Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          Wn9xTpvviA9pdVqib2Xa8EN4w4IPp703hA9zFs6Gb+A=
Subject key identifier:   93:54:C4:DA:9E:AB:BA:7A:18:99:96:BE:3A:B5:F0:69:1D:3B:09:72
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       0194BBCEEF5402478E54D17F70A768DBBFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          1077
Signing time:             Fri 31 Jan 2025 10:01:28 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:28 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:28 +0000
Files and hashes:         1: 2X1Aq3uwv_rdP11PERDf5xc38AI.roa (hash: B7sjMQo7xNloOK1hTmdNbqOOboiaTbdNnO+C5uW+j58=)
                          2: Ch_gbqDsAhbPbPVyCZuUD6Rt_tU.roa (hash: lJyyoSk6lh9Ke1PZ6fr+wMQ+yXg1/zlIl+iWHK5ln+U=)
                          3: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: ltjXyOlt/S9n4zoiUhf104gDDG7d4swh3NjKIqXKS2k=)
                          4: H2cnGkpHBPqjHRGhcHPHqWhpLu8.roa (hash: oHqCaOHDy7adycxKsgn/iaFXF2yuhzvyHsMV1zyHAAw=)
                          5: ILIqRbOHVwxkFJKFfUD52n880mI.roa (hash: cti4+XaqWa64ZvOhVwfuqQKsUk/NB8Q0npKWhfOyakI=)
                          6: eKX38WRBWmtuTwpJydlyAOgABaU.roa (hash: wPEeV7+enD23Ox2TyJ2ri6ktyLrFVlAY5Y0TfZ75Xbs=)
                          7: n7VMq_z-rv4nBWsX2SX-C_orDwA.roa (hash: puDUtCW6BFuWoUT5Yl8pFYj9/gNu+EkYRw2ZisOVmfM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ef:54:02:47:8e:54:d1:7f:70:a7:68:db:bf:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Jan 31 10:01:28 2025 GMT
            Not After : Feb  1 10:01:28 2025 GMT
        Subject: CN=9354c4da9eabba7a189996be3ab5f0691d3b0972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:73:79:2f:bc:e6:9a:7d:75:b9:2c:42:ec:
                    ad:97:f4:3f:57:4a:9d:95:c3:32:a8:e7:3d:95:3b:
                    6c:53:0c:ff:62:3f:d0:85:b6:ed:52:14:cd:ad:08:
                    7a:05:7c:14:82:a6:89:6e:38:25:3f:4f:b2:38:e5:
                    fa:f5:44:e8:39:e5:df:5f:6e:91:ba:66:b8:89:62:
                    fd:88:0e:2e:28:ba:f3:fa:64:ce:ff:20:ae:68:ba:
                    bf:a3:3f:e5:7a:0c:46:16:57:60:2b:ae:4b:4f:c7:
                    92:17:97:1b:6f:dc:22:52:f2:0e:ed:4f:72:0a:f2:
                    c3:7f:00:8c:de:f5:1a:9f:af:06:09:ca:e2:eb:d2:
                    ba:d6:e8:49:27:88:2d:04:15:23:8b:01:38:21:e4:
                    ad:36:fe:e0:a0:5e:1c:9b:75:7e:af:1c:b1:10:f3:
                    ea:08:84:a2:1e:bf:32:a6:7e:b2:b5:c3:3b:e2:ea:
                    d9:55:67:ab:63:4e:2d:81:cb:fd:f6:45:cd:8f:29:
                    15:e8:4f:33:22:56:12:59:01:e2:62:cc:20:18:6b:
                    cc:b7:4f:5d:67:04:3a:44:03:22:c6:f9:47:2e:ad:
                    e9:01:06:d3:d3:ff:56:9b:43:43:9b:17:2a:ed:95:
                    2b:75:c4:e3:9c:ab:db:5b:0a:62:6b:6e:7d:31:05:
                    19:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:54:C4:DA:9E:AB:BA:7A:18:99:96:BE:3A:B5:F0:69:1D:3B:09:72
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:f6:bc:89:3d:7e:83:47:87:e4:3b:1f:58:e5:26:1b:f3:
         eb:f6:5b:58:9e:b7:07:f6:be:57:ad:b2:8e:46:b3:0e:60:c4:
         c2:39:09:40:93:be:38:c3:96:7c:04:cd:42:ec:a1:5f:df:d1:
         16:f1:2e:97:05:c9:03:69:08:17:5e:1e:0b:40:03:f2:52:84:
         9c:af:23:c2:96:73:4f:e5:89:3c:8d:16:27:ec:2b:5c:45:cb:
         ed:76:4f:46:98:ea:97:e5:f1:6e:30:b2:a0:2f:2c:01:f2:08:
         02:f3:94:17:d3:80:ee:29:98:8e:f9:80:0e:e2:c4:20:ab:cd:
         c1:db:61:0d:58:16:1a:a3:ed:64:ef:f0:0f:54:72:81:63:ca:
         cb:8a:c1:c1:69:34:b0:b3:ff:f5:e6:66:41:ca:d7:75:43:e3:
         18:84:5a:de:c1:97:85:22:63:9d:64:48:a0:93:70:1c:6c:9b:
         9e:88:62:cf:1d:64:c0:d2:cc:43:5a:31:d2:6d:02:9a:4d:6e:
         3b:73:84:82:25:bd:13:7b:49:de:de:8f:a2:bf:6c:76:06:e3:
         fd:9e:8f:64:e0:85:10:9a:55:6b:55:65:19:d4:28:5f:f4:7b:
         9a:6c:b9:cd:d4:a0:3d:36:e0:e4:42:bb:c4:5a:f4:62:96:99:
         37:bb:29:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zu9UAkeOVNF/cKdo27//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4
NjEyM2YwHhcNMjUwMTMxMTAwMTI4WhcNMjUwMjAxMTAwMTI4WjAzMTEwLwYDVQQD
Eyg5MzU0YzRkYTllYWJiYTdhMTg5OTk2YmUzYWI1ZjA2OTFkM2IwOTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XVzeS+85pp9dbksQuytl/Q/V0qd
lcMyqOc9lTtsUwz/Yj/QhbbtUhTNrQh6BXwUgqaJbjglP0+yOOX69UToOeXfX26R
uma4iWL9iA4uKLrz+mTO/yCuaLq/oz/legxGFldgK65LT8eSF5cbb9wiUvIO7U9y
CvLDfwCM3vUan68GCcri69K61uhJJ4gtBBUjiwE4IeStNv7goF4cm3V+rxyxEPPq
CISiHr8ypn6ytcM74urZVWerY04tgcv99kXNjykV6E8zIlYSWQHiYswgGGvMt09d
ZwQ6RAMixvlHLq3pAQbT0/9Wm0NDmxcq7ZUrdcTjnKvbWwpia259MQUZ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNUxNqeq7p6GJmWvjq18GkdOwlyMB8GA1UdIwQY
MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt
NGIxZjYxNjUzZjNkLzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk
LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZz2vIk9
foNHh+Q7H1jlJhvz6/ZbWJ63B/a+V62yjkazDmDEwjkJQJO+OMOWfATNQuyhX9/R
FvEulwXJA2kIF14eC0AD8lKEnK8jwpZzT+WJPI0WJ+wrXEXL7XZPRpjql+XxbjCy
oC8sAfIIAvOUF9OA7imYjvmADuLEIKvNwdthDVgWGqPtZO/wD1RygWPKy4rBwWk0
sLP/9eZmQcrXdUPjGIRa3sGXhSJjnWRIoJNwHGybnohizx1kwNLMQ1ox0m0Cmk1u
O3OEgiW9E3tJ3t6Por9sdgbj/Z6PZOCFEJpVa1VlGdQoX/R7mmy5zdSgPTbg5EK7
xFr0YpaZN7spfw==
-----END CERTIFICATE-----