Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft
File:                     SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft (raw, json)
Hash identifier:          G7VZyu732zySa/UmBK3azSvM6b6zhPqTyW3Mmj53E9U=
Subject key identifier:   BA:11:EF:E4:C4:77:14:57:BF:50:8E:BE:B2:7A:70:29:E0:B5:BB:73
Authority key identifier: 4A:64:D3:2C:D2:61:37:BE:9C:02:11:01:F9:5A:75:34:D5:FA:53:10
Certificate issuer:       /CN=4a64d32cd26137be9c021101f95a7534d5fa5310
Certificate serial:       018DAF6E69AFE4A1810E7E10E3C63BD5CF25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmTTLNJhN76cAhEB-Vp1NNX6UxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft
Manifest number:          105F
Signing time:             Fri 16 Feb 2024 01:01:05 +0000
Manifest this update:     Fri 16 Feb 2024 01:01:05 +0000
Manifest next update:     Sat 17 Feb 2024 01:01:05 +0000
Files and hashes:         1: SmTTLNJhN76cAhEB-Vp1NNX6UxA.crl (hash: MBK14aAOsXK+bZTlMmmD/2D8ZKdAFftEsnB4fh3btU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:af:6e:69:af:e4:a1:81:0e:7e:10:e3:c6:3b:d5:cf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a64d32cd26137be9c021101f95a7534d5fa5310
        Validity
            Not Before: Feb 16 01:01:05 2024 GMT
            Not After : Feb 17 01:01:05 2024 GMT
        Subject: CN=ba11efe4c4771457bf508ebeb27a7029e0b5bb73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:23:0b:cb:b7:8e:6f:8b:d5:9f:35:4b:a9:4f:
                    44:fa:84:7f:e0:d9:d3:fb:92:f8:59:f6:4d:49:5c:
                    12:a4:05:85:6a:ee:e4:4e:04:ec:cf:d2:09:87:98:
                    38:00:6e:ab:20:fa:56:b8:68:bc:73:75:80:41:06:
                    e5:b8:90:07:de:bb:ea:da:21:d5:35:de:11:74:72:
                    a2:f9:f7:10:56:15:cd:62:a1:e9:e9:a2:32:ed:a7:
                    45:3e:9f:a5:f8:b3:ac:a0:d2:3f:ff:64:d9:32:5a:
                    83:a6:2f:49:ec:59:a7:84:b4:3a:4d:4c:83:cb:53:
                    aa:f1:6a:92:ac:74:c5:2b:56:06:86:b3:48:70:6b:
                    30:ee:9e:fc:1c:d8:34:14:e7:01:f4:fd:63:93:9e:
                    e2:88:dd:1b:c5:33:ae:33:c4:3f:b1:64:30:35:71:
                    4f:de:ab:8a:a7:bd:78:4c:ff:fd:92:79:9e:dd:97:
                    d6:14:88:9a:31:23:74:0a:ef:48:1e:d5:89:02:cc:
                    34:51:72:12:82:31:41:3f:82:64:de:5a:45:ee:52:
                    c4:e4:69:65:74:79:46:2c:e7:7b:08:05:ce:89:be:
                    64:95:49:c3:7c:7a:74:ac:85:5d:b5:3a:46:ea:31:
                    28:fc:c6:c9:8e:d3:ff:50:85:15:fd:fa:1c:1b:ec:
                    98:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:11:EF:E4:C4:77:14:57:BF:50:8E:BE:B2:7A:70:29:E0:B5:BB:73
            X509v3 Authority Key Identifier:
                keyid:4A:64:D3:2C:D2:61:37:BE:9C:02:11:01:F9:5A:75:34:D5:FA:53:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmTTLNJhN76cAhEB-Vp1NNX6UxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:09:fb:31:20:ba:96:57:b5:f6:06:c8:7c:e8:f5:39:28:38:
         3e:4d:1c:aa:73:9c:4c:d6:3c:05:03:ac:41:36:ef:fe:03:87:
         a8:87:f1:ea:99:d0:15:19:c4:c9:a7:6a:c0:0a:9b:6d:62:c7:
         f3:1b:5f:7d:aa:61:d4:1d:8d:d4:a7:58:14:fa:55:cb:57:ec:
         e1:ec:2c:aa:f4:d4:45:ae:2d:5d:f0:20:75:fa:09:eb:47:55:
         bd:f6:d7:38:b8:fd:c4:69:09:30:2a:e5:da:13:4f:a2:a8:e1:
         3d:7e:65:e2:46:0a:fa:d6:50:f8:92:b9:49:e9:75:81:44:a9:
         16:b5:37:4f:e8:1e:10:fe:6b:fc:cd:5d:84:a8:b5:4b:f1:d0:
         88:64:94:4f:c3:ab:a5:0d:2e:fc:04:fb:39:49:c6:48:3d:b4:
         a2:b9:cc:13:fc:f1:65:8e:62:14:67:c4:ac:b0:de:2d:62:04:
         9a:77:00:cc:8b:80:5d:bb:57:25:6c:4b:c8:f1:ee:6c:95:16:
         bb:fa:15:a3:a3:7f:d6:68:25:7c:03:49:97:3f:d1:35:46:3e:
         a2:d3:02:72:f0:60:b2:b4:89:ef:0e:94:86:e0:5f:3b:a9:df:
         46:ed:fe:72:6c:01:b8:d4:4a:31:6e:f1:0c:93:e9:34:bb:82:
         66:8e:61:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2vbmmv5KGBDn4Q48Y71c8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjRkMzJjZDI2MTM3YmU5YzAyMTEwMWY5NWE3NTM0ZDVm
YTUzMTAwHhcNMjQwMjE2MDEwMTA1WhcNMjQwMjE3MDEwMTA1WjAzMTEwLwYDVQQD
EyhiYTExZWZlNGM0NzcxNDU3YmY1MDhlYmViMjdhNzAyOWUwYjViYjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSMLy7eOb4vVnzVLqU9E+oR/4NnT
+5L4WfZNSVwSpAWFau7kTgTsz9IJh5g4AG6rIPpWuGi8c3WAQQbluJAH3rvq2iHV
Nd4RdHKi+fcQVhXNYqHp6aIy7adFPp+l+LOsoNI//2TZMlqDpi9J7FmnhLQ6TUyD
y1Oq8WqSrHTFK1YGhrNIcGsw7p78HNg0FOcB9P1jk57iiN0bxTOuM8Q/sWQwNXFP
3quKp714TP/9knme3ZfWFIiaMSN0Cu9IHtWJAsw0UXISgjFBP4Jk3lpF7lLE5Gll
dHlGLOd7CAXOib5klUnDfHp0rIVdtTpG6jEo/MbJjtP/UIUV/focG+yYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoR7+TEdxRXv1COvrJ6cCngtbtzMB8GA1UdIwQY
MBaAFEpk0yzSYTe+nAIRAfladTTV+lMQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21UVExOSmhONzZjQWhFQi1WcDFOTlg2VXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85NTlhMTEtOWVmZi00NmMwLWE1YjUt
OTRhMmQ1ZmUxNGYyLzEvU21UVExOSmhONzZjQWhFQi1WcDFOTlg2VXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85NTlhMTEtOWVmZi00NmMwLWE1YjUtOTRhMmQ1ZmUxNGYy
LzEvU21UVExOSmhONzZjQWhFQi1WcDFOTlg2VXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3gn7MSC6
lle19gbIfOj1OSg4Pk0cqnOcTNY8BQOsQTbv/gOHqIfx6pnQFRnEyadqwAqbbWLH
8xtffaph1B2N1KdYFPpVy1fs4ewsqvTURa4tXfAgdfoJ60dVvfbXOLj9xGkJMCrl
2hNPoqjhPX5l4kYK+tZQ+JK5Sel1gUSpFrU3T+geEP5r/M1dhKi1S/HQiGSUT8Or
pQ0u/AT7OUnGSD20ornME/zxZY5iFGfErLDeLWIEmncAzIuAXbtXJWxLyPHubJUW
u/oVo6N/1mglfANJlz/RNUY+otMCcvBgsrSJ7w6UhuBfO6nfRu3+cmwBuNRKMW7x
DJPpNLuCZo5hKA==
-----END CERTIFICATE-----