Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.mft
File:                     zR3grYsi95QcYp1OTz5hiCoX3jE.mft (raw, json)
Hash identifier:          6t77STulZQhALDx7MBg1UBKd5uZj3S3sSQbqKqKwKew=
Subject key identifier:   9E:05:8C:93:B7:82:A6:0C:2C:8B:9D:E6:3F:25:A6:A5:3E:EC:CB:0A
Authority key identifier: CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31
Certificate issuer:       /CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
Certificate serial:       01874B47CD26525CBF28D9ED4B1AEF24E100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.mft
Manifest number:          0272
Signing time:             Tue 04 Apr 2023 08:00:09 +0000
Manifest this update:     Tue 04 Apr 2023 08:00:09 +0000
Manifest next update:     Wed 05 Apr 2023 08:00:09 +0000
Files and hashes:         1: d-PE7RBD-xktifUm6ysEBh9_ctU.roa (hash: o6srw/5OtGjx2A5Yw2OmSijVBqlaJXCJ6kqxgqb1g4Y=)
                          2: zR3grYsi95QcYp1OTz5hiCoX3jE.crl (hash: LcCtfWBYzL9xaBGFCqi9MJwRDy7V3GeZUI5kAUSBxyY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4b:47:cd:26:52:5c:bf:28:d9:ed:4b:1a:ef:24:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1de0ad8b22f7941c629d4e4f3e61882a17de31
        Validity
            Not Before: Apr  4 08:00:09 2023 GMT
            Not After : Apr  5 08:00:09 2023 GMT
        Subject: CN=9e058c93b782a60c2c8b9de63f25a6a53eeccb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:ca:ee:87:cd:8e:30:dd:09:57:09:2c:fa:
                    db:74:90:79:9f:8d:69:c8:96:da:a0:cd:2d:17:31:
                    0a:34:f6:66:f5:63:8f:ed:87:54:46:06:69:6e:87:
                    88:6a:30:05:80:83:2d:e7:eb:3a:6a:4b:d4:7c:67:
                    b5:c7:8f:11:d5:08:79:09:28:c8:d4:9d:0e:7f:20:
                    07:df:f4:3c:c8:fb:4d:55:88:6f:3b:15:b8:3b:ab:
                    87:f9:20:c3:f5:f0:34:80:ca:86:71:13:e2:dd:71:
                    07:6d:5d:09:b8:31:5c:3f:58:96:19:cd:d5:6d:6d:
                    d5:48:a3:c6:81:9d:9d:35:99:1c:89:fb:81:7e:02:
                    9b:9d:1c:5f:04:3d:e6:18:d9:56:d8:fc:65:44:30:
                    76:01:57:fe:1c:b2:cd:e2:85:92:1b:4f:30:9c:57:
                    ea:04:95:6c:da:3b:29:b1:f7:d4:4c:56:4b:82:80:
                    00:54:55:51:80:2d:77:c2:98:6d:31:57:84:42:3c:
                    2b:68:6c:fa:e4:af:ef:d3:94:88:7e:05:91:b2:c8:
                    48:0f:bf:61:47:8a:85:da:57:55:1e:1e:5d:a1:3a:
                    ae:10:5d:09:2b:0c:f2:c9:ab:d8:20:88:83:6b:8b:
                    0b:6f:18:1f:d1:dc:53:59:1b:9b:f7:28:b2:5e:03:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:05:8C:93:B7:82:A6:0C:2C:8B:9D:E6:3F:25:A6:A5:3E:EC:CB:0A
            X509v3 Authority Key Identifier:
                keyid:CD:1D:E0:AD:8B:22:F7:94:1C:62:9D:4E:4F:3E:61:88:2A:17:DE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zR3grYsi95QcYp1OTz5hiCoX3jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/8d986d-b10a-4875-b676-ac8d3ae9015f/1/zR3grYsi95QcYp1OTz5hiCoX3jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bf:d7:cc:1d:45:c3:a3:c3:7e:c5:de:99:86:f0:a8:9b:0a:
         16:58:ca:21:28:76:3c:4d:5c:85:41:c5:94:41:ee:f5:e4:fa:
         dc:af:b7:c8:cf:66:74:68:96:71:43:ca:0e:c2:83:4b:bf:e8:
         a2:10:d0:52:54:e9:1e:26:61:8e:68:6d:09:3b:5f:85:b7:c7:
         81:7f:f1:05:e6:08:41:bb:98:08:fd:ac:cf:8e:72:92:ac:b5:
         a0:e7:c8:46:3b:08:95:e5:db:14:c6:7e:15:e7:b9:c1:7f:55:
         70:5d:1a:d8:00:99:5f:49:e1:23:e0:a6:eb:31:dc:d5:8b:72:
         25:89:62:9c:4c:1c:f7:fa:46:5a:9c:a4:1f:1c:6c:6c:f6:85:
         b0:ee:c3:0e:73:7e:4c:e3:51:72:41:c5:60:f8:ba:df:1f:a9:
         fb:d0:88:4b:83:45:3e:73:6d:1f:92:29:c2:9a:4e:83:50:48:
         b4:82:31:a8:6d:97:19:71:4e:7d:86:41:eb:c1:63:bd:6b:66:
         83:0f:14:2c:c8:42:25:95:6c:1a:0a:ec:d7:fd:75:61:67:b4:
         ff:bb:6e:90:6d:b3:15:74:0c:75:27:ee:e6:a1:30:a5:06:27:
         73:32:51:ba:56:6b:95:b7:cc:db:d9:76:cc:bf:5c:b9:1f:15:
         b7:0a:2d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYdLR80mUly/KNntSxrvJOEAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMWRlMGFkOGIyMmY3OTQxYzYyOWQ0ZTRmM2U2MTg4MmEx
N2RlMzEwHhcNMjMwNDA0MDgwMDA5WhcNMjMwNDA1MDgwMDA5WjAzMTEwLwYDVQQD
Eyg5ZTA1OGM5M2I3ODJhNjBjMmM4YjlkZTYzZjI1YTZhNTNlZWNjYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKLK7ofNjjDdCVcJLPrbdJB5n41p
yJbaoM0tFzEKNPZm9WOP7YdURgZpboeIajAFgIMt5+s6akvUfGe1x48R1Qh5CSjI
1J0OfyAH3/Q8yPtNVYhvOxW4O6uH+SDD9fA0gMqGcRPi3XEHbV0JuDFcP1iWGc3V
bW3VSKPGgZ2dNZkcifuBfgKbnRxfBD3mGNlW2PxlRDB2AVf+HLLN4oWSG08wnFfq
BJVs2jspsffUTFZLgoAAVFVRgC13wphtMVeEQjwraGz65K/v05SIfgWRsshID79h
R4qF2ldVHh5doTquEF0JKwzyyavYIIiDa4sLbxgf0dxTWRub9yiyXgM36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4FjJO3gqYMLIud5j8lpqU+7MsKMB8GA1UdIwQY
MBaAFM0d4K2LIveUHGKdTk8+YYgqF94xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelIzZ3JZc2k5NVFjWXAxT1R6NWhpQ29YM2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi84ZDk4NmQtYjEwYS00ODc1LWI2NzYt
YWM4ZDNhZTkwMTVmLzEvelIzZ3JZc2k5NVFjWXAxT1R6NWhpQ29YM2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi84ZDk4NmQtYjEwYS00ODc1LWI2NzYtYWM4ZDNhZTkwMTVm
LzEvelIzZ3JZc2k5NVFjWXAxT1R6NWhpQ29YM2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAr/XzB1F
w6PDfsXemYbwqJsKFljKISh2PE1chUHFlEHu9eT63K+3yM9mdGiWcUPKDsKDS7/o
ohDQUlTpHiZhjmhtCTtfhbfHgX/xBeYIQbuYCP2sz45ykqy1oOfIRjsIleXbFMZ+
Fee5wX9VcF0a2ACZX0nhI+Cm6zHc1YtyJYlinEwc9/pGWpykHxxsbPaFsO7DDnN+
TONRckHFYPi63x+p+9CIS4NFPnNtH5IpwppOg1BItIIxqG2XGXFOfYZB68FjvWtm
gw8ULMhCJZVsGgrs1/11YWe0/7tukG2zFXQMdSfu5qEwpQYnczJRulZrlbfM29l2
zL9cuR8Vtwot8Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:03 2024 by rpki-client on console-fra.rpki-client.org