Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/38ea0c-eb50-441e-a74c-47b36f83ea9a/1/ad0tLRBwo839ZQ1aTSjCEu4qheA.mft
File:                     ad0tLRBwo839ZQ1aTSjCEu4qheA.mft (raw, json)
Hash identifier:          SeB7tZmnpYN/HzdWH3aYo0aYoxXouKlQpPRq9WIjkgo=
Subject key identifier:   1A:05:09:84:BF:38:DD:A6:85:F4:4B:91:23:D9:B6:D7:2F:2B:8B:A1
Authority key identifier: 69:DD:2D:2D:10:70:A3:CD:FD:65:0D:5A:4D:28:C2:12:EE:2A:85:E0
Certificate issuer:       /CN=69dd2d2d1070a3cdfd650d5a4d28c212ee2a85e0
Certificate serial:       0189CE5DCA71B6592086E53BB46891DAD3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ad0tLRBwo839ZQ1aTSjCEu4qheA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/38ea0c-eb50-441e-a74c-47b36f83ea9a/1/ad0tLRBwo839ZQ1aTSjCEu4qheA.mft
Manifest number:          0477
Signing time:             Mon 07 Aug 2023 05:00:00 +0000
Manifest this update:     Mon 07 Aug 2023 05:00:00 +0000
Manifest next update:     Tue 08 Aug 2023 05:00:00 +0000
Files and hashes:         1: ad0tLRBwo839ZQ1aTSjCEu4qheA.crl (hash: mNir5t8aqM5Ffw8eqkK5ZqBORFiFim4hFXTE6ZJi9Og=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ce:5d:ca:71:b6:59:20:86:e5:3b:b4:68:91:da:d3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dd2d2d1070a3cdfd650d5a4d28c212ee2a85e0
        Validity
            Not Before: Aug  7 05:00:00 2023 GMT
            Not After : Aug  8 05:00:00 2023 GMT
        Subject: CN=1a050984bf38dda685f44b9123d9b6d72f2b8ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:99:28:69:cc:2e:58:73:14:7e:1a:2a:fd:
                    62:8d:ad:b1:21:66:cc:30:23:aa:df:83:e6:8b:11:
                    80:02:97:7a:22:23:69:22:2e:54:31:62:c9:99:c0:
                    11:a7:7b:6c:bb:41:10:6f:5e:9d:e7:56:7b:5b:9b:
                    5a:21:1b:81:33:0f:9a:2d:b7:50:af:e5:a0:2d:70:
                    3c:2f:82:6f:e4:12:4a:f7:0f:1c:47:ef:8d:4d:4a:
                    01:c7:3a:36:b5:8c:3a:76:f2:0c:ed:3f:a7:09:97:
                    fd:1c:cd:11:24:c8:1f:b9:fc:71:9a:d5:d8:ae:8b:
                    43:81:31:5d:e2:f1:b6:b6:f9:87:10:19:96:e3:fb:
                    d9:4e:45:76:12:56:e5:21:77:1f:5e:66:b3:87:43:
                    19:11:d7:d8:60:72:46:e7:66:7e:c8:cf:18:ce:29:
                    09:d5:05:91:9c:e3:6d:d9:a2:35:c6:a9:0a:b0:c0:
                    49:f7:dd:fc:fa:c1:d6:0d:77:a9:1b:9a:88:2a:7f:
                    d5:2b:81:85:93:a7:6e:a8:c7:44:54:00:81:e8:5e:
                    ed:fa:84:83:42:17:6b:07:b2:75:41:fa:67:37:90:
                    3a:92:3a:f7:fc:5d:71:b4:1c:bd:dd:6f:14:7d:c5:
                    58:8d:c4:53:cc:d3:84:d7:1e:22:ba:7a:7b:f8:bc:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:09:84:BF:38:DD:A6:85:F4:4B:91:23:D9:B6:D7:2F:2B:8B:A1
            X509v3 Authority Key Identifier:
                keyid:69:DD:2D:2D:10:70:A3:CD:FD:65:0D:5A:4D:28:C2:12:EE:2A:85:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad0tLRBwo839ZQ1aTSjCEu4qheA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/38ea0c-eb50-441e-a74c-47b36f83ea9a/1/ad0tLRBwo839ZQ1aTSjCEu4qheA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/38ea0c-eb50-441e-a74c-47b36f83ea9a/1/ad0tLRBwo839ZQ1aTSjCEu4qheA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:49:86:ba:3a:c1:f5:45:34:2b:b9:ec:21:4a:5e:40:e9:e6:
         ce:79:c7:f6:86:2f:22:4f:8f:d9:05:63:da:bc:05:52:46:aa:
         81:8a:5b:c7:fe:19:ac:be:1b:0d:39:8c:f6:b7:2f:08:1c:fe:
         ec:24:07:b1:77:51:69:b1:c7:6f:71:4b:18:50:95:5a:7b:54:
         06:6e:9f:de:be:31:63:36:d5:58:b4:2b:fa:31:77:77:99:59:
         df:3d:01:fb:bc:f1:9d:ef:32:53:72:f7:16:ea:20:a7:ec:30:
         43:94:a7:0b:f4:f9:e6:32:e1:d7:5d:27:78:53:32:c7:58:db:
         a9:b1:f6:ed:d6:c0:77:cd:20:dd:53:b1:43:82:4f:1b:32:ad:
         96:fe:4f:f3:4e:5b:07:8e:04:10:ac:fd:19:39:35:47:9d:7f:
         3c:06:e2:06:60:c6:df:d6:ed:7d:58:17:d3:3d:a5:72:1b:57:
         ce:6e:c3:13:e9:ac:37:4e:89:62:75:87:d1:85:3a:69:3c:41:
         b4:c0:2d:6c:ca:23:50:89:72:2d:f7:d2:c5:95:54:4d:1c:f2:
         c6:90:0a:8f:3b:54:65:26:b8:76:6c:62:c8:81:37:01:c2:30:
         35:a3:2a:78:a4:11:0f:9c:f8:2f:8c:c6:f1:0a:7c:0f:b5:06:
         0c:d4:ad:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYnOXcpxtlkghuU7tGiR2tOuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZGQyZDJkMTA3MGEzY2RmZDY1MGQ1YTRkMjhjMjEyZWUy
YTg1ZTAwHhcNMjMwODA3MDUwMDAwWhcNMjMwODA4MDUwMDAwWjAzMTEwLwYDVQQD
EygxYTA1MDk4NGJmMzhkZGE2ODVmNDRiOTEyM2Q5YjZkNzJmMmI4YmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7mZKGnMLlhzFH4aKv1ija2xIWbM
MCOq34PmixGAApd6IiNpIi5UMWLJmcARp3tsu0EQb16d51Z7W5taIRuBMw+aLbdQ
r+WgLXA8L4Jv5BJK9w8cR++NTUoBxzo2tYw6dvIM7T+nCZf9HM0RJMgfufxxmtXY
rotDgTFd4vG2tvmHEBmW4/vZTkV2ElblIXcfXmazh0MZEdfYYHJG52Z+yM8YzikJ
1QWRnONt2aI1xqkKsMBJ9938+sHWDXepG5qIKn/VK4GFk6duqMdEVACB6F7t+oSD
QhdrB7J1QfpnN5A6kjr3/F1xtBy93W8UfcVYjcRTzNOE1x4iunp7+LxsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoFCYS/ON2mhfRLkSPZttcvK4uhMB8GA1UdIwQY
MBaAFGndLS0QcKPN/WUNWk0owhLuKoXgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWQwdExSQndvODM5WlExYVRTakNFdTRxaGVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zOGVhMGMtZWI1MC00NDFlLWE3NGMt
NDdiMzZmODNlYTlhLzEvYWQwdExSQndvODM5WlExYVRTakNFdTRxaGVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zOGVhMGMtZWI1MC00NDFlLWE3NGMtNDdiMzZmODNlYTlh
LzEvYWQwdExSQndvODM5WlExYVRTakNFdTRxaGVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEmGujrB
9UU0K7nsIUpeQOnmznnH9oYvIk+P2QVj2rwFUkaqgYpbx/4ZrL4bDTmM9rcvCBz+
7CQHsXdRabHHb3FLGFCVWntUBm6f3r4xYzbVWLQr+jF3d5lZ3z0B+7zxne8yU3L3
Fuogp+wwQ5SnC/T55jLh110neFMyx1jbqbH27dbAd80g3VOxQ4JPGzKtlv5P805b
B44EEKz9GTk1R51/PAbiBmDG39btfVgX0z2lchtXzm7DE+msN06JYnWH0YU6aTxB
tMAtbMojUIlyLffSxZVUTRzyxpAKjztUZSa4dmxiyIE3AcIwNaMqeKQRD5z4L4zG
8Qp8D7UGDNStXA==
-----END CERTIFICATE-----
Generated at Mon Aug 7 10:35:27 2023 by rpki-client on console-ams.rpki-client.org