Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File:                     1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier:          eLu0q/th/ByA3/SA/kmBBoBkKKA+r8rrS0DiyiOicOY=
Subject key identifier:   9C:CB:D6:29:C2:6C:1F:BD:66:C9:36:80:D4:1E:EB:0A:2B:F5:60:4B
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer:       /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial:       01962F3DBC7DE397648C47B07107FC20F817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number:          1391
Signing time:             Sun 13 Apr 2025 13:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:37 +0000
Files and hashes:         1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: GV3vm+Y2Hy48m9Bt3wO4nfV3fxKLvWK/Yp6Xn5spWI8=)
                          2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
                          3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:bc:7d:e3:97:64:8c:47:b0:71:07:fc:20:f8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
        Validity
            Not Before: Apr 13 13:01:37 2025 GMT
            Not After : Apr 14 13:01:37 2025 GMT
        Subject: CN=9ccbd629c26c1fbd66c93680d41eeb0a2bf5604b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:59:54:ce:d7:23:ce:26:d3:fd:22:75:c1:
                    50:b9:f4:68:72:9e:12:a1:91:bf:a1:3c:59:c9:0f:
                    9d:99:a0:1d:a2:a2:e2:49:6d:04:0b:58:9e:35:33:
                    32:7f:26:ec:1f:1b:ab:58:fd:47:39:86:b2:c5:00:
                    73:e5:c5:33:9b:2a:e6:0a:a9:fb:e6:47:17:ec:2a:
                    77:7d:2f:77:d2:c1:8b:6f:f3:f6:9c:6b:83:d1:f3:
                    68:4c:34:01:b8:a7:0b:4f:23:58:2b:51:63:d8:d6:
                    90:67:d0:92:38:be:b4:71:4b:d9:af:66:41:05:0d:
                    04:64:37:50:18:f8:bf:ad:bc:57:fd:50:47:39:75:
                    0f:6e:80:a7:d8:9d:ab:7e:70:77:22:cc:9c:a0:7a:
                    66:88:74:b6:ae:86:20:33:44:be:9b:5b:30:61:99:
                    0b:59:0f:48:e7:f4:ea:3d:04:c7:b2:a6:21:6a:d5:
                    f0:f3:2a:7f:61:e3:b5:9f:80:82:f8:77:2b:82:8d:
                    af:a9:35:d9:e0:d6:78:5d:2b:b3:a5:42:0b:46:1d:
                    b7:bd:da:24:4d:0b:8c:ca:04:d8:3c:8f:0b:bb:5b:
                    47:5d:9c:5b:b6:bb:64:59:ca:4f:7e:a3:15:58:d5:
                    05:e1:86:4b:ec:9a:85:71:42:e8:a4:50:ac:ec:3e:
                    6b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CB:D6:29:C2:6C:1F:BD:66:C9:36:80:D4:1E:EB:0A:2B:F5:60:4B
            X509v3 Authority Key Identifier:
                keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:29:fe:db:b9:fd:0b:af:45:6c:d1:3e:c2:99:ff:73:70:f6:
         15:a1:3c:3a:1b:5b:d8:fa:cf:81:10:14:a5:a0:5d:f2:75:e8:
         82:c2:d5:f6:09:ce:78:03:f2:6f:aa:a4:27:2b:ed:c5:86:d9:
         3e:9a:e8:ca:b8:0c:c2:26:ab:82:d3:df:68:23:5a:05:0b:a0:
         27:b0:a0:db:b7:13:61:86:28:9b:c8:03:c7:76:ef:5b:6d:2c:
         c2:8f:a0:75:28:98:a3:a8:46:5b:eb:b7:1f:cd:68:15:8e:ad:
         d1:2b:a7:58:fa:c3:56:78:ce:4e:5c:49:86:0d:67:b8:39:74:
         18:4b:e3:ee:0b:fc:f8:93:d4:08:3b:e8:a4:92:3d:41:67:4e:
         3b:da:18:dd:3b:0e:f2:21:16:53:69:c7:24:2a:3f:14:ea:4a:
         9b:6a:1f:ce:fc:83:f9:f7:99:0b:f1:83:16:68:d7:07:a9:86:
         68:89:33:8b:32:4b:0c:80:01:2c:6d:e1:28:f9:60:84:09:12:
         c1:6c:f0:c5:f6:c5:2b:b2:07:9f:f3:1c:13:16:bc:1a:12:27:
         62:d5:ae:93:bb:78:16:80:64:8a:3c:e0:3f:be:77:8b:80:fa:
         a0:62:4d:dc:a2:3c:25:4e:e4:f9:fe:fb:41:2c:80:7b:30:37:
         ab:c0:6e:af
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZYvPbx945dkjEewcQf8IPgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh
NTYzMzgwHhcNMjUwNDEzMTMwMTM3WhcNMjUwNDE0MTMwMTM3WjAzMTEwLwYDVQQD
Eyg5Y2NiZDYyOWMyNmMxZmJkNjZjOTM2ODBkNDFlZWIwYTJiZjU2MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0VZVM7XI84m0/0idcFQufRocp4S
oZG/oTxZyQ+dmaAdoqLiSW0EC1ieNTMyfybsHxurWP1HOYayxQBz5cUzmyrmCqn7
5kcX7Cp3fS930sGLb/P2nGuD0fNoTDQBuKcLTyNYK1Fj2NaQZ9CSOL60cUvZr2ZB
BQ0EZDdQGPi/rbxX/VBHOXUPboCn2J2rfnB3IsycoHpmiHS2roYgM0S+m1swYZkL
WQ9I5/TqPQTHsqYhatXw8yp/YeO1n4CC+Hcrgo2vqTXZ4NZ4XSuzpUILRh23vdok
TQuMygTYPI8Lu1tHXZxbtrtkWcpPfqMVWNUF4YZL7JqFcULopFCs7D5rywIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJzL1inCbB+9Zsk2gNQe6wor9WBLMB8GA1UdIwQY
MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk
LThmN2Q1NjkxYzFiZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2UzLzlkYzkzMy01YzBkLTQ0NjEtYTQ1ZC04ZjdkNTY5MWMx
YmUvMS8xLTNncmVQSUtia3R3WkRCU3ZScEFyeFdsWXpnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSn+
27n9C69FbNE+wpn/c3D2FaE8Ohtb2PrPgRAUpaBd8nXogsLV9gnOeAPyb6qkJyvt
xYbZPproyrgMwiargtPfaCNaBQugJ7Cg27cTYYYom8gDx3bvW20swo+gdSiYo6hG
W+u3H81oFY6t0SunWPrDVnjOTlxJhg1nuDl0GEvj7gv8+JPUCDvopJI9QWdOO9oY
3TsO8iEWU2nHJCo/FOpKm2ofzvyD+feZC/GDFmjXB6mGaIkzizJLDIABLG3hKPlg
hAkSwWzwxfbFK7IHn/McExa8GhInYtWuk7t4FoBkijzgP753i4D6oGJN3KI8JU7k
+f77QSyAezA3q8Burw==
-----END CERTIFICATE-----