Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
File:                     y_TOjMrJljtVr0-8MzMtWVhhx1I.mft (raw, json)
Hash identifier:          mMP9dsEJ6gg3tESZ7MQEYbOFr2NRChoapSHgpvv46So=
Subject key identifier:   31:52:E8:32:6F:A6:2F:98:9A:CE:98:D6:27:D7:FC:36:A4:8F:96:4F
Authority key identifier: CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52
Certificate issuer:       /CN=cbf4ce8ccac9963b55af4fbc33332d595861c752
Certificate serial:       0192E1293D3BC4D418C459E85C70B886DAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft
Manifest number:          0261
Signing time:             Thu 31 Oct 2024 06:00:29 +0000
Manifest this update:     Thu 31 Oct 2024 06:00:29 +0000
Manifest next update:     Fri 01 Nov 2024 06:00:29 +0000
Files and hashes:         1: y_TOjMrJljtVr0-8MzMtWVhhx1I.crl (hash: jN63ngJkuKRU1BdF9YydbDullYloPbUzx9OYMWkKIko=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:e1:29:3d:3b:c4:d4:18:c4:59:e8:5c:70:b8:86:da:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbf4ce8ccac9963b55af4fbc33332d595861c752
        Validity
            Not Before: Oct 31 06:00:29 2024 GMT
            Not After : Nov  1 06:00:29 2024 GMT
        Subject: CN=3152e8326fa62f989ace98d627d7fc36a48f964f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:bb:29:94:20:de:36:5d:7d:02:4b:37:df:
                    69:d4:69:c6:bb:d3:9b:0b:3f:48:bd:7e:bb:9f:b5:
                    a7:87:31:12:f6:bb:3a:11:81:58:1e:51:a3:0c:0c:
                    56:88:d6:55:2d:4c:13:ee:36:ea:99:ca:39:44:71:
                    4f:fb:62:81:a6:ee:bc:11:98:67:7d:37:fd:3e:91:
                    be:b7:d7:68:a2:2a:9e:f6:e1:30:ee:61:e8:c4:72:
                    40:f0:21:00:0e:ce:8c:c0:86:f9:09:2e:32:93:d6:
                    e4:60:01:a8:74:a8:9c:28:1f:69:ba:b1:65:ee:03:
                    5d:5c:52:7d:8f:e5:f9:63:0d:f9:ad:c9:99:41:35:
                    5c:4e:1b:46:36:e8:37:6a:d4:fa:f9:7b:e5:44:e8:
                    82:c0:9a:60:b8:84:71:4a:8e:a9:43:78:9e:97:99:
                    36:0f:eb:b2:64:ee:0c:63:57:e8:b8:06:92:23:cc:
                    ad:0f:94:ee:ae:cc:e9:cf:3b:d6:e7:91:8e:c3:07:
                    f7:d9:bc:48:bd:bf:ba:50:2c:e5:4e:28:44:f6:01:
                    53:48:f9:32:4e:65:6a:f8:e1:db:69:e3:7c:fc:5e:
                    06:a3:37:56:eb:44:7c:cb:35:73:36:4d:88:79:41:
                    51:7e:df:da:b3:7c:ce:ba:f9:b2:f6:63:9a:6b:6f:
                    c6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:52:E8:32:6F:A6:2F:98:9A:CE:98:D6:27:D7:FC:36:A4:8F:96:4F
            X509v3 Authority Key Identifier:
                keyid:CB:F4:CE:8C:CA:C9:96:3B:55:AF:4F:BC:33:33:2D:59:58:61:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_TOjMrJljtVr0-8MzMtWVhhx1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/873889-e950-4449-88b3-3b35087e418c/1/y_TOjMrJljtVr0-8MzMtWVhhx1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:fd:c6:63:b1:a9:00:e7:f2:43:71:91:10:7a:fa:b2:21:37:
         48:1b:d0:a1:a6:56:87:6f:d5:16:eb:a7:dc:26:29:fd:dd:0a:
         43:65:d3:12:39:a5:49:06:b9:25:65:e9:3d:fa:6e:30:46:25:
         2f:1c:f1:8e:f7:6a:c8:93:53:80:73:ac:04:0f:c7:80:c8:ff:
         6e:1d:54:30:71:0b:5a:e3:79:c9:8c:ab:fd:5b:e6:d4:68:f9:
         3b:99:db:69:a7:ce:8a:c7:a4:9c:3c:e7:42:f1:bc:46:31:62:
         25:e7:3e:f1:c2:81:b4:64:91:5a:aa:b6:35:3b:df:8e:50:2f:
         1c:60:80:80:c8:f9:25:fc:97:30:d7:d4:ee:14:a7:56:81:ac:
         16:bc:cc:84:b6:c8:3b:00:2b:c1:dd:54:a8:64:f9:3b:32:e8:
         87:26:0b:92:11:59:96:f5:33:59:7e:fc:03:1b:a1:07:b1:39:
         c5:b3:be:51:03:68:1c:2a:40:3a:13:29:3e:d7:a8:df:03:54:
         a7:8a:23:45:f6:73:bc:8b:04:64:92:5c:88:18:ff:a2:48:47:
         d3:ca:63:5c:75:e6:7e:ed:cf:97:67:55:03:dd:fe:9a:2a:d0:
         9c:35:96:76:8d:e7:68:3d:5d:f3:00:d8:a6:2f:45:2b:90:b5:
         4c:4c:1c:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLhKT07xNQYxFnoXHC4htrYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZjRjZThjY2FjOTk2M2I1NWFmNGZiYzMzMzMyZDU5NTg2
MWM3NTIwHhcNMjQxMDMxMDYwMDI5WhcNMjQxMTAxMDYwMDI5WjAzMTEwLwYDVQQD
EygzMTUyZTgzMjZmYTYyZjk4OWFjZTk4ZDYyN2Q3ZmMzNmE0OGY5NjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVG7KZQg3jZdfQJLN99p1GnGu9Ob
Cz9IvX67n7WnhzES9rs6EYFYHlGjDAxWiNZVLUwT7jbqmco5RHFP+2KBpu68EZhn
fTf9PpG+t9dooiqe9uEw7mHoxHJA8CEADs6MwIb5CS4yk9bkYAGodKicKB9purFl
7gNdXFJ9j+X5Yw35rcmZQTVcThtGNug3atT6+XvlROiCwJpguIRxSo6pQ3iel5k2
D+uyZO4MY1fouAaSI8ytD5TurszpzzvW55GOwwf32bxIvb+6UCzlTihE9gFTSPky
TmVq+OHbaeN8/F4GozdW60R8yzVzNk2IeUFRft/as3zOuvmy9mOaa2/GSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFS6DJvpi+Yms6Y1ifX/Dakj5ZPMB8GA1UdIwQY
MBaAFMv0zozKyZY7Va9PvDMzLVlYYcdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9UT2pNckpsanRWcjAtOE16TXRXVmhoeDFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84NzM4ODktZTk1MC00NDQ5LTg4YjMt
M2IzNTA4N2U0MThjLzEveV9UT2pNckpsanRWcjAtOE16TXRXVmhoeDFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84NzM4ODktZTk1MC00NDQ5LTg4YjMtM2IzNTA4N2U0MThj
LzEveV9UT2pNckpsanRWcjAtOE16TXRXVmhoeDFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFP3GY7Gp
AOfyQ3GREHr6siE3SBvQoaZWh2/VFuun3CYp/d0KQ2XTEjmlSQa5JWXpPfpuMEYl
LxzxjvdqyJNTgHOsBA/HgMj/bh1UMHELWuN5yYyr/Vvm1Gj5O5nbaafOiseknDzn
QvG8RjFiJec+8cKBtGSRWqq2NTvfjlAvHGCAgMj5JfyXMNfU7hSnVoGsFrzMhLbI
OwArwd1UqGT5OzLohyYLkhFZlvUzWX78AxuhB7E5xbO+UQNoHCpAOhMpPteo3wNU
p4ojRfZzvIsEZJJciBj/okhH08pjXHXmfu3Pl2dVA93+mirQnDWWdo3naD1d8wDY
pi9FK5C1TEwc+g==
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:59:51 2025 by rpki-client