Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft
File:                     Qk6L1SWxme3BtzktogIl90iW2p0.mft (raw, json)
Hash identifier:          q6lvbugAiqr7V9DYQjAcQOTOB3UGxse9wpj4/i7n3ug=
Subject key identifier:   3F:15:A4:06:8F:F6:28:32:EB:2E:AC:91:74:51:86:59:DD:04:9E:AF
Authority key identifier: 42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D
Certificate issuer:       /CN=424e8bd525b199edc1b7392da20225f74896da9d
Certificate serial:       018513F035978E214A2A5765A7DCD140CD19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft
Manifest number:          04DF
Signing time:             Thu 15 Dec 2022 03:59:47 +0000
Manifest this update:     Thu 15 Dec 2022 03:59:47 +0000
Manifest next update:     Fri 16 Dec 2022 03:59:47 +0000
Files and hashes:         1: Qk6L1SWxme3BtzktogIl90iW2p0.crl (hash: 8pifodCiqJwt704I3L99Qtn7HiDE3PJAFTkTmz5xPRI=)
                          2: zbtSewn09aoIVPf1KosylFeVo8c.roa (hash: GgTF8kBsUZm4jfYNB3PKxihTdHuckb9M4l529ILanzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:13:f0:35:97:8e:21:4a:2a:57:65:a7:dc:d1:40:cd:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=424e8bd525b199edc1b7392da20225f74896da9d
        Validity
            Not Before: Dec 15 03:59:47 2022 GMT
            Not After : Dec 16 03:59:47 2022 GMT
        Subject: CN=3f15a4068ff62832eb2eac9174518659dd049eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2c:40:d4:fd:20:04:27:2a:3b:7e:66:12:6b:
                    a4:e0:0c:5c:7a:84:34:13:de:61:fb:68:20:40:ec:
                    fe:36:4e:0c:68:3c:91:a0:db:98:9d:94:02:9a:21:
                    da:d2:f0:71:2d:d6:2e:e2:36:a6:23:4c:bf:cb:ed:
                    b9:36:2f:63:7e:bc:78:34:4d:e2:ad:ea:1f:81:45:
                    08:3b:a7:85:12:4a:16:41:2b:ff:7c:75:e2:0c:48:
                    f8:e2:15:17:26:8b:6a:35:a4:9f:85:6f:c8:77:07:
                    04:cd:2f:e5:5e:c0:b9:40:43:a5:0d:00:3a:98:ad:
                    c4:8f:22:99:c1:fd:c1:20:bd:da:5c:a9:b5:e4:f4:
                    df:0a:8f:8b:85:fd:04:95:6e:a9:06:d4:83:da:15:
                    60:ff:d7:d4:83:04:e7:d8:c9:fe:06:25:58:59:0c:
                    17:ad:0a:8f:52:62:fa:af:db:68:9a:3b:f7:e8:46:
                    c8:38:ab:07:8a:4d:9c:a6:1b:5c:dc:9a:fa:52:21:
                    a9:f6:3e:19:38:7e:04:86:c5:4a:c9:ef:63:81:72:
                    c3:c1:15:7f:b3:4d:89:59:a0:ff:c9:b2:88:04:59:
                    09:07:4f:01:4d:48:46:43:25:16:01:e8:6e:4d:e8:
                    18:8b:0b:19:05:ea:59:2f:af:1c:23:bc:da:aa:b1:
                    5f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:15:A4:06:8F:F6:28:32:EB:2E:AC:91:74:51:86:59:DD:04:9E:AF
            X509v3 Authority Key Identifier:
                keyid:42:4E:8B:D5:25:B1:99:ED:C1:B7:39:2D:A2:02:25:F7:48:96:DA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk6L1SWxme3BtzktogIl90iW2p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/67d1d4-cbd8-45f9-8c48-ec66f239fe0c/1/Qk6L1SWxme3BtzktogIl90iW2p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:59:f8:df:35:47:91:46:df:7b:97:ba:7d:eb:fd:3d:72:6c:
         24:b8:a7:8d:e3:d1:f3:be:f3:41:d9:66:ec:d9:c8:8a:e3:5d:
         ad:67:b9:9a:09:90:dd:59:4e:fe:2b:b4:70:ea:3c:e8:f6:7e:
         e0:66:67:6f:78:dc:f9:9b:5b:1b:91:a3:58:46:9c:cb:37:25:
         a3:18:fd:80:59:7e:22:d3:b2:44:de:82:3d:9b:72:4e:5b:f8:
         dc:7a:6c:f4:dd:54:fa:e1:1f:b4:6a:bf:96:17:cc:56:ba:f5:
         f8:a6:c8:72:28:98:a3:ab:e6:27:ae:b0:86:c5:8e:d3:a7:8a:
         c0:93:87:19:83:e4:fe:56:19:59:25:12:51:45:e9:50:06:38:
         f4:93:13:7e:55:87:47:82:c0:2b:a2:c3:61:e6:f6:bc:6e:3d:
         fc:b2:79:7c:b3:8d:96:dc:e0:4b:db:42:83:b2:2e:39:c4:a6:
         65:20:bc:aa:26:6b:30:d9:59:70:08:6a:01:bb:3d:29:cd:2a:
         60:01:f0:fe:2a:21:32:09:cf:1a:ea:f6:f7:31:00:b0:2e:65:
         c0:bf:58:1c:47:0b:c9:c1:32:79:eb:a0:c0:e5:db:f4:1e:6b:
         dd:3d:67:90:c0:96:53:a4:f3:e8:ad:f1:6a:30:d5:33:f9:4c:
         f0:0f:b8:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUT8DWXjiFKKldlp9zRQM0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGU4YmQ1MjViMTk5ZWRjMWI3MzkyZGEyMDIyNWY3NDg5
NmRhOWQwHhcNMjIxMjE1MDM1OTQ3WhcNMjIxMjE2MDM1OTQ3WjAzMTEwLwYDVQQD
EygzZjE1YTQwNjhmZjYyODMyZWIyZWFjOTE3NDUxODY1OWRkMDQ5ZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSxA1P0gBCcqO35mEmuk4AxceoQ0
E95h+2ggQOz+Nk4MaDyRoNuYnZQCmiHa0vBxLdYu4jamI0y/y+25Ni9jfrx4NE3i
reofgUUIO6eFEkoWQSv/fHXiDEj44hUXJotqNaSfhW/IdwcEzS/lXsC5QEOlDQA6
mK3EjyKZwf3BIL3aXKm15PTfCo+Lhf0ElW6pBtSD2hVg/9fUgwTn2Mn+BiVYWQwX
rQqPUmL6r9tomjv36EbIOKsHik2cphtc3Jr6UiGp9j4ZOH4EhsVKye9jgXLDwRV/
s02JWaD/ybKIBFkJB08BTUhGQyUWAehuTegYiwsZBepZL68cI7zaqrFf9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8VpAaP9igy6y6skXRRhlndBJ6vMB8GA1UdIwQY
MBaAFEJOi9UlsZntwbc5LaICJfdIltqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWs2TDFTV3htZTNCdHprdG9nSWw5MGlXMnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82N2QxZDQtY2JkOC00NWY5LThjNDgt
ZWM2NmYyMzlmZTBjLzEvUWs2TDFTV3htZTNCdHprdG9nSWw5MGlXMnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82N2QxZDQtY2JkOC00NWY5LThjNDgtZWM2NmYyMzlmZTBj
LzEvUWs2TDFTV3htZTNCdHprdG9nSWw5MGlXMnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIln43zVH
kUbfe5e6fev9PXJsJLinjePR877zQdlm7NnIiuNdrWe5mgmQ3VlO/iu0cOo86PZ+
4GZnb3jc+ZtbG5GjWEacyzcloxj9gFl+ItOyRN6CPZtyTlv43Hps9N1U+uEftGq/
lhfMVrr1+KbIciiYo6vmJ66whsWO06eKwJOHGYPk/lYZWSUSUUXpUAY49JMTflWH
R4LAK6LDYeb2vG49/LJ5fLONltzgS9tCg7IuOcSmZSC8qiZrMNlZcAhqAbs9Kc0q
YAHw/iohMgnPGur29zEAsC5lwL9YHEcLycEyeeugwOXb9B5r3T1nkMCWU6Tz6K3x
ajDVM/lM8A+4/w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org