Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
File:                     3IR1bcdywGSDJJqYejsbxuYF6DU.mft (raw, json)
Hash identifier:          Jv5eWnDau5F1Ggx6Wq5TOfcSQWx9iWoDyTg6uwpNLP0=
Subject key identifier:   33:30:6F:3E:3C:A7:E8:E7:7F:09:DB:3C:5A:DE:C4:B1:B4:44:C5:4D
Authority key identifier: DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35
Certificate issuer:       /CN=dc84756dc772c06483249a987a3b1bc6e605e835
Certificate serial:       0194628A335272964C02164D89235578768C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft
Manifest number:          13FE
Signing time:             Tue 14 Jan 2025 02:00:11 +0000
Manifest this update:     Tue 14 Jan 2025 02:00:11 +0000
Manifest next update:     Wed 15 Jan 2025 02:00:11 +0000
Files and hashes:         1: 3IR1bcdywGSDJJqYejsbxuYF6DU.crl (hash: YZnBT2V8nj+zgga7MDumYcaI2zFKcHhiCrLEAV/GiuE=)
                          2: cDYl4HRF3_ati0nfWv1dK-2swbY.roa (hash: OTls03WnzLoC47FlsuOyq7f3ICX9Ig4BTmnXXlT+vUY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:62:8a:33:52:72:96:4c:02:16:4d:89:23:55:78:76:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc84756dc772c06483249a987a3b1bc6e605e835
        Validity
            Not Before: Jan 14 02:00:11 2025 GMT
            Not After : Jan 15 02:00:11 2025 GMT
        Subject: CN=33306f3e3ca7e8e77f09db3c5adec4b1b444c54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:43:20:16:38:a6:6b:a4:4f:47:d5:3b:2c:
                    88:c4:60:bc:46:7c:b5:1f:84:01:40:f3:6d:ff:da:
                    86:35:f2:a8:fe:83:73:9e:ca:8c:46:15:6c:99:db:
                    83:bc:d1:eb:b7:b5:eb:02:92:54:ae:95:14:bd:3d:
                    88:25:9a:62:79:ab:4f:0f:e2:1f:9c:24:56:5b:fc:
                    d2:da:56:a5:e4:5f:6b:05:0d:f6:75:79:40:fe:cd:
                    5f:1a:2c:56:ae:4e:29:49:07:38:00:da:4c:54:7d:
                    07:f5:b5:56:7f:8f:e3:6e:c2:cf:c3:f0:db:b4:23:
                    03:b4:c0:9f:30:a6:2f:d3:75:e2:8e:25:c6:5a:b2:
                    20:f5:20:44:5f:ef:ec:4e:fb:8a:ac:42:0d:8a:c9:
                    de:d6:7d:ee:3b:3d:f5:03:33:37:98:12:cc:17:2e:
                    6d:61:be:c8:06:94:9b:3e:b9:df:bf:2f:f9:62:41:
                    c1:71:ed:65:0a:a0:c6:33:56:35:d4:50:ae:08:a4:
                    5a:50:75:24:a2:4f:ad:47:99:93:78:54:01:79:90:
                    f2:c4:28:41:5c:86:0e:01:12:d0:e0:b9:88:39:7d:
                    30:f2:04:f2:6d:50:dc:74:d5:3d:5f:fb:c1:0a:1b:
                    e8:b3:77:00:91:2d:dc:3d:df:e3:8a:de:a6:ef:62:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:30:6F:3E:3C:A7:E8:E7:7F:09:DB:3C:5A:DE:C4:B1:B4:44:C5:4D
            X509v3 Authority Key Identifier:
                keyid:DC:84:75:6D:C7:72:C0:64:83:24:9A:98:7A:3B:1B:C6:E6:05:E8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3IR1bcdywGSDJJqYejsbxuYF6DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/fdd9ed-717c-460d-81a3-4cd99cd5fb1a/1/3IR1bcdywGSDJJqYejsbxuYF6DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3b:2f:da:ce:47:11:32:55:46:a6:6c:63:e8:84:ec:ce:a0:
         5d:e8:d0:79:f5:78:86:0c:9b:9a:38:4e:52:6a:6d:c2:59:c5:
         ec:d7:91:94:9f:a8:19:57:af:60:1d:ee:a1:18:b1:5b:ab:f0:
         cb:f4:af:25:ca:62:65:3e:1d:0b:1c:09:f4:fd:97:63:93:5f:
         75:27:58:3d:14:22:3a:68:5a:66:94:71:21:a8:ff:5b:ff:19:
         79:e0:95:f5:55:ad:74:08:1f:6b:4f:f6:ca:f3:73:5a:f1:8a:
         d5:ea:f2:b1:06:66:76:56:04:88:43:99:93:af:f4:91:7e:f4:
         4a:2e:b9:69:ef:7a:47:34:ae:c3:65:7a:79:47:50:f0:76:a8:
         80:ea:fc:b4:ab:f7:7d:14:09:04:b8:5c:61:b2:94:ea:9c:f5:
         ac:a3:11:c2:22:79:ae:27:ca:02:c7:e8:a7:0a:93:ee:84:e5:
         2e:30:12:00:e3:b6:99:9c:38:98:d8:fc:9e:79:0f:19:79:58:
         20:de:b4:37:a0:53:8d:74:f1:67:17:10:e5:95:f9:3a:11:7a:
         a2:40:3e:76:ad:e5:27:95:7f:98:b4:a2:a6:91:75:75:81:b0:
         5d:de:eb:4a:a0:63:1a:47:84:57:5b:f4:fd:9e:cc:98:e2:68:
         66:89:d5:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZRiijNScpZMAhZNiSNVeHaMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjODQ3NTZkYzc3MmMwNjQ4MzI0OWE5ODdhM2IxYmM2ZTYw
NWU4MzUwHhcNMjUwMTE0MDIwMDExWhcNMjUwMTE1MDIwMDExWjAzMTEwLwYDVQQD
EygzMzMwNmYzZTNjYTdlOGU3N2YwOWRiM2M1YWRlYzRiMWI0NDRjNTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrBDIBY4pmukT0fVOyyIxGC8Rny1
H4QBQPNt/9qGNfKo/oNznsqMRhVsmduDvNHrt7XrApJUrpUUvT2IJZpieatPD+If
nCRWW/zS2lal5F9rBQ32dXlA/s1fGixWrk4pSQc4ANpMVH0H9bVWf4/jbsLPw/Db
tCMDtMCfMKYv03XijiXGWrIg9SBEX+/sTvuKrEINisne1n3uOz31AzM3mBLMFy5t
Yb7IBpSbPrnfvy/5YkHBce1lCqDGM1Y11FCuCKRaUHUkok+tR5mTeFQBeZDyxChB
XIYOARLQ4LmIOX0w8gTybVDcdNU9X/vBChvos3cAkS3cPd/jit6m72KvGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMwbz48p+jnfwnbPFrexLG0RMVNMB8GA1UdIwQY
MBaAFNyEdW3HcsBkgySamHo7G8bmBeg1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0lSMWJjZHl3R1NESkpxWWVqc2J4dVlGNkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mZGQ5ZWQtNzE3Yy00NjBkLTgxYTMt
NGNkOTljZDVmYjFhLzEvM0lSMWJjZHl3R1NESkpxWWVqc2J4dVlGNkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mZGQ5ZWQtNzE3Yy00NjBkLTgxYTMtNGNkOTljZDVmYjFh
LzEvM0lSMWJjZHl3R1NESkpxWWVqc2J4dVlGNkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTsv2s5H
ETJVRqZsY+iE7M6gXejQefV4hgybmjhOUmptwlnF7NeRlJ+oGVevYB3uoRixW6vw
y/SvJcpiZT4dCxwJ9P2XY5NfdSdYPRQiOmhaZpRxIaj/W/8ZeeCV9VWtdAgfa0/2
yvNzWvGK1erysQZmdlYEiEOZk6/0kX70Si65ae96RzSuw2V6eUdQ8HaogOr8tKv3
fRQJBLhcYbKU6pz1rKMRwiJ5rifKAsfopwqT7oTlLjASAOO2mZw4mNj8nnkPGXlY
IN60N6BTjXTxZxcQ5ZX5OhF6okA+dq3lJ5V/mLSippF1dYGwXd7rSqBjGkeEV1v0
/Z7MmOJoZonVPw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 16:11:02 2025 by rpki-client