Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
File:                     3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft (raw, json)
Hash identifier:          oh9DLSrFLK8W/CUfCbM27qcRP12MfZbMlDO85fZ6W6I=
Subject key identifier:   77:DE:59:C1:41:29:B4:CC:F1:7C:CE:C6:B8:EC:ED:04:C1:23:BE:67
Authority key identifier: DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5
Certificate issuer:       /CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
Certificate serial:       0194BC3BBAB840A4C4C1C67396F7344520B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft
Manifest number:          134B
Signing time:             Fri 31 Jan 2025 12:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:18 +0000
Files and hashes:         1: 3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl (hash: 4q4ghP91OwrHohAgJDLv7mLDt9De3+e0MZ96UC9weo4=)
                          2: LYPvA08Q5up42ir_ROLNJePR6WM.roa (hash: 2Ysa/oCUxmnS7fKzOGdKW8YJA2KVw4PdW/o1jAQ6yws=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:ba:b8:40:a4:c4:c1:c6:73:96:f7:34:45:20:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3f2639ffc78871ad64bfed71b7954bc90deab5
        Validity
            Not Before: Jan 31 12:00:18 2025 GMT
            Not After : Feb  1 12:00:18 2025 GMT
        Subject: CN=77de59c14129b4ccf17ccec6b8eced04c123be67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:78:53:b6:e3:f9:e0:dc:23:bf:40:0b:8a:
                    de:19:a7:e5:69:a5:b8:71:eb:d0:74:71:f9:95:c7:
                    20:f9:37:a6:14:75:d1:0c:3e:62:d8:6d:4e:a4:fc:
                    54:38:a5:9d:bd:f6:be:50:dc:d7:6c:0b:c7:24:02:
                    8d:02:d3:76:f3:52:60:bd:03:a7:88:67:a2:19:1a:
                    e9:b0:69:05:c1:2a:a0:cd:12:89:d4:86:5a:bd:a4:
                    71:4b:1d:98:d4:c3:a5:7d:be:be:29:38:d2:fd:e5:
                    9a:a2:6d:ae:e0:7c:03:68:38:39:49:24:99:e0:ef:
                    8d:1d:d5:5c:14:2a:a1:1f:22:f5:00:f3:6c:2c:22:
                    72:c2:74:7d:b7:c2:8c:2f:59:fa:3c:63:b6:92:04:
                    9e:95:92:a2:fc:02:81:3b:5f:78:7e:2c:d3:06:5d:
                    95:8f:bb:ce:39:43:de:2b:f9:e4:6d:cc:0e:61:44:
                    c3:48:b3:b7:9f:cd:1c:a2:3a:ec:b2:42:6c:63:18:
                    88:f9:1b:9d:23:42:5a:83:ca:16:df:5c:17:29:6b:
                    de:50:16:00:b2:37:08:db:de:16:97:a5:a9:4a:e9:
                    f8:94:94:54:c1:2d:c2:55:51:10:d0:0c:a2:68:8a:
                    8c:55:46:47:db:2a:cf:b8:9f:28:98:3b:a2:35:b6:
                    8c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:59:C1:41:29:B4:CC:F1:7C:CE:C6:B8:EC:ED:04:C1:23:BE:67
            X509v3 Authority Key Identifier:
                keyid:DC:3F:26:39:FF:C7:88:71:AD:64:BF:ED:71:B7:95:4B:C9:0D:EA:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3D8mOf_HiHGtZL_tcbeVS8kN6rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/48f48c-baa5-44a2-8f07-9cff3fe05180/1/3D8mOf_HiHGtZL_tcbeVS8kN6rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:61:47:22:3a:e8:18:b1:5c:a1:3c:f4:91:e4:92:39:07:4f:
         ba:c8:25:71:ab:5b:8d:0b:b5:96:36:42:f5:80:ee:f0:3b:76:
         5d:d9:d0:0c:3c:70:34:99:d7:c5:7b:a2:50:77:63:9f:41:41:
         76:d8:19:43:4a:03:4a:c6:48:8e:c1:1b:d2:7c:6f:43:6b:42:
         9b:94:c1:3f:e3:6c:e6:6e:6a:37:00:9b:10:93:d7:d6:87:03:
         90:1a:22:c8:a5:92:34:31:e3:1b:13:1c:63:a9:56:b1:1c:9c:
         96:7e:b4:25:e8:49:8d:66:fe:b4:a4:0b:f0:a5:43:84:62:b5:
         5d:c0:66:68:ea:57:79:5d:f1:ff:e7:22:c4:67:53:8b:b3:e0:
         f5:71:03:dd:e9:d8:c7:68:89:9c:6a:2d:35:ff:9d:9d:c4:33:
         68:9b:f9:d7:03:3c:95:d9:ea:56:75:c6:31:c9:3b:6a:4b:e5:
         6c:7d:25:c0:0e:55:26:40:25:d0:83:aa:15:26:ed:42:2d:f1:
         80:3b:03:5b:0a:5b:d6:06:c0:27:62:bc:69:97:c6:77:86:c4:
         6f:7c:39:1d:7d:6f:31:df:6e:26:07:13:a2:90:49:2d:0b:cc:
         1f:9d:af:95:62:86:73:5a:22:0e:13:4e:42:c3:5c:63:62:7e:
         ad:7a:e6:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7q4QKTEwcZzlvc0RSCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjM2YyNjM5ZmZjNzg4NzFhZDY0YmZlZDcxYjc5NTRiYzkw
ZGVhYjUwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
Eyg3N2RlNTljMTQxMjliNGNjZjE3Y2NlYzZiOGVjZWQwNGMxMjNiZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI94U7bj+eDcI79AC4reGaflaaW4
cevQdHH5lccg+TemFHXRDD5i2G1OpPxUOKWdvfa+UNzXbAvHJAKNAtN281JgvQOn
iGeiGRrpsGkFwSqgzRKJ1IZavaRxSx2Y1MOlfb6+KTjS/eWaom2u4HwDaDg5SSSZ
4O+NHdVcFCqhHyL1APNsLCJywnR9t8KML1n6PGO2kgSelZKi/AKBO194fizTBl2V
j7vOOUPeK/nkbcwOYUTDSLO3n80cojrsskJsYxiI+RudI0Jag8oW31wXKWveUBYA
sjcI294Wl6WpSun4lJRUwS3CVVEQ0AyiaIqMVUZH2yrPuJ8omDuiNbaMiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfeWcFBKbTM8XzOxrjs7QTBI75nMB8GA1UdIwQY
MBaAFNw/Jjn/x4hxrWS/7XG3lUvJDeq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDct
OWNmZjNmZTA1MTgwLzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80OGY0OGMtYmFhNS00NGEyLThmMDctOWNmZjNmZTA1MTgw
LzEvM0Q4bU9mX0hpSEd0WkxfdGNiZVZTOGtONnJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmFHIjro
GLFcoTz0keSSOQdPusglcatbjQu1ljZC9YDu8Dt2XdnQDDxwNJnXxXuiUHdjn0FB
dtgZQ0oDSsZIjsEb0nxvQ2tCm5TBP+Ns5m5qNwCbEJPX1ocDkBoiyKWSNDHjGxMc
Y6lWsRycln60JehJjWb+tKQL8KVDhGK1XcBmaOpXeV3x/+cixGdTi7Pg9XED3enY
x2iJnGotNf+dncQzaJv51wM8ldnqVnXGMck7akvlbH0lwA5VJkAl0IOqFSbtQi3x
gDsDWwpb1gbAJ2K8aZfGd4bEb3w5HX1vMd9uJgcTopBJLQvMH52vlWKGc1oiDhNO
QsNcY2J+rXrmZQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:21 2025 by rpki-client