Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.mft
File:                     K8-mLspUhPOcdJ7fGBrZnqoC1PQ.mft (raw, json)
Hash identifier:          9zHaBcg0qokKp5kRRdo96mtJnIAn9/Ao8ifPCLeqU38=
Subject key identifier:   53:AF:F1:51:3C:BA:4C:47:E6:0A:BC:EA:7F:A7:A3:3B:06:EB:9A:50
Authority key identifier: 2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4
Certificate issuer:       /CN=2bcfa62eca5484f39c749edf181ad99eaa02d4f4
Certificate serial:       01889025893603CF47D4A4B3B82DADDA556B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.mft
Manifest number:          0DC3
Signing time:             Tue 06 Jun 2023 09:59:18 +0000
Manifest this update:     Tue 06 Jun 2023 09:59:18 +0000
Manifest next update:     Wed 07 Jun 2023 09:59:18 +0000
Files and hashes:         1: K8-mLspUhPOcdJ7fGBrZnqoC1PQ.crl (hash: is0hrnZKARpw76Ksnek4UQp45STGkTX3oRtZHuiSvls=)
                          2: NPXUmSNv9DcmfxYJjRLgDWkkcg8.roa (hash: 49T8ihwNVQI/RyyD+KqmBOej4i4Z/aMw0Y7nYL/QNAw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:25:89:36:03:cf:47:d4:a4:b3:b8:2d:ad:da:55:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bcfa62eca5484f39c749edf181ad99eaa02d4f4
        Validity
            Not Before: Jun  6 09:59:18 2023 GMT
            Not After : Jun  7 09:59:18 2023 GMT
        Subject: CN=53aff1513cba4c47e60abcea7fa7a33b06eb9a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:6a:9d:79:5a:bb:b0:62:31:82:97:14:70:
                    21:e7:f9:20:8f:39:84:09:f8:33:87:e1:e3:9c:4d:
                    f1:86:73:ed:14:c9:15:b9:44:25:9a:79:55:a2:9a:
                    24:32:e5:df:fe:05:17:2d:66:e6:e0:99:6d:fe:a8:
                    15:b5:f3:30:60:f8:13:30:3e:2d:91:81:41:73:13:
                    87:d6:aa:a8:54:95:7a:1e:ee:f6:63:33:40:c4:e9:
                    eb:c7:7e:7f:8b:ce:ec:7a:7b:10:cf:9d:6c:f3:e2:
                    f5:07:4b:26:57:3d:54:4b:ea:62:95:07:91:ff:1f:
                    62:2a:f8:27:f5:1e:64:db:20:76:f5:76:a5:ef:a7:
                    fd:65:c9:20:cd:5e:59:7f:6f:76:d8:93:6e:01:91:
                    51:c2:46:2f:b1:1f:6b:c1:8d:48:48:df:c3:18:5e:
                    2f:04:eb:f1:48:b1:da:80:f2:88:b4:f8:05:bc:63:
                    0c:0a:0d:32:c6:34:0b:4c:f2:9f:5f:fe:92:96:a1:
                    f8:b5:3f:fd:e6:7b:cb:f0:88:16:be:d3:f3:7f:89:
                    0c:97:a9:29:08:0a:57:69:68:d7:c6:16:57:50:40:
                    22:8a:8d:f9:ce:51:63:ea:cf:b9:f4:2a:c0:bf:24:
                    d2:50:e5:e2:5f:0e:4a:3b:c8:5c:f1:20:bb:62:9e:
                    4e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AF:F1:51:3C:BA:4C:47:E6:0A:BC:EA:7F:A7:A3:3B:06:EB:9A:50
            X509v3 Authority Key Identifier:
                keyid:2B:CF:A6:2E:CA:54:84:F3:9C:74:9E:DF:18:1A:D9:9E:AA:02:D4:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/bc07eb-b022-4f04-8eb4-c7ee2a140c79/1/K8-mLspUhPOcdJ7fGBrZnqoC1PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:c8:95:46:b6:09:ba:45:e0:98:04:f6:16:56:52:bd:cf:
         47:12:84:5a:2c:5e:73:e9:5b:f2:10:3e:7f:c7:86:b8:95:a0:
         d8:30:46:54:d4:2b:e3:b0:e9:26:6b:78:5f:a1:2d:b0:0d:bc:
         8d:cd:f2:9b:29:6b:d0:11:6c:a1:9f:cc:43:43:cd:31:55:cb:
         f9:68:5f:02:13:a6:ec:b4:f6:5f:08:9e:c2:41:47:8b:ba:13:
         2a:63:0b:cf:50:a8:e9:c9:a4:2e:20:b6:72:27:3e:e4:e6:44:
         91:3b:65:a4:ad:25:69:ae:04:3c:90:1b:f7:35:72:05:9c:d1:
         b7:ac:4f:1a:92:35:1c:b2:73:c4:a4:53:ad:f0:fa:3c:ce:4e:
         96:e1:db:86:93:87:5d:80:24:bc:c9:08:c7:e9:a4:78:03:96:
         a0:4e:6d:d7:4f:fe:2b:b2:22:dd:a9:1f:69:45:25:59:76:c7:
         15:dd:1b:56:0b:bd:d7:8d:64:53:f2:c3:60:ff:5a:29:e6:be:
         48:b2:59:cc:41:c6:3c:98:0b:1f:33:00:83:be:07:ad:ba:cc:
         b9:2c:b9:d2:7a:c3:f4:f7:28:bd:ea:9e:a6:2d:28:4c:1f:d2:
         43:e9:e5:d3:ad:95:19:ee:a1:48:a6:6c:0e:20:d0:4a:28:25:
         07:0d:34:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYiQJYk2A89H1KSzuC2t2lVrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiY2ZhNjJlY2E1NDg0ZjM5Yzc0OWVkZjE4MWFkOTllYWEw
MmQ0ZjQwHhcNMjMwNjA2MDk1OTE4WhcNMjMwNjA3MDk1OTE4WjAzMTEwLwYDVQQD
Eyg1M2FmZjE1MTNjYmE0YzQ3ZTYwYWJjZWE3ZmE3YTMzYjA2ZWI5YTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmhqnXlau7BiMYKXFHAh5/kgjzmE
Cfgzh+HjnE3xhnPtFMkVuUQlmnlVopokMuXf/gUXLWbm4Jlt/qgVtfMwYPgTMD4t
kYFBcxOH1qqoVJV6Hu72YzNAxOnrx35/i87sensQz51s8+L1B0smVz1US+pilQeR
/x9iKvgn9R5k2yB29Xal76f9ZckgzV5Zf2922JNuAZFRwkYvsR9rwY1ISN/DGF4v
BOvxSLHagPKItPgFvGMMCg0yxjQLTPKfX/6SlqH4tT/95nvL8IgWvtPzf4kMl6kp
CApXaWjXxhZXUEAiio35zlFj6s+59CrAvyTSUOXiXw5KO8hc8SC7Yp5O4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOv8VE8ukxH5gq86n+nozsG65pQMB8GA1UdIwQY
MBaAFCvPpi7KVITznHSe3xga2Z6qAtT0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzgtbUxzcFVoUE9jZEo3ZkdCclpucW9DMVBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iYzA3ZWItYjAyMi00ZjA0LThlYjQt
YzdlZTJhMTQwYzc5LzEvSzgtbUxzcFVoUE9jZEo3ZkdCclpucW9DMVBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iYzA3ZWItYjAyMi00ZjA0LThlYjQtYzdlZTJhMTQwYzc5
LzEvSzgtbUxzcFVoUE9jZEo3ZkdCclpucW9DMVBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdsPIlUa2
CbpF4JgE9hZWUr3PRxKEWixec+lb8hA+f8eGuJWg2DBGVNQr47DpJmt4X6EtsA28
jc3ymylr0BFsoZ/MQ0PNMVXL+WhfAhOm7LT2XwiewkFHi7oTKmMLz1Co6cmkLiC2
cic+5OZEkTtlpK0laa4EPJAb9zVyBZzRt6xPGpI1HLJzxKRTrfD6PM5OluHbhpOH
XYAkvMkIx+mkeAOWoE5t10/+K7Ii3akfaUUlWXbHFd0bVgu9141kU/LDYP9aKea+
SLJZzEHGPJgLHzMAg74HrbrMuSy50nrD9Pcoveqepi0oTB/SQ+nl062VGe6hSKZs
DiDQSiglBw003A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:58 2025 by rpki-client