Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c89408-cf22-4da5-981a-b638b31db89d/1/Et-jQeajoC42wqt8O388l5HH52k.mft
File:                     Et-jQeajoC42wqt8O388l5HH52k.mft (raw, json)
Hash identifier:          z8kJlUo2ZueXPbJa9cBlFVSwVzgnYw21NdxsOM2nSLU=
Subject key identifier:   80:4F:19:79:65:A8:85:F4:C4:35:B2:1C:C1:56:9B:96:E6:55:0F:E7
Authority key identifier: 12:DF:A3:41:E6:A3:A0:2E:36:C2:AB:7C:3B:7F:3C:97:91:C7:E7:69
Certificate issuer:       /CN=12dfa341e6a3a02e36c2ab7c3b7f3c9791c7e769
Certificate serial:       0187365BFBE8D427EE95170C841C0604E6FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Et-jQeajoC42wqt8O388l5HH52k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/c89408-cf22-4da5-981a-b638b31db89d/1/Et-jQeajoC42wqt8O388l5HH52k.mft
Manifest number:          07D3
Signing time:             Fri 31 Mar 2023 06:30:10 +0000
Manifest this update:     Fri 31 Mar 2023 06:30:10 +0000
Manifest next update:     Sat 01 Apr 2023 06:30:10 +0000
Files and hashes:         1: Et-jQeajoC42wqt8O388l5HH52k.crl (hash: 8zbGYN7WIN4YWCycb2vl7K31qscWC1gM11cNDMkFu/I=)
                          2: guLuLeSbX5zgj7pkr4t_xLQDoXo.roa (hash: LdJS1ItYs8k5lBPcPW9Rvwbj2LQP/hQpj5ZGpBF4p1g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:36:5b:fb:e8:d4:27:ee:95:17:0c:84:1c:06:04:e6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dfa341e6a3a02e36c2ab7c3b7f3c9791c7e769
        Validity
            Not Before: Mar 31 06:30:10 2023 GMT
            Not After : Apr  1 06:30:10 2023 GMT
        Subject: CN=804f197965a885f4c435b21cc1569b96e6550fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:33:bd:66:c5:2b:94:ff:0f:27:81:2a:e3:
                    e9:d9:04:68:0e:62:86:9b:d8:cc:25:fc:62:a3:a5:
                    91:ac:36:43:48:89:db:11:5f:33:98:21:30:da:b8:
                    5a:0f:6c:09:7b:ad:e3:c6:8c:f9:a3:95:16:d3:a3:
                    bb:f8:b4:66:79:61:c1:bb:10:b9:83:ec:33:3c:95:
                    95:2d:b4:5a:30:42:2a:b8:40:52:ec:60:25:78:ef:
                    f6:7a:29:5a:5d:27:df:3a:3c:f6:fa:0f:86:df:cd:
                    22:6e:21:e3:48:cd:d3:5f:b8:3f:46:82:e8:ed:62:
                    a6:c5:51:6d:7b:b5:60:51:0f:de:7f:eb:93:70:15:
                    e6:9f:a1:a3:54:2b:db:8a:3e:29:61:b9:53:74:fc:
                    a5:4c:6b:54:06:22:59:3d:75:d5:5d:5e:6d:d7:02:
                    65:d3:82:ea:50:9c:b3:be:34:93:c2:f3:26:c0:a1:
                    9f:cb:4e:fd:df:7b:e3:47:69:6a:89:76:b6:a4:44:
                    8f:3c:64:79:72:cd:5a:96:57:09:25:7f:b2:03:15:
                    4e:7c:72:97:c1:15:9b:79:8e:53:e7:6b:c8:5f:e1:
                    eb:04:a4:3b:2e:d6:23:0e:0b:1e:ed:48:38:77:f2:
                    d9:2f:8a:ed:9b:40:72:09:88:82:e1:1f:e3:9f:64:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4F:19:79:65:A8:85:F4:C4:35:B2:1C:C1:56:9B:96:E6:55:0F:E7
            X509v3 Authority Key Identifier:
                keyid:12:DF:A3:41:E6:A3:A0:2E:36:C2:AB:7C:3B:7F:3C:97:91:C7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Et-jQeajoC42wqt8O388l5HH52k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c89408-cf22-4da5-981a-b638b31db89d/1/Et-jQeajoC42wqt8O388l5HH52k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c89408-cf22-4da5-981a-b638b31db89d/1/Et-jQeajoC42wqt8O388l5HH52k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7b:de:d5:2c:ac:9b:b4:ca:8f:73:84:47:a2:d5:3e:db:0f:
         44:03:75:e6:09:90:7b:40:bc:1d:97:0c:d3:a5:17:be:1b:76:
         d3:e7:0e:f2:fa:7f:ae:0c:d3:72:45:ec:81:da:09:d7:ab:1a:
         0b:88:ce:27:81:f4:cc:13:d7:ac:ec:e6:55:14:46:04:3f:a3:
         80:33:5a:c7:38:9c:3e:82:ba:91:f8:5c:77:8b:cf:c5:ac:bb:
         27:b1:66:f7:af:f4:77:d7:6d:79:0c:1e:be:4e:56:97:40:b6:
         85:cc:9f:d9:5c:4a:e3:db:68:0a:60:09:90:4a:c4:4e:66:27:
         7c:0e:e0:a6:45:9c:a7:a1:b0:08:9d:ba:ff:db:72:9d:a4:31:
         8e:96:13:34:e1:5f:a9:b6:af:8a:8a:73:c6:d5:ee:f0:93:51:
         d9:e6:1c:9b:ab:23:91:2c:3a:e7:fc:de:13:84:b9:e7:2c:25:
         ff:01:db:f4:4e:39:30:2d:28:91:9b:f1:a7:ad:fb:af:56:8d:
         0c:95:f8:43:82:73:8b:a0:52:e6:f0:6a:44:bb:0b:53:cb:6e:
         38:7b:c9:7d:a5:50:e1:02:d0:86:40:5e:8f:f3:72:2d:3a:7f:
         e7:7f:df:90:71:72:0b:92:aa:03:c8:e8:01:ab:ed:8d:d3:26:
         3a:a2:61:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYc2W/vo1CfulRcMhBwGBOb8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZGZhMzQxZTZhM2EwMmUzNmMyYWI3YzNiN2YzYzk3OTFj
N2U3NjkwHhcNMjMwMzMxMDYzMDEwWhcNMjMwNDAxMDYzMDEwWjAzMTEwLwYDVQQD
Eyg4MDRmMTk3OTY1YTg4NWY0YzQzNWIyMWNjMTU2OWI5NmU2NTUwZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzgzvWbFK5T/DyeBKuPp2QRoDmKG
m9jMJfxio6WRrDZDSInbEV8zmCEw2rhaD2wJe63jxoz5o5UW06O7+LRmeWHBuxC5
g+wzPJWVLbRaMEIquEBS7GAleO/2eilaXSffOjz2+g+G380ibiHjSM3TX7g/RoLo
7WKmxVFte7VgUQ/ef+uTcBXmn6GjVCvbij4pYblTdPylTGtUBiJZPXXVXV5t1wJl
04LqUJyzvjSTwvMmwKGfy07933vjR2lqiXa2pESPPGR5cs1allcJJX+yAxVOfHKX
wRWbeY5T52vIX+HrBKQ7LtYjDgse7Ug4d/LZL4rtm0ByCYiC4R/jn2R9zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBPGXllqIX0xDWyHMFWm5bmVQ/nMB8GA1UdIwQY
MBaAFBLfo0Hmo6AuNsKrfDt/PJeRx+dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXQtalFlYWpvQzQyd3F0OE8zODhsNUhINTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jODk0MDgtY2YyMi00ZGE1LTk4MWEt
YjYzOGIzMWRiODlkLzEvRXQtalFlYWpvQzQyd3F0OE8zODhsNUhINTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni9jODk0MDgtY2YyMi00ZGE1LTk4MWEtYjYzOGIzMWRiODlk
LzEvRXQtalFlYWpvQzQyd3F0OE8zODhsNUhINTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnve1Sys
m7TKj3OER6LVPtsPRAN15gmQe0C8HZcM06UXvht20+cO8vp/rgzTckXsgdoJ16sa
C4jOJ4H0zBPXrOzmVRRGBD+jgDNaxzicPoK6kfhcd4vPxay7J7Fm96/0d9dteQwe
vk5Wl0C2hcyf2VxK49toCmAJkErETmYnfA7gpkWcp6GwCJ26/9tynaQxjpYTNOFf
qbaviopzxtXu8JNR2eYcm6sjkSw65/zeE4S55ywl/wHb9E45MC0okZvxp637r1aN
DJX4Q4Jzi6BS5vBqRLsLU8tuOHvJfaVQ4QLQhkBej/NyLTp/53/fkHFyC5KqA8jo
AavtjdMmOqJhRw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:40 2025 by rpki-client