Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/g5ANb7VaVErisS02Paz-Kzx0moc.mft
File:                     g5ANb7VaVErisS02Paz-Kzx0moc.mft (raw, json)
Hash identifier:          QxDT2auK7Lv/6ag3p87mnX7kzMQxQN3xkgsoU6pufJE=
Subject key identifier:   86:FD:48:7A:FB:36:46:4B:AA:BC:1D:E1:A3:9C:5E:54:1E:C9:78:3D
Authority key identifier: 83:90:0D:6F:B5:5A:54:4A:E2:B1:2D:36:3D:AC:FE:2B:3C:74:9A:87
Certificate issuer:       /CN=83900d6fb55a544ae2b12d363dacfe2b3c749a87
Certificate serial:       018BDACBE57DC846EC0729801813E29A6A05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5ANb7VaVErisS02Paz-Kzx0moc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/g5ANb7VaVErisS02Paz-Kzx0moc.mft
Manifest number:          0850
Signing time:             Fri 17 Nov 2023 01:01:17 +0000
Manifest this update:     Fri 17 Nov 2023 01:01:17 +0000
Manifest next update:     Sat 18 Nov 2023 01:01:17 +0000
Files and hashes:         1: QJbak2jPSanxy-67qdVl-_suT3k.roa (hash: Mrtr8d8DyDVb1FcIM/ncJZdZiQJbrEhaf7B91X5c0J0=)
                          2: g5ANb7VaVErisS02Paz-Kzx0moc.crl (hash: 14jd4z2cQTMmYtFbYJxiUYNlLtkmfUYHc6/PB6sTvxs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:da:cb:e5:7d:c8:46:ec:07:29:80:18:13:e2:9a:6a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83900d6fb55a544ae2b12d363dacfe2b3c749a87
        Validity
            Not Before: Nov 17 01:01:17 2023 GMT
            Not After : Nov 18 01:01:17 2023 GMT
        Subject: CN=86fd487afb36464baabc1de1a39c5e541ec9783d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d2:8b:c3:ce:f9:94:5d:b8:1b:83:13:a6:11:
                    fd:bc:01:cd:e3:af:df:e6:4a:ee:e7:f1:bd:a9:fb:
                    c0:ec:3d:af:3e:41:f6:88:80:8f:2a:63:e0:fc:e9:
                    b2:61:03:37:22:57:8b:a1:04:bd:3d:b1:be:0e:44:
                    c0:65:50:66:a6:81:af:fe:f5:a7:89:37:a1:9e:99:
                    c6:bc:c1:10:f5:11:66:93:70:67:12:68:c3:fc:bd:
                    d0:3b:1e:61:fd:fe:0d:52:9e:b0:02:a7:20:c6:14:
                    2c:9e:65:5a:1e:c2:d5:73:a4:09:5d:ce:c1:ca:7a:
                    9a:08:c2:7b:ef:4f:25:6f:b5:08:da:cb:e5:c8:b1:
                    b0:04:05:36:ee:96:75:19:7a:e8:a3:2a:87:ea:3b:
                    54:c3:94:4d:5d:d3:21:98:31:a9:ed:04:5e:87:19:
                    d0:8a:2d:af:1b:43:a3:d7:9c:7f:e3:a5:5c:00:ab:
                    fc:67:65:c8:8b:c8:32:ed:5c:03:d9:7f:9d:ab:7b:
                    7a:3f:50:74:fe:a5:97:6e:af:28:e7:ff:64:3d:6c:
                    6b:19:bb:57:7d:0d:7a:1d:8b:57:ec:03:d7:f4:5a:
                    2d:72:89:c1:fe:77:df:37:e7:54:d8:71:63:2e:f0:
                    7c:44:ff:98:80:cd:d5:11:1d:1a:fb:ce:dd:9a:f0:
                    e5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FD:48:7A:FB:36:46:4B:AA:BC:1D:E1:A3:9C:5E:54:1E:C9:78:3D
            X509v3 Authority Key Identifier:
                keyid:83:90:0D:6F:B5:5A:54:4A:E2:B1:2D:36:3D:AC:FE:2B:3C:74:9A:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ANb7VaVErisS02Paz-Kzx0moc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/g5ANb7VaVErisS02Paz-Kzx0moc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ecb99b-9ee1-4ffa-b08b-08713290667c/1/g5ANb7VaVErisS02Paz-Kzx0moc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:79:c2:6d:a9:b1:eb:90:20:3a:c1:fd:16:7c:a9:10:7d:85:
         c7:48:56:9d:e8:0f:17:9e:a3:4f:89:28:08:61:1d:a6:6a:52:
         13:2f:85:99:63:40:dd:ba:07:4f:96:58:2d:d9:b7:b3:f9:76:
         9e:86:30:20:74:d8:eb:b7:8f:ce:eb:1e:4e:d0:d3:64:af:c8:
         75:1a:6f:5f:de:c6:03:68:19:10:bd:6c:be:18:36:08:18:e3:
         1a:80:12:b7:53:be:91:77:9b:09:1d:0a:f3:63:aa:9d:9d:61:
         54:51:45:bd:97:79:ff:fa:ec:6b:8b:50:d3:b2:0b:cf:2c:72:
         6d:c5:fc:d9:63:89:32:58:66:b7:0e:78:d8:ad:0b:3c:be:0f:
         51:4b:43:6e:d5:04:23:82:f2:22:2d:29:79:3b:5c:bc:de:04:
         05:d1:54:df:03:7b:ea:46:e6:ea:97:af:09:cc:70:16:db:8c:
         ca:0c:e4:7c:2a:7a:5c:83:21:f8:2e:4e:80:d0:7d:88:56:b9:
         9a:38:05:48:e7:69:c2:dd:a9:1e:db:f3:24:13:f9:7f:81:87:
         e3:7d:6d:57:e7:b5:de:d7:bc:b5:cb:7a:37:77:1e:70:7e:fd:
         33:d4:3c:e5:2a:46:23:de:1c:9b:48:23:a8:0c:8c:11:5d:70:
         3d:e2:14:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvay+V9yEbsBymAGBPimmoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTAwZDZmYjU1YTU0NGFlMmIxMmQzNjNkYWNmZTJiM2M3
NDlhODcwHhcNMjMxMTE3MDEwMTE3WhcNMjMxMTE4MDEwMTE3WjAzMTEwLwYDVQQD
Eyg4NmZkNDg3YWZiMzY0NjRiYWFiYzFkZTFhMzljNWU1NDFlYzk3ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNKLw875lF24G4MTphH9vAHN46/f
5kru5/G9qfvA7D2vPkH2iICPKmPg/OmyYQM3IleLoQS9PbG+DkTAZVBmpoGv/vWn
iTehnpnGvMEQ9RFmk3BnEmjD/L3QOx5h/f4NUp6wAqcgxhQsnmVaHsLVc6QJXc7B
ynqaCMJ7708lb7UI2svlyLGwBAU27pZ1GXrooyqH6jtUw5RNXdMhmDGp7QRehxnQ
ii2vG0Oj15x/46VcAKv8Z2XIi8gy7VwD2X+dq3t6P1B0/qWXbq8o5/9kPWxrGbtX
fQ16HYtX7APX9FotconB/nffN+dU2HFjLvB8RP+YgM3VER0a+87dmvDlWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb9SHr7NkZLqrwd4aOcXlQeyXg9MB8GA1UdIwQY
MBaAFIOQDW+1WlRK4rEtNj2s/is8dJqHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVBTmI3VmFWRXJpc1MwMlBhei1LengwbW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lY2I5OWItOWVlMS00ZmZhLWIwOGIt
MDg3MTMyOTA2NjdjLzEvZzVBTmI3VmFWRXJpc1MwMlBhei1LengwbW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lY2I5OWItOWVlMS00ZmZhLWIwOGItMDg3MTMyOTA2Njdj
LzEvZzVBTmI3VmFWRXJpc1MwMlBhei1LengwbW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnnCbamx
65AgOsH9FnypEH2Fx0hWnegPF56jT4koCGEdpmpSEy+FmWNA3boHT5ZYLdm3s/l2
noYwIHTY67ePzuseTtDTZK/IdRpvX97GA2gZEL1svhg2CBjjGoASt1O+kXebCR0K
82OqnZ1hVFFFvZd5//rsa4tQ07ILzyxybcX82WOJMlhmtw542K0LPL4PUUtDbtUE
I4LyIi0peTtcvN4EBdFU3wN76kbm6pevCcxwFtuMygzkfCp6XIMh+C5OgNB9iFa5
mjgFSOdpwt2pHtvzJBP5f4GH431tV+e13te8tct6N3cecH79M9Q85SpGI94cm0gj
qAyMEV1wPeIUmg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:07:34 2025 by rpki-client