Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.mft
File:                     59h-R1VDBszASGC1zD0CYf3BpcE.mft (raw, json)
Hash identifier:          9wfD4iltGBgEzM5PpXMyb9ebzfkG3f9PBvNVlPY9+AQ=
Subject key identifier:   D9:38:89:46:40:A8:E4:73:F2:69:D2:08:D4:54:29:9D:DA:A1:E5:11
Authority key identifier: E7:D8:7E:47:55:43:06:CC:C0:48:60:B5:CC:3D:02:61:FD:C1:A5:C1
Certificate issuer:       /CN=e7d87e47554306ccc04860b5cc3d0261fdc1a5c1
Certificate serial:       0194BC3C5AFAD611A05F5AFC583A98094304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59h-R1VDBszASGC1zD0CYf3BpcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.mft
Manifest number:          0271
Signing time:             Fri 31 Jan 2025 12:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:59 +0000
Files and hashes:         1: 59h-R1VDBszASGC1zD0CYf3BpcE.crl (hash: Fcccr4LceZuhpR9s6bD+BE+AC+ifvLK7cSEaWINGNe8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:5a:fa:d6:11:a0:5f:5a:fc:58:3a:98:09:43:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d87e47554306ccc04860b5cc3d0261fdc1a5c1
        Validity
            Not Before: Jan 31 12:00:59 2025 GMT
            Not After : Feb  1 12:00:59 2025 GMT
        Subject: CN=d938894640a8e473f269d208d454299ddaa1e511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b6:de:62:6b:8a:4c:0f:e2:c4:fb:72:98:47:
                    cb:0e:33:e6:85:00:4c:e8:83:5d:93:e5:31:6d:dc:
                    7b:58:84:fd:fa:31:c5:4b:53:d9:1c:04:26:c6:24:
                    08:3e:c2:4a:d2:0f:77:96:31:49:1f:d1:e9:2c:2f:
                    e3:49:52:bb:64:c5:32:5d:b0:bb:32:d2:b1:52:ab:
                    78:77:b1:e9:f1:a8:68:75:f7:9e:13:4f:18:26:0c:
                    59:65:15:59:4f:a8:80:6b:c6:f1:6d:eb:0e:cc:97:
                    5f:35:80:2b:d4:18:cd:a6:6e:dc:6c:4c:b8:92:0e:
                    73:47:84:4b:57:8b:67:f4:fa:66:c0:02:18:96:4e:
                    53:10:62:9e:74:d1:64:dc:51:32:6e:58:3a:2f:05:
                    11:6b:7e:2a:9b:b4:4a:2d:b0:86:3a:de:62:df:ab:
                    4e:07:28:70:8d:a8:e3:84:5a:c9:2e:fe:54:15:08:
                    a7:48:d4:1e:c5:d3:b9:6c:c8:80:88:24:99:54:d8:
                    f0:e0:7c:42:36:79:1f:9c:3b:43:79:1e:6c:77:ab:
                    a4:69:2c:91:b6:8a:d6:18:7f:af:63:c0:5c:d2:03:
                    40:40:4d:29:13:78:06:9d:d2:c8:a9:f2:84:01:d5:
                    cb:62:96:8d:bd:11:de:30:ad:9e:d8:6b:92:d1:b6:
                    9d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:38:89:46:40:A8:E4:73:F2:69:D2:08:D4:54:29:9D:DA:A1:E5:11
            X509v3 Authority Key Identifier:
                keyid:E7:D8:7E:47:55:43:06:CC:C0:48:60:B5:CC:3D:02:61:FD:C1:A5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59h-R1VDBszASGC1zD0CYf3BpcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9fee8c-2c23-477e-a071-446c90923e35/1/59h-R1VDBszASGC1zD0CYf3BpcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:d5:ce:a6:be:49:24:ba:b0:3e:9f:64:96:0f:c9:e7:c0:62:
         7b:02:3d:16:f3:50:ae:ee:54:e6:47:8e:0d:7e:e9:da:68:ea:
         7c:a5:4f:e4:6c:b4:1f:9f:e2:3f:24:6a:5f:f0:05:4a:56:05:
         ac:08:4b:e5:b0:a8:63:46:23:62:50:20:b9:32:75:ed:03:7d:
         c6:e4:ef:42:c4:d0:97:b5:79:29:2a:c1:ee:7a:93:1b:ad:51:
         24:d9:e0:bc:aa:10:42:2e:2a:5f:d6:fa:c3:33:09:2e:a0:c4:
         f1:3d:ba:bc:23:69:8d:d7:f5:f7:b7:5f:ea:60:95:40:64:45:
         fc:4b:ea:cf:3b:3e:48:48:22:64:70:68:f6:8b:8a:93:88:7b:
         4e:52:09:06:cb:30:50:3b:25:0f:6e:72:eb:39:9f:ff:e9:04:
         d0:65:d0:f1:f4:77:18:cd:98:b3:fc:53:63:ed:d6:3d:41:05:
         82:2c:9c:9a:ad:03:03:6e:f2:50:f5:d7:f4:03:97:f3:83:d6:
         24:18:e4:d5:b1:02:5e:25:84:d2:a0:28:57:92:f8:a9:43:d9:
         6c:68:52:a6:68:76:98:68:b9:fb:c8:b7:cc:4b:0b:dd:7b:c3:
         4f:ae:87:1b:1b:32:10:09:a9:8c:b8:15:15:88:72:6e:9e:bf:
         72:ed:ba:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PFr61hGgX1r8WDqYCUMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZDg3ZTQ3NTU0MzA2Y2NjMDQ4NjBiNWNjM2QwMjYxZmRj
MWE1YzEwHhcNMjUwMTMxMTIwMDU5WhcNMjUwMjAxMTIwMDU5WjAzMTEwLwYDVQQD
EyhkOTM4ODk0NjQwYThlNDczZjI2OWQyMDhkNDU0Mjk5ZGRhYTFlNTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bbeYmuKTA/ixPtymEfLDjPmhQBM
6INdk+Uxbdx7WIT9+jHFS1PZHAQmxiQIPsJK0g93ljFJH9HpLC/jSVK7ZMUyXbC7
MtKxUqt4d7Hp8ahodfeeE08YJgxZZRVZT6iAa8bxbesOzJdfNYAr1BjNpm7cbEy4
kg5zR4RLV4tn9PpmwAIYlk5TEGKedNFk3FEyblg6LwURa34qm7RKLbCGOt5i36tO
ByhwjajjhFrJLv5UFQinSNQexdO5bMiAiCSZVNjw4HxCNnkfnDtDeR5sd6ukaSyR
torWGH+vY8Bc0gNAQE0pE3gGndLIqfKEAdXLYpaNvRHeMK2e2GuS0badnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk4iUZAqORz8mnSCNRUKZ3aoeURMB8GA1UdIwQY
MBaAFOfYfkdVQwbMwEhgtcw9AmH9waXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTloLVIxVkRCc3pBU0dDMXpEMENZZjNCcGNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZmVlOGMtMmMyMy00NzdlLWEwNzEt
NDQ2YzkwOTIzZTM1LzEvNTloLVIxVkRCc3pBU0dDMXpEMENZZjNCcGNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85ZmVlOGMtMmMyMy00NzdlLWEwNzEtNDQ2YzkwOTIzZTM1
LzEvNTloLVIxVkRCc3pBU0dDMXpEMENZZjNCcGNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAndXOpr5J
JLqwPp9klg/J58BiewI9FvNQru5U5keODX7p2mjqfKVP5Gy0H5/iPyRqX/AFSlYF
rAhL5bCoY0YjYlAguTJ17QN9xuTvQsTQl7V5KSrB7nqTG61RJNngvKoQQi4qX9b6
wzMJLqDE8T26vCNpjdf197df6mCVQGRF/Evqzzs+SEgiZHBo9ouKk4h7TlIJBssw
UDslD25y6zmf/+kE0GXQ8fR3GM2Ys/xTY+3WPUEFgiycmq0DA27yUPXX9AOX84PW
JBjk1bECXiWE0qAoV5L4qUPZbGhSpmh2mGi5+8i3zEsL3XvDT66HGxsyEAmpjLgV
FYhybp6/cu26GQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:03 2025 by rpki-client