Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.mft
File:                     tSBEnURVz3icZOpjy_SPw7ssdmo.mft (raw, json)
Hash identifier:          yRZXsxqc8RgnXkaEi6m2gztd68CvD/YXp6sOPMHrQds=
Subject key identifier:   81:FA:BC:3D:A5:DB:6F:BA:67:7D:9A:0E:6F:83:0B:69:30:D8:A4:9E
Authority key identifier: B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
Certificate issuer:       /CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Certificate serial:       018D825E96006473F376F52CB5729159D17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.mft
Manifest number:          083C
Signing time:             Wed 07 Feb 2024 07:00:53 +0000
Manifest this update:     Wed 07 Feb 2024 07:00:53 +0000
Manifest next update:     Thu 08 Feb 2024 07:00:53 +0000
Files and hashes:         1: e7hV_3upnswdR_7tMQpKeBcp_ak.roa (hash: NT1PauBaARsBxSP1yPDwu/ZmGE1jxZSoC8NJF/OP+mU=)
                          2: tSBEnURVz3icZOpjy_SPw7ssdmo.crl (hash: Url/6EK9oraR5qQe6nFMsi0OjG486Q56kNG4BmtRJsw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:82:5e:96:00:64:73:f3:76:f5:2c:b5:72:91:59:d1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
        Validity
            Not Before: Feb  7 07:00:53 2024 GMT
            Not After : Feb  8 07:00:53 2024 GMT
        Subject: CN=81fabc3da5db6fba677d9a0e6f830b6930d8a49e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2c:6c:cd:a6:0a:ad:bb:f8:6c:2c:a5:59:59:
                    e3:ce:c6:bf:32:aa:fb:f6:ff:15:1c:f1:c9:ba:52:
                    12:ab:0d:69:df:ae:c4:28:17:eb:e4:b8:19:7c:1f:
                    51:b4:22:9f:7c:df:e9:15:b3:9b:55:73:40:3b:8c:
                    47:15:a3:ae:3e:cb:55:2a:c6:ea:56:62:3b:7d:f1:
                    ed:d1:79:87:83:83:6b:0e:6f:c9:81:0e:5d:ce:76:
                    38:16:4e:0c:0e:87:f5:3e:6c:17:2c:ec:db:58:7c:
                    5a:97:04:a4:d1:10:49:ad:ac:1a:89:34:a2:08:48:
                    20:16:bd:96:08:39:5f:b5:f3:bc:94:5b:8f:93:fd:
                    39:aa:1c:af:a5:2c:3a:54:21:5d:70:55:88:5b:0c:
                    ce:01:b4:3f:00:a9:5c:30:09:97:e1:42:f5:80:8c:
                    9f:4a:ee:71:a7:3d:71:2c:81:f4:84:97:50:5a:d7:
                    69:6d:91:f0:ef:70:86:6a:1f:65:f8:fd:44:49:13:
                    fd:0e:24:e4:1e:72:5e:9b:b5:96:e1:5e:a6:d1:13:
                    e2:8f:c1:c3:b8:7d:6a:f6:93:14:d9:1e:51:92:e1:
                    7c:1d:f3:de:c6:1b:1d:c6:a7:2e:78:ea:79:26:68:
                    c1:36:31:1b:aa:5e:03:c1:c8:9a:2f:08:ea:3d:f1:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:BC:3D:A5:DB:6F:BA:67:7D:9A:0E:6F:83:0B:69:30:D8:A4:9E
            X509v3 Authority Key Identifier:
                keyid:B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c6:52:ed:39:68:1a:54:c4:a0:e1:09:7c:96:a1:76:50:3c:
         6b:97:f0:92:d1:9b:a4:3d:36:1f:21:3a:6a:6e:05:c1:2b:98:
         a4:b0:da:d9:de:e7:b0:f1:e4:d6:96:92:b5:18:98:67:b1:ac:
         83:13:47:0b:3a:08:be:15:dc:f6:7e:e3:f4:7c:1e:e1:2f:04:
         be:45:eb:05:0c:29:e8:c4:0e:75:6f:fc:b1:ac:e2:01:28:35:
         b7:92:e7:24:bd:53:26:2e:5c:84:f5:e6:9b:70:f1:82:a4:cb:
         b5:cf:81:00:2d:d6:7b:0f:da:8f:6c:18:fb:08:fd:ea:85:45:
         12:08:a7:7f:bb:6f:b3:26:8f:ea:be:3b:02:97:89:e2:5b:be:
         79:fe:e2:99:aa:72:4b:16:24:91:9e:ba:14:21:9b:7c:6d:67:
         9d:ba:66:72:a8:ab:31:b1:26:69:78:aa:30:2c:71:5a:e0:09:
         17:75:e2:55:e9:82:39:8d:c3:bd:df:f1:ac:82:72:2d:30:e3:
         fe:81:c5:74:01:6e:a1:57:8f:10:f5:41:ce:0c:d6:6b:d7:5f:
         5c:ac:76:19:1d:b9:56:8c:92:0a:b0:9d:da:cf:56:b9:53:d4:
         30:87:7e:5c:f6:25:1b:07:a4:b0:a7:48:f7:02:74:37:1b:91:
         f2:34:1b:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY2CXpYAZHPzdvUstXKRWdF8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MjA0NDlkNDQ1NWNmNzg5YzY0ZWE2M2NiZjQ4ZmMzYmIy
Yzc2NmEwHhcNMjQwMjA3MDcwMDUzWhcNMjQwMjA4MDcwMDUzWjAzMTEwLwYDVQQD
Eyg4MWZhYmMzZGE1ZGI2ZmJhNjc3ZDlhMGU2ZjgzMGI2OTMwZDhhNDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkixszaYKrbv4bCylWVnjzsa/Mqr7
9v8VHPHJulISqw1p367EKBfr5LgZfB9RtCKffN/pFbObVXNAO4xHFaOuPstVKsbq
VmI7ffHt0XmHg4NrDm/JgQ5dznY4Fk4MDof1PmwXLOzbWHxalwSk0RBJrawaiTSi
CEggFr2WCDlftfO8lFuPk/05qhyvpSw6VCFdcFWIWwzOAbQ/AKlcMAmX4UL1gIyf
Su5xpz1xLIH0hJdQWtdpbZHw73CGah9l+P1ESRP9DiTkHnJem7WW4V6m0RPij8HD
uH1q9pMU2R5RkuF8HfPexhsdxqcueOp5JmjBNjEbql4DwciaLwjqPfH0FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH6vD2l22+6Z32aDm+DC2kw2KSeMB8GA1UdIwQY
MBaAFLUgRJ1EVc94nGTqY8v0j8O7LHZqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFNCRW5VUlZ6M2ljWk9wanlfU1B3N3NzZG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9mMGQ1ZTctZWRiNi00MmFkLTg0ODIt
YTE0ZDg1Zjk5NWNiLzEvdFNCRW5VUlZ6M2ljWk9wanlfU1B3N3NzZG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9mMGQ1ZTctZWRiNi00MmFkLTg0ODItYTE0ZDg1Zjk5NWNi
LzEvdFNCRW5VUlZ6M2ljWk9wanlfU1B3N3NzZG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsZS7Tlo
GlTEoOEJfJahdlA8a5fwktGbpD02HyE6am4FwSuYpLDa2d7nsPHk1paStRiYZ7Gs
gxNHCzoIvhXc9n7j9Hwe4S8EvkXrBQwp6MQOdW/8saziASg1t5LnJL1TJi5chPXm
m3DxgqTLtc+BAC3Wew/aj2wY+wj96oVFEginf7tvsyaP6r47ApeJ4lu+ef7imapy
SxYkkZ66FCGbfG1nnbpmcqirMbEmaXiqMCxxWuAJF3XiVemCOY3Dvd/xrIJyLTDj
/oHFdAFuoVePEPVBzgzWa9dfXKx2GR25VoySCrCd2s9WuVPUMId+XPYlGweksKdI
9wJ0NxuR8jQbUQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:55:35 2025 by rpki-client