Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
File:                     5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft (raw, json)
Hash identifier:          Iksn5bLC+MUBkp93hsC+9AdsTapsWRxcM2tP8D/8dYc=
Subject key identifier:   E4:D8:4B:E1:5C:64:77:75:4D:00:DA:FF:CD:78:C4:9C:40:F9:33:74
Authority key identifier: E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF
Certificate issuer:       /CN=e58ff73925a23692847ed92bc66613fd47068dcf
Certificate serial:       0194BBCE1B796B83C4F2A4009438D75184F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft
Manifest number:          F8
Signing time:             Fri 31 Jan 2025 10:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:34 +0000
Files and hashes:         1: 5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl (hash: dSS/FW51JAEOvs/3KcWyxbzmEFzt/t/ziDIqzLAAZUo=)
                          2: LyUeFaQumjkEXGwuTN3adk_CmUQ.roa (hash: 1oee/niCKCFU/8iZhol3JSIxvOFh3whzL0NQ6+tUdxg=)
                          3: ldrAy5A_M0tg2d0BXg7t_q2mTmY.roa (hash: PzgoMs0khlbRVil+vbEFVoeQZaszoG+3sW3UoJkJrfY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:1b:79:6b:83:c4:f2:a4:00:94:38:d7:51:84:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58ff73925a23692847ed92bc66613fd47068dcf
        Validity
            Not Before: Jan 31 10:00:34 2025 GMT
            Not After : Feb  1 10:00:34 2025 GMT
        Subject: CN=e4d84be15c6477754d00daffcd78c49c40f93374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bb:53:f5:7d:a8:08:41:10:5b:9c:c0:00:61:
                    5c:58:f6:3c:84:3d:cc:8e:8a:33:9c:de:6e:38:1d:
                    0a:ba:e8:40:16:be:ea:e2:fc:ab:2b:13:e8:85:dd:
                    a8:08:79:e4:c9:b6:5d:60:09:53:5a:b4:32:d4:e7:
                    cf:13:2e:1f:aa:e0:7b:af:f0:89:a0:77:e0:16:f7:
                    40:a5:bb:29:b6:67:50:6f:8f:89:9c:b9:51:c9:86:
                    a7:b3:54:63:06:12:a8:5b:06:f1:1d:5a:29:bb:60:
                    54:10:47:6e:2c:ee:3f:10:f5:1b:e3:08:8e:98:f3:
                    98:be:12:71:1f:4b:52:fc:bd:23:b4:49:0c:be:dc:
                    1f:9f:1c:d4:48:ca:3b:34:d3:e0:b1:cc:46:a2:4e:
                    9d:2e:b3:0d:68:2c:8a:ac:9a:cb:12:57:72:f7:8c:
                    d2:70:85:88:af:1a:4a:18:38:a9:92:9c:5d:7a:42:
                    db:da:c4:bc:41:f7:84:ae:f5:e3:e0:da:9b:58:ac:
                    8e:36:4c:13:ae:e0:18:4b:de:33:c8:2f:21:53:42:
                    79:d0:f6:32:65:1a:d7:de:94:1d:e9:ab:e2:51:43:
                    83:05:4c:7e:97:02:97:7a:22:d1:41:60:4d:b5:1f:
                    0f:92:6f:da:30:52:92:54:ee:49:8a:da:7e:22:30:
                    82:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D8:4B:E1:5C:64:77:75:4D:00:DA:FF:CD:78:C4:9C:40:F9:33:74
            X509v3 Authority Key Identifier:
                keyid:E5:8F:F7:39:25:A2:36:92:84:7E:D9:2B:C6:66:13:FD:47:06:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Y_3OSWiNpKEftkrxmYT_UcGjc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/40f1bb-e868-479c-a515-7b47b5ba6aed/1/5Y_3OSWiNpKEftkrxmYT_UcGjc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:7e:29:79:a6:0d:bd:b0:f9:75:62:db:a7:20:5d:21:23:
         b3:d7:7e:1b:a5:68:0d:4e:95:d2:37:e7:2c:02:d6:fc:80:22:
         0c:09:fd:c3:ac:e0:b3:93:9f:1d:9a:24:ad:56:0b:1a:29:26:
         57:a6:c1:9e:9e:3f:9b:47:27:8f:fe:72:f4:b6:bf:7d:9e:c3:
         21:10:f9:e8:d8:e1:d6:0b:0e:fb:5e:93:84:f2:20:48:8f:b5:
         d1:1b:e1:14:8a:5d:4d:84:62:61:46:e5:40:3f:d0:5c:27:3a:
         15:1c:d4:8e:e4:61:1f:b9:9b:e6:f7:95:62:c3:60:11:8a:70:
         77:f9:75:94:5b:af:9a:77:3d:78:8f:a6:0b:a8:87:f3:aa:bf:
         99:f7:b2:2d:26:97:86:e5:e9:d7:ef:71:96:70:3c:81:0e:32:
         7a:1b:a8:b8:d3:5b:61:81:20:c3:d9:cc:b8:39:91:72:80:14:
         3d:a6:1a:f0:9a:4c:b3:aa:6c:2b:15:3f:96:ce:f8:91:10:87:
         40:3c:a6:7a:35:59:e5:c5:31:77:ce:89:bd:50:43:b4:97:78:
         f7:39:81:50:7e:8c:f9:cd:32:66:ae:a6:ba:ed:97:a7:72:f2:
         17:8e:6d:b8:a9:31:76:17:e1:53:c3:b3:48:7f:a4:92:54:95:
         db:f4:47:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zht5a4PE8qQAlDjXUYTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1OGZmNzM5MjVhMjM2OTI4NDdlZDkyYmM2NjYxM2ZkNDcw
NjhkY2YwHhcNMjUwMTMxMTAwMDM0WhcNMjUwMjAxMTAwMDM0WjAzMTEwLwYDVQQD
EyhlNGQ4NGJlMTVjNjQ3Nzc1NGQwMGRhZmZjZDc4YzQ5YzQwZjkzMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7tT9X2oCEEQW5zAAGFcWPY8hD3M
jooznN5uOB0KuuhAFr7q4vyrKxPohd2oCHnkybZdYAlTWrQy1OfPEy4fquB7r/CJ
oHfgFvdApbsptmdQb4+JnLlRyYans1RjBhKoWwbxHVopu2BUEEduLO4/EPUb4wiO
mPOYvhJxH0tS/L0jtEkMvtwfnxzUSMo7NNPgscxGok6dLrMNaCyKrJrLEldy94zS
cIWIrxpKGDipkpxdekLb2sS8QfeErvXj4NqbWKyONkwTruAYS94zyC8hU0J50PYy
ZRrX3pQd6aviUUODBUx+lwKXeiLRQWBNtR8Pkm/aMFKSVO5Jitp+IjCCZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTYS+FcZHd1TQDa/814xJxA+TN0MB8GA1UdIwQY
MBaAFOWP9zklojaShH7ZK8ZmE/1HBo3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUt
N2I0N2I1YmE2YWVkLzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80MGYxYmItZTg2OC00NzljLWE1MTUtN2I0N2I1YmE2YWVk
LzEvNVlfM09TV2lOcEtFZnRrcnhtWVRfVWNHamM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRB+KXmm
Db2w+XVi26cgXSEjs9d+G6VoDU6V0jfnLALW/IAiDAn9w6zgs5OfHZokrVYLGikm
V6bBnp4/m0cnj/5y9La/fZ7DIRD56Njh1gsO+16ThPIgSI+10RvhFIpdTYRiYUbl
QD/QXCc6FRzUjuRhH7mb5veVYsNgEYpwd/l1lFuvmnc9eI+mC6iH86q/mfeyLSaX
huXp1+9xlnA8gQ4yehuouNNbYYEgw9nMuDmRcoAUPaYa8JpMs6psKxU/ls74kRCH
QDymejVZ5cUxd86JvVBDtJd49zmBUH6M+c0yZq6muu2Xp3LyF45tuKkxdhfhU8Oz
SH+kklSV2/RH9Q==
-----END CERTIFICATE-----
Generated at Tue Apr 29 20:27:26 2025 by rpki-client