Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.mft
File:                     M6fFfjy-qDsbCFxp2Of51FIFE2I.mft (raw, json)
Hash identifier:          9dNU8BS6vDDQdSAAzhrgZTu1kGFRnn6PTWYC3Drlu9U=
Subject key identifier:   27:FB:C5:DF:8C:0D:CB:C4:A8:42:8F:9B:F8:6C:9A:4B:40:35:D7:FD
Authority key identifier: 33:A7:C5:7E:3C:BE:A8:3B:1B:08:5C:69:D8:E7:F9:D4:52:05:13:62
Certificate issuer:       /CN=33a7c57e3cbea83b1b085c69d8e7f9d452051362
Certificate serial:       018EDAFA306597964C91FFBE276A9FEAA65B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6fFfjy-qDsbCFxp2Of51FIFE2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.mft
Manifest number:          02
Signing time:             Sun 14 Apr 2024 05:00:13 +0000
Manifest this update:     Sun 14 Apr 2024 05:00:13 +0000
Manifest next update:     Mon 15 Apr 2024 05:00:13 +0000
Files and hashes:         1: M6fFfjy-qDsbCFxp2Of51FIFE2I.crl (hash: MJEuH4SUKInU71k7RDjEhn2HUnCdf6pv0MVTYDa66bU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:da:fa:30:65:97:96:4c:91:ff:be:27:6a:9f:ea:a6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33a7c57e3cbea83b1b085c69d8e7f9d452051362
        Validity
            Not Before: Apr 14 05:00:13 2024 GMT
            Not After : Apr 15 05:00:13 2024 GMT
        Subject: CN=27fbc5df8c0dcbc4a8428f9bf86c9a4b4035d7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2b:4f:df:26:8e:38:bc:d6:5d:5b:7b:bf:2a:
                    ac:91:e4:5f:0d:86:ee:94:fd:7f:72:62:0e:4c:fd:
                    41:bd:bf:2a:0e:d6:d8:7c:88:8a:01:d6:68:93:80:
                    4c:f9:ab:a8:9c:f6:a4:51:7d:5f:61:a8:3e:62:7d:
                    e8:98:04:fe:0f:e8:34:a6:d1:bf:51:be:57:ed:1d:
                    59:05:cc:7a:20:3b:be:a2:a2:9c:52:f4:69:53:5f:
                    9d:a6:ce:91:63:73:c1:53:69:9c:3b:87:1d:18:88:
                    b0:3d:00:8d:99:1e:5e:0f:08:80:31:4b:0b:cf:50:
                    d8:25:21:ac:35:11:e3:2f:04:b9:50:80:82:dd:a7:
                    d2:0c:57:47:31:dd:a7:2e:12:94:b9:10:29:e9:cb:
                    00:7b:1a:e0:70:02:14:78:d7:7a:2f:3d:13:76:8f:
                    46:e1:54:b2:d5:51:07:34:22:61:50:3c:eb:a0:64:
                    90:0c:d9:c2:cf:82:2d:05:20:05:b4:af:ba:3c:7c:
                    65:43:b7:e5:2b:55:87:82:5f:df:9a:db:56:d5:8f:
                    64:46:44:29:bd:f9:ab:00:9f:a4:52:84:cd:7c:1a:
                    6e:a4:a9:ec:72:9f:d3:24:a2:f5:47:8c:ff:ae:7e:
                    1b:71:1d:a1:3d:16:ea:c9:cf:74:34:eb:32:f6:e8:
                    c4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FB:C5:DF:8C:0D:CB:C4:A8:42:8F:9B:F8:6C:9A:4B:40:35:D7:FD
            X509v3 Authority Key Identifier:
                keyid:33:A7:C5:7E:3C:BE:A8:3B:1B:08:5C:69:D8:E7:F9:D4:52:05:13:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6fFfjy-qDsbCFxp2Of51FIFE2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/a89fda-2dfb-473f-a3fe-2ad0bad40180/1/M6fFfjy-qDsbCFxp2Of51FIFE2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:7a:64:96:9b:96:40:42:6e:37:34:cf:43:a2:92:2d:95:65:
         11:3c:df:3d:88:55:bd:fc:73:b0:0a:e3:b5:e6:13:d0:cc:e0:
         6e:90:1d:3b:51:49:6c:b3:ed:04:0c:39:3b:20:aa:44:11:21:
         7e:75:21:e9:94:2f:14:12:a2:22:7f:c6:36:14:db:a6:6b:51:
         3c:a3:b8:5c:3b:11:eb:5f:fc:57:21:02:65:de:8c:e2:a2:3e:
         d5:e9:19:0a:08:d8:36:c2:95:d0:b5:93:1c:a0:20:aa:1a:7e:
         1d:81:3e:f4:30:08:23:8c:42:07:6c:1c:f8:69:9c:be:52:a7:
         48:e9:ec:f3:15:fe:04:4c:74:8b:90:69:b7:c0:0e:d3:e6:8b:
         84:d8:1a:ad:a9:4f:28:f5:e6:44:58:c2:a0:9f:b6:78:65:33:
         03:b8:8b:8b:49:1c:35:ee:3a:e9:f5:c7:df:5b:38:55:c4:02:
         0e:49:c5:08:2d:89:09:74:6d:6d:7b:92:65:56:0a:14:ad:7a:
         d0:9d:0c:2d:1e:43:19:45:47:4a:1d:7a:a1:0e:9f:16:fe:44:
         7f:a2:aa:f4:e6:05:13:5a:13:06:9e:fc:b7:01:87:1f:81:a3:
         23:b2:c1:b8:4d:f9:8d:3d:80:b4:d4:98:ff:5b:72:d9:76:8d:
         65:cf:df:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY7a+jBll5ZMkf++J2qf6qZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTdjNTdlM2NiZWE4M2IxYjA4NWM2OWQ4ZTdmOWQ0NTIw
NTEzNjIwHhcNMjQwNDE0MDUwMDEzWhcNMjQwNDE1MDUwMDEzWjAzMTEwLwYDVQQD
EygyN2ZiYzVkZjhjMGRjYmM0YTg0MjhmOWJmODZjOWE0YjQwMzVkN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhytP3yaOOLzWXVt7vyqskeRfDYbu
lP1/cmIOTP1Bvb8qDtbYfIiKAdZok4BM+auonPakUX1fYag+Yn3omAT+D+g0ptG/
Ub5X7R1ZBcx6IDu+oqKcUvRpU1+dps6RY3PBU2mcO4cdGIiwPQCNmR5eDwiAMUsL
z1DYJSGsNRHjLwS5UICC3afSDFdHMd2nLhKUuRAp6csAexrgcAIUeNd6Lz0Tdo9G
4VSy1VEHNCJhUDzroGSQDNnCz4ItBSAFtK+6PHxlQ7flK1WHgl/fmttW1Y9kRkQp
vfmrAJ+kUoTNfBpupKnscp/TJKL1R4z/rn4bcR2hPRbqyc90NOsy9ujEYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCf7xd+MDcvEqEKPm/hsmktANdf9MB8GA1UdIwQY
MBaAFDOnxX48vqg7Gwhcadjn+dRSBRNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZmRmZqeS1xRHNiQ0Z4cDJPZjUxRklGRTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9hODlmZGEtMmRmYi00NzNmLWEzZmUt
MmFkMGJhZDQwMTgwLzEvTTZmRmZqeS1xRHNiQ0Z4cDJPZjUxRklGRTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9hODlmZGEtMmRmYi00NzNmLWEzZmUtMmFkMGJhZDQwMTgw
LzEvTTZmRmZqeS1xRHNiQ0Z4cDJPZjUxRklGRTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3pklpuW
QEJuNzTPQ6KSLZVlETzfPYhVvfxzsArjteYT0MzgbpAdO1FJbLPtBAw5OyCqRBEh
fnUh6ZQvFBKiIn/GNhTbpmtRPKO4XDsR61/8VyECZd6M4qI+1ekZCgjYNsKV0LWT
HKAgqhp+HYE+9DAII4xCB2wc+GmcvlKnSOns8xX+BEx0i5Bpt8AO0+aLhNgaralP
KPXmRFjCoJ+2eGUzA7iLi0kcNe466fXH31s4VcQCDknFCC2JCXRtbXuSZVYKFK16
0J0MLR5DGUVHSh16oQ6fFv5Ef6Kq9OYFE1oTBp78twGHH4GjI7LBuE35jT2AtNSY
/1ty2XaNZc/flg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:54 2024 by rpki-client on console-fra.rpki-client.org