Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/40c59b-4e0b-4ff8-9fa6-d57f2e4d5d4b/1/TfAggZYoGMoLyIl5oVwma-8_nQI.mft
File:                     TfAggZYoGMoLyIl5oVwma-8_nQI.mft (raw, json)
Hash identifier:          jrHUcqHwTeUFjteDR7K00W31iIbVEd1N3kern9KxNnk=
Subject key identifier:   B4:05:2E:22:7F:A0:BD:3B:69:66:29:81:25:EE:51:B7:66:B2:36:31
Authority key identifier: 4D:F0:20:81:96:28:18:CA:0B:C8:89:79:A1:5C:26:6B:EF:3F:9D:02
Certificate issuer:       /CN=4df02081962818ca0bc88979a15c266bef3f9d02
Certificate serial:       018B6948E0ECC13E91D1271E6412C9A725BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfAggZYoGMoLyIl5oVwma-8_nQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/40c59b-4e0b-4ff8-9fa6-d57f2e4d5d4b/1/TfAggZYoGMoLyIl5oVwma-8_nQI.mft
Manifest number:          0F52
Signing time:             Thu 26 Oct 2023 00:01:05 +0000
Manifest this update:     Thu 26 Oct 2023 00:01:05 +0000
Manifest next update:     Fri 27 Oct 2023 00:01:05 +0000
Files and hashes:         1: TfAggZYoGMoLyIl5oVwma-8_nQI.crl (hash: QV4PBj49O/M753KmepPMdm7k+ChpmxveJdJCFez3HMI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:69:48:e0:ec:c1:3e:91:d1:27:1e:64:12:c9:a7:25:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df02081962818ca0bc88979a15c266bef3f9d02
        Validity
            Not Before: Oct 26 00:01:05 2023 GMT
            Not After : Oct 27 00:01:05 2023 GMT
        Subject: CN=b4052e227fa0bd3b6966298125ee51b766b23631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:05:ca:dd:1f:96:0c:ab:4e:82:fd:c1:db:28:
                    68:f0:ef:1d:66:67:2b:52:26:2c:f9:c3:cb:ab:ac:
                    54:4c:3e:47:95:7a:c4:ea:07:b7:8d:60:e9:bb:64:
                    d8:7c:93:12:61:be:23:f9:64:b1:2b:ff:33:61:5f:
                    f1:96:e4:64:5b:e2:b8:3b:6e:a3:25:ac:15:f8:45:
                    1a:b0:2b:bc:79:80:e8:5a:3a:31:d2:73:f4:5e:d0:
                    ee:55:c7:24:96:1a:c5:2a:44:62:8e:b3:af:bd:16:
                    78:f1:b5:d8:4f:a0:e5:9f:d6:08:56:58:b7:3c:2e:
                    43:e6:9e:31:1d:b6:c2:aa:d5:29:b2:2b:7d:39:7b:
                    cf:21:d9:c4:6f:64:21:a6:19:ef:bb:36:e5:30:fe:
                    14:cc:7f:f0:4a:94:94:6b:12:83:5e:73:00:54:db:
                    e6:3d:9c:85:f1:c6:b0:51:20:2a:3b:bc:6c:c2:d7:
                    b0:d9:14:45:c7:8f:aa:f4:c8:a4:74:5a:7a:37:0c:
                    91:70:36:76:fa:0b:1d:2f:47:dd:e3:d9:b1:d1:3b:
                    b2:ff:f9:2d:89:6a:49:92:af:cf:0c:91:7a:04:12:
                    30:09:bc:1c:c0:ba:14:c4:7c:00:1e:44:06:c6:7a:
                    98:7a:a3:ac:3b:3f:a5:11:ed:6d:83:73:3a:38:cf:
                    d6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:05:2E:22:7F:A0:BD:3B:69:66:29:81:25:EE:51:B7:66:B2:36:31
            X509v3 Authority Key Identifier:
                keyid:4D:F0:20:81:96:28:18:CA:0B:C8:89:79:A1:5C:26:6B:EF:3F:9D:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfAggZYoGMoLyIl5oVwma-8_nQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c59b-4e0b-4ff8-9fa6-d57f2e4d5d4b/1/TfAggZYoGMoLyIl5oVwma-8_nQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/40c59b-4e0b-4ff8-9fa6-d57f2e4d5d4b/1/TfAggZYoGMoLyIl5oVwma-8_nQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:0a:ed:a2:d5:af:98:ca:8b:28:a6:e9:52:51:97:5b:41:
         e1:f9:e4:dc:48:a1:96:74:f3:cf:f6:b4:17:d2:94:d8:65:41:
         9a:ee:66:d3:68:ca:40:ef:a7:9e:69:4e:53:2e:b9:8c:6d:51:
         70:82:7c:6b:43:0b:29:a7:b6:50:dc:a4:71:97:21:d3:f1:f6:
         b0:fb:25:56:29:e3:06:bf:0b:d2:ed:ba:c7:20:7a:22:25:92:
         13:5c:f9:b3:a1:99:9f:9b:43:87:41:7f:0e:50:20:f2:6e:4b:
         fe:c5:9e:f3:ec:3c:bd:0e:3b:99:27:7c:38:31:8c:9b:11:e6:
         d1:06:d3:34:a8:9f:c0:f8:df:97:5b:99:0c:88:b6:ed:cc:b8:
         81:82:14:c8:20:3a:da:f6:a8:23:a8:9c:e6:05:81:b5:70:11:
         a0:24:7c:1f:8f:bf:98:42:84:da:05:4e:ec:11:57:9f:d5:ca:
         7b:24:48:5c:57:e2:2e:ec:aa:61:da:2a:0f:da:67:e6:ea:25:
         d9:3f:73:af:11:41:5f:c9:60:00:c1:5e:19:8a:ab:bd:56:75:
         87:33:2a:25:ed:df:3b:e1:c5:af:70:5f:ce:61:b6:90:6a:a8:
         e9:71:66:48:ab:8d:95:09:83:a7:a4:9e:25:78:c5:75:27:c3:
         0f:33:4e:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYtpSODswT6R0SceZBLJpyW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZjAyMDgxOTYyODE4Y2EwYmM4ODk3OWExNWMyNjZiZWYz
ZjlkMDIwHhcNMjMxMDI2MDAwMTA1WhcNMjMxMDI3MDAwMTA1WjAzMTEwLwYDVQQD
EyhiNDA1MmUyMjdmYTBiZDNiNjk2NjI5ODEyNWVlNTFiNzY2YjIzNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwXK3R+WDKtOgv3B2yho8O8dZmcr
UiYs+cPLq6xUTD5HlXrE6ge3jWDpu2TYfJMSYb4j+WSxK/8zYV/xluRkW+K4O26j
JawV+EUasCu8eYDoWjox0nP0XtDuVccklhrFKkRijrOvvRZ48bXYT6Dln9YIVli3
PC5D5p4xHbbCqtUpsit9OXvPIdnEb2QhphnvuzblMP4UzH/wSpSUaxKDXnMAVNvm
PZyF8cawUSAqO7xswtew2RRFx4+q9MikdFp6NwyRcDZ2+gsdL0fd49mx0Tuy//kt
iWpJkq/PDJF6BBIwCbwcwLoUxHwAHkQGxnqYeqOsOz+lEe1tg3M6OM/W3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQFLiJ/oL07aWYpgSXuUbdmsjYxMB8GA1UdIwQY
MBaAFE3wIIGWKBjKC8iJeaFcJmvvP50CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGZBZ2daWW9HTW9MeUlsNW9Wd21hLThfblFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi80MGM1OWItNGUwYi00ZmY4LTlmYTYt
ZDU3ZjJlNGQ1ZDRiLzEvVGZBZ2daWW9HTW9MeUlsNW9Wd21hLThfblFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi80MGM1OWItNGUwYi00ZmY4LTlmYTYtZDU3ZjJlNGQ1ZDRi
LzEvVGZBZ2daWW9HTW9MeUlsNW9Wd21hLThfblFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8MK7aLV
r5jKiyim6VJRl1tB4fnk3EihlnTzz/a0F9KU2GVBmu5m02jKQO+nnmlOUy65jG1R
cIJ8a0MLKae2UNykcZch0/H2sPslVinjBr8L0u26xyB6IiWSE1z5s6GZn5tDh0F/
DlAg8m5L/sWe8+w8vQ47mSd8ODGMmxHm0QbTNKifwPjfl1uZDIi27cy4gYIUyCA6
2vaoI6ic5gWBtXARoCR8H4+/mEKE2gVO7BFXn9XKeyRIXFfiLuyqYdoqD9pn5uol
2T9zrxFBX8lgAMFeGYqrvVZ1hzMqJe3fO+HFr3BfzmG2kGqo6XFmSKuNlQmDp6Se
JXjFdSfDDzNONQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:01 2024 by rpki-client on console-fra.rpki-client.org