Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
File:                     8_oS39r89zk5o5gPNSsF1Li6jYw.mft (raw, json)
Hash identifier:          U53o2zZ17VJQWJyS6KJTbOcBk1RTDKFL0yECNTyH0Qk=
Subject key identifier:   75:00:FB:A1:43:70:D9:D5:B8:3E:5A:CD:7F:FF:00:D7:82:26:3B:78
Authority key identifier: F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C
Certificate issuer:       /CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
Certificate serial:       0193AEBA5BC92093AA965FFDC4A452FA8188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft
Manifest number:          07FF
Signing time:             Tue 10 Dec 2024 04:01:08 +0000
Manifest this update:     Tue 10 Dec 2024 04:01:08 +0000
Manifest next update:     Wed 11 Dec 2024 04:01:08 +0000
Files and hashes:         1: 8_oS39r89zk5o5gPNSsF1Li6jYw.crl (hash: aY3Wq3C/wy1KfVzP9DkdtOUUO5cLNY8XEecfmeMtHok=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ae:ba:5b:c9:20:93:aa:96:5f:fd:c4:a4:52:fa:81:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fa12dfdafcf73939a3980f352b05d4b8ba8d8c
        Validity
            Not Before: Dec 10 04:01:08 2024 GMT
            Not After : Dec 11 04:01:08 2024 GMT
        Subject: CN=7500fba14370d9d5b83e5acd7fff00d782263b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:76:95:b7:80:a1:b0:3d:5c:e6:94:c9:74:
                    54:14:70:7e:e2:07:2d:1c:b6:55:b3:73:a0:1e:ab:
                    09:96:6f:72:b8:a0:03:f8:6a:ad:80:08:2b:6e:10:
                    f6:01:ec:97:5b:5e:40:99:eb:27:d1:71:a3:04:75:
                    5f:a7:58:cc:55:a5:9c:c2:d8:ec:e0:1a:91:0f:4a:
                    70:17:13:8a:f3:b2:47:15:c7:40:d0:5e:6e:10:fe:
                    44:cd:e5:ff:91:fe:c4:17:03:ef:75:09:83:f6:83:
                    af:02:88:1b:4c:9b:01:d1:5c:5d:be:d2:59:50:61:
                    31:c2:1b:f7:a8:46:49:73:26:e3:cc:58:60:31:2e:
                    80:56:45:5a:8b:5c:0c:69:83:9c:3f:2e:38:28:d9:
                    be:c6:28:38:f4:7c:ee:03:d9:cb:06:5d:a1:6c:ae:
                    ff:e1:e4:93:1e:d3:70:da:5a:b5:cb:08:df:d5:6e:
                    57:be:60:b8:f1:1d:01:b5:09:6e:72:9d:ec:db:84:
                    90:3a:ec:fd:3e:73:8c:7c:fb:70:bd:dd:16:68:96:
                    4d:1f:bd:ad:15:8d:cc:22:e8:d1:6f:08:92:6f:f6:
                    23:35:4d:68:81:39:91:a0:7c:05:8d:6e:a6:38:ca:
                    b4:41:d6:58:ae:63:4d:53:41:ac:e7:92:d2:9e:28:
                    0f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:00:FB:A1:43:70:D9:D5:B8:3E:5A:CD:7F:FF:00:D7:82:26:3B:78
            X509v3 Authority Key Identifier:
                keyid:F3:FA:12:DF:DA:FC:F7:39:39:A3:98:0F:35:2B:05:D4:B8:BA:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_oS39r89zk5o5gPNSsF1Li6jYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e17be9-25b0-4500-9a7c-96a186e24d60/1/8_oS39r89zk5o5gPNSsF1Li6jYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e8:c6:5b:b7:89:1a:12:25:f4:62:e6:99:94:15:a0:28:d6:
         9e:ae:b1:5f:48:bc:3b:1d:a1:7d:d1:fa:b6:41:25:5a:c3:de:
         8c:64:62:4a:ae:34:fb:25:af:85:cd:82:d5:aa:37:b3:bb:68:
         f7:a1:da:c7:32:0d:d9:5e:0f:64:6a:58:37:4a:ea:2b:89:3d:
         8e:51:59:2b:f7:ac:90:13:9e:f3:b7:d3:57:d0:31:10:4e:a3:
         cd:5a:57:75:f5:fe:4a:e8:7c:cf:78:46:ac:db:2e:3e:35:bc:
         85:53:63:de:f2:9b:6b:fb:0d:35:5d:2c:44:3a:39:c8:db:e4:
         70:23:f3:4d:34:08:91:b9:bf:57:be:ed:09:95:72:53:b2:96:
         d1:ba:64:7c:3d:93:0b:ea:3a:20:c4:f5:20:98:4e:17:9d:f0:
         22:e1:e1:53:7c:3d:fd:70:4c:0f:ec:22:9a:c8:70:bc:5d:38:
         8d:f3:39:89:96:e3:2c:c6:f2:63:b9:ba:a2:a7:c3:25:80:07:
         6d:28:e9:7d:4a:39:e3:ad:16:39:8d:6f:92:2f:91:ee:66:86:
         70:f8:22:7b:a0:bd:ad:0f:f6:ba:6d:9d:42:1b:16:27:ef:a2:
         e9:42:4c:74:7e:9e:5c:4a:43:35:56:8e:b8:d6:94:e8:83:4a:
         4f:3b:e9:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZOuulvJIJOqll/9xKRS+oGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZmExMmRmZGFmY2Y3MzkzOWEzOTgwZjM1MmIwNWQ0Yjhi
YThkOGMwHhcNMjQxMjEwMDQwMTA4WhcNMjQxMjExMDQwMTA4WjAzMTEwLwYDVQQD
Eyg3NTAwZmJhMTQzNzBkOWQ1YjgzZTVhY2Q3ZmZmMDBkNzgyMjYzYjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc52lbeAobA9XOaUyXRUFHB+4gct
HLZVs3OgHqsJlm9yuKAD+GqtgAgrbhD2AeyXW15Amesn0XGjBHVfp1jMVaWcwtjs
4BqRD0pwFxOK87JHFcdA0F5uEP5EzeX/kf7EFwPvdQmD9oOvAogbTJsB0VxdvtJZ
UGExwhv3qEZJcybjzFhgMS6AVkVai1wMaYOcPy44KNm+xig49HzuA9nLBl2hbK7/
4eSTHtNw2lq1ywjf1W5XvmC48R0BtQlucp3s24SQOuz9PnOMfPtwvd0WaJZNH72t
FY3MIujRbwiSb/YjNU1ogTmRoHwFjW6mOMq0QdZYrmNNU0Gs55LSnigPMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUA+6FDcNnVuD5azX//ANeCJjt4MB8GA1UdIwQY
MBaAFPP6Et/a/Pc5OaOYDzUrBdS4uo2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOF9vUzM5cjg5ems1bzVnUE5Tc0YxTGk2all3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lMTdiZTktMjViMC00NTAwLTlhN2Mt
OTZhMTg2ZTI0ZDYwLzEvOF9vUzM5cjg5ems1bzVnUE5Tc0YxTGk2all3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lMTdiZTktMjViMC00NTAwLTlhN2MtOTZhMTg2ZTI0ZDYw
LzEvOF9vUzM5cjg5ems1bzVnUE5Tc0YxTGk2all3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+jGW7eJ
GhIl9GLmmZQVoCjWnq6xX0i8Ox2hfdH6tkElWsPejGRiSq40+yWvhc2C1ao3s7to
96HaxzIN2V4PZGpYN0rqK4k9jlFZK/eskBOe87fTV9AxEE6jzVpXdfX+Suh8z3hG
rNsuPjW8hVNj3vKba/sNNV0sRDo5yNvkcCPzTTQIkbm/V77tCZVyU7KW0bpkfD2T
C+o6IMT1IJhOF53wIuHhU3w9/XBMD+wimshwvF04jfM5iZbjLMbyY7m6oqfDJYAH
bSjpfUo5460WOY1vki+R7maGcPgie6C9rQ/2um2dQhsWJ++i6UJMdH6eXEpDNVaO
uNaU6INKTzvpTA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:48 2025 by rpki-client