Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft
File:                     KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft (raw, json)
Hash identifier:          FlSYHIw1RgW5dcpWzEB5yqEPY5npIRLfyz74j9HaEnA=
Subject key identifier:   54:DC:F2:0C:55:88:AA:F9:D7:5A:E7:DA:8A:6B:08:FE:09:C0:9B:4E
Authority key identifier: 29:52:80:3F:15:05:41:08:38:93:30:31:77:EB:8B:19:1F:BB:C6:1F
Certificate issuer:       /CN=2952803f150541083893303177eb8b191fbbc61f
Certificate serial:       019000F407B3B7278F58D05E75422790FCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KVKAPxUFQQg4kzAxd-uLGR-7xh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft
Manifest number:          03EC
Signing time:             Mon 10 Jun 2024 07:01:51 +0000
Manifest this update:     Mon 10 Jun 2024 07:01:51 +0000
Manifest next update:     Tue 11 Jun 2024 07:01:51 +0000
Files and hashes:         1: KVKAPxUFQQg4kzAxd-uLGR-7xh8.crl (hash: ofDuO8k98L/8enyc0/6r/nlYVZlZMuAAvrBTT3ceDrg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:00:f4:07:b3:b7:27:8f:58:d0:5e:75:42:27:90:fc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2952803f150541083893303177eb8b191fbbc61f
        Validity
            Not Before: Jun 10 07:01:51 2024 GMT
            Not After : Jun 11 07:01:51 2024 GMT
        Subject: CN=54dcf20c5588aaf9d75ae7da8a6b08fe09c09b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2f:6e:1f:ee:ab:e1:76:c3:3a:75:a7:bb:67:
                    8d:a5:58:c3:99:28:95:86:17:46:6a:c4:08:2d:c8:
                    cd:ad:9f:9c:05:02:32:05:08:4a:01:f1:b7:28:22:
                    98:91:b4:77:64:dc:ad:29:57:06:e7:b3:93:de:03:
                    62:10:cc:ef:dc:78:c6:91:c4:62:3f:d1:9a:9d:04:
                    a0:3f:5a:21:f1:35:c3:8a:61:80:e8:64:ed:45:1f:
                    8d:21:a8:99:6b:d4:a0:fb:65:ba:88:e2:ed:a5:15:
                    e5:0b:10:36:08:47:65:8a:00:ee:d2:8f:e5:ef:1b:
                    c0:55:74:f1:00:51:d1:06:3e:1e:da:25:42:18:43:
                    e8:e0:15:1e:a2:15:27:2d:a0:06:33:c2:02:9a:88:
                    b1:2a:ea:9a:76:28:61:0b:40:64:06:d6:38:2f:16:
                    66:1d:c1:98:0c:df:53:40:77:86:48:f4:2c:9c:30:
                    ec:70:81:74:a4:ec:5b:a8:4e:f8:5e:95:56:1e:bb:
                    1b:d7:e0:d5:c5:8f:b0:75:43:a3:84:70:fe:22:ef:
                    4a:48:e1:d6:75:1a:fc:6c:cf:20:98:e9:9c:e7:36:
                    b3:ba:c1:81:4d:49:0c:5f:bc:3a:7f:85:ee:d6:1d:
                    74:d5:c4:bc:44:91:b6:9e:e7:23:90:4e:8f:b0:be:
                    10:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DC:F2:0C:55:88:AA:F9:D7:5A:E7:DA:8A:6B:08:FE:09:C0:9B:4E
            X509v3 Authority Key Identifier:
                keyid:29:52:80:3F:15:05:41:08:38:93:30:31:77:EB:8B:19:1F:BB:C6:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVKAPxUFQQg4kzAxd-uLGR-7xh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/88428d-39bb-415e-ab0b-52bbbc39b6ae/1/KVKAPxUFQQg4kzAxd-uLGR-7xh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7b:db:49:d4:3e:46:80:49:5e:95:7e:62:63:df:72:d2:62:
         f5:1e:d9:cf:bf:70:d9:30:65:47:a6:c0:54:b5:b7:b6:a1:df:
         ee:00:b0:5f:7a:cd:96:af:9c:15:90:ac:9d:22:41:46:f4:2e:
         1f:53:b4:5b:7c:19:26:c1:88:a4:63:b9:63:e7:86:c2:f8:90:
         10:a1:3b:f7:6f:b6:c4:0a:ab:fe:38:8b:5c:df:d4:a0:74:bd:
         9e:54:d8:98:6b:5a:df:c4:ea:41:6e:d9:a8:1d:51:b2:fc:62:
         11:ba:81:8c:b5:41:fa:71:f4:37:f9:b7:07:9f:fc:e1:28:2d:
         b1:72:b7:1a:3a:7e:5f:eb:da:e4:94:35:01:15:34:c5:1a:62:
         0d:6c:5f:3f:a1:3e:4b:f2:ef:9b:3e:7f:72:ca:af:8f:2f:eb:
         c5:7e:93:46:8e:94:e7:49:84:b6:e5:93:d5:59:57:40:20:99:
         58:90:4a:b8:c5:71:67:90:08:e0:85:ac:ac:90:91:d1:f6:ec:
         3b:af:c0:b9:11:d7:1d:ae:93:ef:60:5c:db:23:8e:72:43:72:
         51:b1:7e:54:0c:fb:86:e1:13:34:35:ed:85:ee:56:00:90:9d:
         03:d2:dc:c1:79:58:07:fd:c8:e2:78:14:cc:01:5e:90:33:27:
         1b:98:13:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAA9AeztyePWNBedUInkPzCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTI4MDNmMTUwNTQxMDgzODkzMzAzMTc3ZWI4YjE5MWZi
YmM2MWYwHhcNMjQwNjEwMDcwMTUxWhcNMjQwNjExMDcwMTUxWjAzMTEwLwYDVQQD
Eyg1NGRjZjIwYzU1ODhhYWY5ZDc1YWU3ZGE4YTZiMDhmZTA5YzA5YjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvC9uH+6r4XbDOnWnu2eNpVjDmSiV
hhdGasQILcjNrZ+cBQIyBQhKAfG3KCKYkbR3ZNytKVcG57OT3gNiEMzv3HjGkcRi
P9GanQSgP1oh8TXDimGA6GTtRR+NIaiZa9Sg+2W6iOLtpRXlCxA2CEdligDu0o/l
7xvAVXTxAFHRBj4e2iVCGEPo4BUeohUnLaAGM8ICmoixKuqadihhC0BkBtY4LxZm
HcGYDN9TQHeGSPQsnDDscIF0pOxbqE74XpVWHrsb1+DVxY+wdUOjhHD+Iu9KSOHW
dRr8bM8gmOmc5zazusGBTUkMX7w6f4Xu1h101cS8RJG2nucjkE6PsL4QiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTc8gxViKr511rn2oprCP4JwJtOMB8GA1UdIwQY
MBaAFClSgD8VBUEIOJMwMXfrixkfu8YfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZLQVB4VUZRUWc0a3pBeGQtdUxHUi03eGg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ODQyOGQtMzliYi00MTVlLWFiMGIt
NTJiYmJjMzliNmFlLzEvS1ZLQVB4VUZRUWc0a3pBeGQtdUxHUi03eGg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84ODQyOGQtMzliYi00MTVlLWFiMGItNTJiYmJjMzliNmFl
LzEvS1ZLQVB4VUZRUWc0a3pBeGQtdUxHUi03eGg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3vbSdQ+
RoBJXpV+YmPfctJi9R7Zz79w2TBlR6bAVLW3tqHf7gCwX3rNlq+cFZCsnSJBRvQu
H1O0W3wZJsGIpGO5Y+eGwviQEKE792+2xAqr/jiLXN/UoHS9nlTYmGta38TqQW7Z
qB1RsvxiEbqBjLVB+nH0N/m3B5/84SgtsXK3Gjp+X+va5JQ1ARU0xRpiDWxfP6E+
S/Lvmz5/csqvjy/rxX6TRo6U50mEtuWT1VlXQCCZWJBKuMVxZ5AI4IWsrJCR0fbs
O6/AuRHXHa6T72Bc2yOOckNyUbF+VAz7huETNDXthe5WAJCdA9LcwXlYB/3I4ngU
zAFekDMnG5gTkg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:14 2025 by rpki-client