Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
File:                     U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft (raw, json)
Hash identifier:          5zxILtWhQtjvnKyKd/sWNJuc5EbL6YzIF3x0pzlDrzY=
Subject key identifier:   D2:59:69:6A:64:27:FA:F2:38:D3:FF:3B:CC:6B:2C:7C:DC:8C:DD:AD
Authority key identifier: 53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80
Certificate issuer:       /CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
Certificate serial:       018C913176532BCBB4C9C77149E36047F011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft
Manifest number:          0FF3
Signing time:             Fri 22 Dec 2023 11:03:07 +0000
Manifest this update:     Fri 22 Dec 2023 11:03:07 +0000
Manifest next update:     Sat 23 Dec 2023 11:03:07 +0000
Files and hashes:         1: 1lWOZzhi5rTMtQ0g9foMqIbCAjc.roa (hash: zF7r7jivwQDFplJN8+sArvMLKyKWZOIv62bp2WJPAo4=)
                          2: U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl (hash: LuseBNffLx1T11tBv/e9Q9gP7/XUx+yFBkb8rZ+ePBI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:91:31:76:53:2b:cb:b4:c9:c7:71:49:e3:60:47:f0:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5389ab9b7fd5fdfd04f51af8873cdf9b24d08380
        Validity
            Not Before: Dec 22 11:03:07 2023 GMT
            Not After : Dec 23 11:03:07 2023 GMT
        Subject: CN=d259696a6427faf238d3ff3bcc6b2c7cdc8cddad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b7:82:30:c1:c1:38:b3:cf:b2:34:12:61:a1:
                    f6:0d:0e:70:fd:4f:cf:7c:a6:0d:58:9f:91:f5:23:
                    ff:91:f9:e8:29:9b:5d:32:26:6a:19:09:a9:23:85:
                    43:ef:fa:f6:dd:57:5f:fd:98:2f:c2:f4:12:ea:c3:
                    d4:24:86:4a:d4:6b:14:16:33:8f:6d:52:8e:6d:82:
                    f4:83:95:05:ce:cb:af:74:cc:34:19:cb:6d:3a:e0:
                    7d:2b:0f:51:3c:ad:84:0c:71:e1:2d:0f:11:f1:ff:
                    8c:c7:48:07:da:dd:c4:35:80:2c:33:8b:cf:1b:78:
                    6f:8d:c1:cf:5e:a5:a5:dd:25:a6:52:1c:cf:16:92:
                    f9:8e:72:3e:e3:62:54:08:4d:73:c2:3c:ab:6f:d7:
                    aa:ed:19:64:fd:d1:03:54:50:c9:24:dc:8b:86:e7:
                    bd:8c:37:cb:32:65:22:7a:74:a9:8f:0c:df:d5:20:
                    ee:ff:58:db:2e:88:71:d7:bd:6b:65:f5:6e:4c:1a:
                    3e:09:95:7f:a5:85:d0:16:37:a4:f0:6b:1c:6d:9d:
                    f3:60:9d:e8:21:e4:b7:7a:32:bd:c2:f9:2f:19:0c:
                    7d:1e:e9:71:54:04:9f:7a:0b:37:ff:c7:d3:fb:02:
                    62:9e:fd:c4:88:0f:ba:a1:1d:80:20:eb:94:49:bf:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:59:69:6A:64:27:FA:F2:38:D3:FF:3B:CC:6B:2C:7C:DC:8C:DD:AD
            X509v3 Authority Key Identifier:
                keyid:53:89:AB:9B:7F:D5:FD:FD:04:F5:1A:F8:87:3C:DF:9B:24:D0:83:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2d84f5-1e6f-4d52-85fa-34f761035360/1/U4mrm3_V_f0E9Rr4hzzfmyTQg4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:16:1d:f0:10:f3:77:6f:b4:74:a6:ab:4f:a7:3d:68:f9:96:
         99:e3:72:aa:8b:9f:e2:8c:9e:25:f3:88:4b:ac:8b:35:b9:dd:
         f9:1d:dd:b7:39:27:58:28:c6:1a:f6:ec:d6:91:03:76:c4:55:
         19:34:c9:46:95:4a:cc:0e:26:16:e9:e8:e7:b7:19:20:88:51:
         1d:73:8b:ab:69:db:61:0c:e9:4f:e3:4f:58:bc:c1:94:a2:43:
         32:fa:93:c3:5a:18:a2:8f:70:07:86:43:82:ba:03:94:22:c4:
         5b:0f:91:56:9f:33:2b:a2:fa:98:59:e9:33:1d:e4:6f:14:f8:
         6a:9d:a4:6e:e4:5e:f3:27:53:8a:78:73:5b:93:df:17:78:2a:
         0d:45:d3:b8:24:e4:41:05:64:27:34:c8:c1:69:7d:68:af:88:
         64:44:99:5c:13:db:cf:18:b1:b4:c4:d7:b2:be:0d:26:fb:45:
         5a:c0:53:8f:38:33:8f:72:21:99:66:42:a8:6b:91:5d:f2:0a:
         4c:f4:55:92:0b:5c:0e:2c:d4:1b:c6:34:51:43:b0:ce:e9:b3:
         a2:d7:2a:16:5d:83:af:58:6c:91:a1:cd:4a:86:d1:77:7f:df:
         5a:bb:ab:bc:c0:cc:d8:dc:69:7b:bb:6e:d2:65:ec:d2:cd:d6:
         9c:d6:24:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyRMXZTK8u0ycdxSeNgR/ARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzODlhYjliN2ZkNWZkZmQwNGY1MWFmODg3M2NkZjliMjRk
MDgzODAwHhcNMjMxMjIyMTEwMzA3WhcNMjMxMjIzMTEwMzA3WjAzMTEwLwYDVQQD
EyhkMjU5Njk2YTY0MjdmYWYyMzhkM2ZmM2JjYzZiMmM3Y2RjOGNkZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlreCMMHBOLPPsjQSYaH2DQ5w/U/P
fKYNWJ+R9SP/kfnoKZtdMiZqGQmpI4VD7/r23Vdf/ZgvwvQS6sPUJIZK1GsUFjOP
bVKObYL0g5UFzsuvdMw0GcttOuB9Kw9RPK2EDHHhLQ8R8f+Mx0gH2t3ENYAsM4vP
G3hvjcHPXqWl3SWmUhzPFpL5jnI+42JUCE1zwjyrb9eq7Rlk/dEDVFDJJNyLhue9
jDfLMmUienSpjwzf1SDu/1jbLohx171rZfVuTBo+CZV/pYXQFjek8GscbZ3zYJ3o
IeS3ejK9wvkvGQx9HulxVASfegs3/8fT+wJinv3EiA+6oR2AIOuUSb+ycQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJZaWpkJ/ryONP/O8xrLHzcjN2tMB8GA1UdIwQY
MBaAFFOJq5t/1f39BPUa+Ic835sk0IOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTRtcm0zX1ZfZjBFOVJyNGh6emZteVRRZzRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yZDg0ZjUtMWU2Zi00ZDUyLTg1ZmEt
MzRmNzYxMDM1MzYwLzEvVTRtcm0zX1ZfZjBFOVJyNGh6emZteVRRZzRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yZDg0ZjUtMWU2Zi00ZDUyLTg1ZmEtMzRmNzYxMDM1MzYw
LzEvVTRtcm0zX1ZfZjBFOVJyNGh6emZteVRRZzRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcxYd8BDz
d2+0dKarT6c9aPmWmeNyqouf4oyeJfOIS6yLNbnd+R3dtzknWCjGGvbs1pEDdsRV
GTTJRpVKzA4mFuno57cZIIhRHXOLq2nbYQzpT+NPWLzBlKJDMvqTw1oYoo9wB4ZD
groDlCLEWw+RVp8zK6L6mFnpMx3kbxT4ap2kbuRe8ydTinhzW5PfF3gqDUXTuCTk
QQVkJzTIwWl9aK+IZESZXBPbzxixtMTXsr4NJvtFWsBTjzgzj3IhmWZCqGuRXfIK
TPRVkgtcDizUG8Y0UUOwzumzotcqFl2Dr1hskaHNSobRd3/fWrurvMDM2Nxpe7tu
0mXs0s3WnNYkcg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:30:08 2025 by rpki-client