Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
File:                     1E3mWXWbAnQSSntIHQl2hAt63gY.mft (raw, json)
Hash identifier:          gcLE/RfjO1jjF6aF70ShKjlDmrH7O9XyPgzfy33qSNc=
Subject key identifier:   69:D1:6D:4D:01:44:7F:AB:77:C0:16:3E:F4:57:DF:89:19:37:F0:C2
Authority key identifier: D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06
Certificate issuer:       /CN=d44de659759b0274124a7b481d0976840b7ade06
Certificate serial:       0194BC04E13E8E7C045A48B89144BD7C4EA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 11:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:23 +0000
Files and hashes:         1: 0bM8wmEzzUjWs4OaG_Eh1byq32Y.roa (hash: AxFzxaM8hmPYvCrIt6Spf+I6m25vebXD/RSMRn2bzqw=)
                          2: 1E3mWXWbAnQSSntIHQl2hAt63gY.crl (hash: l2QcFmUHb8yECyRM0roponVguQJccwS6zHsMCcSwpqo=)
                          3: 4WJWIXQl6DfjK6AaWL3Rp2i--vQ.roa (hash: KhbbWhBCJSYZ246VIWEuaLq193n7KxuY5H2uWCzNGyM=)
                          4: Ej-pXn-0Jn0sG8zUigcYulAtX6A.roa (hash: RwfcwRXpnx31U4+i4QeLKY1jHwhSpDJgw+RTcxZ9RmQ=)
                          5: f89IkbsT4t8xQ8Vr8r9EM5nSnpM.roa (hash: bYMkqRm/XIBC4pGyPYMxXyN5mvSRhEimuvJb89lZFUE=)
                          6: zYIoyh8ar-bEEwLiwjL6j6tRS3k.roa (hash: NHYJZNfTf0pdFvHvOLws6gIK1AxJDJZ9yK2nJisMlZs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e1:3e:8e:7c:04:5a:48:b8:91:44:bd:7c:4e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44de659759b0274124a7b481d0976840b7ade06
        Validity
            Not Before: Jan 31 11:00:23 2025 GMT
            Not After : Feb  1 11:00:23 2025 GMT
        Subject: CN=69d16d4d01447fab77c0163ef457df891937f0c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:c6:9c:c4:c1:1b:27:c5:40:79:f0:4c:fb:
                    f0:28:a4:55:47:2a:85:b6:80:82:e7:73:68:2c:c9:
                    db:52:69:61:4b:8f:b9:2a:9c:e9:e6:e3:99:38:cf:
                    11:81:ff:a7:5e:f8:ae:f6:5b:c9:40:12:40:1a:83:
                    72:be:81:dc:41:e6:2e:86:da:31:57:f8:89:7a:a2:
                    55:e6:dd:98:fb:5e:93:15:35:53:3c:a2:c5:a3:52:
                    9c:64:17:fd:d4:dd:6f:c9:99:c4:a3:25:a6:b2:01:
                    97:1e:3a:55:e3:61:4d:d4:61:e4:e8:db:52:42:2f:
                    fc:3b:23:1a:88:98:85:4a:69:46:56:d9:60:57:cf:
                    1f:06:9e:a9:a4:c1:56:e3:08:46:7f:17:c0:5c:47:
                    0f:c7:63:10:54:15:aa:dd:cc:26:50:54:b1:4f:98:
                    2c:9d:32:13:05:a1:69:73:60:31:40:5b:9f:04:68:
                    14:f7:c6:7d:df:d9:b6:15:ba:56:75:32:b0:2a:b0:
                    68:6a:fd:fe:74:93:6e:b7:20:8f:b9:51:29:83:c5:
                    d1:c1:cd:35:0d:f7:1e:d8:e4:22:ee:42:5b:5c:9a:
                    d2:66:55:a2:b6:a3:fc:cb:89:e3:64:68:2d:07:e7:
                    03:a7:0b:ba:ad:15:c9:64:6b:2e:80:f6:3e:e0:3e:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D1:6D:4D:01:44:7F:AB:77:C0:16:3E:F4:57:DF:89:19:37:F0:C2
            X509v3 Authority Key Identifier:
                keyid:D4:4D:E6:59:75:9B:02:74:12:4A:7B:48:1D:09:76:84:0B:7A:DE:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1E3mWXWbAnQSSntIHQl2hAt63gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/75216d-684b-47cc-a95e-db4d39dc4ec7/1/1E3mWXWbAnQSSntIHQl2hAt63gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:fc:bd:5b:d5:8f:22:0b:be:e2:ed:c7:66:30:08:ca:f4:0a:
         48:53:05:bb:ee:bf:3a:e8:59:03:51:a9:cb:07:8f:3d:20:30:
         f9:f3:21:05:18:c2:bc:82:16:93:57:53:6f:89:3b:be:4d:55:
         18:a7:0b:96:c3:6d:a2:51:4a:17:71:ee:71:df:d7:0e:ad:d0:
         8d:96:e0:72:f5:e8:54:af:97:14:da:da:73:4c:2a:26:bd:36:
         a2:23:40:4f:5e:ea:bb:f2:8b:4a:79:90:fd:58:4a:54:65:eb:
         17:65:95:15:e9:26:60:b6:b4:97:75:2d:b6:c5:89:4a:47:87:
         0c:bf:4d:2c:94:0c:52:97:c3:e0:ac:7a:ac:95:df:71:10:63:
         fa:03:c6:d3:56:cb:ef:28:3b:0b:56:52:c1:1d:53:44:12:da:
         ff:05:13:54:70:0f:10:af:62:87:44:0c:a3:e0:8a:b4:80:71:
         5b:c7:04:1c:4a:62:2f:63:d7:69:66:bd:43:5c:4a:f6:43:f3:
         ee:a7:db:f2:d7:60:79:c6:27:c1:63:9f:bf:79:43:8c:99:bf:
         d4:f0:6f:83:ae:37:eb:74:7c:3c:d0:60:29:23:85:d6:df:9e:
         4f:6e:fb:c7:00:18:e3:10:f4:2f:7d:1d:c4:75:74:25:56:31:
         7d:c9:87:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOE+jnwEWki4kUS9fE6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGRlNjU5NzU5YjAyNzQxMjRhN2I0ODFkMDk3Njg0MGI3
YWRlMDYwHhcNMjUwMTMxMTEwMDIzWhcNMjUwMjAxMTEwMDIzWjAzMTEwLwYDVQQD
Eyg2OWQxNmQ0ZDAxNDQ3ZmFiNzdjMDE2M2VmNDU3ZGY4OTE5MzdmMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHjGnMTBGyfFQHnwTPvwKKRVRyqF
toCC53NoLMnbUmlhS4+5Kpzp5uOZOM8Rgf+nXviu9lvJQBJAGoNyvoHcQeYuhtox
V/iJeqJV5t2Y+16TFTVTPKLFo1KcZBf91N1vyZnEoyWmsgGXHjpV42FN1GHk6NtS
Qi/8OyMaiJiFSmlGVtlgV88fBp6ppMFW4whGfxfAXEcPx2MQVBWq3cwmUFSxT5gs
nTITBaFpc2AxQFufBGgU98Z939m2FbpWdTKwKrBoav3+dJNutyCPuVEpg8XRwc01
Dfce2OQi7kJbXJrSZlWitqP8y4njZGgtB+cDpwu6rRXJZGsugPY+4D6HWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnRbU0BRH+rd8AWPvRX34kZN/DCMB8GA1UdIwQY
MBaAFNRN5ll1mwJ0Ekp7SB0JdoQLet4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUt
ZGI0ZDM5ZGM0ZWM3LzEvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83NTIxNmQtNjg0Yi00N2NjLWE5NWUtZGI0ZDM5ZGM0ZWM3
LzEvMUUzbVdYV2JBblFTU250SUhRbDJoQXQ2M2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvy9W9WP
Igu+4u3HZjAIyvQKSFMFu+6/OuhZA1GpywePPSAw+fMhBRjCvIIWk1dTb4k7vk1V
GKcLlsNtolFKF3Hucd/XDq3QjZbgcvXoVK+XFNrac0wqJr02oiNAT17qu/KLSnmQ
/VhKVGXrF2WVFekmYLa0l3UttsWJSkeHDL9NLJQMUpfD4Kx6rJXfcRBj+gPG01bL
7yg7C1ZSwR1TRBLa/wUTVHAPEK9ih0QMo+CKtIBxW8cEHEpiL2PXaWa9Q1xK9kPz
7qfb8tdgecYnwWOfv3lDjJm/1PBvg64363R8PNBgKSOF1t+eT277xwAY4xD0L30d
xHV0JVYxfcmHTA==
-----END CERTIFICATE-----