57:5c:5c:d3:60:f5:0c:8a:c9:80:d4:
                    d2:dd:46:b3:66:a4:a6:c2:4c:8d:77:c4:21:a2:5a:
                    52:9f:d9:7a:91:35:2d:35:dd:85:91:f3:5e:90:59:
                    ad:7b:43:9a:d4:17:bf:74:f4:08:0a:cd:27:26:d7:
                    de:9a:84:a1:9a:83:86:91:8a:88:8c:6e:ff:69:1a:
                    67:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:88:61:37:88:02:BB:28:23:ED:AE:8C:DA:94:DC:A1:5A:4C:27:52
            X509v3 Authority Key Identifier:
                keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:38:04:9c:87:a9:72:92:77:99:0d:cc:db:40:38:6d:05:
         97:ef:45:2b:58:c4:16:fd:f9:87:07:64:4d:fc:73:02:b7:91:
         d9:bc:23:7b:8e:ee:51:5e:55:98:4b:7b:59:b0:f3:4a:98:b5:
         4c:e9:6f:33:96:b7:31:da:5a:8c:ab:d5:90:df:2b:57:15:3b:
         4d:a7:d4:c1:06:c3:bc:84:87:4a:ce:0d:90:c1:d5:94:cf:1a:
         03:2c:12:04:f8:1c:cf:3e:2b:08:68:07:e2:05:8b:38:fa:03:
         82:9d:75:2b:73:ad:63:ac:cc:29:99:71:3f:d8:36:23:53:a1:
         18:6b:9d:3e:68:18:9f:33:6d:56:bd:ee:9b:2b:78:4f:a3:a0:
         9a:f1:92:1d:ed:38:0b:03:e4:fa:d5:f1:33:f2:49:dd:f5:02:
         ec:66:54:0b:b1:e3:79:aa:ce:cc:a9:6b:fb:d5:a5:b2:74:4f:
         61:cb:e9:1a:98:67:f6:32:02:99:e3:ae:63:25:53:12:ab:f9:
         c6:4a:78:11:e1:67:5e:fb:88:5e:2c:76:fb:65:89:d1:0f:11:
         bb:ad:eb:75:ad:d7:61:c6:b5:31:d6:a3:51:15:f8:4a:7c:52:
         1b:ce:a7:a8:0c:91:e7:f2:e6:de:a1:cc:a1:99:0f:df:54:cb:
         ea:0e:83:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQWJum6q3ndc/XagsoeVWYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWNhYjhhMDlhOWZkZTIzYzk2MzVmOGUxNjRhZWYwOWUx
Nzk0OGMwHhcNMjQxMjMwMDYwMDM2WhcNMjQxMjMxMDYwMDM2WjAzMTEwLwYDVQQD
EygwNzg4NjEzNzg4MDJiYjI4MjNlZGFlOGNkYTk0ZGNhMTVhNGMyNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy95YWHFVDxxc64gATNaJl1wPJqmD
3H3E9uHKjXg6VD2Sp8e17jqmQDMn1KEn/YtCGha8J9HJ03C2sRm/tungY8wfRA+f
dntcvfPFHActbwf67G2/nehN+tE2IeVGpGGbJ+VsJmnKraV/nVFO+lrEuC+aH5aA
vobjPt1JP9sKJ8TNX9BZOW9cSFXyapuJJIKE58nPmqGk8L8mQ5nNcQQ6F2Sr5BR7
glvEflpN7bX1lkA2rw5LZHzWV1xc02D1DIrJgNTS3UazZqSmwkyNd8QholpSn9l6
kTUtNd2FkfNekFmte0Oa1Be/dPQICs0nJtfemoShmoOGkYqIjG7/aRpnHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeIYTeIArsoI+2ujNqU3KFaTCdSMB8GA1UdIwQY
MBaAFC9cq4oJqf3iPJY1+OFkrvCeF5SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUt
MDAyZjI2ZTNiODk4LzEvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUtMDAyZjI2ZTNiODk4
LzEvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ44BJyH
qXKSd5kNzNtAOG0Fl+9FK1jEFv35hwdkTfxzAreR2bwje47uUV5VmEt7WbDzSpi1
TOlvM5a3MdpajKvVkN8rVxU7TafUwQbDvISHSs4NkMHVlM8aAywSBPgczz4rCGgH
4gWLOPoDgp11K3OtY6zMKZlxP9g2I1OhGGudPmgYnzNtVr3umyt4T6OgmvGSHe04
CwPk+tXxM/JJ3fUC7GZUC7HjearOzKlr+9WlsnRPYcvpGphn9jICmeOuYyVTEqv5
xkp4EeFnXvuIXix2+2WJ0Q8Ru63rda3XYca1MdajURX4SnxSG86nqAyR5/Lm3qHM
oZkP31TL6g6Dug==
-----END CERTIFICATE-----
Generated at Wed May 7 18:28:01 2025 by rpki-client