Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/230232-143c-4aef-86dd-367472ebd1dc/1/oDD2TOq1ttqltszfXx3vnNevm-4.mft
File:                     oDD2TOq1ttqltszfXx3vnNevm-4.mft (raw, json)
Hash identifier:          vII0Hwk6hnQTTzZVvqGYe68yhwicPF9BRw674oY8eKw=
Subject key identifier:   9E:7E:DA:63:6B:43:50:94:35:85:31:80:22:14:70:26:3F:A2:67:A9
Authority key identifier: A0:30:F6:4C:EA:B5:B6:DA:A5:B6:CC:DF:5F:1D:EF:9C:D7:AF:9B:EE
Certificate issuer:       /CN=a030f64ceab5b6daa5b6ccdf5f1def9cd7af9bee
Certificate serial:       019132153A70C16EE114863BA42A3C026765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oDD2TOq1ttqltszfXx3vnNevm-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/230232-143c-4aef-86dd-367472ebd1dc/1/oDD2TOq1ttqltszfXx3vnNevm-4.mft
Manifest number:          03BD
Signing time:             Thu 08 Aug 2024 13:02:17 +0000
Manifest this update:     Thu 08 Aug 2024 13:02:17 +0000
Manifest next update:     Fri 09 Aug 2024 13:02:17 +0000
Files and hashes:         1: oDD2TOq1ttqltszfXx3vnNevm-4.crl (hash: h/mCmVY7GHMC0Phjxy1p+pgEdVgoz/diSPs3GZpNYss=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:32:15:3a:70:c1:6e:e1:14:86:3b:a4:2a:3c:02:67:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a030f64ceab5b6daa5b6ccdf5f1def9cd7af9bee
        Validity
            Not Before: Aug  8 13:02:17 2024 GMT
            Not After : Aug  9 13:02:17 2024 GMT
        Subject: CN=9e7eda636b43509435853180221470263fa267a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3b:f3:87:10:be:e6:3b:6b:73:1e:61:b9:e9:
                    9c:43:c2:66:da:1b:d2:e5:36:e7:81:b5:2b:15:37:
                    a9:81:43:cc:f8:45:6b:59:30:63:0b:27:73:d8:24:
                    b1:70:e9:ee:d1:3e:1a:8a:f0:3a:b6:80:4f:f9:54:
                    e7:19:ec:7e:44:22:ac:79:61:02:57:6f:a2:5b:5b:
                    3d:fa:d3:f0:e5:ca:e2:c6:ba:da:0f:a2:f7:25:0e:
                    0e:82:f7:df:f3:b6:20:72:f6:e9:56:78:34:46:0f:
                    76:27:6c:68:ff:b3:fe:13:c4:b7:30:b2:77:37:7f:
                    f5:da:b2:93:bb:11:1c:1f:b1:da:4d:a5:ee:c7:9a:
                    29:07:97:3d:54:33:1c:5d:09:15:9e:fe:00:c7:f1:
                    3e:af:f7:00:9b:b6:1f:12:43:c2:60:f7:c8:ce:a3:
                    bf:57:69:3d:2f:58:da:33:90:fb:a7:5b:b4:45:2a:
                    31:ea:5d:ac:de:92:e1:aa:59:6a:15:04:f2:15:d9:
                    c3:2f:70:49:c5:8c:d9:69:db:0b:2e:23:4a:a8:95:
                    a5:1d:50:b4:0a:c2:4f:73:54:fb:06:13:3a:d2:68:
                    4f:dd:01:2e:5b:3b:6b:10:ab:80:80:93:5a:32:3e:
                    5c:e0:83:8a:bb:bd:4b:3d:4d:02:2e:3d:71:6d:de:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7E:DA:63:6B:43:50:94:35:85:31:80:22:14:70:26:3F:A2:67:A9
            X509v3 Authority Key Identifier:
                keyid:A0:30:F6:4C:EA:B5:B6:DA:A5:B6:CC:DF:5F:1D:EF:9C:D7:AF:9B:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDD2TOq1ttqltszfXx3vnNevm-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/230232-143c-4aef-86dd-367472ebd1dc/1/oDD2TOq1ttqltszfXx3vnNevm-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/230232-143c-4aef-86dd-367472ebd1dc/1/oDD2TOq1ttqltszfXx3vnNevm-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:5a:c4:cb:b8:93:3e:b9:fd:84:03:47:6a:53:d8:bd:17:84:
         81:45:d4:eb:90:ea:c1:75:1d:3c:d4:21:5a:ae:14:be:e1:b1:
         d5:8f:d3:e1:c7:6a:7a:6d:72:f3:d1:1a:de:b5:41:cb:b1:70:
         0b:4c:ff:45:3a:95:bf:f0:21:53:01:8a:d7:9d:73:bd:b7:62:
         01:c7:59:f7:7f:5e:c7:39:82:cd:71:0b:8f:27:e3:4d:e0:e0:
         0e:1d:fb:b9:a8:65:b8:dc:6f:5b:4b:42:6e:36:a3:4a:02:7e:
         53:fa:b4:11:fe:19:2e:be:14:d6:f3:09:33:ea:16:8b:93:2d:
         dc:a1:0d:04:07:8f:80:10:15:a5:6d:d0:55:82:4d:93:8a:fc:
         c5:97:64:3a:18:59:78:2d:54:ae:31:6a:53:d2:6e:8f:8d:47:
         be:35:12:c0:16:f4:bc:7f:18:12:37:85:64:10:bc:5d:f0:8f:
         49:2f:06:c3:b3:92:b4:dd:1b:64:33:b3:b5:05:b3:f2:f8:97:
         c1:92:41:19:b1:87:34:ca:f5:f3:53:55:31:25:a3:72:f7:ac:
         6f:61:e8:bd:fa:42:dd:86:39:ad:db:6a:c4:42:2f:05:41:83:
         b8:b3:c8:a6:fb:61:81:07:e1:60:5d:f6:4f:47:2b:0f:38:3a:
         43:b5:df:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZEyFTpwwW7hFIY7pCo8AmdlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMzBmNjRjZWFiNWI2ZGFhNWI2Y2NkZjVmMWRlZjljZDdh
ZjliZWUwHhcNMjQwODA4MTMwMjE3WhcNMjQwODA5MTMwMjE3WjAzMTEwLwYDVQQD
Eyg5ZTdlZGE2MzZiNDM1MDk0MzU4NTMxODAyMjE0NzAyNjNmYTI2N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjvzhxC+5jtrcx5huemcQ8Jm2hvS
5TbngbUrFTepgUPM+EVrWTBjCydz2CSxcOnu0T4aivA6toBP+VTnGex+RCKseWEC
V2+iW1s9+tPw5crixrraD6L3JQ4Ogvff87YgcvbpVng0Rg92J2xo/7P+E8S3MLJ3
N3/12rKTuxEcH7HaTaXux5opB5c9VDMcXQkVnv4Ax/E+r/cAm7YfEkPCYPfIzqO/
V2k9L1jaM5D7p1u0RSox6l2s3pLhqllqFQTyFdnDL3BJxYzZadsLLiNKqJWlHVC0
CsJPc1T7BhM60mhP3QEuWztrEKuAgJNaMj5c4IOKu71LPU0CLj1xbd5XGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5+2mNrQ1CUNYUxgCIUcCY/omepMB8GA1UdIwQY
MBaAFKAw9kzqtbbapbbM318d75zXr5vuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0REMlRPcTF0dHFsdHN6Zlh4M3ZuTmV2bS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMzAyMzItMTQzYy00YWVmLTg2ZGQt
MzY3NDcyZWJkMWRjLzEvb0REMlRPcTF0dHFsdHN6Zlh4M3ZuTmV2bS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMzAyMzItMTQzYy00YWVmLTg2ZGQtMzY3NDcyZWJkMWRj
LzEvb0REMlRPcTF0dHFsdHN6Zlh4M3ZuTmV2bS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFrEy7iT
Prn9hANHalPYvReEgUXU65DqwXUdPNQhWq4UvuGx1Y/T4cdqem1y89Ea3rVBy7Fw
C0z/RTqVv/AhUwGK151zvbdiAcdZ939exzmCzXELjyfjTeDgDh37uahluNxvW0tC
bjajSgJ+U/q0Ef4ZLr4U1vMJM+oWi5Mt3KENBAePgBAVpW3QVYJNk4r8xZdkOhhZ
eC1UrjFqU9Juj41HvjUSwBb0vH8YEjeFZBC8XfCPSS8Gw7OStN0bZDOztQWz8viX
wZJBGbGHNMr181NVMSWjcvesb2HovfpC3YY5rdtqxEIvBUGDuLPIpvthgQfhYF32
T0crDzg6Q7Xf7w==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:31:36 2025 by rpki-client