Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.mft
File:                     ndmJI091rgTeMGU64UE5-dxgmsE.mft (raw, json)
Hash identifier:          +3r/5x0tFZ9+mCs0wZ0vvBJkpmnTCQQzKyTCeh5/rH4=
Subject key identifier:   24:BC:5C:FE:F9:B0:0C:D8:BA:B2:B6:3B:C8:04:54:97:24:6A:D6:CF
Authority key identifier: 9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1
Certificate issuer:       /CN=9dd989234f75ae04de30653ae14139f9dc609ac1
Certificate serial:       0185766949F3CC4E00A2A6A4A60C8AFB867A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.mft
Manifest number:          0BFF
Signing time:             Tue 03 Jan 2023 06:54:49 +0000
Manifest this update:     Tue 03 Jan 2023 06:54:49 +0000
Manifest next update:     Wed 04 Jan 2023 06:54:49 +0000
Files and hashes:         1: 08pzSJ0yRlbLocjU9RaEBkXr-YI.roa (hash: kIBjdTS0Jvo8aVyJyZV5PArzx8XIBQzbJREsncVK428=)
                          2: _SvF9NFwbvHPrGX88ou_QvdTalw.roa (hash: yc3LSCvviL35tXAqYmMcF8ZB3zK+K+3+o8yYvGZ3k0o=)
                          3: ghq002pnw9bzRxlaFRvvVeYvtG8.roa (hash: 4ysJ65r+odnNlWRVwUBOV8IlfrhFZb7Ot+wYzFOtpik=)
                          4: jYVWXGHP53sZLwzst1ignWjC2KU.roa (hash: d5H+axipj5hQShQMFLQfKPHHhicjG7x6PxpR+fKwxDQ=)
                          5: ndmJI091rgTeMGU64UE5-dxgmsE.crl (hash: SSbSrLybxLCszNFpeL+CekRC+LLlllqQ0GQs+f4VgzM=)
                          6: y_3V5aVVo_E-2RU57svRJywDUV4.roa (hash: pHLwiCbXWcggUGTUQtfIGqrP6qKyyR1QPLu+Fa6jCao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:76:69:49:f3:cc:4e:00:a2:a6:a4:a6:0c:8a:fb:86:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd989234f75ae04de30653ae14139f9dc609ac1
        Validity
            Not Before: Jan  3 06:54:49 2023 GMT
            Not After : Jan  4 06:54:49 2023 GMT
        Subject: CN=24bc5cfef9b00cd8bab2b63bc8045497246ad6cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:ac:f4:57:9b:2d:b4:ed:9d:eb:8d:81:65:
                    0c:39:17:ca:54:1b:b1:21:b0:a5:55:c3:8b:bb:47:
                    6b:50:52:6c:d8:f6:7f:0f:6c:45:50:13:00:56:f0:
                    7b:8d:f2:6d:12:b5:60:cf:76:7b:8e:fd:ea:32:65:
                    54:e8:b1:c2:80:c8:07:60:5b:6f:d7:af:41:ff:57:
                    93:8a:6d:ca:a6:83:7c:56:0a:c2:83:5d:70:3b:d4:
                    bc:0f:42:3e:92:9e:cd:6e:e2:59:b9:f3:94:5d:2c:
                    77:ed:dc:88:ff:7b:07:ad:50:d5:83:e9:66:0b:17:
                    f1:ff:0c:7b:b0:02:25:de:3c:b7:5e:f2:91:e1:e0:
                    d7:1f:33:a4:02:f1:dd:71:c0:e9:31:d9:d8:ca:fb:
                    0b:5c:c1:04:55:14:33:63:8c:98:9d:6f:56:62:fc:
                    7b:10:2a:01:8d:26:13:de:dd:e9:66:02:dd:12:f5:
                    59:c0:41:6d:e8:93:dc:03:7a:da:11:3d:63:e6:df:
                    3f:fa:90:e4:7e:29:1d:fa:06:78:d6:da:09:6d:a3:
                    f9:41:6f:32:88:f1:f3:3e:21:e3:bb:8a:8c:e2:01:
                    da:5c:dc:15:22:a8:1f:ba:29:08:ff:89:65:df:63:
                    dd:ba:b8:2f:62:f6:e0:83:fd:2c:e9:0c:01:78:40:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:BC:5C:FE:F9:B0:0C:D8:BA:B2:B6:3B:C8:04:54:97:24:6A:D6:CF
            X509v3 Authority Key Identifier:
                keyid:9D:D9:89:23:4F:75:AE:04:DE:30:65:3A:E1:41:39:F9:DC:60:9A:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmJI091rgTeMGU64UE5-dxgmsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ea6a7d-c99e-47e7-9b8c-5f005e3f12ed/1/ndmJI091rgTeMGU64UE5-dxgmsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e5:19:d2:91:22:a4:60:9f:60:4f:4a:b9:34:97:73:e8:9e:
         13:3d:13:54:dc:3b:9f:b7:6b:79:e1:2b:4e:fc:9f:ce:49:46:
         98:38:07:7b:f8:63:a7:08:b5:98:fb:ea:cb:0a:91:08:d9:57:
         e3:51:37:47:6e:59:68:9a:8d:56:a7:a3:cd:d0:96:4f:a0:43:
         ea:73:1d:79:a7:8b:c9:9e:8a:6c:45:94:51:58:2b:49:40:b7:
         f7:90:97:96:83:4a:6a:95:0d:62:7b:80:3c:c0:84:2e:d6:07:
         5e:d8:7c:04:08:ba:0a:36:78:e3:e7:be:bd:5e:ca:32:a7:14:
         48:f8:e4:1c:41:b2:8a:f1:b9:e3:71:61:9b:8d:da:85:e8:70:
         96:79:ce:a9:b6:29:cb:1e:fd:6e:77:ce:69:80:3f:b5:c5:77:
         da:6b:15:32:b3:b5:80:e6:3c:8a:af:90:f8:5e:ee:90:d6:eb:
         d1:db:45:76:31:7d:00:59:5f:44:60:81:16:0f:23:35:67:4f:
         24:8a:83:a8:6d:0d:cd:82:1b:64:69:fd:94:04:d0:86:7c:04:
         3d:a0:54:5e:da:ed:b6:5d:fb:74:08:bb:02:7f:1d:64:4c:d6:
         27:3b:26:d8:09:7e:d5:88:58:df:81:0d:12:78:fc:af:95:6e:
         00:4c:b5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYV2aUnzzE4AoqakpgyK+4Z6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZDk4OTIzNGY3NWFlMDRkZTMwNjUzYWUxNDEzOWY5ZGM2
MDlhYzEwHhcNMjMwMTAzMDY1NDQ5WhcNMjMwMTA0MDY1NDQ5WjAzMTEwLwYDVQQD
EygyNGJjNWNmZWY5YjAwY2Q4YmFiMmI2M2JjODA0NTQ5NzI0NmFkNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhes9FebLbTtneuNgWUMORfKVBux
IbClVcOLu0drUFJs2PZ/D2xFUBMAVvB7jfJtErVgz3Z7jv3qMmVU6LHCgMgHYFtv
169B/1eTim3KpoN8VgrCg11wO9S8D0I+kp7NbuJZufOUXSx37dyI/3sHrVDVg+lm
Cxfx/wx7sAIl3jy3XvKR4eDXHzOkAvHdccDpMdnYyvsLXMEEVRQzY4yYnW9WYvx7
ECoBjSYT3t3pZgLdEvVZwEFt6JPcA3raET1j5t8/+pDkfikd+gZ41toJbaP5QW8y
iPHzPiHju4qM4gHaXNwVIqgfuikI/4ll32PdurgvYvbgg/0s6QwBeEBbpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS8XP75sAzYurK2O8gEVJckatbPMB8GA1UdIwQY
MBaAFJ3ZiSNPda4E3jBlOuFBOfncYJrBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmRtSkkwOTFyZ1RlTUdVNjRVRTUtZHhnbXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lYTZhN2QtYzk5ZS00N2U3LTliOGMt
NWYwMDVlM2YxMmVkLzEvbmRtSkkwOTFyZ1RlTUdVNjRVRTUtZHhnbXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lYTZhN2QtYzk5ZS00N2U3LTliOGMtNWYwMDVlM2YxMmVk
LzEvbmRtSkkwOTFyZ1RlTUdVNjRVRTUtZHhnbXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuUZ0pEi
pGCfYE9KuTSXc+ieEz0TVNw7n7dreeErTvyfzklGmDgHe/hjpwi1mPvqywqRCNlX
41E3R25ZaJqNVqejzdCWT6BD6nMdeaeLyZ6KbEWUUVgrSUC395CXloNKapUNYnuA
PMCELtYHXth8BAi6CjZ44+e+vV7KMqcUSPjkHEGyivG543Fhm43ahehwlnnOqbYp
yx79bnfOaYA/tcV32msVMrO1gOY8iq+Q+F7ukNbr0dtFdjF9AFlfRGCBFg8jNWdP
JIqDqG0NzYIbZGn9lATQhnwEPaBUXtrttl37dAi7An8dZEzWJzsm2Al+1YhY34EN
Enj8r5VuAEy12A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:43 2024 by rpki-client on console-fra.rpki-client.org