Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/jNT1JfLgmeIHpHAardCWzTZ-wu8.mft
File:                     jNT1JfLgmeIHpHAardCWzTZ-wu8.mft (raw, json)
Hash identifier:          nLgMRnaYGA4GDRDUwa23lmFiI6gW7Gzvc3Gij0z952o=
Subject key identifier:   63:50:8C:2E:D2:66:17:CA:6A:DE:DB:87:50:5F:42:4D:89:63:BC:EC
Authority key identifier: 8C:D4:F5:25:F2:E0:99:E2:07:A4:70:1A:AD:D0:96:CD:36:7E:C2:EF
Certificate issuer:       /CN=8cd4f525f2e099e207a4701aadd096cd367ec2ef
Certificate serial:       0183C113E178C550207378C52D548C731BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNT1JfLgmeIHpHAardCWzTZ-wu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/jNT1JfLgmeIHpHAardCWzTZ-wu8.mft
Manifest number:          0885
Signing time:             Mon 10 Oct 2022 08:47:28 +0000
Manifest this update:     Mon 10 Oct 2022 08:47:28 +0000
Manifest next update:     Tue 11 Oct 2022 08:47:28 +0000
Files and hashes:         1: jNT1JfLgmeIHpHAardCWzTZ-wu8.crl (hash: DOeCMbdZmhPeVBtDMhrHB/5zNfQycleprT9+LwpWmok=)
                          2: ocx5KX-otC3J2vC7n5-KkCmevUo.roa (hash: dIW6JyaF0nkwkM+/4ZZ0SDQEtYTN6bmq5VKe4+pUijE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:c1:13:e1:78:c5:50:20:73:78:c5:2d:54:8c:73:1b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd4f525f2e099e207a4701aadd096cd367ec2ef
        Validity
            Not Before: Oct 10 08:47:28 2022 GMT
            Not After : Oct 11 08:47:28 2022 GMT
        Subject: CN=63508c2ed26617ca6adedb87505f424d8963bcec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d5:7d:b8:ef:12:13:07:f4:58:59:53:14:57:
                    f2:65:ea:29:1f:85:6c:b3:60:77:15:77:53:d2:38:
                    40:d8:2b:43:9a:4e:66:b7:38:7c:8a:01:72:c8:d6:
                    ca:b7:bb:fb:d7:8e:5e:a4:bb:cb:49:be:72:f1:da:
                    3b:16:28:1d:b7:86:b6:d0:4d:37:60:70:12:ae:f2:
                    ce:95:07:4e:44:81:90:8a:c5:e4:d3:e8:1a:14:4e:
                    31:8b:52:55:cc:6b:d9:9c:a9:19:78:c2:c6:94:9d:
                    67:f4:f7:5d:46:14:77:a4:56:fa:51:54:09:78:fd:
                    da:67:87:15:f0:d0:be:95:a4:e0:e0:fc:f3:8c:ed:
                    87:12:87:52:d3:c5:c6:9a:7e:7f:db:e6:2a:61:fd:
                    98:e1:4f:34:74:17:dc:8b:1a:2b:a1:0e:fb:dd:03:
                    0a:19:a7:bc:d9:62:11:78:d8:d8:bb:f0:97:7e:04:
                    ea:8e:8f:5a:08:08:da:96:34:34:ec:e9:78:30:64:
                    24:d8:1c:93:49:4e:5f:e5:d3:53:fe:b4:98:d5:16:
                    15:ea:c7:48:26:a1:2b:47:3b:6c:07:e0:d4:31:2c:
                    e4:b0:50:82:fc:56:08:5e:93:0d:48:4f:fd:63:a4:
                    fc:ec:49:8c:d4:9d:fb:91:1f:87:86:62:80:3b:c3:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:50:8C:2E:D2:66:17:CA:6A:DE:DB:87:50:5F:42:4D:89:63:BC:EC
            X509v3 Authority Key Identifier:
                keyid:8C:D4:F5:25:F2:E0:99:E2:07:A4:70:1A:AD:D0:96:CD:36:7E:C2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNT1JfLgmeIHpHAardCWzTZ-wu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/jNT1JfLgmeIHpHAardCWzTZ-wu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e34891-207c-4eb8-ab1b-3e64b42f7a61/1/jNT1JfLgmeIHpHAardCWzTZ-wu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:b7:db:ba:89:8e:82:40:40:d7:f8:b8:70:f9:f0:00:86:
         f1:98:12:4f:89:09:75:ce:cf:39:42:2d:68:3a:2e:53:ca:c5:
         94:95:ca:20:07:e6:d8:62:d0:1b:74:c7:72:ae:f0:2d:8c:78:
         76:9f:cc:47:1b:10:f5:00:f4:56:33:d6:0a:17:f1:35:5e:b4:
         b1:47:81:8a:e8:71:4c:f0:ee:f8:44:8d:02:77:6c:30:1d:a4:
         0c:14:c0:b4:7c:15:80:e3:99:43:82:d7:31:61:9b:4a:83:85:
         f2:ff:a5:d2:08:fd:b0:89:b0:06:03:34:e3:ca:47:da:fc:1e:
         da:2d:9d:e0:d5:70:4d:a6:35:8c:c5:4f:2f:7a:4c:e3:ca:f4:
         a6:60:89:d6:f0:74:ea:fb:ec:19:f4:5c:d5:1c:5e:31:65:85:
         c9:2d:13:43:26:79:4f:e2:b8:dd:16:a7:86:23:96:e0:97:26:
         b2:94:36:1b:10:a6:0f:29:a2:51:6c:3c:b9:aa:2f:06:b3:0b:
         40:46:19:bb:59:4a:0d:7a:72:77:34:dd:8d:cb:ab:71:5b:87:
         b1:a9:06:91:77:9f:5c:5d:86:9b:56:6b:a9:1b:e4:9f:9d:27:
         13:8e:09:93:de:67:c1:c0:32:e2:f5:8b:17:86:a1:c6:bb:3b:
         90:47:2a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYPBE+F4xVAgc3jFLVSMcxvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDRmNTI1ZjJlMDk5ZTIwN2E0NzAxYWFkZDA5NmNkMzY3
ZWMyZWYwHhcNMjIxMDEwMDg0NzI4WhcNMjIxMDExMDg0NzI4WjAzMTEwLwYDVQQD
Eyg2MzUwOGMyZWQyNjYxN2NhNmFkZWRiODc1MDVmNDI0ZDg5NjNiY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtV9uO8SEwf0WFlTFFfyZeopH4Vs
s2B3FXdT0jhA2CtDmk5mtzh8igFyyNbKt7v7145epLvLSb5y8do7Figdt4a20E03
YHASrvLOlQdORIGQisXk0+gaFE4xi1JVzGvZnKkZeMLGlJ1n9PddRhR3pFb6UVQJ
eP3aZ4cV8NC+laTg4PzzjO2HEodS08XGmn5/2+YqYf2Y4U80dBfcixoroQ773QMK
Gae82WIReNjYu/CXfgTqjo9aCAjaljQ07Ol4MGQk2ByTSU5f5dNT/rSY1RYV6sdI
JqErRztsB+DUMSzksFCC/FYIXpMNSE/9Y6T87EmM1J37kR+HhmKAO8OPAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNQjC7SZhfKat7bh1BfQk2JY7zsMB8GA1UdIwQY
MBaAFIzU9SXy4JniB6RwGq3Qls02fsLvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5UMUpmTGdtZUlIcEhBYXJkQ1d6VFotd3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lMzQ4OTEtMjA3Yy00ZWI4LWFiMWIt
M2U2NGI0MmY3YTYxLzEvak5UMUpmTGdtZUlIcEhBYXJkQ1d6VFotd3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lMzQ4OTEtMjA3Yy00ZWI4LWFiMWItM2U2NGI0MmY3YTYx
LzEvak5UMUpmTGdtZUlIcEhBYXJkQ1d6VFotd3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLG327qJ
joJAQNf4uHD58ACG8ZgST4kJdc7POUItaDouU8rFlJXKIAfm2GLQG3THcq7wLYx4
dp/MRxsQ9QD0VjPWChfxNV60sUeBiuhxTPDu+ESNAndsMB2kDBTAtHwVgOOZQ4LX
MWGbSoOF8v+l0gj9sImwBgM048pH2vwe2i2d4NVwTaY1jMVPL3pM48r0pmCJ1vB0
6vvsGfRc1RxeMWWFyS0TQyZ5T+K43RanhiOW4JcmspQ2GxCmDymiUWw8uaovBrML
QEYZu1lKDXpydzTdjcurcVuHsakGkXefXF2Gm1ZrqRvkn50nE44Jk95nwcAy4vWL
F4ahxrs7kEcqng==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:33 2024 by rpki-client on console-fra.rpki-client.org