Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/TokpFMXH3ZNUNYHg_8HKuJHVnyY.mft
File:                     TokpFMXH3ZNUNYHg_8HKuJHVnyY.mft (raw, json)
Hash identifier:          5dWiHaK7A+P0XZ82J75L3PkAli/DwPII+caeMDek8j8=
Subject key identifier:   1D:96:E8:C1:7E:9B:96:7A:43:3A:83:B0:DD:AC:4D:76:1A:0E:D0:A0
Authority key identifier: 4E:89:29:14:C5:C7:DD:93:54:35:81:E0:FF:C1:CA:B8:91:D5:9F:26
Certificate issuer:       /CN=4e892914c5c7dd93543581e0ffc1cab891d59f26
Certificate serial:       018C242DDB6F0B95812A8D31891FF7953585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TokpFMXH3ZNUNYHg_8HKuJHVnyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/TokpFMXH3ZNUNYHg_8HKuJHVnyY.mft
Manifest number:          030C
Signing time:             Fri 01 Dec 2023 07:00:34 +0000
Manifest this update:     Fri 01 Dec 2023 07:00:34 +0000
Manifest next update:     Sat 02 Dec 2023 07:00:34 +0000
Files and hashes:         1: TokpFMXH3ZNUNYHg_8HKuJHVnyY.crl (hash: X8t/nGXNql2X1nD9ucN1G7ubcfPMwcybI2/T3+5XfBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:24:2d:db:6f:0b:95:81:2a:8d:31:89:1f:f7:95:35:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e892914c5c7dd93543581e0ffc1cab891d59f26
        Validity
            Not Before: Dec  1 07:00:34 2023 GMT
            Not After : Dec  2 07:00:34 2023 GMT
        Subject: CN=1d96e8c17e9b967a433a83b0ddac4d761a0ed0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9c:b8:5c:90:d3:11:4c:e6:d6:6b:c5:53:3d:
                    83:24:34:ed:a9:8c:06:f6:d0:d8:e2:83:12:77:10:
                    4f:69:5f:a4:69:9e:73:27:b1:29:8f:44:f7:2b:70:
                    94:95:e9:45:2b:ae:c5:4e:12:d5:54:41:fd:ce:f3:
                    4d:8d:ce:5a:26:d0:e7:a2:f5:f3:2a:91:44:36:5d:
                    3c:35:67:2d:2d:1f:dd:b1:fa:bd:f8:54:ee:8f:3a:
                    be:e8:28:00:9a:dc:5f:77:91:0d:af:8b:05:44:ea:
                    ca:a8:14:99:54:a8:d7:02:4e:a6:46:f1:a7:92:69:
                    76:58:6a:dc:fc:85:d1:98:fe:b4:48:59:6f:2d:80:
                    a5:92:49:df:63:5e:9d:18:80:d5:fc:91:a9:39:f6:
                    73:ab:82:83:ad:97:d0:d5:81:a5:99:41:82:d6:f1:
                    fc:63:d6:4a:10:1e:25:cc:ef:fb:8f:98:97:60:44:
                    10:bb:4f:88:ee:40:d3:fe:55:5b:40:3a:77:8c:49:
                    e8:57:ba:10:cd:6a:f9:de:03:c0:a8:27:1c:55:53:
                    7a:9d:8d:bb:df:43:09:4a:0e:27:35:56:50:c7:01:
                    7d:c3:be:c8:98:03:25:04:b0:4e:8c:24:ec:05:5b:
                    91:ca:cf:be:a9:29:7e:44:c4:1b:a3:d8:25:45:13:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:96:E8:C1:7E:9B:96:7A:43:3A:83:B0:DD:AC:4D:76:1A:0E:D0:A0
            X509v3 Authority Key Identifier:
                keyid:4E:89:29:14:C5:C7:DD:93:54:35:81:E0:FF:C1:CA:B8:91:D5:9F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TokpFMXH3ZNUNYHg_8HKuJHVnyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/TokpFMXH3ZNUNYHg_8HKuJHVnyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cf9ae6-ab68-4b09-b55f-60ba355f5b02/1/TokpFMXH3ZNUNYHg_8HKuJHVnyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b6:35:ac:21:7a:0b:09:46:0a:be:8e:1f:2e:1d:aa:d6:e4:
         ad:7b:11:44:54:fc:bf:e3:86:76:e1:2d:62:ef:88:97:26:02:
         0e:29:15:97:48:09:23:36:29:b4:95:89:0a:15:5d:57:f3:56:
         ed:5c:7d:f6:fb:e6:d6:1b:1b:17:3a:1d:4f:12:ea:75:d1:ff:
         bf:e3:78:8c:30:72:57:f0:07:f1:ea:93:1b:63:ef:8d:dd:1d:
         ad:28:ef:e5:86:4e:5e:a9:d2:3e:e2:0e:5d:33:8b:71:47:a9:
         08:56:e4:5e:1c:60:7b:2e:ba:b9:66:6f:2c:7f:56:9d:31:70:
         b2:34:41:9f:b8:72:0c:2f:18:0d:00:89:85:f4:83:bd:2f:a6:
         79:47:94:c6:0c:69:37:6b:cf:b4:72:3a:76:b9:4a:6f:e8:34:
         fa:e0:85:de:e5:72:25:7c:6c:10:79:f3:2e:cc:c5:2e:a8:99:
         e1:f0:d3:17:81:58:a2:7d:76:58:ef:38:5f:98:b0:41:6c:43:
         24:d3:0c:34:c3:70:73:81:96:09:cb:be:91:af:79:20:12:5c:
         57:84:50:4f:ff:e2:ce:ce:10:e6:b4:c2:5c:be:0c:3a:33:e9:
         07:f2:5c:2a:4b:45:19:a7:1b:63:c2:57:4e:51:cb:5e:7a:c5:
         5b:d1:36:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwkLdtvC5WBKo0xiR/3lTWFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlODkyOTE0YzVjN2RkOTM1NDM1ODFlMGZmYzFjYWI4OTFk
NTlmMjYwHhcNMjMxMjAxMDcwMDM0WhcNMjMxMjAyMDcwMDM0WjAzMTEwLwYDVQQD
EygxZDk2ZThjMTdlOWI5NjdhNDMzYTgzYjBkZGFjNGQ3NjFhMGVkMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpy4XJDTEUzm1mvFUz2DJDTtqYwG
9tDY4oMSdxBPaV+kaZ5zJ7Epj0T3K3CUlelFK67FThLVVEH9zvNNjc5aJtDnovXz
KpFENl08NWctLR/dsfq9+FTujzq+6CgAmtxfd5ENr4sFROrKqBSZVKjXAk6mRvGn
kml2WGrc/IXRmP60SFlvLYClkknfY16dGIDV/JGpOfZzq4KDrZfQ1YGlmUGC1vH8
Y9ZKEB4lzO/7j5iXYEQQu0+I7kDT/lVbQDp3jEnoV7oQzWr53gPAqCccVVN6nY27
30MJSg4nNVZQxwF9w77ImAMlBLBOjCTsBVuRys++qSl+RMQbo9glRRM60wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB2W6MF+m5Z6QzqDsN2sTXYaDtCgMB8GA1UdIwQY
MBaAFE6JKRTFx92TVDWB4P/ByriR1Z8mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG9rcEZNWEgzWk5VTllIZ184SEt1SkhWbnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jZjlhZTYtYWI2OC00YjA5LWI1NWYt
NjBiYTM1NWY1YjAyLzEvVG9rcEZNWEgzWk5VTllIZ184SEt1SkhWbnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9jZjlhZTYtYWI2OC00YjA5LWI1NWYtNjBiYTM1NWY1YjAy
LzEvVG9rcEZNWEgzWk5VTllIZ184SEt1SkhWbnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7Y1rCF6
CwlGCr6OHy4dqtbkrXsRRFT8v+OGduEtYu+IlyYCDikVl0gJIzYptJWJChVdV/NW
7Vx99vvm1hsbFzodTxLqddH/v+N4jDByV/AH8eqTG2Pvjd0drSjv5YZOXqnSPuIO
XTOLcUepCFbkXhxgey66uWZvLH9WnTFwsjRBn7hyDC8YDQCJhfSDvS+meUeUxgxp
N2vPtHI6drlKb+g0+uCF3uVyJXxsEHnzLszFLqiZ4fDTF4FYon12WO84X5iwQWxD
JNMMNMNwc4GWCcu+ka95IBJcV4RQT//izs4Q5rTCXL4MOjPpB/JcKktFGacbY8JX
TlHLXnrFW9E2UA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:52 2024 by rpki-client on console-ams.rpki-client.org