Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.mft
File:                     YVREgdO-f8pegKVkrZPBuKL2Nvg.mft (raw, json)
Hash identifier:          VbWnjMF06iglLyg70s2QoZY5g56kMptiUCI1CQsANIk=
Subject key identifier:   17:78:A1:0E:02:30:95:DF:F2:C3:50:0A:91:E7:D4:15:F0:A8:81:94
Authority key identifier: 61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8
Certificate issuer:       /CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
Certificate serial:       018E5A72C682C73EAC40BD0BDE3F07CFA70D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.mft
Manifest number:          08D2
Signing time:             Wed 20 Mar 2024 06:00:55 +0000
Manifest this update:     Wed 20 Mar 2024 06:00:55 +0000
Manifest next update:     Thu 21 Mar 2024 06:00:55 +0000
Files and hashes:         1: YVREgdO-f8pegKVkrZPBuKL2Nvg.crl (hash: Ca0AMrItlLmGLy7jHgO4WglIZLgBnhhQwnHh7QElag0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:5a:72:c6:82:c7:3e:ac:40:bd:0b:de:3f:07:cf:a7:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61544481d3be7fca5e80a564ad93c1b8a2f636f8
        Validity
            Not Before: Mar 20 06:00:55 2024 GMT
            Not After : Mar 21 06:00:55 2024 GMT
        Subject: CN=1778a10e023095dff2c3500a91e7d415f0a88194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:67:40:88:d0:6c:47:81:c5:62:19:5a:f1:
                    23:6d:cc:90:d3:33:57:8d:98:69:dc:47:28:ee:20:
                    99:61:c3:ff:14:1e:ce:a3:84:3b:62:99:1c:ab:74:
                    93:33:b8:51:fd:41:97:39:ac:27:96:db:fa:79:bf:
                    b2:4f:b5:e2:8a:24:7c:82:f7:10:cb:ac:15:55:d2:
                    fc:b7:b3:bd:a9:27:27:c2:10:b7:34:fa:19:d0:6e:
                    63:1e:a4:60:73:64:ad:08:80:6e:6f:6e:78:98:ba:
                    4f:55:2a:ca:a9:e0:97:d6:19:4a:39:ec:d0:9a:dd:
                    7e:c5:56:a8:f7:9c:4f:ee:e6:aa:cb:8a:e8:e1:3d:
                    4a:80:c5:1b:94:73:66:00:1a:96:1e:5e:ab:c1:0c:
                    e6:2c:8f:a4:ee:08:c5:53:d3:ee:22:49:29:84:a4:
                    2d:ea:5f:33:0b:66:55:03:75:95:8b:46:ce:17:02:
                    1f:4d:4d:c6:fa:19:bb:54:4d:ea:cc:c1:b6:b4:fb:
                    bf:da:01:9d:8b:a1:b9:fd:42:36:e4:db:83:4b:0f:
                    cd:84:4f:1e:8d:8a:84:4f:c8:15:67:e2:5d:da:9c:
                    6d:67:8a:3b:25:94:c8:08:73:18:2d:58:78:a0:ec:
                    97:b0:51:09:f7:fb:eb:2f:38:32:4d:ea:72:12:bc:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:78:A1:0E:02:30:95:DF:F2:C3:50:0A:91:E7:D4:15:F0:A8:81:94
            X509v3 Authority Key Identifier:
                keyid:61:54:44:81:D3:BE:7F:CA:5E:80:A5:64:AD:93:C1:B8:A2:F6:36:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVREgdO-f8pegKVkrZPBuKL2Nvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ecec37-30b8-4e19-bbb2-f67e175d4ba7/1/YVREgdO-f8pegKVkrZPBuKL2Nvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c4:4a:6b:9c:9b:4e:53:c4:02:0c:31:ee:18:d5:1c:95:67:
         bd:26:7f:33:d9:02:44:ff:a2:ce:3e:ba:5f:b2:53:b8:2d:b6:
         e6:8d:70:bf:72:64:35:fb:96:e5:40:58:19:34:13:97:e8:2c:
         15:ce:56:ba:46:7c:77:6f:06:09:0e:a2:2b:e5:98:87:ac:a8:
         26:4a:12:54:ff:7a:65:9a:cf:bc:d3:5c:d5:94:a6:f9:ec:aa:
         4e:a2:ba:74:67:2d:22:58:0f:32:e8:ac:6c:d0:40:cc:c0:e5:
         a4:76:7a:07:b6:04:e2:03:5c:3e:88:b9:d8:38:91:10:cb:13:
         07:2f:29:65:5f:c7:ee:26:db:e0:0c:b8:8a:94:28:e6:8e:c6:
         fb:90:4e:68:ae:be:0b:c4:3c:52:27:a7:67:4b:c3:3e:d0:79:
         5f:c8:64:b5:e3:ae:56:64:a0:d5:8f:73:e7:02:28:b9:c5:d3:
         2f:cc:af:d3:8b:6c:05:c0:e7:04:ea:e3:7a:99:89:fa:cb:6a:
         71:3e:4c:a6:cf:9d:af:d6:96:ea:14:dc:e7:40:53:c6:a3:ad:
         52:20:42:a4:17:54:01:38:d5:4a:23:dc:00:8e:39:33:20:45:
         59:93:c4:0f:79:fa:a5:c5:b3:0c:2f:66:6a:62:49:36:ec:7c:
         f1:b5:e2:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY5acsaCxz6sQL0L3j8Hz6cNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNTQ0NDgxZDNiZTdmY2E1ZTgwYTU2NGFkOTNjMWI4YTJm
NjM2ZjgwHhcNMjQwMzIwMDYwMDU1WhcNMjQwMzIxMDYwMDU1WjAzMTEwLwYDVQQD
EygxNzc4YTEwZTAyMzA5NWRmZjJjMzUwMGE5MWU3ZDQxNWYwYTg4MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7BnQIjQbEeBxWIZWvEjbcyQ0zNX
jZhp3Eco7iCZYcP/FB7Oo4Q7Ypkcq3STM7hR/UGXOawnltv6eb+yT7XiiiR8gvcQ
y6wVVdL8t7O9qScnwhC3NPoZ0G5jHqRgc2StCIBub254mLpPVSrKqeCX1hlKOezQ
mt1+xVao95xP7uaqy4ro4T1KgMUblHNmABqWHl6rwQzmLI+k7gjFU9PuIkkphKQt
6l8zC2ZVA3WVi0bOFwIfTU3G+hm7VE3qzMG2tPu/2gGdi6G5/UI25NuDSw/NhE8e
jYqET8gVZ+Jd2pxtZ4o7JZTICHMYLVh4oOyXsFEJ9/vrLzgyTepyErzd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBd4oQ4CMJXf8sNQCpHn1BXwqIGUMB8GA1UdIwQY
MBaAFGFURIHTvn/KXoClZK2Twbii9jb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVZSRWdkTy1mOHBlZ0tWa3JaUEJ1S0wyTnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lY2VjMzctMzBiOC00ZTE5LWJiYjIt
ZjY3ZTE3NWQ0YmE3LzEvWVZSRWdkTy1mOHBlZ0tWa3JaUEJ1S0wyTnZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lY2VjMzctMzBiOC00ZTE5LWJiYjItZjY3ZTE3NWQ0YmE3
LzEvWVZSRWdkTy1mOHBlZ0tWa3JaUEJ1S0wyTnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8RKa5yb
TlPEAgwx7hjVHJVnvSZ/M9kCRP+izj66X7JTuC225o1wv3JkNfuW5UBYGTQTl+gs
Fc5WukZ8d28GCQ6iK+WYh6yoJkoSVP96ZZrPvNNc1ZSm+eyqTqK6dGctIlgPMuis
bNBAzMDlpHZ6B7YE4gNcPoi52DiREMsTBy8pZV/H7ibb4Ay4ipQo5o7G+5BOaK6+
C8Q8UienZ0vDPtB5X8hkteOuVmSg1Y9z5wIoucXTL8yv04tsBcDnBOrjepmJ+stq
cT5Mps+dr9aW6hTc50BTxqOtUiBCpBdUATjVSiPcAI45MyBFWZPED3n6pcWzDC9m
amJJNux88bXifg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:48 2024 by rpki-client on console-fra.rpki-client.org