Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/ldZ-0S-3pxUhBGPBcPAld-vRMiA.mft
File:                     ldZ-0S-3pxUhBGPBcPAld-vRMiA.mft (raw, json)
Hash identifier:          kAXAJJXHCCqsJz7RCC3mI60gxlF2bleEuo4/AAonIvY=
Subject key identifier:   25:65:33:2D:07:BE:84:7B:E2:06:0C:CD:F1:8E:03:4E:D3:F9:66:67
Authority key identifier: 95:D6:7E:D1:2F:B7:A7:15:21:04:63:C1:70:F0:25:77:EB:D1:32:20
Certificate issuer:       /CN=95d67ed12fb7a715210463c170f02577ebd13220
Certificate serial:       04D85B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldZ-0S-3pxUhBGPBcPAld-vRMiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/ldZ-0S-3pxUhBGPBcPAld-vRMiA.mft
Manifest number:          0658
Signing time:             Mon 25 Apr 2022 10:30:56 +0000
Manifest this update:     Mon 25 Apr 2022 10:30:56 +0000
Manifest next update:     Tue 26 Apr 2022 10:30:56 +0000
Files and hashes:         1: KWc3WhtKy1rM8RlsLdC7mV4J3D4.roa (hash: FRfdDWoY2oOl5a5hk6ufb9CB4z01UxLZjCH43/Ufosg=)
                          2: ldZ-0S-3pxUhBGPBcPAld-vRMiA.crl (hash: WjIHyiw3q7ig372ewaPZAXsesRFakmnd/KB10apDxHY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81287982 (0x4d85b2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d67ed12fb7a715210463c170f02577ebd13220
        Validity
            Not Before: Apr 25 10:30:56 2022 GMT
            Not After : Apr 26 10:30:56 2022 GMT
        Subject: CN=2565332d07be847be2060ccdf18e034ed3f96667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:45:7d:25:6d:db:32:13:88:39:81:fc:d3:
                    f6:f6:bf:f3:2d:ca:d1:55:b6:0f:0e:04:22:c6:b3:
                    9d:50:63:e2:60:3d:97:de:93:c7:dc:92:30:36:90:
                    cd:fd:2b:03:9b:59:ec:a3:d7:5c:43:d1:52:45:74:
                    68:1c:d4:7c:d0:4d:24:65:13:38:a2:fb:b1:35:5f:
                    d9:22:1f:14:d5:70:0e:97:30:92:0d:b5:36:e7:c6:
                    ea:5a:16:a9:26:d3:82:ad:cb:f3:6a:9e:54:7a:10:
                    b1:ca:bc:c3:2a:89:b7:e1:d7:c2:41:12:12:67:a8:
                    1b:4e:ac:a7:d8:27:0f:2d:9a:d2:ee:a8:f5:cc:18:
                    8e:dd:f3:ee:b1:64:92:eb:c1:8d:0f:d9:c7:8a:ca:
                    13:34:ce:6c:46:4c:8e:10:63:3b:f3:ee:63:13:56:
                    c7:af:ff:05:31:bf:18:71:1b:d6:7d:b9:0e:77:06:
                    69:da:f8:1c:59:ee:28:96:83:62:35:b0:81:63:0b:
                    a7:59:1f:92:28:09:00:01:93:7e:42:9e:58:67:e8:
                    7a:a6:d3:fc:93:5c:fc:38:22:8a:bf:47:80:e6:4d:
                    f5:70:f5:b4:7c:2c:41:7f:48:91:59:df:24:1a:d4:
                    83:e5:9c:d9:e6:f7:02:3d:2a:79:20:c1:23:1f:c4:
                    44:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:65:33:2D:07:BE:84:7B:E2:06:0C:CD:F1:8E:03:4E:D3:F9:66:67
            X509v3 Authority Key Identifier:
                keyid:95:D6:7E:D1:2F:B7:A7:15:21:04:63:C1:70:F0:25:77:EB:D1:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldZ-0S-3pxUhBGPBcPAld-vRMiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/ldZ-0S-3pxUhBGPBcPAld-vRMiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/351907-b0a5-4633-8589-832db428efe6/1/ldZ-0S-3pxUhBGPBcPAld-vRMiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2f:d1:da:41:72:ec:82:0f:fe:34:52:11:9f:70:96:34:73:
         24:b2:88:2d:5d:3b:b6:82:9c:12:d1:bd:a3:8f:9f:8e:2e:4a:
         05:d4:ff:09:64:5f:62:44:18:6a:97:38:66:f0:33:1d:f2:09:
         42:b7:16:9e:53:9c:8d:f4:0f:62:0f:bc:63:51:03:8a:6b:24:
         8a:95:d3:9b:3a:97:ac:8d:8f:12:f9:7c:58:39:db:ba:04:e6:
         70:dd:64:85:78:32:2e:d8:fe:24:ac:fc:05:7c:a4:36:47:29:
         57:18:0f:39:4c:be:17:b8:d2:4c:c7:49:48:5b:d4:bf:37:32:
         72:34:da:c2:08:0c:03:3d:3a:33:e4:54:69:44:e2:68:82:f5:
         9e:b6:8c:75:1d:7f:28:8e:4c:5c:44:df:5a:dd:25:7d:88:e4:
         f3:35:58:3a:1c:7a:91:e3:4a:06:fd:a1:9e:8a:d6:35:53:47:
         9d:33:29:04:d2:20:f6:af:7f:8a:3e:c3:57:99:c1:f4:a9:14:
         ce:b5:a0:c6:bb:5c:b0:38:59:8a:87:48:00:ce:f8:95:4a:c7:
         54:82:70:54:7a:7c:23:04:0b:24:2a:24:09:c6:d7:db:24:f2:
         7b:9b:dc:3d:8a:3f:57:50:f6:b8:e3:eb:04:92:ca:9e:16:22:
         eb:3a:83:47
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEBNhbLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
NWQ2N2VkMTJmYjdhNzE1MjEwNDYzYzE3MGYwMjU3N2ViZDEzMjIwMB4XDTIyMDQy
NTEwMzA1NloXDTIyMDQyNjEwMzA1NlowMzExMC8GA1UEAxMoMjU2NTMzMmQwN2Jl
ODQ3YmUyMDYwY2NkZjE4ZTAzNGVkM2Y5NjY2NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALreRX0lbdsyE4g5gfzT9va/8y3K0VW2Dw4EIsaznVBj4mA9
l96Tx9ySMDaQzf0rA5tZ7KPXXEPRUkV0aBzUfNBNJGUTOKL7sTVf2SIfFNVwDpcw
kg21NufG6loWqSbTgq3L82qeVHoQscq8wyqJt+HXwkESEmeoG06sp9gnDy2a0u6o
9cwYjt3z7rFkkuvBjQ/Zx4rKEzTObEZMjhBjO/PuYxNWx6//BTG/GHEb1n25DncG
adr4HFnuKJaDYjWwgWMLp1kfkigJAAGTfkKeWGfoeqbT/JNc/Dgiir9HgOZN9XD1
tHwsQX9IkVnfJBrUg+Wc2eb3Aj0qeSDBIx/ERMkCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQlZTMtB76Ee+IGDM3xjgNO0/lmZzAfBgNVHSMEGDAWgBSV1n7RL7enFSEE
Y8Fw8CV369EyIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2xkWi0wUy0zcHhVaEJHUEJjUEFsZC12Uk1pQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZWMvMzUxOTA3LWIwYTUtNDYzMy04NTg5LTgzMmRiNDI4ZWZlNi8x
L2xkWi0wUy0zcHhVaEJHUEJjUEFsZC12Uk1pQS5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWMv
MzUxOTA3LWIwYTUtNDYzMy04NTg5LTgzMmRiNDI4ZWZlNi8xL2xkWi0wUy0zcHhV
aEJHUEJjUEFsZC12Uk1pQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAsv0dpBcuyCD/40UhGfcJY0cySy
iC1dO7aCnBLRvaOPn44uSgXU/wlkX2JEGGqXOGbwMx3yCUK3Fp5TnI30D2IPvGNR
A4prJIqV05s6l6yNjxL5fFg527oE5nDdZIV4Mi7Y/iSs/AV8pDZHKVcYDzlMvhe4
0kzHSUhb1L83MnI02sIIDAM9OjPkVGlE4miC9Z62jHUdfyiOTFxE31rdJX2I5PM1
WDocepHjSgb9oZ6K1jVTR50zKQTSIPavf4o+w1eZwfSpFM61oMa7XLA4WYqHSADO
+JVKx1SCcFR6fCMECyQqJAnG19sk8nub3D2KP1dQ9rjj6wSSyp4WIus6g0c=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:35 2024 by rpki-client on console-fra.rpki-client.org