Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/q4yvcoB-s0zrwSwUu0qUUrSXrKA.mft
File:                     q4yvcoB-s0zrwSwUu0qUUrSXrKA.mft (raw, json)
Hash identifier:          Qm5InxfNVT0CoBpjjbjbS+4dmmGn98wngCTL+L3keYk=
Subject key identifier:   74:95:5E:23:81:EB:E7:D1:21:6A:3E:08:7B:6D:A0:05:9B:0E:C6:1D
Authority key identifier: AB:8C:AF:72:80:7E:B3:4C:EB:C1:2C:14:BB:4A:94:52:B4:97:AC:A0
Certificate issuer:       /CN=ab8caf72807eb34cebc12c14bb4a9452b497aca0
Certificate serial:       018AF8DC10130976DE6F6CD22A2B4290F20A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4yvcoB-s0zrwSwUu0qUUrSXrKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/q4yvcoB-s0zrwSwUu0qUUrSXrKA.mft
Manifest number:          0866
Signing time:             Wed 04 Oct 2023 04:04:46 +0000
Manifest this update:     Wed 04 Oct 2023 04:04:46 +0000
Manifest next update:     Thu 05 Oct 2023 04:04:46 +0000
Files and hashes:         1: _kMOqNKs9Mz6h_sOj3AFT-_2jq0.roa (hash: HUOSa6/VIPiCS2ltwKELLNRXxJ74zFDOyu6xoXN/3mQ=)
                          2: q4yvcoB-s0zrwSwUu0qUUrSXrKA.crl (hash: Rfe3XMmDwNANbOTFEQZHOa7NKk2HhaP58gMDsSrvwkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:dc:10:13:09:76:de:6f:6c:d2:2a:2b:42:90:f2:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8caf72807eb34cebc12c14bb4a9452b497aca0
        Validity
            Not Before: Oct  4 04:04:46 2023 GMT
            Not After : Oct  5 04:04:46 2023 GMT
        Subject: CN=74955e2381ebe7d1216a3e087b6da0059b0ec61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:3f:f1:c2:04:2c:d8:4e:66:67:08:2e:ed:
                    20:1f:84:2b:8e:ca:fe:22:75:09:e9:e7:5c:d7:16:
                    4e:e7:bd:91:0f:20:4a:d9:f3:36:5c:a6:84:c3:e4:
                    ff:f1:2e:a1:db:bf:73:79:6b:6e:1b:4c:1f:0a:8c:
                    97:6b:56:96:7f:67:5e:17:0d:25:36:01:6b:65:3e:
                    76:7d:02:22:6b:4e:03:02:2b:40:83:b4:e9:ef:08:
                    68:61:e3:0f:91:26:f4:48:ab:61:a2:08:05:e8:67:
                    b3:67:63:e1:ae:9d:78:a1:a8:53:47:d6:c0:3c:58:
                    25:32:1b:16:2b:23:58:8b:2b:fc:1e:36:5f:8b:ed:
                    97:a7:3e:09:76:6a:9c:d3:f7:a2:96:60:6e:db:92:
                    1e:08:8d:b7:c5:30:56:2b:4d:81:f5:6e:e7:e3:95:
                    8f:fe:71:42:fc:0c:41:4a:cb:df:41:86:ef:1d:3f:
                    2a:bd:eb:c7:6a:2f:94:16:ab:22:08:f4:8c:2e:31:
                    6c:40:e5:13:34:67:5a:ec:cf:12:bd:dc:8a:e2:ca:
                    e7:d6:ea:9d:dd:63:f5:30:50:2d:e8:2c:20:d9:0b:
                    a6:2b:f6:62:32:54:1c:bb:21:eb:54:0b:41:85:43:
                    10:ae:23:cf:ec:dd:7f:27:9f:ad:87:29:51:7d:25:
                    d3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:95:5E:23:81:EB:E7:D1:21:6A:3E:08:7B:6D:A0:05:9B:0E:C6:1D
            X509v3 Authority Key Identifier:
                keyid:AB:8C:AF:72:80:7E:B3:4C:EB:C1:2C:14:BB:4A:94:52:B4:97:AC:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4yvcoB-s0zrwSwUu0qUUrSXrKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/q4yvcoB-s0zrwSwUu0qUUrSXrKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/df9ffb-32a1-414b-8b2c-728dfecb2514/1/q4yvcoB-s0zrwSwUu0qUUrSXrKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c2:06:ce:b7:e0:c4:7b:64:ec:b2:86:6b:8d:d8:d1:db:72:
         b8:52:a1:42:dc:cd:9c:4d:18:2e:62:0c:2f:16:8c:fd:64:65:
         ac:4a:6c:25:d4:6d:47:6f:0d:96:73:7d:02:05:9e:58:85:7d:
         34:e5:dc:bf:d2:4f:57:5b:a3:f4:94:c9:ee:ac:c2:c3:bb:03:
         a9:8c:b3:be:52:7a:4b:6a:2d:42:76:14:b0:95:51:61:ec:dc:
         f7:2a:0b:35:8d:16:2b:21:a0:f8:f1:6a:eb:c9:60:37:02:48:
         b9:04:bf:d8:ee:08:2b:8f:cf:2a:ed:a0:b3:99:d5:df:e4:8a:
         44:f4:d8:47:1d:93:4f:d3:3d:9f:73:ef:02:17:84:1f:6b:a2:
         7a:30:9a:76:34:a2:31:4d:1f:8f:a4:50:81:09:ac:c4:80:0a:
         7e:13:0a:3b:4b:07:9f:aa:90:c5:22:8e:6c:f8:26:7f:ac:ce:
         0a:8c:b8:8a:fd:3c:f4:c2:72:89:ab:18:71:16:37:53:53:4c:
         16:fc:8f:39:9f:34:0c:aa:e1:dd:d3:00:16:ba:81:2d:35:b5:
         37:32:b2:0f:ed:b5:62:ed:13:52:23:7d:98:5f:34:1c:c8:92:
         b6:89:c6:de:7e:47:8f:8d:89:04:03:90:cb:47:0c:e7:9c:56:
         c9:2f:77:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYr43BATCXbeb2zSKitCkPIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOGNhZjcyODA3ZWIzNGNlYmMxMmMxNGJiNGE5NDUyYjQ5
N2FjYTAwHhcNMjMxMDA0MDQwNDQ2WhcNMjMxMDA1MDQwNDQ2WjAzMTEwLwYDVQQD
Eyg3NDk1NWUyMzgxZWJlN2QxMjE2YTNlMDg3YjZkYTAwNTliMGVjNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznA/8cIELNhOZmcILu0gH4Qrjsr+
InUJ6edc1xZO572RDyBK2fM2XKaEw+T/8S6h279zeWtuG0wfCoyXa1aWf2deFw0l
NgFrZT52fQIia04DAitAg7Tp7whoYeMPkSb0SKthoggF6GezZ2Phrp14oahTR9bA
PFglMhsWKyNYiyv8HjZfi+2Xpz4Jdmqc0/eilmBu25IeCI23xTBWK02B9W7n45WP
/nFC/AxBSsvfQYbvHT8qvevHai+UFqsiCPSMLjFsQOUTNGda7M8SvdyK4srn1uqd
3WP1MFAt6Cwg2QumK/ZiMlQcuyHrVAtBhUMQriPP7N1/J5+thylRfSXTZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSVXiOB6+fRIWo+CHttoAWbDsYdMB8GA1UdIwQY
MBaAFKuMr3KAfrNM68EsFLtKlFK0l6ygMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTR5dmNvQi1zMHpyd1N3VXUwcVVVclNYcktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9kZjlmZmItMzJhMS00MTRiLThiMmMt
NzI4ZGZlY2IyNTE0LzEvcTR5dmNvQi1zMHpyd1N3VXUwcVVVclNYcktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9kZjlmZmItMzJhMS00MTRiLThiMmMtNzI4ZGZlY2IyNTE0
LzEvcTR5dmNvQi1zMHpyd1N3VXUwcVVVclNYcktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsIGzrfg
xHtk7LKGa43Y0dtyuFKhQtzNnE0YLmIMLxaM/WRlrEpsJdRtR28NlnN9AgWeWIV9
NOXcv9JPV1uj9JTJ7qzCw7sDqYyzvlJ6S2otQnYUsJVRYezc9yoLNY0WKyGg+PFq
68lgNwJIuQS/2O4IK4/PKu2gs5nV3+SKRPTYRx2TT9M9n3PvAheEH2uiejCadjSi
MU0fj6RQgQmsxIAKfhMKO0sHn6qQxSKObPgmf6zOCoy4iv089MJyiasYcRY3U1NM
FvyPOZ80DKrh3dMAFrqBLTW1NzKyD+21Yu0TUiN9mF80HMiStonG3n5Hj42JBAOQ
y0cM55xWyS93Ow==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:53 2024 by rpki-client on console-fra.rpki-client.org