Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
File:                     PT-Hu394dKp-Fc_sm79qrjyc4zo.mft (raw, json)
Hash identifier:          LSUm/2b3MboYR7c0o9dc15Bh13Af1U+zSsTIuqYMuk4=
Subject key identifier:   55:C2:DD:29:98:DC:FC:A1:39:B2:22:33:CB:F2:AC:62:D0:FA:1A:BA
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Certificate issuer:       /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial:       0195E1904B41C5600C4B8FF958B177E85C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft
Manifest number:          0E43
Signing time:             Sat 29 Mar 2025 11:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:24 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:24 +0000
Files and hashes:         1: 5W1H_E66w8rreTv-sH39ih7Q9Kc.roa (hash: ds103SAEhzJEdHJkH+426YBLHIwGf7CU7ARmWBMf450=)
                          2: PT-Hu394dKp-Fc_sm79qrjyc4zo.crl (hash: eNZfwROlEYS5iFlkvj6aALy6KpIK0LJnQAxC7b0JztY=)
                          3: Tsid8gfkYRwmSvUBez-ZQcWUur8.roa (hash: msvAp4jHrZw21tVBTpGpRqFg3CGocyYoBz7jW2toIuQ=)
                          4: VnPSleeMHT-jEDZJvcj7wswo-uc.roa (hash: J8mE9CeDpgMjScDrMhJ4WgvJMldlEykT+vy+lBJjBdk=)
                          5: VyJNQqph-KXg7u6RUzzJN3rupCA.roa (hash: LooQO9Bq7ra/KCVGLYawPG8pRB8eBgj1f03IAunPvdE=)
                          6: Xy7X7Y7n1dwT-JcABr_7kk_W05o.roa (hash: AQ2x/CDJ1G+4qJ9b94DvcRRy4bmdLPUtpu6pmkV+OCs=)
                          7: _mV-RGY-pv2pFTbkkb6uI5Oje_I.roa (hash: p4eENjI/cwmo6qgfAyd3PHUV1z0BYeTGomC/74ioJaI=)
                          8: b-VhFar5Bob8wl8OUu2ZPN9DNEQ.roa (hash: tvCO5UR2+v1lg6StGj4o6eWVSuPQeXT3DDeXMyH7vLo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:4b:41:c5:60:0c:4b:8f:f9:58:b1:77:e8:5c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
        Validity
            Not Before: Mar 29 11:01:24 2025 GMT
            Not After : Mar 30 11:01:24 2025 GMT
        Subject: CN=55c2dd2998dcfca139b22233cbf2ac62d0fa1aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:c3:c3:23:b6:7c:99:fa:ce:d5:3f:c0:e3:
                    a1:21:1b:a3:4b:b2:27:89:7b:a9:24:75:88:a6:79:
                    c1:a9:e0:70:e9:0c:47:05:d4:46:c7:b8:92:5c:a3:
                    3a:17:1e:d9:a7:bf:f9:92:96:23:ce:eb:b9:9d:98:
                    cb:43:a2:0f:a5:5e:26:c1:51:ae:db:df:7a:6a:75:
                    31:03:b3:cb:00:f8:3b:f7:b4:46:4b:65:fd:94:eb:
                    14:05:53:e4:df:b7:ed:fc:c0:8d:78:b3:62:e1:be:
                    9f:ba:f6:1a:67:14:da:98:50:3d:bc:4a:11:2b:a5:
                    93:01:37:b7:6d:fa:d6:bb:c8:3a:1d:48:03:4e:b7:
                    41:6b:b3:ce:f2:02:1a:ea:88:12:e0:a6:7c:37:cc:
                    fa:c1:ca:2f:b1:0a:06:97:19:45:d3:48:4f:eb:c1:
                    87:0a:2a:12:50:6d:8f:9f:48:87:34:88:bb:b8:ce:
                    b3:39:7c:4d:03:4e:44:40:7c:66:5a:38:21:0c:bf:
                    0e:b3:39:f0:91:31:59:01:6f:ba:dc:73:fa:33:e2:
                    93:ae:8f:bd:bb:0e:61:10:e3:de:cd:23:62:8c:c7:
                    00:57:09:49:81:a0:c3:1f:8e:a2:b8:1a:8c:3f:17:
                    0f:71:c1:fe:9a:bb:3b:08:d5:e8:fb:ec:5a:0c:ca:
                    4a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:C2:DD:29:98:DC:FC:A1:39:B2:22:33:CB:F2:AC:62:D0:FA:1A:BA
            X509v3 Authority Key Identifier:
                keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:60:f8:39:2b:60:e5:a0:9b:f0:73:08:58:29:e6:74:d1:
         8a:81:10:7a:b9:06:0a:b4:8c:b8:01:d1:3a:71:31:a8:3e:0b:
         38:4f:67:d9:fb:4f:dd:e2:9b:db:04:bd:19:c6:bb:66:d2:04:
         5b:96:0b:4d:e5:af:15:08:d6:42:54:8f:35:96:d5:3f:65:17:
         2e:d7:50:e6:fc:1f:f5:51:ab:82:88:54:80:69:ac:21:1a:cb:
         46:13:12:05:2c:2e:f8:68:f3:41:a6:9b:53:2d:63:c8:e9:b5:
         59:8b:16:b4:b0:f1:d3:73:8d:5d:50:fe:46:d2:61:d0:22:0e:
         d2:3f:a3:92:4b:06:18:10:6c:67:cf:77:f6:e3:8e:2b:e1:e0:
         6e:c8:19:0b:fc:b0:c9:2f:a2:b4:06:11:c4:d2:6a:cf:f1:27:
         9d:b1:7a:a6:1c:80:f0:10:fc:83:9d:3e:92:bf:16:40:15:9c:
         0c:bf:70:90:e4:71:b9:86:87:d0:6f:51:2d:cf:85:da:e7:85:
         0f:d0:a8:42:e1:b0:f4:f9:74:ec:eb:f2:90:40:60:f5:2e:e9:
         67:d5:86:e0:08:f2:16:26:0c:36:4c:5f:fd:32:df:4a:75:22:
         fc:0e:20:40:b1:10:2f:5a:76:91:f5:c0:5d:55:ee:2d:f3:ca:
         0c:70:e3:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhkEtBxWAMS4/5WLF36FwnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkM2Y4N2JiN2Y3ODc0YWE3ZTE1Y2ZlYzliYmY2YWFlM2M5
Y2UzM2EwHhcNMjUwMzI5MTEwMTI0WhcNMjUwMzMwMTEwMTI0WjAzMTEwLwYDVQQD
Eyg1NWMyZGQyOTk4ZGNmY2ExMzliMjIyMzNjYmYyYWM2MmQwZmExYWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wfDwyO2fJn6ztU/wOOhIRujS7In
iXupJHWIpnnBqeBw6QxHBdRGx7iSXKM6Fx7Zp7/5kpYjzuu5nZjLQ6IPpV4mwVGu
2996anUxA7PLAPg797RGS2X9lOsUBVPk37ft/MCNeLNi4b6fuvYaZxTamFA9vEoR
K6WTATe3bfrWu8g6HUgDTrdBa7PO8gIa6ogS4KZ8N8z6wcovsQoGlxlF00hP68GH
CioSUG2Pn0iHNIi7uM6zOXxNA05EQHxmWjghDL8OsznwkTFZAW+63HP6M+KTro+9
uw5hEOPezSNijMcAVwlJgaDDH46iuBqMPxcPccH+mrs7CNXo++xaDMpKHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXC3SmY3PyhObIiM8vyrGLQ+hq6MB8GA1UdIwQY
MBaAFD0/h7t/eHSqfhXP7Ju/aq48nOM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTIt
NjJiZTUzNDI1Njc2LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MTAxNWEtMTFiZS00NzFlLTk1OTItNjJiZTUzNDI1Njc2
LzEvUFQtSHUzOTRkS3AtRmNfc203OXFyanljNHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACV5g+Dkr
YOWgm/BzCFgp5nTRioEQerkGCrSMuAHROnExqD4LOE9n2ftP3eKb2wS9Gca7ZtIE
W5YLTeWvFQjWQlSPNZbVP2UXLtdQ5vwf9VGrgohUgGmsIRrLRhMSBSwu+GjzQaab
Uy1jyOm1WYsWtLDx03ONXVD+RtJh0CIO0j+jkksGGBBsZ8939uOOK+HgbsgZC/yw
yS+itAYRxNJqz/EnnbF6phyA8BD8g50+kr8WQBWcDL9wkORxuYaH0G9RLc+F2ueF
D9CoQuGw9Pl07OvykEBg9S7pZ9WG4AjyFiYMNkxf/TLfSnUi/A4gQLEQL1p2kfXA
XVXuLfPKDHDjrw==
-----END CERTIFICATE-----