Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.mft
File:                     yv0xM99HziuwfEcvvmu06ReMYjM.mft (raw, json)
Hash identifier:          llpIQ+aOKXwfWSfhOzxSSSQU9v9W1eKPB1R5T1b2Ang=
Subject key identifier:   ED:47:8D:44:50:77:D2:4B:FB:D4:A9:C6:0F:9E:AA:1E:44:CE:EE:C4
Authority key identifier: CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33
Certificate issuer:       /CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
Certificate serial:       018CF5D27E508BAF04106C1EA209C89813BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.mft
Manifest number:          096E
Signing time:             Thu 11 Jan 2024 00:01:01 +0000
Manifest this update:     Thu 11 Jan 2024 00:01:01 +0000
Manifest next update:     Fri 12 Jan 2024 00:01:01 +0000
Files and hashes:         1: JCVVEoCuJqID3By5YoaCKDkKAp0.roa (hash: gMyhSCl4BNPGq8CGsrCCeio0OQ/XS360J779uZvHBXg=)
                          2: MZ5fy1-utGwSr-Lq7utA7gVKWh8.roa (hash: BREXJHkiCq6VwpqJ+jZLrGA1rBGRzRPJzMLTLjwz/sc=)
                          3: yv0xM99HziuwfEcvvmu06ReMYjM.crl (hash: n5PnInvCwp1ErruFhnzo6c39pbB25aBI+e8IZG6ORVI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:f5:d2:7e:50:8b:af:04:10:6c:1e:a2:09:c8:98:13:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cafd3133df47ce2bb07c472fbe6bb4e9178c6233
        Validity
            Not Before: Jan 11 00:01:01 2024 GMT
            Not After : Jan 12 00:01:01 2024 GMT
        Subject: CN=ed478d445077d24bfbd4a9c60f9eaa1e44ceeec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:b0:62:d6:27:d1:f1:d5:d8:2c:48:bf:4a:
                    e4:e4:66:be:02:47:c0:34:1b:91:d6:21:3e:c4:de:
                    d6:55:19:87:6e:e8:17:41:5f:11:43:05:60:f6:83:
                    17:e7:08:b6:73:62:71:48:ad:fd:e5:b6:ed:74:20:
                    77:c6:cc:d4:be:82:7d:18:b5:2f:34:ea:12:83:4e:
                    21:09:29:ed:4f:a3:05:cb:1f:b3:9f:46:31:6e:1f:
                    a1:92:e9:27:9f:7a:74:7b:79:62:36:a2:9b:d0:79:
                    e0:28:f2:14:f0:a0:7a:93:25:90:46:40:3b:d7:40:
                    c6:02:70:b1:49:30:e3:8e:51:be:f1:e5:20:4a:76:
                    02:62:0e:f9:68:8b:87:de:73:8b:ba:b0:18:35:7e:
                    c6:5f:67:c4:5c:89:62:43:9f:d8:aa:4e:99:31:d0:
                    69:41:95:a3:cd:87:19:49:e1:27:30:1f:69:a8:79:
                    94:21:eb:f3:34:e8:d5:e6:84:3f:ca:f0:b6:6b:1c:
                    65:8a:61:c4:32:79:75:f3:f9:c2:84:6c:a4:48:c7:
                    50:33:aa:3a:76:35:5b:a4:8b:f4:f3:d6:b1:dd:be:
                    d9:76:83:c8:48:9e:82:13:e8:75:84:9c:11:13:12:
                    bd:2f:4e:e9:02:ec:73:0c:5e:2e:b0:96:87:d2:3f:
                    58:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:47:8D:44:50:77:D2:4B:FB:D4:A9:C6:0F:9E:AA:1E:44:CE:EE:C4
            X509v3 Authority Key Identifier:
                keyid:CA:FD:31:33:DF:47:CE:2B:B0:7C:47:2F:BE:6B:B4:E9:17:8C:62:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yv0xM99HziuwfEcvvmu06ReMYjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb1cd5-c871-4d4f-ac3f-4b599d08ed1c/1/yv0xM99HziuwfEcvvmu06ReMYjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:24:71:49:33:c7:6c:be:f7:2f:2e:13:ce:f5:a5:91:93:73:
         76:3d:2a:d4:e7:fc:a0:e4:c0:50:7c:58:57:1d:b6:da:f4:a3:
         b6:73:9b:d7:71:19:2c:5d:db:03:a9:e5:22:cc:9a:85:eb:fd:
         d9:9e:2f:02:b3:aa:da:d6:82:5e:44:14:ef:66:64:8c:83:5d:
         26:6f:19:84:1e:34:f6:7f:02:cc:4d:91:66:04:c2:10:fd:a7:
         32:d6:a3:61:8e:73:c4:5b:50:85:28:33:c8:35:05:7f:45:e2:
         2f:d6:83:2f:76:5f:28:95:c8:0e:dd:0b:ef:e4:d7:df:3a:d3:
         69:d5:53:8e:ee:ca:98:b2:9c:4b:ea:46:09:52:0a:2e:f2:8b:
         ff:35:dc:6a:5d:4b:3f:97:a2:5e:52:36:ef:c9:da:97:a1:7b:
         95:30:62:e2:21:9c:d3:ac:68:06:f3:03:ed:db:f5:33:13:27:
         7d:20:dd:d7:fa:c5:7f:44:41:82:75:07:14:f9:34:a8:61:a6:
         32:51:4c:45:8f:0c:8a:27:b5:f8:ae:7f:9e:ac:00:74:2b:9d:
         5b:11:44:8e:02:e5:a2:52:85:c6:9a:9b:d9:b0:e1:82:c9:30:
         6b:5e:9f:22:83:c0:59:0c:fb:ec:25:0f:11:88:76:a1:3b:eb:
         ff:73:87:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYz10n5Qi68EEGweognImBO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhZmQzMTMzZGY0N2NlMmJiMDdjNDcyZmJlNmJiNGU5MTc4
YzYyMzMwHhcNMjQwMTExMDAwMTAxWhcNMjQwMTEyMDAwMTAxWjAzMTEwLwYDVQQD
EyhlZDQ3OGQ0NDUwNzdkMjRiZmJkNGE5YzYwZjllYWExZTQ0Y2VlZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLWwYtYn0fHV2CxIv0rk5Ga+AkfA
NBuR1iE+xN7WVRmHbugXQV8RQwVg9oMX5wi2c2JxSK395bbtdCB3xszUvoJ9GLUv
NOoSg04hCSntT6MFyx+zn0Yxbh+hkuknn3p0e3liNqKb0HngKPIU8KB6kyWQRkA7
10DGAnCxSTDjjlG+8eUgSnYCYg75aIuH3nOLurAYNX7GX2fEXIliQ5/Yqk6ZMdBp
QZWjzYcZSeEnMB9pqHmUIevzNOjV5oQ/yvC2axxlimHEMnl18/nChGykSMdQM6o6
djVbpIv089ax3b7ZdoPISJ6CE+h1hJwRExK9L07pAuxzDF4usJaH0j9YmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1HjURQd9JL+9Spxg+eqh5Ezu7EMB8GA1UdIwQY
MBaAFMr9MTPfR84rsHxHL75rtOkXjGIzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXYweE05OUh6aXV3ZkVjdnZtdTA2UmVNWWpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lYjFjZDUtYzg3MS00ZDRmLWFjM2Yt
NGI1OTlkMDhlZDFjLzEveXYweE05OUh6aXV3ZkVjdnZtdTA2UmVNWWpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lYjFjZDUtYzg3MS00ZDRmLWFjM2YtNGI1OTlkMDhlZDFj
LzEveXYweE05OUh6aXV3ZkVjdnZtdTA2UmVNWWpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALyRxSTPH
bL73Ly4TzvWlkZNzdj0q1Of8oOTAUHxYVx222vSjtnOb13EZLF3bA6nlIsyahev9
2Z4vArOq2taCXkQU72ZkjINdJm8ZhB409n8CzE2RZgTCEP2nMtajYY5zxFtQhSgz
yDUFf0XiL9aDL3ZfKJXIDt0L7+TX3zrTadVTju7KmLKcS+pGCVIKLvKL/zXcal1L
P5eiXlI278nal6F7lTBi4iGc06xoBvMD7dv1MxMnfSDd1/rFf0RBgnUHFPk0qGGm
MlFMRY8Miie1+K5/nqwAdCudWxFEjgLlolKFxpqb2bDhgskwa16fIoPAWQz77CUP
EYh2oTvr/3OHhg==
-----END CERTIFICATE-----
Generated at Thu Jan 11 12:13:18 2024 by rpki-client on console-fra.rpki-client.org