Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.mft
File:                     ifXOD-etOrIG4QB6C2UwALhXfn0.mft (raw, json)
Hash identifier:          ucu/mfIRg+xKMxjj4y4aTeNU3DxndP7vRjTYSVFKnHA=
Subject key identifier:   B4:B7:8F:4E:6F:B5:CE:7B:C4:0A:C2:43:09:A1:F8:E1:99:C8:FA:1C
Authority key identifier: 89:F5:CE:0F:E7:AD:3A:B2:06:E1:00:7A:0B:65:30:00:B8:57:7E:7D
Certificate issuer:       /CN=89f5ce0fe7ad3ab206e1007a0b653000b8577e7d
Certificate serial:       019095A7FB8E55DE7531F7886DA1CA8A455B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ifXOD-etOrIG4QB6C2UwALhXfn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.mft
Manifest number:          0299
Signing time:             Tue 09 Jul 2024 04:02:12 +0000
Manifest this update:     Tue 09 Jul 2024 04:02:12 +0000
Manifest next update:     Wed 10 Jul 2024 04:02:12 +0000
Files and hashes:         1: ifXOD-etOrIG4QB6C2UwALhXfn0.crl (hash: m6K4V4HVLpZmHH9+O2HneaNMUfWoJTMBJjk8WEYvJgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:95:a7:fb:8e:55:de:75:31:f7:88:6d:a1:ca:8a:45:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89f5ce0fe7ad3ab206e1007a0b653000b8577e7d
        Validity
            Not Before: Jul  9 04:02:12 2024 GMT
            Not After : Jul 10 04:02:12 2024 GMT
        Subject: CN=b4b78f4e6fb5ce7bc40ac24309a1f8e199c8fa1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4f:3e:f8:7d:5b:4c:74:7d:33:30:d7:7f:50:
                    15:c2:bb:3f:d0:21:9d:db:fc:e2:8c:dd:66:a5:67:
                    91:02:9e:75:aa:96:c1:bf:34:18:9d:05:e2:9a:7a:
                    80:db:62:b7:f3:2f:c3:de:50:8a:92:13:87:15:0c:
                    e6:c6:ae:12:3c:55:50:11:80:dc:fb:95:7c:1c:24:
                    18:c2:50:73:60:de:7c:31:c3:65:ee:14:c8:46:24:
                    7f:ed:40:cc:39:28:19:b5:0e:df:f5:fc:69:eb:87:
                    c3:72:9c:7b:f0:7b:70:8f:64:ef:16:77:5c:91:c7:
                    c5:ab:bd:7d:f6:ea:33:db:32:0e:e4:8c:8d:ab:6d:
                    df:ed:89:2f:c4:a1:9c:3c:67:83:92:ce:2f:0d:e6:
                    f0:f6:83:fe:e1:14:d5:03:02:c5:5d:af:b3:1c:f9:
                    a7:de:2d:57:53:c1:ba:4b:fc:9e:ba:ef:5b:2e:87:
                    88:52:74:ac:53:1e:41:46:5d:67:c4:38:1c:a2:6b:
                    ec:07:a9:a2:61:d1:9a:3a:2b:a0:44:dc:7b:92:24:
                    4e:1f:ab:af:72:42:1d:28:7f:2e:55:1a:e8:57:83:
                    67:34:69:60:e5:53:3b:be:99:d8:b7:b8:9e:c6:39:
                    36:3e:c1:d3:dc:1b:77:bd:2c:dc:fd:3e:38:95:1c:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B7:8F:4E:6F:B5:CE:7B:C4:0A:C2:43:09:A1:F8:E1:99:C8:FA:1C
            X509v3 Authority Key Identifier:
                keyid:89:F5:CE:0F:E7:AD:3A:B2:06:E1:00:7A:0B:65:30:00:B8:57:7E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifXOD-etOrIG4QB6C2UwALhXfn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/56fd41-0681-4c50-b17f-4bb57617157d/1/ifXOD-etOrIG4QB6C2UwALhXfn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9a:a8:63:d8:5f:ce:c6:0f:ea:ac:08:41:64:64:8b:da:e3:
         cb:7c:9f:ae:f5:ea:24:70:f4:46:1c:c6:6a:eb:79:3a:f9:45:
         52:d7:bf:fc:3b:7b:23:0a:0f:b1:25:bf:f8:5d:a7:fe:35:5e:
         41:c8:63:7b:9f:af:f4:c3:8b:60:55:4a:3f:64:1c:81:c7:a2:
         e2:b9:70:11:59:9d:1e:ad:82:c3:bd:e2:6b:66:a0:ac:91:71:
         fb:86:6a:54:53:a8:0a:96:2e:75:e4:78:5c:5e:d2:51:26:8e:
         32:da:68:2a:02:90:5a:58:3d:a7:4c:14:c5:c4:d6:1e:75:ed:
         51:da:bb:86:03:76:f0:79:62:53:ca:48:39:0b:ca:84:5f:4e:
         08:53:80:e9:5d:d8:dd:93:a0:d8:83:9c:94:c7:53:66:1f:de:
         2c:e3:92:05:96:24:3c:fe:17:c1:a4:74:f7:3b:dc:bd:88:1e:
         54:2f:e9:ed:10:bb:82:3c:42:c5:0f:0b:80:f1:ee:0c:95:5f:
         dc:12:fc:82:1e:5f:6b:87:36:3a:24:7d:d8:a0:8c:39:ae:7a:
         19:63:23:aa:b2:06:91:4b:26:74:78:b9:21:07:94:02:6d:b2:
         e3:ab:59:e0:14:be:c1:8a:af:3c:32:52:62:e9:53:e5:76:7d:
         4f:9e:de:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCVp/uOVd51MfeIbaHKikVbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZjVjZTBmZTdhZDNhYjIwNmUxMDA3YTBiNjUzMDAwYjg1
NzdlN2QwHhcNMjQwNzA5MDQwMjEyWhcNMjQwNzEwMDQwMjEyWjAzMTEwLwYDVQQD
EyhiNGI3OGY0ZTZmYjVjZTdiYzQwYWMyNDMwOWExZjhlMTk5YzhmYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn08++H1bTHR9MzDXf1AVwrs/0CGd
2/zijN1mpWeRAp51qpbBvzQYnQXimnqA22K38y/D3lCKkhOHFQzmxq4SPFVQEYDc
+5V8HCQYwlBzYN58McNl7hTIRiR/7UDMOSgZtQ7f9fxp64fDcpx78Htwj2TvFndc
kcfFq7199uoz2zIO5IyNq23f7YkvxKGcPGeDks4vDebw9oP+4RTVAwLFXa+zHPmn
3i1XU8G6S/yeuu9bLoeIUnSsUx5BRl1nxDgcomvsB6miYdGaOiugRNx7kiROH6uv
ckIdKH8uVRroV4NnNGlg5VM7vpnYt7iexjk2PsHT3Bt3vSzc/T44lRzuCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLS3j05vtc57xArCQwmh+OGZyPocMB8GA1UdIwQY
MBaAFIn1zg/nrTqyBuEAegtlMAC4V359MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWZYT0QtZXRPcklHNFFCNkMyVXdBTGhYZm4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi81NmZkNDEtMDY4MS00YzUwLWIxN2Yt
NGJiNTc2MTcxNTdkLzEvaWZYT0QtZXRPcklHNFFCNkMyVXdBTGhYZm4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi81NmZkNDEtMDY4MS00YzUwLWIxN2YtNGJiNTc2MTcxNTdk
LzEvaWZYT0QtZXRPcklHNFFCNkMyVXdBTGhYZm4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJqoY9hf
zsYP6qwIQWRki9rjy3yfrvXqJHD0RhzGaut5OvlFUte//Dt7IwoPsSW/+F2n/jVe
Qchje5+v9MOLYFVKP2Qcgcei4rlwEVmdHq2Cw73ia2agrJFx+4ZqVFOoCpYudeR4
XF7SUSaOMtpoKgKQWlg9p0wUxcTWHnXtUdq7hgN28HliU8pIOQvKhF9OCFOA6V3Y
3ZOg2IOclMdTZh/eLOOSBZYkPP4XwaR09zvcvYgeVC/p7RC7gjxCxQ8LgPHuDJVf
3BL8gh5fa4c2OiR92KCMOa56GWMjqrIGkUsmdHi5IQeUAm2y46tZ4BS+wYqvPDJS
YulT5XZ9T57enA==
-----END CERTIFICATE-----
Generated at Tue Jul 9 13:32:04 2024 by rpki-client on console-fra.rpki-client.org