Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
File:                     SM83s2Rv2pPL3QuKrM__MTpvcY8.mft (raw, json)
Hash identifier:          i1ZiJyqgWEIG/9Y4IiGWmYKnWdqtvHxG6Ih7iL6UXNc=
Subject key identifier:   85:D3:5E:CF:88:31:6F:5C:93:13:80:C5:BE:C4:D2:83:AB:DE:3B:11
Authority key identifier: 48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F
Certificate issuer:       /CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
Certificate serial:       0194BD17A4E254858713334E600FE9C1C7CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft
Manifest number:          13C3
Signing time:             Fri 31 Jan 2025 16:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:30 +0000
Files and hashes:         1: Os6xDD1H4LsrEU2Pwmq0YT-o8IM.roa (hash: 9WTAK5WFdauUxfw4Aw74xq8JjOOgRjy/Qe/px+Cijao=)
                          2: SM83s2Rv2pPL3QuKrM__MTpvcY8.crl (hash: 5fE62K6mQbwVOBK8UhoYHSfmPokkosKkWCWm0qy+yhM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a4:e2:54:85:87:13:33:4e:60:0f:e9:c1:c7:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48cf37b3646fda93cbdd0b8aaccfff313a6f718f
        Validity
            Not Before: Jan 31 16:00:30 2025 GMT
            Not After : Feb  1 16:00:30 2025 GMT
        Subject: CN=85d35ecf88316f5c931380c5bec4d283abde3b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:d5:db:a9:5c:da:3f:cf:9f:00:d3:6c:08:
                    62:65:34:e5:74:bf:7f:07:04:be:90:23:16:df:7c:
                    88:48:94:7e:6e:ce:8f:e1:25:e9:bf:ef:83:f3:55:
                    88:c4:68:0f:66:88:2a:5a:e1:53:2e:fa:f4:3f:89:
                    1f:9f:f8:a1:27:0f:80:36:36:2d:7b:2e:8b:ed:0b:
                    23:97:03:ba:62:81:11:57:97:b8:ec:74:7c:bd:93:
                    27:3a:dd:cb:0d:03:fb:05:f0:55:70:a8:28:89:3c:
                    6b:0c:75:d2:2c:f1:43:c6:08:0a:c2:95:5b:e5:5c:
                    fe:f6:52:7a:95:06:03:27:4a:af:f7:62:d5:5b:6a:
                    e8:ee:37:46:17:c7:ea:60:d5:59:0b:e0:98:6f:89:
                    9d:38:48:56:5c:e4:b5:63:25:45:f9:5f:4b:2a:44:
                    0f:ff:b2:8a:b5:e9:42:f3:43:93:5e:92:0e:ca:40:
                    8f:1a:19:cf:ba:55:53:76:0a:ef:df:0a:b0:db:a1:
                    1a:2d:7e:f8:23:4f:53:15:84:87:c0:7b:89:f5:bf:
                    7d:e1:f4:e2:3a:73:09:89:cc:92:b3:57:a7:64:04:
                    e7:42:13:70:a1:60:f2:e7:3b:7f:bc:e2:62:93:4c:
                    8e:bd:90:f0:85:04:b3:31:f1:1c:46:a9:0d:c7:e7:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D3:5E:CF:88:31:6F:5C:93:13:80:C5:BE:C4:D2:83:AB:DE:3B:11
            X509v3 Authority Key Identifier:
                keyid:48:CF:37:B3:64:6F:DA:93:CB:DD:0B:8A:AC:CF:FF:31:3A:6F:71:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SM83s2Rv2pPL3QuKrM__MTpvcY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/20d593-723f-4963-901d-17e3158954da/1/SM83s2Rv2pPL3QuKrM__MTpvcY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:60:ba:a9:1c:a7:f5:40:c0:31:33:79:e0:b4:c2:23:54:51:
         27:a6:14:7a:25:73:bf:d0:31:26:f4:4a:dd:f7:f5:c1:c9:9e:
         31:1f:71:70:9e:27:28:51:73:20:3d:49:9b:d9:24:39:d5:4a:
         76:fe:de:53:51:af:84:7d:67:27:4c:4c:2d:49:be:71:f9:0a:
         8a:d3:e7:1b:10:ad:b5:e4:47:fa:2f:c0:66:28:f8:f4:e7:dc:
         50:45:1a:1b:fa:fa:19:f7:fc:65:f3:ef:c4:04:8b:8e:32:18:
         64:3a:86:00:5c:57:a5:21:10:cb:c1:33:e7:b2:9f:0a:27:bd:
         8b:ed:bc:7f:0d:87:96:da:38:ab:3f:ba:77:bc:c4:1b:a2:8b:
         18:da:56:b5:36:4b:18:f2:76:0c:0c:c7:0a:27:ae:8b:d1:f4:
         20:cb:ec:5b:b1:9a:27:89:3c:62:4e:fc:9a:b4:e2:90:0c:80:
         cc:67:2f:79:dc:7f:13:6e:86:81:72:24:96:c8:69:f7:33:02:
         72:d7:0a:7d:42:62:c1:02:26:36:0e:dc:e1:f1:4b:91:70:35:
         a4:f4:c3:1c:f7:0c:5d:9c:57:e4:5c:7a:5d:a6:2e:9a:b2:7e:
         18:5c:01:22:e9:fe:0d:eb:18:5c:78:f3:b2:3d:6e:dd:16:4e:
         e6:e4:1b:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6TiVIWHEzNOYA/pwcfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Y2YzN2IzNjQ2ZmRhOTNjYmRkMGI4YWFjY2ZmZjMxM2E2
ZjcxOGYwHhcNMjUwMTMxMTYwMDMwWhcNMjUwMjAxMTYwMDMwWjAzMTEwLwYDVQQD
Eyg4NWQzNWVjZjg4MzE2ZjVjOTMxMzgwYzViZWM0ZDI4M2FiZGUzYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIPV26lc2j/PnwDTbAhiZTTldL9/
BwS+kCMW33yISJR+bs6P4SXpv++D81WIxGgPZogqWuFTLvr0P4kfn/ihJw+ANjYt
ey6L7QsjlwO6YoERV5e47HR8vZMnOt3LDQP7BfBVcKgoiTxrDHXSLPFDxggKwpVb
5Vz+9lJ6lQYDJ0qv92LVW2ro7jdGF8fqYNVZC+CYb4mdOEhWXOS1YyVF+V9LKkQP
/7KKtelC80OTXpIOykCPGhnPulVTdgrv3wqw26EaLX74I09TFYSHwHuJ9b994fTi
OnMJicySs1enZATnQhNwoWDy5zt/vOJik0yOvZDwhQSzMfEcRqkNx+cRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXTXs+IMW9ckxOAxb7E0oOr3jsRMB8GA1UdIwQY
MBaAFEjPN7Nkb9qTy90LiqzP/zE6b3GPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQt
MTdlMzE1ODk1NGRhLzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8yMGQ1OTMtNzIzZi00OTYzLTkwMWQtMTdlMzE1ODk1NGRh
LzEvU004M3MyUnYycFBMM1F1S3JNX19NVHB2Y1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmC6qRyn
9UDAMTN54LTCI1RRJ6YUeiVzv9AxJvRK3ff1wcmeMR9xcJ4nKFFzID1Jm9kkOdVK
dv7eU1GvhH1nJ0xMLUm+cfkKitPnGxCtteRH+i/AZij49OfcUEUaG/r6Gff8ZfPv
xASLjjIYZDqGAFxXpSEQy8Ez57KfCie9i+28fw2Hlto4qz+6d7zEG6KLGNpWtTZL
GPJ2DAzHCieui9H0IMvsW7GaJ4k8Yk78mrTikAyAzGcvedx/E26GgXIklshp9zMC
ctcKfUJiwQImNg7c4fFLkXA1pPTDHPcMXZxX5Fx6XaYumrJ+GFwBIun+DesYXHjz
sj1u3RZO5uQbyA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:04 2025 by rpki-client