Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft
File:                     iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft (raw, json)
Hash identifier:          aXa/E0UyaAvLePACNgFaLWYwWfi12deIX9cpDL7mrPQ=
Subject key identifier:   F7:8D:97:D5:47:E0:10:C1:42:71:5C:74:F3:11:19:3A:A3:FD:83:A4
Authority key identifier: 88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44
Certificate issuer:       /CN=88e8e1cafa7b604859840c57af48e817c327f644
Certificate serial:       018CD2A6D6CD7D2EF06B60B9B6EEBAB6ACE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft
Manifest number:          0966
Signing time:             Thu 04 Jan 2024 04:06:38 +0000
Manifest this update:     Thu 04 Jan 2024 04:06:38 +0000
Manifest next update:     Fri 05 Jan 2024 04:06:38 +0000
Files and hashes:         1: iOjhyvp7YEhZhAxXr0joF8Mn9kQ.crl (hash: AtcIfEK5/n1YP2sYwZM6ItEACaD7OmS+eEYz52cXGXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d2:a6:d6:cd:7d:2e:f0:6b:60:b9:b6:ee:ba:b6:ac:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e8e1cafa7b604859840c57af48e817c327f644
        Validity
            Not Before: Jan  4 04:06:38 2024 GMT
            Not After : Jan  5 04:06:38 2024 GMT
        Subject: CN=f78d97d547e010c142715c74f311193aa3fd83a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e9:10:25:dd:86:fe:f1:de:e7:89:dc:ea:71:
                    7b:40:9e:30:50:62:0b:f0:53:8a:5e:6a:66:62:a6:
                    4b:1b:13:40:35:51:d4:e5:d6:be:d1:e7:a4:c9:9e:
                    49:d7:06:c6:96:15:06:f0:eb:b8:ef:7f:64:52:00:
                    18:1a:c1:d1:a2:f4:6e:b4:a4:f8:91:47:53:07:e9:
                    c1:7e:6e:89:9a:fe:1d:c2:98:69:5c:f3:f6:c4:e2:
                    cf:29:b3:49:2a:b6:f3:80:7f:5b:b9:6d:72:d4:e7:
                    86:65:7a:d3:54:60:87:ec:45:5e:71:66:2c:5f:55:
                    55:c7:51:fd:ff:2b:c8:6b:04:50:31:74:33:b4:d7:
                    34:16:1e:a3:12:58:0d:d3:46:3a:7e:28:b5:89:f5:
                    55:11:2f:8c:00:91:91:5b:29:91:a8:f7:1c:78:21:
                    3a:ea:b7:19:0e:26:0b:70:c6:3e:27:4e:85:fa:11:
                    47:92:3c:ed:53:1b:b2:fb:57:a9:94:a5:6c:8a:70:
                    b5:d5:fa:3a:1e:86:90:fe:6d:b4:c3:26:5b:c6:0e:
                    a1:0a:8d:b8:d4:0f:05:c5:41:cc:79:53:1c:e1:6b:
                    d9:4f:e9:03:10:74:d7:ec:8a:14:65:99:97:03:5b:
                    ed:5a:cc:db:ff:c6:5e:6b:a8:30:fa:02:43:ab:04:
                    6f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:97:D5:47:E0:10:C1:42:71:5C:74:F3:11:19:3A:A3:FD:83:A4
            X509v3 Authority Key Identifier:
                keyid:88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e0:3a:25:1e:36:89:aa:cc:ca:d1:75:db:0f:32:9d:f4:23:
         f6:bf:95:3a:f8:e8:06:a9:89:96:bd:ea:b3:96:79:4e:96:71:
         67:a6:bf:8b:93:03:e5:a5:90:dd:ab:d6:30:27:00:f8:97:83:
         68:cd:0c:c0:79:7b:0e:94:e4:34:00:b9:6d:6c:d9:80:0f:88:
         28:cb:bc:90:44:8c:8e:04:49:47:d3:05:a6:c1:63:57:0e:00:
         5a:ed:85:f4:5a:e1:d8:49:1e:25:98:a0:27:a4:75:27:e9:bd:
         4f:9c:6a:97:38:2f:64:eb:42:3e:dd:d5:64:0a:a2:d2:a9:0c:
         77:54:c9:56:8a:11:1f:dc:09:cb:4e:3b:75:11:bf:e3:b6:bc:
         03:3f:38:df:37:21:0a:36:46:4c:eb:44:43:49:cb:96:d1:7a:
         e1:53:88:6f:0f:7b:48:a1:28:52:2c:f5:61:67:0c:a4:60:79:
         77:22:b2:56:c8:17:45:3b:f7:5e:b7:88:43:81:67:6f:eb:a6:
         94:3b:5e:8e:6f:2e:b2:47:bc:ea:6f:28:ce:0b:aa:37:85:3b:
         f3:4c:78:89:01:2c:49:24:54:53:fa:04:57:d1:14:1c:db:b6:
         77:fc:bf:7c:26:48:1c:c7:45:56:6b:90:f9:6e:b8:9e:9d:42:
         c6:b4:61:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzSptbNfS7wa2C5tu66tqzlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZThlMWNhZmE3YjYwNDg1OTg0MGM1N2FmNDhlODE3YzMy
N2Y2NDQwHhcNMjQwMTA0MDQwNjM4WhcNMjQwMTA1MDQwNjM4WjAzMTEwLwYDVQQD
EyhmNzhkOTdkNTQ3ZTAxMGMxNDI3MTVjNzRmMzExMTkzYWEzZmQ4M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlekQJd2G/vHe54nc6nF7QJ4wUGIL
8FOKXmpmYqZLGxNANVHU5da+0eekyZ5J1wbGlhUG8Ou4739kUgAYGsHRovRutKT4
kUdTB+nBfm6Jmv4dwphpXPP2xOLPKbNJKrbzgH9buW1y1OeGZXrTVGCH7EVecWYs
X1VVx1H9/yvIawRQMXQztNc0Fh6jElgN00Y6fii1ifVVES+MAJGRWymRqPcceCE6
6rcZDiYLcMY+J06F+hFHkjztUxuy+1eplKVsinC11fo6HoaQ/m20wyZbxg6hCo24
1A8FxUHMeVMc4WvZT+kDEHTX7IoUZZmXA1vtWszb/8Zea6gw+gJDqwRv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPeNl9VH4BDBQnFcdPMRGTqj/YOkMB8GA1UdIwQY
MBaAFIjo4cr6e2BIWYQMV69I6BfDJ/ZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9qaHl2cDdZRWhaaEF4WHIwam9GOE1uOWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80YzRjZDItNmM3MC00ZGI5LTk0ZjYt
YjYzNzM4MWI0Zjc5LzEvaU9qaHl2cDdZRWhaaEF4WHIwam9GOE1uOWtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80YzRjZDItNmM3MC00ZGI5LTk0ZjYtYjYzNzM4MWI0Zjc5
LzEvaU9qaHl2cDdZRWhaaEF4WHIwam9GOE1uOWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduA6JR42
iarMytF12w8ynfQj9r+VOvjoBqmJlr3qs5Z5TpZxZ6a/i5MD5aWQ3avWMCcA+JeD
aM0MwHl7DpTkNAC5bWzZgA+IKMu8kESMjgRJR9MFpsFjVw4AWu2F9Frh2EkeJZig
J6R1J+m9T5xqlzgvZOtCPt3VZAqi0qkMd1TJVooRH9wJy047dRG/47a8Az843zch
CjZGTOtEQ0nLltF64VOIbw97SKEoUiz1YWcMpGB5dyKyVsgXRTv3XreIQ4Fnb+um
lDtejm8uske86m8ozguqN4U780x4iQEsSSRUU/oEV9EUHNu2d/y/fCZIHMdFVmuQ
+W64np1CxrRh2g==
-----END CERTIFICATE-----
Generated at Thu Jan 4 13:03:44 2024 by rpki-client on console-fra.rpki-client.org