Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
File:                     e3GzUs9psfJyplQhurrIElGJ0-Q.mft (raw, json)
Hash identifier:          86MAff9jzktG1p2wXkq1ieTo7OcWhovgdYG+vvWCIy0=
Subject key identifier:   D6:2B:31:85:BE:D7:0D:94:34:D3:62:30:37:AA:8A:18:AC:B3:F8:90
Authority key identifier: 7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4
Certificate issuer:       /CN=7b71b352cf69b1f272a65421babac8125189d3e4
Certificate serial:       018F98AAD8BC1B36338DA63966A8B4C5C548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft
Manifest number:          04DF
Signing time:             Tue 21 May 2024 01:01:24 +0000
Manifest this update:     Tue 21 May 2024 01:01:24 +0000
Manifest next update:     Wed 22 May 2024 01:01:24 +0000
Files and hashes:         1: e3GzUs9psfJyplQhurrIElGJ0-Q.crl (hash: LasgHkFHaB5nG38jb671t4sLPVjHscXX1yj+7cOmaLY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:aa:d8:bc:1b:36:33:8d:a6:39:66:a8:b4:c5:c5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b71b352cf69b1f272a65421babac8125189d3e4
        Validity
            Not Before: May 21 01:01:24 2024 GMT
            Not After : May 22 01:01:24 2024 GMT
        Subject: CN=d62b3185bed70d9434d3623037aa8a18acb3f890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:71:16:20:16:63:a1:8e:70:64:eb:76:52:
                    8c:86:02:c7:36:7c:50:81:13:a3:03:b6:f4:38:e9:
                    21:d2:d2:9b:d7:fe:b8:1b:7c:06:0e:d6:fe:c4:b2:
                    36:f2:d6:7c:ef:92:25:c8:0a:ef:a4:11:ad:7a:a6:
                    b8:ba:32:e4:96:28:8c:d3:82:a6:6c:8e:d2:18:cf:
                    df:be:2c:df:c2:67:ea:61:18:d0:b3:89:de:74:f3:
                    c3:a5:e5:ea:91:56:e3:21:aa:57:ae:af:ba:80:b2:
                    05:6a:b3:d2:ff:8f:30:fe:de:f0:7a:f5:6e:66:9d:
                    ce:6c:46:34:10:ee:aa:6a:26:08:72:4a:ad:4f:84:
                    d4:2c:6d:a0:b0:9a:5b:af:57:01:93:13:6b:9f:c5:
                    f8:bd:85:26:4d:ef:f5:44:8f:95:fc:30:38:8d:0c:
                    ea:9b:cd:48:17:4b:95:03:12:0f:33:18:3e:43:b5:
                    bd:29:3c:ec:a2:5d:47:64:e6:88:39:6b:7e:a2:27:
                    4c:fd:e0:61:f5:f6:94:6c:53:15:1e:da:df:6d:0b:
                    ff:30:e2:30:e2:b2:b1:46:7c:90:12:07:49:76:cc:
                    63:5f:70:1b:9f:07:7b:d3:38:e6:68:91:11:5e:a5:
                    03:29:90:b9:ec:e2:8e:ef:b8:66:2a:aa:e9:ce:bd:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2B:31:85:BE:D7:0D:94:34:D3:62:30:37:AA:8A:18:AC:B3:F8:90
            X509v3 Authority Key Identifier:
                keyid:7B:71:B3:52:CF:69:B1:F2:72:A6:54:21:BA:BA:C8:12:51:89:D3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3GzUs9psfJyplQhurrIElGJ0-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/baa5f0-4c59-4ce1-a29d-d97e6c16f370/1/e3GzUs9psfJyplQhurrIElGJ0-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e8:7c:ad:82:23:de:f6:7c:c7:05:00:e6:02:c9:5a:88:4b:
         47:36:29:cb:06:3c:1b:39:4d:de:ae:f0:ee:4b:15:df:68:92:
         92:62:97:68:92:5f:c4:7e:66:a8:59:ae:a1:9a:e1:05:38:1d:
         b1:04:13:85:f9:1a:22:f9:4d:a4:26:a8:91:6a:30:5e:98:a2:
         44:f9:2f:a6:9e:aa:92:82:ee:75:06:ee:53:06:76:3a:bf:0b:
         a0:45:4c:20:d0:87:bd:0f:0c:b6:86:a6:3f:0f:65:d0:3c:73:
         82:fd:1f:9f:11:1c:94:f7:38:2c:a4:fd:b9:85:3b:61:85:78:
         da:f2:33:bf:84:b3:cd:a3:06:d5:fb:7c:4e:2a:a3:70:72:30:
         84:10:bb:97:a5:89:4a:9b:04:a4:78:af:92:c1:aa:b2:61:05:
         aa:87:31:cc:37:9b:d0:4f:c1:59:fd:99:f6:50:79:48:7f:02:
         20:4e:80:16:95:11:54:ea:f0:a5:78:de:99:8f:5c:d8:a6:2f:
         8c:a8:fd:c9:61:b0:60:b3:76:4e:cd:69:47:cb:ee:14:da:67:
         dd:db:88:4d:09:1c:17:e0:f9:de:f7:2e:03:7c:29:96:f5:fe:
         e3:12:31:0d:0c:2e:94:ee:4c:04:8b:fa:0d:19:d0:94:5d:2f:
         71:80:2a:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Yqti8GzYzjaY5Zqi0xcVIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNzFiMzUyY2Y2OWIxZjI3MmE2NTQyMWJhYmFjODEyNTE4
OWQzZTQwHhcNMjQwNTIxMDEwMTI0WhcNMjQwNTIyMDEwMTI0WjAzMTEwLwYDVQQD
EyhkNjJiMzE4NWJlZDcwZDk0MzRkMzYyMzAzN2FhOGExOGFjYjNmODkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztJxFiAWY6GOcGTrdlKMhgLHNnxQ
gROjA7b0OOkh0tKb1/64G3wGDtb+xLI28tZ875IlyArvpBGteqa4ujLkliiM04Km
bI7SGM/fvizfwmfqYRjQs4nedPPDpeXqkVbjIapXrq+6gLIFarPS/48w/t7wevVu
Zp3ObEY0EO6qaiYIckqtT4TULG2gsJpbr1cBkxNrn8X4vYUmTe/1RI+V/DA4jQzq
m81IF0uVAxIPMxg+Q7W9KTzsol1HZOaIOWt+oidM/eBh9faUbFMVHtrfbQv/MOIw
4rKxRnyQEgdJdsxjX3Abnwd70zjmaJERXqUDKZC57OKO77hmKqrpzr16QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYrMYW+1w2UNNNiMDeqihiss/iQMB8GA1UdIwQY
MBaAFHtxs1LPabHycqZUIbq6yBJRidPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTNHelVzOXBzZkp5cGxRaHVycklFbEdKMC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iYWE1ZjAtNGM1OS00Y2UxLWEyOWQt
ZDk3ZTZjMTZmMzcwLzEvZTNHelVzOXBzZkp5cGxRaHVycklFbEdKMC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iYWE1ZjAtNGM1OS00Y2UxLWEyOWQtZDk3ZTZjMTZmMzcw
LzEvZTNHelVzOXBzZkp5cGxRaHVycklFbEdKMC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOh8rYIj
3vZ8xwUA5gLJWohLRzYpywY8GzlN3q7w7ksV32iSkmKXaJJfxH5mqFmuoZrhBTgd
sQQThfkaIvlNpCaokWowXpiiRPkvpp6qkoLudQbuUwZ2Or8LoEVMINCHvQ8Mtoam
Pw9l0Dxzgv0fnxEclPc4LKT9uYU7YYV42vIzv4SzzaMG1ft8TiqjcHIwhBC7l6WJ
SpsEpHivksGqsmEFqocxzDeb0E/BWf2Z9lB5SH8CIE6AFpURVOrwpXjemY9c2KYv
jKj9yWGwYLN2Ts1pR8vuFNpn3duITQkcF+D53vcuA3wplvX+4xIxDQwulO5MBIv6
DRnQlF0vcYAqUA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org