Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft
File:                     mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft (raw, json)
Hash identifier:          nR0a8glVcyKd2PunhHDF5Os6tBzplNUQt1mJ7pXQ3Ts=
Subject key identifier:   4A:96:D1:0C:A8:71:D4:57:3A:39:A3:CE:E0:01:F6:3C:18:B3:19:DD
Authority key identifier: 9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87
Certificate issuer:       /CN=9a5684aa26c1abba18c191c6ead6d69d292af987
Certificate serial:       018C814E88AFF650067780A0B82054B9EAF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft
Manifest number:          02C1
Signing time:             Tue 19 Dec 2023 09:00:56 +0000
Manifest this update:     Tue 19 Dec 2023 09:00:56 +0000
Manifest next update:     Wed 20 Dec 2023 09:00:56 +0000
Files and hashes:         1: 2vy1ArEN1tXDaMIBM0WdPrsrzAk.roa (hash: NnGfO3BGBL6B48Nr4B1/nm7Cz/vlrka/jzic9QDesLo=)
                          2: CQn4-yutIMCjkFr1h71OdaaJ1ck.roa (hash: ryylPCuel6i47FP52GMzDaV44P5Swd474qIWsiXCW3w=)
                          3: mlaEqibBq7oYwZHG6tbWnSkq-Yc.crl (hash: tB5rLYLt2M7wfwzj2mnpET3s6uUu/LPWkmTyPWh94LY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:81:4e:88:af:f6:50:06:77:80:a0:b8:20:54:b9:ea:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5684aa26c1abba18c191c6ead6d69d292af987
        Validity
            Not Before: Dec 19 09:00:56 2023 GMT
            Not After : Dec 20 09:00:56 2023 GMT
        Subject: CN=4a96d10ca871d4573a39a3cee001f63c18b319dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:4d:1f:e0:a7:27:67:7b:a9:29:b5:3c:40:
                    4a:7f:14:44:2e:c0:fd:29:e9:35:c4:ee:93:f0:23:
                    93:07:04:81:f9:a0:5e:bd:d6:a6:10:91:06:be:2b:
                    a4:c7:30:a1:5a:fd:0b:64:e7:e6:02:f9:06:f9:98:
                    00:bd:ad:12:26:81:80:af:29:79:eb:d0:4f:10:ba:
                    9b:f6:c0:1d:78:ab:85:ac:34:83:e8:12:05:01:7a:
                    f9:91:54:85:5a:1d:bb:4c:f7:56:57:b4:5d:28:a6:
                    07:09:4a:85:e5:4e:33:df:35:0d:7e:46:7b:7d:26:
                    a3:3d:b9:3d:3b:3c:1c:d9:76:19:76:b7:99:d8:40:
                    65:31:11:ed:e4:cf:4f:81:ea:be:b5:cf:80:27:38:
                    a6:5e:44:b8:cb:13:57:ab:ef:60:61:a7:b9:47:9f:
                    d2:91:0f:2d:86:85:ea:b8:6a:26:ab:3f:27:2d:7f:
                    1c:3c:f2:bf:b0:b3:a4:22:3c:7b:58:f9:0f:c6:7c:
                    9a:cd:53:99:11:ab:85:10:3b:05:cd:36:f0:fb:3d:
                    98:23:49:1e:1d:5a:05:54:c6:b6:c2:4b:a8:12:1e:
                    25:6e:06:20:1f:b9:aa:55:4a:8e:4f:a7:9a:29:b6:
                    cb:7e:68:8c:ca:5a:cd:8a:d3:64:15:57:3e:b4:5a:
                    cc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:96:D1:0C:A8:71:D4:57:3A:39:A3:CE:E0:01:F6:3C:18:B3:19:DD
            X509v3 Authority Key Identifier:
                keyid:9A:56:84:AA:26:C1:AB:BA:18:C1:91:C6:EA:D6:D6:9D:29:2A:F9:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlaEqibBq7oYwZHG6tbWnSkq-Yc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f28598-6754-45c3-b411-812d4d8501df/1/mlaEqibBq7oYwZHG6tbWnSkq-Yc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:9b:05:bb:2f:21:b0:64:26:41:6b:3d:84:e6:b5:52:d3:
         13:f3:0f:0a:22:61:95:cc:93:8b:70:ad:81:70:f1:68:37:92:
         81:c7:03:e3:a6:a9:ee:72:c7:b0:e7:d2:ce:63:71:d4:17:96:
         31:89:b8:17:47:dd:57:3a:f7:0d:61:c3:6a:e4:d4:18:0d:d0:
         1d:7b:66:90:48:58:7d:b8:72:8c:0b:9e:b9:7b:c9:62:41:53:
         98:2a:71:45:6a:c8:86:0a:14:e7:4c:2e:51:19:c4:eb:d7:13:
         01:83:18:88:b6:e5:df:73:83:05:25:3b:4b:80:77:14:e5:e5:
         4e:43:10:0a:ec:7e:6c:4d:a2:e7:67:4d:72:d9:2e:1c:d1:be:
         2b:64:c3:d2:22:f0:30:4c:f8:d0:81:bc:a3:e0:cb:0f:1a:bb:
         a4:1b:2a:5c:c1:a3:8e:5d:dc:48:65:0a:a5:02:f8:a9:9f:8d:
         85:df:aa:e3:f4:95:94:9c:3d:07:33:c0:ea:ac:64:23:8c:6a:
         7d:a5:f5:d3:8a:55:46:7b:62:67:24:ea:8c:4d:6d:20:4f:6e:
         de:7e:44:d0:66:b2:4b:49:96:98:07:5b:43:89:c7:b6:3e:37:
         28:42:4a:3d:15:70:58:54:d2:b5:9d:fd:9d:a9:03:10:85:7e:
         c9:02:d2:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyBToiv9lAGd4CguCBUuer4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTY4NGFhMjZjMWFiYmExOGMxOTFjNmVhZDZkNjlkMjky
YWY5ODcwHhcNMjMxMjE5MDkwMDU2WhcNMjMxMjIwMDkwMDU2WjAzMTEwLwYDVQQD
Eyg0YTk2ZDEwY2E4NzFkNDU3M2EzOWEzY2VlMDAxZjYzYzE4YjMxOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW5NH+CnJ2d7qSm1PEBKfxRELsD9
Kek1xO6T8COTBwSB+aBevdamEJEGviukxzChWv0LZOfmAvkG+ZgAva0SJoGAryl5
69BPELqb9sAdeKuFrDSD6BIFAXr5kVSFWh27TPdWV7RdKKYHCUqF5U4z3zUNfkZ7
fSajPbk9Ozwc2XYZdreZ2EBlMRHt5M9Pgeq+tc+AJzimXkS4yxNXq+9gYae5R5/S
kQ8thoXquGomqz8nLX8cPPK/sLOkIjx7WPkPxnyazVOZEauFEDsFzTbw+z2YI0ke
HVoFVMa2wkuoEh4lbgYgH7mqVUqOT6eaKbbLfmiMylrNitNkFVc+tFrMtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqW0QyocdRXOjmjzuAB9jwYsxndMB8GA1UdIwQY
MBaAFJpWhKomwau6GMGRxurW1p0pKvmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxhRXFpYkJxN29Zd1pIRzZ0YlduU2txLVljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMjg1OTgtNjc1NC00NWMzLWI0MTEt
ODEyZDRkODUwMWRmLzEvbWxhRXFpYkJxN29Zd1pIRzZ0YlduU2txLVljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mMjg1OTgtNjc1NC00NWMzLWI0MTEtODEyZDRkODUwMWRm
LzEvbWxhRXFpYkJxN29Zd1pIRzZ0YlduU2txLVljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMmbBbsv
IbBkJkFrPYTmtVLTE/MPCiJhlcyTi3CtgXDxaDeSgccD46ap7nLHsOfSzmNx1BeW
MYm4F0fdVzr3DWHDauTUGA3QHXtmkEhYfbhyjAueuXvJYkFTmCpxRWrIhgoU50wu
URnE69cTAYMYiLbl33ODBSU7S4B3FOXlTkMQCux+bE2i52dNctkuHNG+K2TD0iLw
MEz40IG8o+DLDxq7pBsqXMGjjl3cSGUKpQL4qZ+Nhd+q4/SVlJw9BzPA6qxkI4xq
faX104pVRntiZyTqjE1tIE9u3n5E0GayS0mWmAdbQ4nHtj43KEJKPRVwWFTStZ39
nakDEIV+yQLSNA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:06 2024 by rpki-client on console-fra.rpki-client.org