Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/3zJySYNf7hZ7GDSw53wSwYHYXfc.mft
File:                     3zJySYNf7hZ7GDSw53wSwYHYXfc.mft (raw, json)
Hash identifier:          UqdTf5bTvvdf+Ws7ES0ntVNFbkhv1DZhzlW7lw9tznU=
Subject key identifier:   92:FA:FD:0C:17:A9:6D:CB:77:D7:D2:99:09:E7:86:09:A8:E2:51:BB
Authority key identifier: DF:32:72:49:83:5F:EE:16:7B:18:34:B0:E7:7C:12:C1:81:D8:5D:F7
Certificate issuer:       /CN=df327249835fee167b1834b0e77c12c181d85df7
Certificate serial:       018DEE8433D477677E2500BB412F572DBAEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3zJySYNf7hZ7GDSw53wSwYHYXfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/3zJySYNf7hZ7GDSw53wSwYHYXfc.mft
Manifest number:          0DF1
Signing time:             Wed 28 Feb 2024 07:00:57 +0000
Manifest this update:     Wed 28 Feb 2024 07:00:57 +0000
Manifest next update:     Thu 29 Feb 2024 07:00:57 +0000
Files and hashes:         1: 3zJySYNf7hZ7GDSw53wSwYHYXfc.crl (hash: J0Mcxdg18zPg2uALzC52/MYA7MkMFbAcGVZdEgKllis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ee:84:33:d4:77:67:7e:25:00:bb:41:2f:57:2d:ba:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df327249835fee167b1834b0e77c12c181d85df7
        Validity
            Not Before: Feb 28 07:00:57 2024 GMT
            Not After : Feb 29 07:00:57 2024 GMT
        Subject: CN=92fafd0c17a96dcb77d7d29909e78609a8e251bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1f:e7:3f:6b:db:50:f4:a7:ba:7b:5c:d3:3b:
                    77:2e:db:45:91:86:6c:f2:a5:f4:a9:fb:bb:56:f5:
                    dc:d1:7b:c7:b6:90:4f:3a:5a:59:c9:27:0b:a7:3e:
                    94:ef:5f:24:63:68:bf:0b:93:d6:3e:b5:a6:4a:08:
                    ec:ad:22:b3:85:e5:76:38:e6:2c:8f:2b:f5:63:49:
                    0b:5b:40:63:49:0e:b8:01:20:e3:f9:c5:8b:b0:f5:
                    29:5c:26:30:1c:4f:c7:dd:fa:9c:d4:5a:47:f5:15:
                    30:34:ad:1f:33:ba:1a:28:dd:53:48:26:9b:55:43:
                    04:2e:ea:70:e4:e8:c3:cd:8a:36:d0:98:31:f9:37:
                    cc:01:d9:1a:47:13:11:bd:72:ad:4f:0c:4d:46:ce:
                    87:7b:d0:19:b1:66:9c:a5:b8:30:b6:02:ac:de:2c:
                    6c:b3:5c:21:13:5d:e5:86:cf:fe:cc:1a:1d:c2:fa:
                    e1:1f:49:66:69:ec:51:aa:48:81:92:ef:c5:c1:16:
                    86:fb:e6:e4:a7:1d:57:1e:95:0f:9b:a5:eb:b5:a5:
                    66:c5:6b:be:3e:fe:43:e7:79:5a:1b:a3:c2:d8:2d:
                    d3:40:8d:57:61:a1:a7:80:17:fb:87:61:17:24:70:
                    89:3f:45:10:cf:04:d5:5c:fe:bb:9b:bc:c1:fa:2a:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FA:FD:0C:17:A9:6D:CB:77:D7:D2:99:09:E7:86:09:A8:E2:51:BB
            X509v3 Authority Key Identifier:
                keyid:DF:32:72:49:83:5F:EE:16:7B:18:34:B0:E7:7C:12:C1:81:D8:5D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zJySYNf7hZ7GDSw53wSwYHYXfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/3zJySYNf7hZ7GDSw53wSwYHYXfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/82040e-2a2a-487f-857b-a2bb8f5ef85d/1/3zJySYNf7hZ7GDSw53wSwYHYXfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:a1:9f:a8:2d:a0:1b:f2:8b:4f:66:c3:c7:26:65:95:2f:2f:
         f3:ff:6a:77:64:40:b2:21:97:57:74:01:7d:54:10:8c:e7:12:
         ad:b9:42:e8:6b:8f:36:fc:8e:1e:84:bc:b1:d8:de:72:f6:a6:
         38:56:74:97:ac:22:58:de:40:36:7e:2f:9b:fa:3d:04:0d:60:
         5a:0b:ca:56:ec:67:f9:1f:e6:b4:cb:f0:d6:e9:96:05:74:5e:
         41:72:57:43:34:b0:7e:b3:79:e6:b9:5c:ae:76:91:ce:44:34:
         25:18:38:70:cd:94:44:b5:16:3d:3d:e2:fd:81:dc:2e:4e:65:
         58:cb:00:dd:b5:43:80:56:df:fb:b4:f7:b6:7b:b2:d2:95:a3:
         34:25:a2:7b:07:cb:d6:94:99:27:b1:9a:e8:3b:c3:4c:0d:fb:
         a8:ad:23:76:99:7d:9c:9e:fa:53:5f:ac:80:95:15:2f:02:70:
         99:e9:40:d9:49:2c:96:06:32:25:b0:66:f3:6e:ee:d5:62:33:
         37:c2:33:04:b9:b5:17:f8:66:e4:cb:e2:5d:f5:aa:cb:99:1f:
         1c:cb:86:45:3f:91:a0:0a:ca:da:80:29:bc:d1:44:1d:5b:40:
         ce:18:35:5f:9f:ce:48:c1:65:3c:26:7e:e8:1b:d8:70:c2:e9:
         2e:84:c8:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY3uhDPUd2d+JQC7QS9XLbrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmMzI3MjQ5ODM1ZmVlMTY3YjE4MzRiMGU3N2MxMmMxODFk
ODVkZjcwHhcNMjQwMjI4MDcwMDU3WhcNMjQwMjI5MDcwMDU3WjAzMTEwLwYDVQQD
Eyg5MmZhZmQwYzE3YTk2ZGNiNzdkN2QyOTkwOWU3ODYwOWE4ZTI1MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx/nP2vbUPSnuntc0zt3LttFkYZs
8qX0qfu7VvXc0XvHtpBPOlpZyScLpz6U718kY2i/C5PWPrWmSgjsrSKzheV2OOYs
jyv1Y0kLW0BjSQ64ASDj+cWLsPUpXCYwHE/H3fqc1FpH9RUwNK0fM7oaKN1TSCab
VUMELupw5OjDzYo20Jgx+TfMAdkaRxMRvXKtTwxNRs6He9AZsWacpbgwtgKs3ixs
s1whE13lhs/+zBodwvrhH0lmaexRqkiBku/FwRaG++bkpx1XHpUPm6XrtaVmxWu+
Pv5D53laG6PC2C3TQI1XYaGngBf7h2EXJHCJP0UQzwTVXP67m7zB+iqAVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJL6/QwXqW3Ld9fSmQnnhgmo4lG7MB8GA1UdIwQY
MBaAFN8yckmDX+4Wexg0sOd8EsGB2F33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3pKeVNZTmY3aFo3R0RTdzUzd1N3WUhZWGZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84MjA0MGUtMmEyYS00ODdmLTg1N2It
YTJiYjhmNWVmODVkLzEvM3pKeVNZTmY3aFo3R0RTdzUzd1N3WUhZWGZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84MjA0MGUtMmEyYS00ODdmLTg1N2ItYTJiYjhmNWVmODVk
LzEvM3pKeVNZTmY3aFo3R0RTdzUzd1N3WUhZWGZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApaGfqC2g
G/KLT2bDxyZllS8v8/9qd2RAsiGXV3QBfVQQjOcSrblC6GuPNvyOHoS8sdjecvam
OFZ0l6wiWN5ANn4vm/o9BA1gWgvKVuxn+R/mtMvw1umWBXReQXJXQzSwfrN55rlc
rnaRzkQ0JRg4cM2URLUWPT3i/YHcLk5lWMsA3bVDgFbf+7T3tnuy0pWjNCWiewfL
1pSZJ7Ga6DvDTA37qK0jdpl9nJ76U1+sgJUVLwJwmelA2UkslgYyJbBm827u1WIz
N8IzBLm1F/hm5MviXfWqy5kfHMuGRT+RoArK2oApvNFEHVtAzhg1X5/OSMFlPCZ+
6BvYcMLpLoTIRg==
-----END CERTIFICATE-----