Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File:                     i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier:          mdoy8aGeBQOSqicmV9sTXVXy5R1QNGwxr0XSAYUNymU=
Subject key identifier:   CF:0A:CA:E0:82:4B:16:1C:6B:0B:3C:48:E5:C2:28:7D:98:48:86:EE
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer:       /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial:       0194BD8596410615E9E45E4FFD52191038FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number:          13BD
Signing time:             Fri 31 Jan 2025 18:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:36 +0000
Files and hashes:         1: di6vtJn17ke553wiZoaxDGK1MLE.roa (hash: HpCMH1Ia0lvZ8f3O26OMSYPbId0TPu+1abwCSdtco9A=)
                          2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: qaIVOZf+QF6ugwQ2BkHvLn3G6OR64kmgBxDeWCwmlwI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:96:41:06:15:e9:e4:5e:4f:fd:52:19:10:38:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
        Validity
            Not Before: Jan 31 18:00:36 2025 GMT
            Not After : Feb  1 18:00:36 2025 GMT
        Subject: CN=cf0acae0824b161c6b0b3c48e5c2287d984886ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8b:4f:51:bd:9a:81:24:ff:99:a9:35:4f:a4:
                    84:3b:1a:a0:aa:77:75:6b:68:82:ab:eb:0f:11:55:
                    9a:03:2d:36:c1:ef:c3:6c:3f:54:aa:4c:cf:0b:57:
                    1a:3a:30:00:22:30:ce:a9:0a:e4:57:aa:62:eb:b4:
                    2d:03:32:fa:72:86:8f:6d:35:fc:b8:75:80:db:d2:
                    94:7c:b2:30:63:13:41:b3:d9:9e:e6:ee:72:be:e6:
                    3f:68:c5:db:98:1d:85:4f:46:d1:b0:ec:69:c6:7b:
                    08:79:a0:54:e3:07:80:a2:fe:26:53:4a:54:9f:25:
                    6e:b9:f8:75:e9:5c:c6:c4:b7:b5:7c:a4:3e:24:91:
                    bf:81:c8:44:17:55:a1:84:7c:36:51:d6:0f:15:e5:
                    ed:e2:87:52:a0:f9:5c:55:c7:e9:93:55:c9:2a:0a:
                    91:64:06:5d:02:c9:07:04:98:5f:ac:df:13:83:9d:
                    79:dd:3a:47:0d:df:f0:ae:a2:a2:4e:17:2d:6b:69:
                    48:a0:7d:05:42:d5:2e:4f:58:59:5e:5b:12:7f:b8:
                    dd:da:c7:85:50:2c:5f:8c:6e:c3:a7:62:71:f4:9e:
                    19:03:84:e8:13:47:fd:99:2b:17:56:1f:2e:46:13:
                    98:90:d5:25:1a:04:5a:c0:bc:b2:d9:7c:d6:a3:4e:
                    12:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:0A:CA:E0:82:4B:16:1C:6B:0B:3C:48:E5:C2:28:7D:98:48:86:EE
            X509v3 Authority Key Identifier:
                keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:99:2b:8e:3a:49:8c:37:35:ab:ee:ff:1e:0d:54:bb:e7:51:
         a4:42:34:0c:18:fb:38:c6:92:19:4f:66:1e:29:d1:88:23:c3:
         05:2e:6c:e1:bf:7c:ff:1c:af:26:fc:23:70:d0:fc:07:d4:6f:
         37:54:a9:3a:0a:99:4c:29:ac:45:7f:21:e1:17:3d:39:56:47:
         de:b1:6d:c4:e8:07:3e:bb:b6:6f:15:cd:78:a3:95:33:0a:5b:
         fe:1b:b4:fd:69:0d:b5:9e:b7:88:5b:a9:e5:16:3b:8b:54:6d:
         01:9d:ce:a9:43:ef:33:5b:87:eb:63:bb:5c:5e:a2:7b:ab:4f:
         ef:16:78:46:60:59:14:d0:d9:2e:1f:e2:c2:c2:b5:b4:7d:cf:
         dc:57:82:de:c3:e9:18:27:54:08:0b:ec:76:22:2c:bd:0a:c3:
         30:2d:fd:05:8e:10:e3:3b:39:97:70:48:61:7c:c7:9a:ee:6c:
         82:90:4b:aa:77:69:2b:8a:ce:87:85:c3:a2:70:42:cf:df:45:
         e9:02:c9:82:07:78:3d:39:23:f4:2f:12:cd:b2:c2:94:ab:f8:
         5d:03:f7:cc:35:d9:7a:8b:07:b2:5a:0a:3e:56:b2:0a:23:2a:
         68:3f:4b:cd:3d:dc:10:2f:1f:3c:97:98:1d:46:64:6c:4b:68:
         b8:bb:fa:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZZBBhXp5F5P/VIZEDj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiY2JkYjUxZWI4MDIyNmY0MTQ3N2E3YmM1MGUwZjk2MTQ1
NWVkODMwHhcNMjUwMTMxMTgwMDM2WhcNMjUwMjAxMTgwMDM2WjAzMTEwLwYDVQQD
EyhjZjBhY2FlMDgyNGIxNjFjNmIwYjNjNDhlNWMyMjg3ZDk4NDg4NmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4tPUb2agST/mak1T6SEOxqgqnd1
a2iCq+sPEVWaAy02we/DbD9UqkzPC1caOjAAIjDOqQrkV6pi67QtAzL6coaPbTX8
uHWA29KUfLIwYxNBs9me5u5yvuY/aMXbmB2FT0bRsOxpxnsIeaBU4weAov4mU0pU
nyVuufh16VzGxLe1fKQ+JJG/gchEF1WhhHw2UdYPFeXt4odSoPlcVcfpk1XJKgqR
ZAZdAskHBJhfrN8Tg5153TpHDd/wrqKiThcta2lIoH0FQtUuT1hZXlsSf7jd2seF
UCxfjG7Dp2Jx9J4ZA4ToE0f9mSsXVh8uRhOYkNUlGgRawLyy2XzWo04SrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8KyuCCSxYcaws8SOXCKH2YSIbuMB8GA1UdIwQY
MBaAFIvL21HrgCJvQUd6e8UOD5YUVe2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTIt
ZWZhOTM5MWY3ZDllLzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy81NjRmM2EtNTJkNi00ZDA5LTgxZTItZWZhOTM5MWY3ZDll
LzEvaTh2YlVldUFJbTlCUjNwN3hRNFBsaFJWN1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZkrjjpJ
jDc1q+7/Hg1Uu+dRpEI0DBj7OMaSGU9mHinRiCPDBS5s4b98/xyvJvwjcND8B9Rv
N1SpOgqZTCmsRX8h4Rc9OVZH3rFtxOgHPru2bxXNeKOVMwpb/hu0/WkNtZ63iFup
5RY7i1RtAZ3OqUPvM1uH62O7XF6ie6tP7xZ4RmBZFNDZLh/iwsK1tH3P3FeC3sPp
GCdUCAvsdiIsvQrDMC39BY4Q4zs5l3BIYXzHmu5sgpBLqndpK4rOh4XDonBCz99F
6QLJggd4PTkj9C8SzbLClKv4XQP3zDXZeosHsloKPlayCiMqaD9LzT3cEC8fPJeY
HUZkbEtouLv6KA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:06 2025 by rpki-client