Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/fDgomjp8oYlVmyVOVZv1bfyfIyI.mft
File:                     fDgomjp8oYlVmyVOVZv1bfyfIyI.mft (raw, json)
Hash identifier:          JF4cZJHm9vuOZb3yN3fPaRrvg0OUtIFZm9ujf5LMLRA=
Subject key identifier:   7F:77:7D:0C:E5:65:3B:C1:11:C2:B9:3E:D5:1E:7B:45:CE:8C:0E:B5
Authority key identifier: 7C:38:28:9A:3A:7C:A1:89:55:9B:25:4E:55:9B:F5:6D:FC:9F:23:22
Certificate issuer:       /CN=7c38289a3a7ca189559b254e559bf56dfc9f2322
Certificate serial:       018C3F3806D0593ED391F45B32EE878EAF70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDgomjp8oYlVmyVOVZv1bfyfIyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/fDgomjp8oYlVmyVOVZv1bfyfIyI.mft
Manifest number:          0A21
Signing time:             Wed 06 Dec 2023 13:01:25 +0000
Manifest this update:     Wed 06 Dec 2023 13:01:25 +0000
Manifest next update:     Thu 07 Dec 2023 13:01:25 +0000
Files and hashes:         1: 4iAAUNZPU2eJ0aVCFcuTFppzjDk.roa (hash: 5Bw+CfKi/DSSR56OPPngwTRQdnDBexCw+xByCJCPRgE=)
                          2: fDgomjp8oYlVmyVOVZv1bfyfIyI.crl (hash: OXJbIZh0aHVzvFaZc/95sHZWgKGj1TFdQ1SIwhamsrg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3f:38:06:d0:59:3e:d3:91:f4:5b:32:ee:87:8e:af:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c38289a3a7ca189559b254e559bf56dfc9f2322
        Validity
            Not Before: Dec  6 13:01:25 2023 GMT
            Not After : Dec  7 13:01:25 2023 GMT
        Subject: CN=7f777d0ce5653bc111c2b93ed51e7b45ce8c0eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7f:b7:e0:6b:02:0b:83:9a:89:40:f4:32:c2:
                    d6:9e:7b:2a:a5:0d:e2:ae:c8:b4:36:cd:60:f8:57:
                    9f:a0:a5:11:5a:b4:cd:3b:ca:e4:ed:3c:1e:22:4b:
                    82:f7:50:b4:11:e5:df:3c:f2:88:f6:61:d8:20:7e:
                    a5:a4:bf:8d:c5:d8:36:f9:19:34:b2:a2:96:e2:07:
                    87:df:71:40:99:bc:db:5a:f5:3d:65:7a:6e:12:6b:
                    df:90:2d:c5:a2:8d:d5:f8:03:8d:7b:8f:18:ec:da:
                    7c:da:1f:ea:6c:00:f0:53:de:a5:10:46:ed:3b:12:
                    6c:15:24:0a:9f:49:6f:c4:ea:27:28:32:0a:a6:f9:
                    a0:40:e2:63:60:07:13:4f:aa:87:d2:69:47:5c:75:
                    2e:5f:f1:24:a6:da:ac:07:e5:30:08:19:dc:6f:57:
                    01:a7:d9:7c:15:64:2b:b7:e0:14:f1:1d:44:bf:64:
                    65:ef:6d:21:60:22:dc:db:bb:08:1a:6a:a2:ba:b9:
                    ad:15:3a:1d:4b:ba:1a:fd:00:82:f8:45:40:f2:00:
                    69:93:a1:7f:46:61:dc:f7:c4:f1:f9:80:67:eb:9f:
                    7f:37:3b:e9:3b:fc:6e:58:bb:7a:29:a6:07:36:b0:
                    d7:8d:c1:bc:df:fd:4f:19:60:fa:b6:ce:3d:1a:99:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:77:7D:0C:E5:65:3B:C1:11:C2:B9:3E:D5:1E:7B:45:CE:8C:0E:B5
            X509v3 Authority Key Identifier:
                keyid:7C:38:28:9A:3A:7C:A1:89:55:9B:25:4E:55:9B:F5:6D:FC:9F:23:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDgomjp8oYlVmyVOVZv1bfyfIyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/fDgomjp8oYlVmyVOVZv1bfyfIyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b4a6a2-5f6b-4ba5-b85c-e3e75144a7e6/1/fDgomjp8oYlVmyVOVZv1bfyfIyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:e4:90:75:dc:60:c1:64:14:96:76:f7:f3:55:cc:5d:05:25:
         8b:92:2e:6a:7e:60:bf:25:bc:88:0f:32:84:a3:c3:3e:f3:fa:
         e8:c6:ed:e1:1e:00:28:88:4c:a2:f6:77:ae:67:e9:af:17:8e:
         3d:04:78:95:6b:8a:6d:9d:7f:b3:c1:d6:54:4a:b1:e5:1c:45:
         c0:61:bb:81:10:40:38:4a:cb:b7:19:d6:df:3c:67:1e:ce:53:
         b5:f7:74:e0:4a:b6:a9:4a:5f:63:55:86:65:27:93:5f:ca:d4:
         a9:73:ab:c5:21:38:ff:1d:d6:50:d0:af:da:c3:d2:ee:74:6f:
         a9:48:0f:51:bb:cc:fb:c9:7d:f4:54:a7:32:a7:79:3f:01:cd:
         98:8c:2f:95:f7:ab:88:15:24:96:36:b9:36:f9:98:a7:d7:67:
         6a:42:3f:f5:8d:7c:af:97:b9:4b:49:b5:d3:de:db:f3:fd:5d:
         71:4c:f4:2d:b7:cf:32:d8:58:a3:d6:4d:5c:7e:ca:05:38:fe:
         c9:c1:83:e5:18:d9:d1:d8:f6:34:71:ae:62:fb:a1:04:81:17:
         13:59:1b:da:c1:13:c4:f7:34:ea:e2:3f:68:5a:4d:e0:38:85:
         e5:9a:89:a8:e2:b9:c2:19:ce:9a:b8:77:05:9f:9b:b8:29:15:
         ac:f4:05:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYw/OAbQWT7TkfRbMu6Hjq9wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMzgyODlhM2E3Y2ExODk1NTliMjU0ZTU1OWJmNTZkZmM5
ZjIzMjIwHhcNMjMxMjA2MTMwMTI1WhcNMjMxMjA3MTMwMTI1WjAzMTEwLwYDVQQD
Eyg3Zjc3N2QwY2U1NjUzYmMxMTFjMmI5M2VkNTFlN2I0NWNlOGMwZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3+34GsCC4OaiUD0MsLWnnsqpQ3i
rsi0Ns1g+FefoKURWrTNO8rk7TweIkuC91C0EeXfPPKI9mHYIH6lpL+Nxdg2+Rk0
sqKW4geH33FAmbzbWvU9ZXpuEmvfkC3Foo3V+AONe48Y7Np82h/qbADwU96lEEbt
OxJsFSQKn0lvxOonKDIKpvmgQOJjYAcTT6qH0mlHXHUuX/EkptqsB+UwCBncb1cB
p9l8FWQrt+AU8R1Ev2Rl720hYCLc27sIGmqiurmtFTodS7oa/QCC+EVA8gBpk6F/
RmHc98Tx+YBn659/NzvpO/xuWLt6KaYHNrDXjcG83/1PGWD6ts49Gpld8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH93fQzlZTvBEcK5PtUee0XOjA61MB8GA1UdIwQY
MBaAFHw4KJo6fKGJVZslTlWb9W38nyMiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkRnb21qcDhvWWxWbXlWT1ZadjFiZnlmSXlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9iNGE2YTItNWY2Yi00YmE1LWI4NWMt
ZTNlNzUxNDRhN2U2LzEvZkRnb21qcDhvWWxWbXlWT1ZadjFiZnlmSXlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9iNGE2YTItNWY2Yi00YmE1LWI4NWMtZTNlNzUxNDRhN2U2
LzEvZkRnb21qcDhvWWxWbXlWT1ZadjFiZnlmSXlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy+SQddxg
wWQUlnb381XMXQUli5Iuan5gvyW8iA8yhKPDPvP66Mbt4R4AKIhMovZ3rmfprxeO
PQR4lWuKbZ1/s8HWVEqx5RxFwGG7gRBAOErLtxnW3zxnHs5Ttfd04Eq2qUpfY1WG
ZSeTX8rUqXOrxSE4/x3WUNCv2sPS7nRvqUgPUbvM+8l99FSnMqd5PwHNmIwvlfer
iBUklja5NvmYp9dnakI/9Y18r5e5S0m1097b8/1dcUz0LbfPMthYo9ZNXH7KBTj+
ycGD5RjZ0dj2NHGuYvuhBIEXE1kb2sETxPc06uI/aFpN4DiF5ZqJqOK5whnOmrh3
BZ+buCkVrPQFOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:31 2024 by rpki-client on console-fra.rpki-client.org