Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.mft
File:                     S_ID1q5mmOCfJVeAuIrM3NlGdaE.mft (raw, json)
Hash identifier:          vs3bVatqN+5QJDnw/MLxqhZPj6X9IWs3l0Jo5GB+1DY=
Subject key identifier:   C8:C0:20:B6:C5:F6:55:3F:1F:40:89:F1:B3:80:42:0A:DD:54:B6:07
Authority key identifier: 4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1
Certificate issuer:       /CN=4bf203d6ae6698e09f255780b88accdcd94675a1
Certificate serial:       018F31067B9A34BEA8F0447C0B44F0DD0CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.mft
Manifest number:          08F0
Signing time:             Tue 30 Apr 2024 22:00:59 +0000
Manifest this update:     Tue 30 Apr 2024 22:00:59 +0000
Manifest next update:     Wed 01 May 2024 22:00:59 +0000
Files and hashes:         1: 2DErzKNOx34kcmtSTRN6w2CDqaw.roa (hash: Hg8kw/ZFztCm8HWOWxUE0qjVxQnUVCi//JyaoQkIs78=)
                          2: R5H86v0M3TvZY7EBb3O6uV4DDgQ.roa (hash: wFKvZApcERv2sl1ElCd4I8ljMRS9sIVYHD29zMgtrk4=)
                          3: S_ID1q5mmOCfJVeAuIrM3NlGdaE.crl (hash: 7qkYDbYHeQANSQ4WF4Zic0xAm6e5skvf3qbVxpQJTAU=)
                          4: geHnqG8UBHEqh9m8KXVSQTgxbEU.roa (hash: DfHi0Jaf2cYqietC38qKCGx6q2ipxlHmBOqmadk0cWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:31:06:7b:9a:34:be:a8:f0:44:7c:0b:44:f0:dd:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bf203d6ae6698e09f255780b88accdcd94675a1
        Validity
            Not Before: Apr 30 22:00:59 2024 GMT
            Not After : May  1 22:00:59 2024 GMT
        Subject: CN=c8c020b6c5f6553f1f4089f1b380420add54b607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:23:b1:e9:57:99:de:2c:e7:3e:5f:89:7c:
                    0d:d5:cb:b4:9c:dd:0d:4a:21:3b:83:fb:e2:e8:32:
                    e0:65:f3:17:9a:ae:c8:8f:55:f3:c4:18:6e:40:89:
                    3d:37:79:c3:9b:e1:92:e2:53:ba:a0:f7:b6:70:71:
                    d5:f7:7c:4a:27:e1:b3:3c:8d:28:1d:92:05:b5:cc:
                    9e:83:c8:72:49:a1:da:d3:45:02:07:60:dc:33:c3:
                    ad:2f:2e:8f:89:ab:22:f2:c7:f0:aa:02:9f:67:f0:
                    99:77:4e:ca:56:74:24:7d:42:41:ec:cf:21:a0:fd:
                    7a:c7:eb:99:7e:41:7a:c3:b1:29:6b:39:b6:c9:17:
                    22:e2:0f:ad:7c:97:25:70:a4:40:57:f2:ef:4f:dd:
                    86:89:49:db:0f:72:b2:cc:5f:fd:48:e5:d9:45:d1:
                    6a:03:ac:db:8e:fa:1a:c4:d1:20:ba:69:db:af:42:
                    d5:e2:d8:4f:80:b2:82:52:b2:5e:8e:66:af:f0:02:
                    3a:73:7e:df:65:05:53:b6:bf:40:16:2a:d4:0f:21:
                    28:5a:80:70:72:eb:fd:27:1a:3a:3e:07:8a:99:37:
                    11:a7:3a:72:0a:0f:99:40:c8:28:1f:fe:ee:b7:bd:
                    53:b0:ef:f4:bc:5c:ee:ca:97:ae:2c:df:7e:d0:c4:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C0:20:B6:C5:F6:55:3F:1F:40:89:F1:B3:80:42:0A:DD:54:B6:07
            X509v3 Authority Key Identifier:
                keyid:4B:F2:03:D6:AE:66:98:E0:9F:25:57:80:B8:8A:CC:DC:D9:46:75:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_ID1q5mmOCfJVeAuIrM3NlGdaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/299984-6d7d-45e3-b6fd-bc917c9235d2/1/S_ID1q5mmOCfJVeAuIrM3NlGdaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1a:1d:7a:c8:4b:49:90:6b:e8:01:03:58:ac:d9:25:5f:d4:
         b1:f6:09:58:be:7b:b8:c9:94:36:af:ec:07:e6:8a:4e:94:da:
         c4:34:9b:b2:8c:73:32:5f:d6:e1:4f:47:81:f9:aa:ab:15:0b:
         98:21:5b:cc:cb:05:96:03:88:3d:ac:d2:05:51:a6:68:e9:b6:
         94:87:ac:73:74:b3:af:65:0c:64:3d:6c:91:85:87:7f:3d:1e:
         d2:41:ea:06:db:92:c1:78:0d:6e:75:e8:f9:c3:60:34:4a:a0:
         f3:73:39:fa:e1:ff:d8:eb:82:55:a8:fb:9a:ee:1c:26:85:70:
         bd:f2:be:6f:a4:e0:e9:f6:5b:52:6a:e2:ce:5c:de:dc:54:d7:
         de:2a:6c:3a:cb:18:d6:39:61:0f:ff:6c:ab:17:c1:ca:b5:d6:
         15:f8:86:e7:61:9f:3d:15:64:bd:3c:a2:ce:80:de:5f:cd:f4:
         27:d3:66:20:7b:da:1e:8c:b5:ff:13:89:71:9b:f3:ee:ad:a1:
         ef:ab:08:80:ff:7b:15:5a:34:f7:0b:16:ed:d4:76:f4:e1:9f:
         ff:ab:29:b2:63:54:7a:4b:30:3c:e8:52:16:f7:9e:d5:a9:61:
         ae:89:6f:8b:8c:34:30:47:4d:a0:95:b7:38:41:3e:5e:33:b5:
         f1:93:c3:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8xBnuaNL6o8ER8C0Tw3QzEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZjIwM2Q2YWU2Njk4ZTA5ZjI1NTc4MGI4OGFjY2RjZDk0
Njc1YTEwHhcNMjQwNDMwMjIwMDU5WhcNMjQwNTAxMjIwMDU5WjAzMTEwLwYDVQQD
EyhjOGMwMjBiNmM1ZjY1NTNmMWY0MDg5ZjFiMzgwNDIwYWRkNTRiNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrkjselXmd4s5z5fiXwN1cu0nN0N
SiE7g/vi6DLgZfMXmq7Ij1XzxBhuQIk9N3nDm+GS4lO6oPe2cHHV93xKJ+GzPI0o
HZIFtcyeg8hySaHa00UCB2DcM8OtLy6Piasi8sfwqgKfZ/CZd07KVnQkfUJB7M8h
oP16x+uZfkF6w7Epazm2yRci4g+tfJclcKRAV/LvT92GiUnbD3KyzF/9SOXZRdFq
A6zbjvoaxNEgumnbr0LV4thPgLKCUrJejmav8AI6c37fZQVTtr9AFirUDyEoWoBw
cuv9Jxo6PgeKmTcRpzpyCg+ZQMgoH/7ut71TsO/0vFzuypeuLN9+0MT6uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjAILbF9lU/H0CJ8bOAQgrdVLYHMB8GA1UdIwQY
MBaAFEvyA9auZpjgnyVXgLiKzNzZRnWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU19JRDFxNW1tT0NmSlZlQXVJck0zTmxHZGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yOTk5ODQtNmQ3ZC00NWUzLWI2ZmQt
YmM5MTdjOTIzNWQyLzEvU19JRDFxNW1tT0NmSlZlQXVJck0zTmxHZGFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yOTk5ODQtNmQ3ZC00NWUzLWI2ZmQtYmM5MTdjOTIzNWQy
LzEvU19JRDFxNW1tT0NmSlZlQXVJck0zTmxHZGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBodeshL
SZBr6AEDWKzZJV/UsfYJWL57uMmUNq/sB+aKTpTaxDSbsoxzMl/W4U9HgfmqqxUL
mCFbzMsFlgOIPazSBVGmaOm2lIesc3Szr2UMZD1skYWHfz0e0kHqBtuSwXgNbnXo
+cNgNEqg83M5+uH/2OuCVaj7mu4cJoVwvfK+b6Tg6fZbUmrizlze3FTX3ipsOssY
1jlhD/9sqxfByrXWFfiG52GfPRVkvTyizoDeX830J9NmIHvaHoy1/xOJcZvz7q2h
76sIgP97FVo09wsW7dR29OGf/6spsmNUekswPOhSFvee1alhrolvi4w0MEdNoJW3
OEE+XjO18ZPD+Q==
-----END CERTIFICATE-----
Generated at Wed May 1 09:24:12 2024 by rpki-client on console-ams.rpki-client.org