Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e68bf-9204-4502-9b7c-0585ccb18c39/1/T3F-Jd7f3eFbtSfyDYKIMns4jUA.mft
File:                     T3F-Jd7f3eFbtSfyDYKIMns4jUA.mft (raw, json)
Hash identifier:          9hKPrANAQUNCOACsvbEnbVeTaJ0FToLISivejRVWZVo=
Subject key identifier:   8F:19:E6:33:E2:24:BD:BD:96:AC:42:0B:8B:3F:50:26:35:7C:45:49
Authority key identifier: 4F:71:7E:25:DE:DF:DD:E1:5B:B5:27:F2:0D:82:88:32:7B:38:8D:40
Certificate issuer:       /CN=4f717e25dedfdde15bb527f20d8288327b388d40
Certificate serial:       01855695183423BF50999D19237A1EC3068A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T3F-Jd7f3eFbtSfyDYKIMns4jUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/1e68bf-9204-4502-9b7c-0585ccb18c39/1/T3F-Jd7f3eFbtSfyDYKIMns4jUA.mft
Manifest number:          0968
Signing time:             Wed 28 Dec 2022 02:34:49 +0000
Manifest this update:     Wed 28 Dec 2022 02:34:49 +0000
Manifest next update:     Thu 29 Dec 2022 02:34:49 +0000
Files and hashes:         1: T3F-Jd7f3eFbtSfyDYKIMns4jUA.crl (hash: +J4RZklYQwR4MYZQXjscbpe5FX6JtLYZu/5P/dDriLA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:56:95:18:34:23:bf:50:99:9d:19:23:7a:1e:c3:06:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f717e25dedfdde15bb527f20d8288327b388d40
        Validity
            Not Before: Dec 28 02:34:49 2022 GMT
            Not After : Dec 29 02:34:49 2022 GMT
        Subject: CN=8f19e633e224bdbd96ac420b8b3f5026357c4549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:8b:bd:ae:00:35:3c:00:74:0f:28:4f:79:
                    57:39:74:fc:0b:2d:4e:9a:fe:1b:0c:6e:16:5c:2e:
                    d7:85:75:09:1f:59:87:df:11:5f:04:cc:2a:8c:4d:
                    af:3c:e7:07:13:17:27:eb:9d:07:bb:dd:b3:2d:44:
                    51:f5:5f:f5:08:a7:18:15:7d:b7:cf:d4:8b:a5:75:
                    a1:f0:f9:96:2b:fe:48:7c:0e:4d:98:d5:02:a0:fc:
                    1a:b0:3a:0c:c9:3b:39:63:33:df:21:97:9c:51:9c:
                    8b:c7:9a:0d:97:db:81:7e:45:76:ec:ce:8a:db:8c:
                    bd:7f:3d:0c:00:5a:a8:8a:bc:ec:1a:d4:26:27:55:
                    3c:a3:00:02:a1:41:0e:61:8d:3a:5d:79:cc:40:c2:
                    3f:00:f2:28:5c:d7:db:0e:63:39:ae:88:7e:89:48:
                    9f:e0:a3:d1:46:a8:f2:96:a4:e6:e6:7f:67:5a:5a:
                    34:c1:07:54:29:9b:64:a7:6f:c4:1e:0d:57:19:ff:
                    fc:66:35:44:f2:bb:8f:9a:3a:d2:33:65:07:e2:eb:
                    4c:51:e6:a3:03:18:84:20:e2:ec:c0:6f:13:36:b3:
                    e5:29:63:b2:4f:0f:93:64:5b:43:d1:cc:d6:bd:09:
                    23:de:21:b3:48:09:c2:a1:51:de:51:9d:c4:3c:95:
                    21:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:19:E6:33:E2:24:BD:BD:96:AC:42:0B:8B:3F:50:26:35:7C:45:49
            X509v3 Authority Key Identifier:
                keyid:4F:71:7E:25:DE:DF:DD:E1:5B:B5:27:F2:0D:82:88:32:7B:38:8D:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3F-Jd7f3eFbtSfyDYKIMns4jUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e68bf-9204-4502-9b7c-0585ccb18c39/1/T3F-Jd7f3eFbtSfyDYKIMns4jUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e68bf-9204-4502-9b7c-0585ccb18c39/1/T3F-Jd7f3eFbtSfyDYKIMns4jUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:26:bf:0a:31:41:c3:87:9f:e3:f5:d2:d0:f2:4b:2e:72:b7:
         40:9b:07:0e:4f:17:c7:03:c1:99:91:87:78:02:cf:71:ea:b3:
         f7:d0:f7:65:c5:33:e5:e9:9e:84:2f:30:55:c4:75:0f:b3:12:
         7e:36:86:b5:ec:7e:9e:2b:8e:0b:cf:7a:75:6c:9d:35:0d:97:
         f1:f3:8f:a6:30:9d:31:26:5d:6d:e6:42:39:86:bf:6a:01:7b:
         91:a3:50:0a:95:98:94:19:f0:73:87:96:74:ef:fe:79:1a:e4:
         5d:f7:a1:9d:5b:c9:d1:93:a8:1e:65:20:93:70:4d:43:b1:76:
         1b:d1:b4:48:d5:7b:fb:22:26:81:c0:b6:68:2c:ab:83:ae:2a:
         98:bb:dd:30:ac:08:e2:6f:0f:66:e4:c0:cc:fb:d1:a4:d2:fc:
         19:5b:2c:65:03:0d:e5:06:65:46:e1:e9:20:82:c4:a9:5c:72:
         53:29:27:a4:64:52:c6:0a:ec:29:85:55:99:17:af:c3:d1:74:
         7f:49:9f:cf:a0:4b:37:94:70:86:5d:27:f5:ee:4c:9c:7d:d5:
         53:52:24:09:55:e2:21:37:d3:07:2c:dc:b6:d9:10:33:a4:f2:
         fc:dd:9c:d2:2f:ad:4b:f4:ef:67:0a:77:59:ca:da:10:3c:b4:
         5c:74:eb:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYVWlRg0I79QmZ0ZI3oewwaKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNzE3ZTI1ZGVkZmRkZTE1YmI1MjdmMjBkODI4ODMyN2Iz
ODhkNDAwHhcNMjIxMjI4MDIzNDQ5WhcNMjIxMjI5MDIzNDQ5WjAzMTEwLwYDVQQD
Eyg4ZjE5ZTYzM2UyMjRiZGJkOTZhYzQyMGI4YjNmNTAyNjM1N2M0NTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0POLva4ANTwAdA8oT3lXOXT8Cy1O
mv4bDG4WXC7XhXUJH1mH3xFfBMwqjE2vPOcHExcn650Hu92zLURR9V/1CKcYFX23
z9SLpXWh8PmWK/5IfA5NmNUCoPwasDoMyTs5YzPfIZecUZyLx5oNl9uBfkV27M6K
24y9fz0MAFqoirzsGtQmJ1U8owACoUEOYY06XXnMQMI/APIoXNfbDmM5roh+iUif
4KPRRqjylqTm5n9nWlo0wQdUKZtkp2/EHg1XGf/8ZjVE8ruPmjrSM2UH4utMUeaj
AxiEIOLswG8TNrPlKWOyTw+TZFtD0czWvQkj3iGzSAnCoVHeUZ3EPJUhzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8Z5jPiJL29lqxCC4s/UCY1fEVJMB8GA1UdIwQY
MBaAFE9xfiXe393hW7Un8g2CiDJ7OI1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDNGLUpkN2YzZUZidFNmeURZS0lNbnM0alVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTY4YmYtOTIwNC00NTAyLTliN2Mt
MDU4NWNjYjE4YzM5LzEvVDNGLUpkN2YzZUZidFNmeURZS0lNbnM0alVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTY4YmYtOTIwNC00NTAyLTliN2MtMDU4NWNjYjE4YzM5
LzEvVDNGLUpkN2YzZUZidFNmeURZS0lNbnM0alVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuia/CjFB
w4ef4/XS0PJLLnK3QJsHDk8XxwPBmZGHeALPceqz99D3ZcUz5emehC8wVcR1D7MS
fjaGtex+niuOC896dWydNQ2X8fOPpjCdMSZdbeZCOYa/agF7kaNQCpWYlBnwc4eW
dO/+eRrkXfehnVvJ0ZOoHmUgk3BNQ7F2G9G0SNV7+yImgcC2aCyrg64qmLvdMKwI
4m8PZuTAzPvRpNL8GVssZQMN5QZlRuHpIILEqVxyUyknpGRSxgrsKYVVmRevw9F0
f0mfz6BLN5Rwhl0n9e5MnH3VU1IkCVXiITfTByzcttkQM6Ty/N2c0i+tS/TvZwp3
WcraEDy0XHTrMw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:55 2025 by rpki-client