Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
File:                     ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft (raw, json)
Hash identifier:          HO+LYNphoOyERvPRiMvSvfQb32fdou5azzScVcN/lGU=
Subject key identifier:   1D:FE:47:61:D5:F9:92:2E:1F:B2:0A:A7:19:AA:3E:36:F5:95:33:C8
Authority key identifier: 11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02
Certificate issuer:       /CN=113eaf2521dcbf764242431a781f68d0dd551402
Certificate serial:       0194BBCEF19A2838DF342C5B8ED8402D7CEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 10:01:29 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:29 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:29 +0000
Files and hashes:         1: ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl (hash: PnMem2QN47jereYRi9GZLEd4S3l5A3p4JQa05aesGrE=)
                          2: SCt2QF1ZyfGumaW10dxyBcs0tjI.roa (hash: RDkYHsg9brN71rMixotxKpzbe8KGvrl7wQ7cHVhi6eA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:f1:9a:28:38:df:34:2c:5b:8e:d8:40:2d:7c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=113eaf2521dcbf764242431a781f68d0dd551402
        Validity
            Not Before: Jan 31 10:01:29 2025 GMT
            Not After : Feb  1 10:01:29 2025 GMT
        Subject: CN=1dfe4761d5f9922e1fb20aa719aa3e36f59533c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a7:a2:b3:01:f8:4b:15:e9:77:73:92:7d:63:
                    f2:67:a0:97:ff:3f:7a:4e:41:02:a4:44:27:b2:64:
                    44:28:4d:63:aa:03:31:3e:53:60:8f:a8:a8:ba:ea:
                    6a:0d:52:6d:7d:b6:2c:ad:d0:dc:11:e5:01:26:52:
                    da:1f:18:1b:d2:d6:e0:7b:f2:27:52:de:33:26:b7:
                    28:b7:16:4e:f9:06:84:04:e4:5c:aa:65:8f:2a:46:
                    cc:40:b3:3c:00:05:bb:02:3b:f8:d7:d1:4e:02:97:
                    66:04:2b:f5:4f:3a:18:2d:97:73:26:64:e1:fe:22:
                    e1:48:ef:e1:b9:09:34:bd:62:60:5f:31:a3:d1:3f:
                    c2:25:47:b1:5b:58:77:82:a8:7c:8f:a6:79:3a:00:
                    78:ce:8b:25:e3:b5:4b:a8:99:be:69:7a:f2:22:8a:
                    2d:17:b6:7c:74:71:6a:20:ca:8a:7e:b4:74:b4:2f:
                    80:03:53:5d:3f:2b:63:80:d3:22:0b:b8:a1:a3:8d:
                    75:3f:df:d6:68:6b:8e:f3:4d:d8:d2:3a:f7:52:a3:
                    45:2f:92:b4:10:70:c3:52:76:2e:15:63:2e:9c:03:
                    ed:41:e7:d2:d9:8e:fd:45:6a:b6:5c:59:50:a2:85:
                    b1:dc:23:0d:47:f4:59:aa:85:ce:ac:af:08:8a:17:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FE:47:61:D5:F9:92:2E:1F:B2:0A:A7:19:AA:3E:36:F5:95:33:C8
            X509v3 Authority Key Identifier:
                keyid:11:3E:AF:25:21:DC:BF:76:42:42:43:1A:78:1F:68:D0:DD:55:14:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/873549-4e88-4c51-8717-1a5d8f50518f/1/ET6vJSHcv3ZCQkMaeB9o0N1VFAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:41:34:6b:f3:7b:b3:af:fc:92:4c:1e:7c:d1:59:75:c9:a5:
         b0:57:fa:16:52:7b:f7:5f:9c:ac:6e:a0:68:6d:2f:0d:77:af:
         28:d2:16:15:28:ee:7a:30:eb:c1:66:ba:4c:87:69:f9:8e:64:
         06:3d:93:e1:0f:70:4d:27:01:2d:0e:32:cd:cc:25:df:dd:32:
         99:c5:ac:58:d7:bf:73:76:05:f0:7f:25:a9:ed:0e:81:42:7a:
         85:44:5c:49:fb:15:85:3e:bc:aa:70:92:74:37:ee:cd:bf:5d:
         51:84:81:bd:1d:04:9c:4c:03:8d:ae:74:88:21:c9:f9:5a:f0:
         5c:aa:95:3c:95:73:43:c8:40:16:18:90:1c:f6:27:92:e2:32:
         45:75:cf:fa:ce:3d:21:31:8a:c5:52:b0:34:56:b6:3c:5d:f8:
         43:ac:47:8d:8c:b2:83:99:54:8c:03:89:f7:52:a7:16:48:10:
         e1:b9:4e:5d:3d:e4:ce:d4:80:b0:38:1e:b9:05:f5:49:c0:1b:
         b7:d4:67:18:ca:77:b5:0b:6a:c2:fc:75:ee:15:5d:d8:21:8a:
         01:6f:e9:2d:79:fe:e3:39:fb:a6:97:32:32:5b:70:27:6b:05:
         a4:62:96:dd:79:2f:a6:91:8c:33:0b:4e:7b:87:3d:97:89:eb:
         0e:34:42:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zvGaKDjfNCxbjthALXzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExM2VhZjI1MjFkY2JmNzY0MjQyNDMxYTc4MWY2OGQwZGQ1
NTE0MDIwHhcNMjUwMTMxMTAwMTI5WhcNMjUwMjAxMTAwMTI5WjAzMTEwLwYDVQQD
EygxZGZlNDc2MWQ1Zjk5MjJlMWZiMjBhYTcxOWFhM2UzNmY1OTUzM2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqeiswH4SxXpd3OSfWPyZ6CX/z96
TkECpEQnsmREKE1jqgMxPlNgj6iouupqDVJtfbYsrdDcEeUBJlLaHxgb0tbge/In
Ut4zJrcotxZO+QaEBORcqmWPKkbMQLM8AAW7Ajv419FOApdmBCv1TzoYLZdzJmTh
/iLhSO/huQk0vWJgXzGj0T/CJUexW1h3gqh8j6Z5OgB4zosl47VLqJm+aXryIoot
F7Z8dHFqIMqKfrR0tC+AA1NdPytjgNMiC7iho411P9/WaGuO803Y0jr3UqNFL5K0
EHDDUnYuFWMunAPtQefS2Y79RWq2XFlQooWx3CMNR/RZqoXOrK8IihdDuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3+R2HV+ZIuH7IKpxmqPjb1lTPIMB8GA1UdIwQY
MBaAFBE+ryUh3L92QkJDGngfaNDdVRQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTct
MWE1ZDhmNTA1MThmLzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy84NzM1NDktNGU4OC00YzUxLTg3MTctMWE1ZDhmNTA1MThm
LzEvRVQ2dkpTSGN2M1pDUWtNYWVCOW8wTjFWRkFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEE0a/N7
s6/8kkwefNFZdcmlsFf6FlJ791+crG6gaG0vDXevKNIWFSjuejDrwWa6TIdp+Y5k
Bj2T4Q9wTScBLQ4yzcwl390ymcWsWNe/c3YF8H8lqe0OgUJ6hURcSfsVhT68qnCS
dDfuzb9dUYSBvR0EnEwDja50iCHJ+VrwXKqVPJVzQ8hAFhiQHPYnkuIyRXXP+s49
ITGKxVKwNFa2PF34Q6xHjYyyg5lUjAOJ91KnFkgQ4blOXT3kztSAsDgeuQX1ScAb
t9RnGMp3tQtqwvx17hVd2CGKAW/pLXn+4zn7ppcyMltwJ2sFpGKW3XkvppGMMwtO
e4c9l4nrDjRCYg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:57 2025 by rpki-client