Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
File:                     494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft (raw, json)
Hash identifier:          DJaBbf4qAG4P1cSeLLmDcoDdm0X5LIaJJzbdOS+Vj4U=
Subject key identifier:   13:AB:C5:AC:C2:7E:17:4A:1B:F2:C0:07:B8:64:85:27:15:5F:40:E6
Authority key identifier: E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86
Certificate issuer:       /CN=e3de21b0636c614ebf43664798012afd56c5ee86
Certificate serial:       0194BCA9B181CB88AA732AD42856DE431AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 14:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:25 +0000
Files and hashes:         1: 494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl (hash: TZsxha6f97zLk2Kye4IlVIU6FqLOowgD4wMF1OKZdTE=)
                          2: iWeqg2fM-bOr0nrPrGbQuhoU9AI.roa (hash: FKxgaCA0gKFSYvzHrPdwz/du8IpMEpojl7Ooe7Yry+4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b1:81:cb:88:aa:73:2a:d4:28:56:de:43:1a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3de21b0636c614ebf43664798012afd56c5ee86
        Validity
            Not Before: Jan 31 14:00:25 2025 GMT
            Not After : Feb  1 14:00:25 2025 GMT
        Subject: CN=13abc5acc27e174a1bf2c007b8648527155f40e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:99:4d:f6:25:98:1f:8c:fd:e3:29:bd:1f:f1:
                    ec:fd:a9:c3:da:d4:18:9f:45:40:04:6f:c5:b1:e2:
                    46:ef:4f:a1:b1:59:d3:70:f5:94:a8:f0:2a:41:0d:
                    5f:e6:c0:b9:67:3f:cc:d6:2d:3b:e7:5c:c9:3d:9b:
                    a0:26:a4:ff:9f:ee:21:65:3c:60:14:94:09:20:e9:
                    06:31:0a:6e:00:db:c9:bf:bd:f7:14:d9:bd:cd:78:
                    24:52:62:14:35:56:cd:41:a6:06:56:97:09:ec:02:
                    fb:8c:86:5a:b9:e7:ba:fa:48:fc:70:f7:c1:01:ef:
                    de:a3:3a:a9:99:9f:a0:4c:73:4c:b6:57:e1:ac:20:
                    f4:9a:25:b2:4d:fa:b2:a8:b5:c7:12:b9:13:21:9b:
                    36:e6:d6:5c:9b:1b:17:0b:0e:8b:69:36:24:cf:66:
                    52:a9:05:70:7e:48:be:0a:09:31:9f:d7:4e:08:2b:
                    a1:83:72:e7:1f:16:4c:3e:17:25:8b:10:4c:7b:f1:
                    73:29:f9:1f:56:72:b1:d6:99:6c:58:8d:fd:1c:e8:
                    3a:cd:03:e0:a6:17:ab:e2:6c:83:c7:7a:cc:a6:da:
                    46:3f:15:65:a1:6c:60:06:ef:3f:44:9c:6b:73:97:
                    7c:42:9f:39:5b:fc:32:44:be:6a:4b:ab:f0:a0:dd:
                    35:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AB:C5:AC:C2:7E:17:4A:1B:F2:C0:07:B8:64:85:27:15:5F:40:E6
            X509v3 Authority Key Identifier:
                keyid:E3:DE:21:B0:63:6C:61:4E:BF:43:66:47:98:01:2A:FD:56:C5:EE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/494hsGNsYU6_Q2ZHmAEq_VbF7oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39c9e3-f7c2-4298-9666-b825967a757a/1/494hsGNsYU6_Q2ZHmAEq_VbF7oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:14:4c:73:ac:9f:a1:37:04:32:dc:1b:63:09:58:50:b1:77:
         61:b9:4e:c6:41:ba:88:4c:38:1d:b9:ef:ee:08:0b:ad:7f:f2:
         0e:27:67:6a:f7:51:0f:4c:65:53:6c:75:e0:af:9b:28:6c:a0:
         0c:29:0a:83:0c:39:eb:e4:fd:5b:64:49:aa:50:a4:c9:c3:f2:
         68:ce:95:51:d8:bc:d4:c0:7b:a0:52:47:64:c2:e0:a1:73:94:
         12:d6:b3:b6:a4:88:5d:ae:c6:7b:84:b9:d2:bd:84:fc:47:65:
         06:4d:49:48:c0:54:7d:bc:f1:c6:8f:32:ce:56:9c:3d:ec:e6:
         fb:22:9b:65:02:76:4e:68:d2:78:f7:88:87:9d:2e:58:37:43:
         6a:54:7f:b9:96:c6:6a:4f:79:6f:8b:16:58:d4:74:82:ee:da:
         54:18:46:c9:b1:11:bf:a9:20:ea:14:4d:60:55:f7:e0:63:b3:
         64:15:01:44:5b:46:cd:4b:bf:ee:3c:7e:59:51:c1:03:26:13:
         c1:35:10:b2:2e:a9:a0:bf:88:13:09:10:a3:dd:ce:f5:cd:28:
         19:26:5a:29:63:4f:f5:ba:bd:b0:34:e4:9e:21:b3:7b:98:72:
         dc:23:ee:80:35:4f:a2:a3:f2:9b:6b:5a:6e:1b:a4:d7:a0:7a:
         58:d9:cd:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbGBy4iqcyrUKFbeQxqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGUyMWIwNjM2YzYxNGViZjQzNjY0Nzk4MDEyYWZkNTZj
NWVlODYwHhcNMjUwMTMxMTQwMDI1WhcNMjUwMjAxMTQwMDI1WjAzMTEwLwYDVQQD
EygxM2FiYzVhY2MyN2UxNzRhMWJmMmMwMDdiODY0ODUyNzE1NWY0MGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JlN9iWYH4z94ym9H/Hs/anD2tQY
n0VABG/FseJG70+hsVnTcPWUqPAqQQ1f5sC5Zz/M1i0751zJPZugJqT/n+4hZTxg
FJQJIOkGMQpuANvJv733FNm9zXgkUmIUNVbNQaYGVpcJ7AL7jIZauee6+kj8cPfB
Ae/eozqpmZ+gTHNMtlfhrCD0miWyTfqyqLXHErkTIZs25tZcmxsXCw6LaTYkz2ZS
qQVwfki+Cgkxn9dOCCuhg3LnHxZMPhclixBMe/FzKfkfVnKx1plsWI39HOg6zQPg
pher4myDx3rMptpGPxVloWxgBu8/RJxrc5d8Qp85W/wyRL5qS6vwoN01kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBOrxazCfhdKG/LAB7hkhScVX0DmMB8GA1UdIwQY
MBaAFOPeIbBjbGFOv0NmR5gBKv1Wxe6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYt
YjgyNTk2N2E3NTdhLzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8zOWM5ZTMtZjdjMi00Mjk4LTk2NjYtYjgyNTk2N2E3NTdh
LzEvNDk0aHNHTnNZVTZfUTJaSG1BRXFfVmJGN29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhRMc6yf
oTcEMtwbYwlYULF3YblOxkG6iEw4Hbnv7ggLrX/yDidnavdRD0xlU2x14K+bKGyg
DCkKgww56+T9W2RJqlCkycPyaM6VUdi81MB7oFJHZMLgoXOUEtaztqSIXa7Ge4S5
0r2E/EdlBk1JSMBUfbzxxo8yzlacPezm+yKbZQJ2TmjSePeIh50uWDdDalR/uZbG
ak95b4sWWNR0gu7aVBhGybERv6kg6hRNYFX34GOzZBUBRFtGzUu/7jx+WVHBAyYT
wTUQsi6poL+IEwkQo93O9c0oGSZaKWNP9bq9sDTkniGze5hy3CPugDVPoqPym2ta
bhuk16B6WNnNFg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:02 2025 by rpki-client