Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/dNK4tbqbYoVs5EGoRurPQRRQYEg.mft
File:                     dNK4tbqbYoVs5EGoRurPQRRQYEg.mft (raw, json)
Hash identifier:          7KyY6DgIkWjvXRAZLaDg5B5L3SS8UWIFdPsqTSrpmN0=
Subject key identifier:   0E:A9:F7:D3:D4:A1:BA:95:42:48:6A:A8:32:8C:71:B1:20:F3:5D:75
Authority key identifier: 74:D2:B8:B5:BA:9B:62:85:6C:E4:41:A8:46:EA:CF:41:14:50:60:48
Certificate issuer:       /CN=74d2b8b5ba9b62856ce441a846eacf4114506048
Certificate serial:       018A2A532C175F53ECFA05EDC082E37EA1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNK4tbqbYoVs5EGoRurPQRRQYEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/dNK4tbqbYoVs5EGoRurPQRRQYEg.mft
Manifest number:          72
Signing time:             Fri 25 Aug 2023 01:33:28 +0000
Manifest this update:     Fri 25 Aug 2023 01:33:28 +0000
Manifest next update:     Sat 26 Aug 2023 01:33:28 +0000
Files and hashes:         1: LBiV656SJdduH8Xgu-lkgXA2NQo.roa (hash: aixEbv1sdVefx1VX9F+xBTA5PTtZKxRXlYu5A8C45wc=)
                          2: dNK4tbqbYoVs5EGoRurPQRRQYEg.crl (hash: oRePU0nnW2nYKBzG4WqxKzFNLC19qDL38uZLuXLmcAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2a:53:2c:17:5f:53:ec:fa:05:ed:c0:82:e3:7e:a1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d2b8b5ba9b62856ce441a846eacf4114506048
        Validity
            Not Before: Aug 25 01:33:28 2023 GMT
            Not After : Aug 26 01:33:28 2023 GMT
        Subject: CN=0ea9f7d3d4a1ba9542486aa8328c71b120f35d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:11:0e:ec:df:d8:f3:35:4e:6d:2a:2f:65:d9:
                    ad:4f:4a:c3:a0:07:c6:74:1e:c4:4c:bc:fa:22:df:
                    8a:c2:ba:eb:9a:fe:f8:d9:f6:24:66:14:f9:ff:37:
                    61:cd:76:b5:4a:76:a0:a5:85:db:41:f5:7b:10:78:
                    03:b0:6a:e9:32:ed:2a:52:51:9c:a7:64:77:76:4a:
                    61:6b:9c:24:ae:11:eb:a0:a1:21:9d:ba:7a:92:0d:
                    94:df:28:fb:c9:49:56:18:90:db:c6:f9:e7:4a:0e:
                    7e:5d:c8:6e:2a:33:30:f6:0d:57:ab:e4:ec:43:a3:
                    ad:8a:35:ed:02:73:0b:7c:30:9d:64:70:37:59:e4:
                    3d:12:d4:62:41:8c:c1:f8:07:f1:df:f1:35:39:dc:
                    78:3a:55:58:4c:28:d7:24:51:60:80:8b:7b:11:50:
                    ce:bc:75:f7:f8:81:f5:bc:35:c7:31:f1:b4:fe:48:
                    91:59:f3:ee:b1:fd:da:fa:96:2a:ab:15:e7:38:54:
                    d7:15:87:7f:79:c7:0a:1a:ce:7d:34:a7:73:7d:da:
                    aa:97:98:4c:fa:48:e2:81:13:46:7b:b1:36:8f:8f:
                    4d:4f:c9:cd:a1:51:38:54:bc:0b:e6:13:e4:38:41:
                    ca:fd:ec:e4:a3:5d:a8:ee:60:f4:fc:b8:8a:f6:25:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A9:F7:D3:D4:A1:BA:95:42:48:6A:A8:32:8C:71:B1:20:F3:5D:75
            X509v3 Authority Key Identifier:
                keyid:74:D2:B8:B5:BA:9B:62:85:6C:E4:41:A8:46:EA:CF:41:14:50:60:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNK4tbqbYoVs5EGoRurPQRRQYEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/dNK4tbqbYoVs5EGoRurPQRRQYEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b3ee58-a9d9-4b41-b16e-6e65d82900a8/1/dNK4tbqbYoVs5EGoRurPQRRQYEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:cb:c6:05:4a:fe:94:37:f7:ec:6c:2a:1f:b2:82:73:95:
         23:e0:23:6c:f8:0e:1e:bb:21:b0:e4:c7:f8:c7:bc:8c:d1:b0:
         d2:c9:1e:3d:94:1c:e5:12:69:dc:d3:c3:9d:cf:60:c1:13:af:
         cc:77:fd:8c:74:11:0c:61:3c:44:8f:d7:12:30:42:61:67:24:
         ad:65:0a:dc:10:d1:6d:4c:a9:47:37:38:f5:fe:26:65:f0:95:
         82:c6:49:47:e1:d6:7b:68:9c:64:a7:b5:b0:7c:b9:ba:88:fa:
         04:ba:16:c7:eb:7e:3d:f2:c2:74:fb:74:ca:36:5f:8e:ce:cc:
         2d:9d:5e:1b:98:59:8f:8b:06:d1:53:d6:d7:a8:1e:6b:30:a6:
         f4:d9:10:92:ab:c9:41:99:90:c1:d0:c8:4e:0c:ff:34:ba:56:
         6d:be:a0:61:48:74:10:51:c3:34:70:cf:3e:af:4d:1b:b5:e0:
         5d:d3:48:4b:af:1b:b4:a8:d7:4d:a3:13:7d:ea:72:fb:bd:2d:
         9c:98:19:00:ba:b5:46:ae:cb:35:10:56:56:4f:13:c1:d4:d2:
         cf:14:6b:b3:70:2f:20:43:e7:50:09:2b:4c:a9:e4:d5:29:fb:
         c8:d3:53:f3:53:3c:6c:bf:2e:7c:18:cf:ee:4e:9b:33:71:91:
         94:ba:07:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYoqUywXX1Ps+gXtwILjfqHTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZDJiOGI1YmE5YjYyODU2Y2U0NDFhODQ2ZWFjZjQxMTQ1
MDYwNDgwHhcNMjMwODI1MDEzMzI4WhcNMjMwODI2MDEzMzI4WjAzMTEwLwYDVQQD
EygwZWE5ZjdkM2Q0YTFiYTk1NDI0ODZhYTgzMjhjNzFiMTIwZjM1ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiREO7N/Y8zVObSovZdmtT0rDoAfG
dB7ETLz6It+Kwrrrmv742fYkZhT5/zdhzXa1SnagpYXbQfV7EHgDsGrpMu0qUlGc
p2R3dkpha5wkrhHroKEhnbp6kg2U3yj7yUlWGJDbxvnnSg5+XchuKjMw9g1Xq+Ts
Q6OtijXtAnMLfDCdZHA3WeQ9EtRiQYzB+Afx3/E1Odx4OlVYTCjXJFFggIt7EVDO
vHX3+IH1vDXHMfG0/kiRWfPusf3a+pYqqxXnOFTXFYd/eccKGs59NKdzfdqql5hM
+kjigRNGe7E2j49NT8nNoVE4VLwL5hPkOEHK/ezko12o7mD0/LiK9iVj5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6p99PUobqVQkhqqDKMcbEg8111MB8GA1UdIwQY
MBaAFHTSuLW6m2KFbORBqEbqz0EUUGBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE5LNHRicWJZb1ZzNUVHb1J1clBRUlJRWUVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iM2VlNTgtYTlkOS00YjQxLWIxNmUt
NmU2NWQ4MjkwMGE4LzEvZE5LNHRicWJZb1ZzNUVHb1J1clBRUlJRWUVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iM2VlNTgtYTlkOS00YjQxLWIxNmUtNmU2NWQ4MjkwMGE4
LzEvZE5LNHRicWJZb1ZzNUVHb1J1clBRUlJRWUVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArA7LxgVK
/pQ39+xsKh+ygnOVI+AjbPgOHrshsOTH+Me8jNGw0skePZQc5RJp3NPDnc9gwROv
zHf9jHQRDGE8RI/XEjBCYWckrWUK3BDRbUypRzc49f4mZfCVgsZJR+HWe2icZKe1
sHy5uoj6BLoWx+t+PfLCdPt0yjZfjs7MLZ1eG5hZj4sG0VPW16geazCm9NkQkqvJ
QZmQwdDITgz/NLpWbb6gYUh0EFHDNHDPPq9NG7XgXdNIS68btKjXTaMTfepy+70t
nJgZALq1Rq7LNRBWVk8TwdTSzxRrs3AvIEPnUAkrTKnk1Sn7yNNT81M8bL8ufBjP
7k6bM3GRlLoHHA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:13 2024 by rpki-client on console-fra.rpki-client.org