Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File:                     4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier:          Stad+rf+o/QB6EqLVX/1pwegowZfI+qB35vgbn/BPnI=
Subject key identifier:   E3:82:38:F0:3E:D4:93:F8:02:E9:A8:94:84:36:4C:7F:CA:F3:20:3F
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer:       /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial:       0194BD17922B6C20E75C222851952C2CE478
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number:          08F4
Signing time:             Fri 31 Jan 2025 16:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:25 +0000
Files and hashes:         1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: b/LMVTLFYkahIICZInEGZY9mwuQweZ3obxQP2e/Zmo4=)
                          2: irEgHQgJ1lYPjA_1iuUSjvMFJ1E.roa (hash: AIND5vmwFooA+85IH/ZlbRJQlN9azqJPo9GktTW2krE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:92:2b:6c:20:e7:5c:22:28:51:95:2c:2c:e4:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
        Validity
            Not Before: Jan 31 16:00:25 2025 GMT
            Not After : Feb  1 16:00:25 2025 GMT
        Subject: CN=e38238f03ed493f802e9a89484364c7fcaf3203f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:00:25:82:c2:01:50:43:6a:a4:a8:69:ff:ad:
                    a4:9c:0a:0b:db:9d:75:78:f8:8f:c7:d9:3c:f8:3a:
                    2b:bc:f2:db:e5:51:2a:64:fc:1f:9d:fb:53:9f:55:
                    51:eb:5b:61:ac:b4:8e:13:c3:09:5e:9a:04:52:97:
                    ab:48:79:a8:9c:b5:a1:be:74:6e:84:d0:57:74:02:
                    57:4d:d2:39:62:f1:23:df:06:35:ac:17:36:54:d6:
                    75:c7:aa:3b:12:a1:3c:63:68:8b:56:36:8e:96:30:
                    d8:ee:b0:c4:89:82:31:d6:79:7d:11:76:18:fa:e7:
                    93:27:cd:a3:a2:0e:3c:d1:5a:76:05:41:27:fb:4f:
                    94:f2:41:29:6b:fa:fd:c7:49:9c:f1:85:e9:c4:d8:
                    05:62:19:eb:95:3b:b7:a5:85:05:32:e2:8c:82:72:
                    e7:ca:98:6a:3f:7e:cf:e0:73:c1:94:b7:b5:cb:5a:
                    cd:cf:5e:a6:a3:6d:9d:ba:93:c2:72:6d:4e:3f:ad:
                    1f:3f:be:7a:a9:fe:9e:b3:39:67:6d:06:26:36:09:
                    8a:3e:67:1d:cd:8b:66:1f:e6:ed:3a:36:5d:d1:3d:
                    30:da:8e:f4:d9:8e:0d:24:5c:ca:57:de:4f:87:30:
                    df:7b:ad:7e:1a:d8:14:83:28:2a:5a:6e:e4:cb:5e:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:38:F0:3E:D4:93:F8:02:E9:A8:94:84:36:4C:7F:CA:F3:20:3F
            X509v3 Authority Key Identifier:
                keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:3f:8f:d4:6b:da:15:31:b6:b6:98:f7:db:70:16:e4:ce:
         4c:ef:b0:1c:e0:08:9c:22:98:08:ac:69:02:55:29:43:d9:a8:
         aa:3b:8d:5b:af:10:da:32:04:63:8f:62:c1:b9:4f:e1:3c:89:
         a6:48:ed:4d:71:3e:ad:db:c6:31:14:b7:d5:77:56:68:35:bb:
         d8:71:13:0d:e5:d9:cd:86:af:5d:1e:ee:22:2b:bb:04:ab:69:
         31:9d:de:c8:f0:03:d2:a0:3b:47:c8:73:90:f7:d1:25:1a:ba:
         47:fc:1c:28:2f:d1:9c:59:8c:5a:ae:8b:30:86:81:62:91:c7:
         7e:0b:94:6b:bd:61:56:b2:f2:42:07:f3:fb:25:b4:25:3d:b8:
         c2:0d:15:3d:0c:0d:64:ff:a9:85:4e:1c:42:22:ef:4d:9e:74:
         dd:89:23:4a:17:37:10:c5:34:51:18:b0:f6:35:16:fc:19:af:
         9b:50:9d:da:e2:3b:a1:3a:b2:0a:30:a3:db:d2:58:85:12:a2:
         5f:08:44:53:7c:40:d3:17:8b:b7:0c:6c:99:4f:fa:62:0a:bc:
         ab:2e:03:9a:b3:82:38:aa:d4:72:79:aa:74:99:d0:6b:c2:b1:
         9f:b3:29:3b:21:8d:1a:38:87:3c:3e:5d:38:0f:72:cc:9b:e2:
         67:01:c6:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5IrbCDnXCIoUZUsLOR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNDA3YTc2OTZmMDc5ODQxNDMwNTRkNDExZTNjYTVmMTgz
NmVjZDQwHhcNMjUwMTMxMTYwMDI1WhcNMjUwMjAxMTYwMDI1WjAzMTEwLwYDVQQD
EyhlMzgyMzhmMDNlZDQ5M2Y4MDJlOWE4OTQ4NDM2NGM3ZmNhZjMyMDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gAlgsIBUENqpKhp/62knAoL2511
ePiPx9k8+DorvPLb5VEqZPwfnftTn1VR61thrLSOE8MJXpoEUperSHmonLWhvnRu
hNBXdAJXTdI5YvEj3wY1rBc2VNZ1x6o7EqE8Y2iLVjaOljDY7rDEiYIx1nl9EXYY
+ueTJ82jog480Vp2BUEn+0+U8kEpa/r9x0mc8YXpxNgFYhnrlTu3pYUFMuKMgnLn
yphqP37P4HPBlLe1y1rNz16mo22dupPCcm1OP60fP756qf6eszlnbQYmNgmKPmcd
zYtmH+btOjZd0T0w2o702Y4NJFzKV95PhzDfe61+GtgUgygqWm7ky16yRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOOCOPA+1JP4AumolIQ2TH/K8yA/MB8GA1UdIwQY
MBaAFOJAenaW8HmEFDBU1BHjyl8YNuzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQt
ZjBiMmRkMDdmNzI3LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8yZDZkZGYtZDQ0OC00NTY2LWIzNjQtZjBiMmRkMDdmNzI3
LzEvNGtCNmRwYndlWVFVTUZUVUVlUEtYeGcyN05RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRE/j9Rr
2hUxtraY99twFuTOTO+wHOAInCKYCKxpAlUpQ9moqjuNW68Q2jIEY49iwblP4TyJ
pkjtTXE+rdvGMRS31XdWaDW72HETDeXZzYavXR7uIiu7BKtpMZ3eyPAD0qA7R8hz
kPfRJRq6R/wcKC/RnFmMWq6LMIaBYpHHfguUa71hVrLyQgfz+yW0JT24wg0VPQwN
ZP+phU4cQiLvTZ503YkjShc3EMU0URiw9jUW/Bmvm1Cd2uI7oTqyCjCj29JYhRKi
XwhEU3xA0xeLtwxsmU/6Ygq8qy4DmrOCOKrUcnmqdJnQa8Kxn7MpOyGNGjiHPD5d
OA9yzJviZwHGYA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:25:19 2025 by rpki-client