Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.mft
File:                     a-8_6GtyevJqkO8cwLEaoshoX_4.mft (raw, json)
Hash identifier:          r/m0sfoQgxQpeF+MPUEgOOhHUjG+fL1mfg8e/ZDXbXQ=
Subject key identifier:   6E:FD:A1:C8:01:1E:A5:62:66:C4:E1:F5:56:94:42:70:8A:90:10:98
Authority key identifier: 6B:EF:3F:E8:6B:72:7A:F2:6A:90:EF:1C:C0:B1:1A:A2:C8:68:5F:FE
Certificate issuer:       /CN=6bef3fe86b727af26a90ef1cc0b11aa2c8685ffe
Certificate serial:       01931E8919E8E69D067104C92467B93D526B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-8_6GtyevJqkO8cwLEaoshoX_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.mft
Manifest number:          1282
Signing time:             Tue 12 Nov 2024 04:02:01 +0000
Manifest this update:     Tue 12 Nov 2024 04:02:01 +0000
Manifest next update:     Wed 13 Nov 2024 04:02:01 +0000
Files and hashes:         1: F1YZDQ_UfkV6OflZtRmSrcv2Ju4.roa (hash: vGQWftBb+pnvf+zQxUIYW6+JqQ/wZVm/Sigi1+2Fot0=)
                          2: a-8_6GtyevJqkO8cwLEaoshoX_4.crl (hash: 670a32wjFltA5GFaogtKjeN0s3twj7qrAtMmo/yZsXk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:1e:89:19:e8:e6:9d:06:71:04:c9:24:67:b9:3d:52:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bef3fe86b727af26a90ef1cc0b11aa2c8685ffe
        Validity
            Not Before: Nov 12 04:02:01 2024 GMT
            Not After : Nov 13 04:02:01 2024 GMT
        Subject: CN=6efda1c8011ea56266c4e1f5569442708a901098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:ea:00:a8:93:7b:51:a9:64:70:b6:86:9f:
                    7e:5f:49:b1:53:02:18:1c:77:7d:02:d7:d9:b4:81:
                    3f:9e:90:97:b9:2d:da:a2:a8:87:85:e7:b5:33:1a:
                    36:97:86:2c:ef:a5:37:ac:fc:d7:f0:ee:e2:96:89:
                    dc:4b:9d:cb:6c:13:8a:59:6f:8e:1b:7e:8e:67:1d:
                    c6:9b:40:da:45:55:09:25:40:73:7c:94:9a:b6:95:
                    13:29:6a:e2:54:5f:9e:52:13:72:f9:83:a4:56:3b:
                    05:9a:40:28:5e:73:3a:53:fc:39:2a:a1:89:9a:fa:
                    34:a3:fa:52:b8:26:47:fe:28:03:84:ac:02:83:0a:
                    81:f0:6e:78:4e:04:a9:d8:c6:55:aa:ad:70:ee:0d:
                    da:6c:e4:c9:f4:e6:07:80:fb:b7:8f:be:c3:cb:9d:
                    2a:ba:95:03:b9:6e:a7:51:80:68:c3:72:5f:16:7f:
                    5a:31:b2:c6:c2:9c:c3:41:db:46:ef:53:a6:35:22:
                    0d:22:05:d9:eb:18:9a:15:ca:3f:b8:76:97:6a:83:
                    bf:b6:3a:5b:84:1f:fe:ff:67:82:5e:96:97:8d:e0:
                    33:0c:f7:90:f9:e3:c1:63:eb:95:31:90:82:fb:40:
                    9a:aa:ca:9e:de:02:8b:69:d6:ce:47:a6:b9:04:12:
                    1e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FD:A1:C8:01:1E:A5:62:66:C4:E1:F5:56:94:42:70:8A:90:10:98
            X509v3 Authority Key Identifier:
                keyid:6B:EF:3F:E8:6B:72:7A:F2:6A:90:EF:1C:C0:B1:1A:A2:C8:68:5F:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-8_6GtyevJqkO8cwLEaoshoX_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/4ab35b-0a61-4b40-9623-d0fd82c23f6d/1/a-8_6GtyevJqkO8cwLEaoshoX_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:25:5d:bd:56:a4:84:24:d8:40:39:2d:0e:81:fb:32:7e:
         07:21:31:97:3d:da:d2:8d:c2:f1:f4:fb:49:96:84:da:5f:e0:
         66:ba:0a:7e:5b:ae:a4:5d:67:15:41:88:d1:e2:84:c9:51:38:
         b2:56:1d:3b:dc:da:27:7a:7f:4c:28:86:d8:87:9a:7b:f0:f5:
         e3:eb:e3:99:73:2a:d4:dc:d2:99:26:22:f5:16:22:14:49:5f:
         8e:d8:b4:83:db:70:cf:95:9c:b6:3f:d7:ab:9f:97:91:a6:a3:
         e0:d2:70:6f:7c:a9:8a:18:85:1a:f9:6f:9b:32:bc:9c:88:b7:
         ce:7c:f8:50:aa:55:8b:84:39:04:e7:b1:25:a1:ef:06:2e:86:
         8f:66:ad:a3:5f:80:a4:04:3b:fd:42:a8:e6:80:1f:82:43:ca:
         24:42:1e:ba:ca:8a:b4:5d:0d:93:8f:d7:6a:a3:8c:cb:83:ba:
         e7:d9:91:38:d5:88:e2:d8:05:6c:6a:4d:e7:d6:f3:bf:65:2d:
         18:19:26:e6:96:03:b6:dd:b0:db:74:93:49:cc:ba:65:84:97:
         35:fe:1f:38:05:9b:14:cf:9a:bd:23:27:c5:cc:6c:3e:ee:e8:
         0b:4a:31:95:eb:75:8d:de:23:19:77:04:8e:e2:7c:36:9f:26:
         62:7e:b2:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMeiRno5p0GcQTJJGe5PVJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWYzZmU4NmI3MjdhZjI2YTkwZWYxY2MwYjExYWEyYzg2
ODVmZmUwHhcNMjQxMTEyMDQwMjAxWhcNMjQxMTEzMDQwMjAxWjAzMTEwLwYDVQQD
Eyg2ZWZkYTFjODAxMWVhNTYyNjZjNGUxZjU1Njk0NDI3MDhhOTAxMDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0HqAKiTe1GpZHC2hp9+X0mxUwIY
HHd9AtfZtIE/npCXuS3aoqiHhee1Mxo2l4Ys76U3rPzX8O7iloncS53LbBOKWW+O
G36OZx3Gm0DaRVUJJUBzfJSatpUTKWriVF+eUhNy+YOkVjsFmkAoXnM6U/w5KqGJ
mvo0o/pSuCZH/igDhKwCgwqB8G54TgSp2MZVqq1w7g3abOTJ9OYHgPu3j77Dy50q
upUDuW6nUYBow3JfFn9aMbLGwpzDQdtG71OmNSINIgXZ6xiaFco/uHaXaoO/tjpb
hB/+/2eCXpaXjeAzDPeQ+ePBY+uVMZCC+0Caqsqe3gKLadbOR6a5BBIelwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG79ocgBHqViZsTh9VaUQnCKkBCYMB8GA1UdIwQY
MBaAFGvvP+hrcnryapDvHMCxGqLIaF/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS04XzZHdHlldkpxa084Y3dMRWFvc2hvWF80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi80YWIzNWItMGE2MS00YjQwLTk2MjMt
ZDBmZDgyYzIzZjZkLzEvYS04XzZHdHlldkpxa084Y3dMRWFvc2hvWF80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi80YWIzNWItMGE2MS00YjQwLTk2MjMtZDBmZDgyYzIzZjZk
LzEvYS04XzZHdHlldkpxa084Y3dMRWFvc2hvWF80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqElXb1W
pIQk2EA5LQ6B+zJ+ByExlz3a0o3C8fT7SZaE2l/gZroKfluupF1nFUGI0eKEyVE4
slYdO9zaJ3p/TCiG2Ieae/D14+vjmXMq1NzSmSYi9RYiFElfjti0g9twz5Wctj/X
q5+Xkaaj4NJwb3ypihiFGvlvmzK8nIi3znz4UKpVi4Q5BOexJaHvBi6Gj2ato1+A
pAQ7/UKo5oAfgkPKJEIeusqKtF0Nk4/XaqOMy4O659mRONWI4tgFbGpN59bzv2Ut
GBkm5pYDtt2w23STScy6ZYSXNf4fOAWbFM+avSMnxcxsPu7oC0oxlet1jd4jGXcE
juJ8Np8mYn6ytA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:49 2025 by rpki-client