Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
File:                     NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft (raw, json)
Hash identifier:          hsW+Pqld+Wm+mlmAh3ZonDnw9iUJG7/zz9/CP1pC2Bs=
Subject key identifier:   A9:83:25:BB:C0:58:08:5F:77:1C:6B:5B:03:B2:14:44:AE:BD:EE:AB
Authority key identifier: 35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E
Certificate issuer:       /CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
Certificate serial:       0194A990FAF07007882BB4B4F595EC347558
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft
Manifest number:          142B
Signing time:             Mon 27 Jan 2025 21:00:38 +0000
Manifest this update:     Mon 27 Jan 2025 21:00:38 +0000
Manifest next update:     Tue 28 Jan 2025 21:00:38 +0000
Files and hashes:         1: GHFbzhN5A39LfUCJr_vBQfRwFQs.roa (hash: QCjdgD4mHCnlqNlndbDlIyIRI2CaR+9caLETtvP3FOA=)
                          2: NCHltXfytT0MYR3AX8IpGvfs0qM.roa (hash: N4UF5JyXYPzw26UIgX+P26h1A8t0mAUDObbN4SaunnY=)
                          3: NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl (hash: WjEycnkrkwsBsMeqV2QZ2c+rxD2I4gq+5jetGmt2hVs=)
                          4: QU_-zLCxWc_-nNcPTnEWjdtXplI.roa (hash: GWAXWrLg8jYvqzV6VKFZBuTkVd9mHtF+m5YdE53FDeM=)
                          5: WJDFN0egiGE6Bq1VmZ_vcgUzty4.roa (hash: xvyBP78rZbNILgwm2MnaNFsInm8E7+0aZqPQl1aexOM=)
                          6: oakZY3QnKRwWzYloEiFZ8HoTr2g.roa (hash: iDEUgORMnCsN3gpDGjcsgQC8x1/CODG3Yu8RLzQ2hTY=)
                          7: zN4M9ushRv2eJEtcHiMPxFXDJ2E.roa (hash: EY53g+j6lDJf8Xi7dtwys2yZTOHPOSV8fH6blNwAPKA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:a9:90:fa:f0:70:07:88:2b:b4:b4:f5:95:ec:34:75:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3556e7fb5772f979edd5e5c5aa63eb2b9c0ddc8e
        Validity
            Not Before: Jan 27 21:00:38 2025 GMT
            Not After : Jan 28 21:00:38 2025 GMT
        Subject: CN=a98325bbc058085f771c6b5b03b21444aebdeeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ea:13:03:c5:fe:df:df:76:7d:2b:eb:8f:63:
                    a9:b4:5f:6e:8b:2a:e2:bc:21:be:ad:1a:64:99:a0:
                    0a:ba:91:57:4e:81:ea:81:45:58:28:41:7d:af:66:
                    f9:1a:d1:19:83:d1:e9:9a:25:86:c2:b6:1b:27:2d:
                    fd:a8:2f:9d:7f:30:65:12:64:69:b1:d5:fa:2a:41:
                    ae:b5:e0:17:0e:80:91:81:68:bf:10:eb:12:68:5d:
                    10:65:77:20:81:5b:5e:c1:c4:fc:a3:8f:bb:30:0a:
                    fe:51:de:5d:2a:cd:13:43:f8:ad:f3:13:2d:8b:a1:
                    8d:9f:ed:35:fa:96:20:b1:28:9f:ec:ae:4a:aa:63:
                    af:59:e5:33:27:0f:a3:8c:b5:82:21:f7:22:35:47:
                    bd:58:ad:81:6a:c4:3f:2d:78:8e:b3:7c:52:76:c7:
                    3d:6b:67:7f:c9:60:5f:5f:06:0f:1d:4b:62:18:77:
                    14:c7:89:c3:cd:50:ef:b9:2f:b9:7a:62:6d:36:7c:
                    b8:80:21:98:97:ae:fe:fd:f1:89:41:68:ef:38:15:
                    01:40:8e:02:2a:b0:33:14:32:a2:d3:fe:7c:4a:0b:
                    76:b5:5d:72:50:e4:fe:73:92:9d:cb:8e:4b:c3:e6:
                    e1:e3:68:ac:45:de:36:26:2a:48:79:30:6e:c8:7b:
                    b9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:83:25:BB:C0:58:08:5F:77:1C:6B:5B:03:B2:14:44:AE:BD:EE:AB
            X509v3 Authority Key Identifier:
                keyid:35:56:E7:FB:57:72:F9:79:ED:D5:E5:C5:AA:63:EB:2B:9C:0D:DC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/dcfa2a-76f7-4443-a495-6bb30a8730ed/1/NVbn-1dy-Xnt1eXFqmPrK5wN3I4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4a:b5:61:04:a7:3b:e0:3d:ff:62:84:81:17:56:d4:dd:88:
         f6:7a:32:de:64:82:14:3b:18:51:b7:5d:9a:6a:a6:de:03:b9:
         da:04:1a:c0:80:1d:ae:44:68:7a:ba:5a:36:27:26:90:2d:ae:
         2f:d5:04:ad:e8:8f:96:3b:11:13:06:fc:87:6d:5a:c5:1e:e0:
         a6:9c:3d:87:99:aa:1e:07:47:26:27:eb:47:50:b2:b7:b2:60:
         c0:ca:81:4c:39:4e:69:83:6f:47:f5:cd:1b:83:a4:3a:44:38:
         05:0c:74:8a:7c:6c:82:06:a8:8e:67:b2:b4:a4:20:d0:eb:13:
         f8:c0:0c:3c:b3:ba:a3:ec:74:7c:37:87:e0:7c:27:b7:fb:c4:
         1e:c0:22:c5:12:5d:86:95:23:08:43:9f:1f:3a:f0:b4:72:61:
         33:73:9a:09:91:21:c2:2c:ba:5a:bd:26:cf:8e:9c:ca:01:c1:
         6b:21:a2:da:a3:d2:fa:a7:a1:5d:b6:ed:60:e7:a2:21:df:cd:
         68:8b:ce:f2:e2:44:61:67:c8:38:c9:19:9d:e3:67:f2:71:54:
         7b:f2:65:91:f7:51:01:cc:32:81:b1:19:67:0a:ed:91:c7:d5:
         f3:01:2d:b3:e5:55:d8:f0:42:65:6d:35:11:3b:45:56:d0:a2:
         33:1d:dd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSpkPrwcAeIK7S09ZXsNHVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NTZlN2ZiNTc3MmY5NzllZGQ1ZTVjNWFhNjNlYjJiOWMw
ZGRjOGUwHhcNMjUwMTI3MjEwMDM4WhcNMjUwMTI4MjEwMDM4WjAzMTEwLwYDVQQD
EyhhOTgzMjViYmMwNTgwODVmNzcxYzZiNWIwM2IyMTQ0NGFlYmRlZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uoTA8X+3992fSvrj2OptF9uiyri
vCG+rRpkmaAKupFXToHqgUVYKEF9r2b5GtEZg9HpmiWGwrYbJy39qC+dfzBlEmRp
sdX6KkGuteAXDoCRgWi/EOsSaF0QZXcggVtewcT8o4+7MAr+Ud5dKs0TQ/it8xMt
i6GNn+01+pYgsSif7K5KqmOvWeUzJw+jjLWCIfciNUe9WK2BasQ/LXiOs3xSdsc9
a2d/yWBfXwYPHUtiGHcUx4nDzVDvuS+5emJtNny4gCGYl67+/fGJQWjvOBUBQI4C
KrAzFDKi0/58Sgt2tV1yUOT+c5Kdy45Lw+bh42isRd42JipIeTBuyHu5oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmDJbvAWAhfdxxrWwOyFESuve6rMB8GA1UdIwQY
MBaAFDVW5/tXcvl57dXlxapj6yucDdyOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlZibi0xZHktWG50MWVYRnFtUHJLNXdOM0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kY2ZhMmEtNzZmNy00NDQzLWE0OTUt
NmJiMzBhODczMGVkLzEvTlZibi0xZHktWG50MWVYRnFtUHJLNXdOM0k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9kY2ZhMmEtNzZmNy00NDQzLWE0OTUtNmJiMzBhODczMGVk
LzEvTlZibi0xZHktWG50MWVYRnFtUHJLNXdOM0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUq1YQSn
O+A9/2KEgRdW1N2I9noy3mSCFDsYUbddmmqm3gO52gQawIAdrkRoerpaNicmkC2u
L9UEreiPljsREwb8h21axR7gppw9h5mqHgdHJifrR1Cyt7JgwMqBTDlOaYNvR/XN
G4OkOkQ4BQx0inxsggaojmeytKQg0OsT+MAMPLO6o+x0fDeH4Hwnt/vEHsAixRJd
hpUjCEOfHzrwtHJhM3OaCZEhwiy6Wr0mz46cygHBayGi2qPS+qehXbbtYOeiId/N
aIvO8uJEYWfIOMkZneNn8nFUe/JlkfdRAcwygbEZZwrtkcfV8wEts+VV2PBCZW01
ETtFVtCiMx3dHA==
-----END CERTIFICATE-----