Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
File:                     3E5FOv_olbZFK4QCdDfFwA_TcGc.mft (raw, json)
Hash identifier:          5pxnIaC2JOsk5OUt31kF5R71o4JqZ9Rma8JColMWbQ8=
Subject key identifier:   6B:F6:59:8D:7F:5E:6C:ED:C9:E2:DD:F0:F7:56:CF:5D:43:20:BC:03
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Certificate issuer:       /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial:       0194BBCEB73274EC7613AB82DD5949191D1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
Manifest number:          1440
Signing time:             Fri 31 Jan 2025 10:01:14 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:14 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:14 +0000
Files and hashes:         1: 3E5FOv_olbZFK4QCdDfFwA_TcGc.crl (hash: xgHCXOT2eYKHpcsVwFfn1lmM9uO0faMitiPJJolrSlg=)
                          2: ILL8Bsx1CidlNDnMPzCUcS5U2Mo.roa (hash: B9pNA14gZya54yZcULKpZm4AHqIWlkttw9up4kc/opc=)
                          3: VwaG3F-L6xL12XPSU_UWu2Bd58g.roa (hash: /URPWuVnWdS2o9I0omCNTV0BM2l7vJwm+zKrLTezQaI=)
                          4: kNjxTs2znVvLY08E4W9HAeORpIc.roa (hash: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=)
                          5: lin8JZNkawhqPQLq4l5oDz7p9_Q.roa (hash: BVUXkfHTFAe9GN10E46L1MHHgXHBoub4CNAdGpuz0fk=)
                          6: mytf20wX2aBV2FUaQnt3tXEi67s.roa (hash: FaOUPn+Qyashzwjxkz567M7mihch3bci9gHJEHkVovg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:b7:32:74:ec:76:13:ab:82:dd:59:49:19:1d:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
        Validity
            Not Before: Jan 31 10:01:14 2025 GMT
            Not After : Feb  1 10:01:14 2025 GMT
        Subject: CN=6bf6598d7f5e6cedc9e2ddf0f756cf5d4320bc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:66:22:8f:a0:15:01:0e:5f:b8:9f:d6:1f:06:
                    09:79:f4:2c:8a:e2:7e:a2:5a:c9:5c:25:f5:28:fe:
                    77:1d:ff:49:81:ee:b7:6c:90:b3:70:e3:59:cf:b7:
                    e7:5e:04:64:3b:ed:6a:df:8f:19:44:de:3c:22:2f:
                    40:4b:03:28:20:1d:b3:6c:80:1f:71:29:31:0f:7e:
                    03:72:f8:87:f2:56:d0:84:e0:28:f4:88:e7:94:77:
                    72:66:f2:7a:99:3d:5a:b8:dd:b3:d6:b7:e2:5d:46:
                    a5:cf:3a:ad:69:7c:d2:ef:94:31:56:bb:ba:3c:d0:
                    43:93:f8:3c:a4:b7:50:87:58:1a:d3:35:af:74:1e:
                    b8:86:69:93:da:49:d1:ed:30:71:fd:63:23:98:b7:
                    fd:70:a4:c1:9e:13:de:e8:30:b2:d5:bb:31:ce:4d:
                    d8:37:37:f2:92:5d:ab:d6:0c:49:8f:2d:b6:17:57:
                    b2:24:9d:3d:32:39:83:3a:2c:bd:25:5d:67:94:84:
                    9e:b8:6f:5c:03:5b:61:f9:58:eb:2c:94:09:5a:a6:
                    dc:5d:a0:7b:ee:75:77:48:25:67:6e:cf:5b:49:6d:
                    c1:f7:c2:70:5e:4a:a2:fd:08:5c:cf:34:e9:73:01:
                    10:68:f6:5e:47:90:e2:8c:f8:e5:2e:8a:fc:ee:6f:
                    d0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F6:59:8D:7F:5E:6C:ED:C9:E2:DD:F0:F7:56:CF:5D:43:20:BC:03
            X509v3 Authority Key Identifier:
                keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:dd:a2:fd:16:0a:f5:95:4f:07:6f:49:1d:18:86:72:6f:ed:
         90:36:49:6f:ad:c8:a4:60:1b:f4:b2:81:c8:be:b7:ed:de:86:
         5f:e6:a6:8e:ce:12:3c:14:ab:37:d3:93:c3:e9:f9:1b:2b:d1:
         bb:e9:ff:54:d2:48:19:3a:61:77:75:f7:94:90:76:8f:79:36:
         02:61:c9:f4:6c:9c:7f:d4:7c:f9:6d:74:da:1f:08:3d:ed:4b:
         e0:cc:02:ef:6f:83:87:d7:ed:e5:71:65:66:a6:d2:19:f7:b9:
         35:d7:88:51:52:a5:39:66:20:02:a1:0e:7e:56:f8:e4:a9:af:
         98:8c:18:9f:95:13:9c:54:ac:45:df:9c:0c:55:06:88:1c:32:
         a3:cf:52:40:14:a3:f8:35:0b:93:6e:70:be:04:8d:2c:46:5d:
         0b:63:44:fd:b6:8e:76:3d:94:e5:96:ac:cd:ef:a9:ee:1c:e2:
         93:9d:47:f9:9f:3f:a5:be:56:bf:ae:21:39:d1:84:b5:4e:2c:
         6b:06:c5:5c:b1:d7:cc:21:4e:70:40:1a:ac:d2:5b:37:04:9b:
         a2:a5:68:af:b6:4d:22:48:d0:2d:a0:53:32:35:8c:ba:0c:c3:
         be:51:d9:54:32:f5:f1:f5:27:bb:37:0e:59:fc:99:a1:9d:73:
         7d:7f:11:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrcydOx2E6uC3VlJGR0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjUwMTMxMTAwMTE0WhcNMjUwMjAxMTAwMTE0WjAzMTEwLwYDVQQD
Eyg2YmY2NTk4ZDdmNWU2Y2VkYzllMmRkZjBmNzU2Y2Y1ZDQzMjBiYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42Yij6AVAQ5fuJ/WHwYJefQsiuJ+
olrJXCX1KP53Hf9Jge63bJCzcONZz7fnXgRkO+1q348ZRN48Ii9ASwMoIB2zbIAf
cSkxD34DcviH8lbQhOAo9IjnlHdyZvJ6mT1auN2z1rfiXUalzzqtaXzS75QxVru6
PNBDk/g8pLdQh1ga0zWvdB64hmmT2knR7TBx/WMjmLf9cKTBnhPe6DCy1bsxzk3Y
Nzfykl2r1gxJjy22F1eyJJ09MjmDOiy9JV1nlISeuG9cA1th+VjrLJQJWqbcXaB7
7nV3SCVnbs9bSW3B98JwXkqi/QhczzTpcwEQaPZeR5DijPjlLor87m/QqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv2WY1/XmztyeLd8PdWz11DILwDMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtt2i/RYK
9ZVPB29JHRiGcm/tkDZJb63IpGAb9LKByL637d6GX+amjs4SPBSrN9OTw+n5GyvR
u+n/VNJIGTphd3X3lJB2j3k2AmHJ9Gycf9R8+W102h8IPe1L4MwC72+Dh9ft5XFl
ZqbSGfe5NdeIUVKlOWYgAqEOflb45KmvmIwYn5UTnFSsRd+cDFUGiBwyo89SQBSj
+DULk25wvgSNLEZdC2NE/baOdj2U5Zasze+p7hzik51H+Z8/pb5Wv64hOdGEtU4s
awbFXLHXzCFOcEAarNJbNwSboqVor7ZNIkjQLaBTMjWMugzDvlHZVDL18fUnuzcO
WfyZoZ1zfX8REQ==
-----END CERTIFICATE-----