Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.mft
File:                     rBB6kam9lQuHMrwnhfZltz5p_oc.mft (raw, json)
Hash identifier:          JO37elLWYfbnqPzlpANVhhAaWVPz2aaA1IEroK7bajE=
Subject key identifier:   7F:7B:4C:74:AA:37:16:9E:CF:C3:BB:4C:29:4C:08:E3:A7:24:11:1B
Authority key identifier: AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87
Certificate issuer:       /CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
Certificate serial:       018C0F5DEAC948C1B10532E3D4EDDA6943B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.mft
Manifest number:          0729
Signing time:             Mon 27 Nov 2023 06:01:02 +0000
Manifest this update:     Mon 27 Nov 2023 06:01:02 +0000
Manifest next update:     Tue 28 Nov 2023 06:01:02 +0000
Files and hashes:         1: V0Vwz380aDG5IlgTiOJeBA2qu3c.roa (hash: cFbV77pavtwHg0U92T8Rme4pS/ISoZw2aMSpn4MzSsc=)
                          2: l9r9ZQjQ4NVlsNcDon0JskT_ATU.roa (hash: liH8No3pvLpDk2FR+4XIuvqmXDX+fgdzsjznAESFSWA=)
                          3: rBB6kam9lQuHMrwnhfZltz5p_oc.crl (hash: XsWS5UAri2uVu2sm3Gwm79F9blj6mdSKbIbNJFH9toU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0f:5d:ea:c9:48:c1:b1:05:32:e3:d4:ed:da:69:43:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac107a91a9bd950b8732bc2785f665b73e69fe87
        Validity
            Not Before: Nov 27 06:01:02 2023 GMT
            Not After : Nov 28 06:01:02 2023 GMT
        Subject: CN=7f7b4c74aa37169ecfc3bb4c294c08e3a724111b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:82:4c:25:98:62:43:c3:ed:ca:21:d7:cd:
                    f6:71:cd:7c:19:a5:6f:8b:c2:0d:4b:4c:b1:87:56:
                    e5:7a:f4:4e:c3:d0:ec:1b:de:f2:0d:f5:81:98:ef:
                    f5:4c:1e:e1:07:b2:11:15:6d:1c:d7:db:ae:92:3d:
                    bb:b1:07:1f:d8:a9:11:a5:a0:b3:b0:c5:f9:f7:b1:
                    eb:c7:b5:fd:8f:43:f3:73:16:31:ec:63:c7:10:60:
                    6c:68:6f:7b:5b:fe:b8:89:b7:93:9b:62:7b:d4:77:
                    00:ad:39:52:11:2a:6b:55:98:e5:a0:90:6b:cc:5b:
                    17:86:cb:c8:5f:ff:f6:2f:7c:6a:d2:fc:ca:2f:2f:
                    a4:fc:d5:5f:3d:32:32:08:4b:ee:f5:92:52:31:e2:
                    a8:09:de:56:b6:cb:f7:4d:68:8d:54:a0:68:0b:d6:
                    e7:fd:7a:73:56:6b:d6:09:50:15:e1:3a:c2:8a:6e:
                    65:f1:13:e1:cd:05:13:47:ae:b6:3d:35:e5:0c:b1:
                    dc:44:e0:88:ed:c1:f7:8e:cf:0f:c1:d9:26:6a:cc:
                    49:52:4d:64:2a:ae:cf:c7:34:e4:a7:b9:ae:ca:64:
                    c5:37:e9:9e:14:8b:4e:56:c2:e8:35:5e:1f:bd:c1:
                    4c:9b:45:6c:8e:2a:43:32:b2:21:5b:2e:a5:90:28:
                    f9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:7B:4C:74:AA:37:16:9E:CF:C3:BB:4C:29:4C:08:E3:A7:24:11:1B
            X509v3 Authority Key Identifier:
                keyid:AC:10:7A:91:A9:BD:95:0B:87:32:BC:27:85:F6:65:B7:3E:69:FE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rBB6kam9lQuHMrwnhfZltz5p_oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2eefff-4c8c-406a-a799-fde5441dac97/1/rBB6kam9lQuHMrwnhfZltz5p_oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:6d:32:9b:6a:84:56:64:fc:56:43:bf:cb:85:1e:81:21:
         08:26:ca:11:48:ea:1a:3c:08:27:57:fa:e7:ca:4f:49:77:8f:
         71:1a:ef:65:c9:2c:f5:fa:e8:4b:0f:5e:b0:70:6c:a3:80:12:
         54:11:04:3d:96:08:a2:7c:a3:96:14:08:55:90:f0:5f:23:39:
         3a:bf:07:41:bf:0d:51:ce:72:39:50:15:4c:d9:19:cb:98:70:
         15:b5:57:20:86:b9:bc:fd:bf:41:6f:6d:3c:e5:ec:b2:72:9a:
         e2:93:c5:53:b3:a5:6e:f1:1d:51:56:f7:27:72:83:85:e3:33:
         e1:51:2c:1a:e5:87:bc:51:9c:84:7c:71:ae:dc:d4:05:92:c2:
         dc:a6:31:82:03:27:c5:77:6f:17:18:2f:42:9d:bd:29:43:fc:
         b8:9b:96:98:e5:5d:3d:a7:14:d7:37:a9:86:96:d5:77:56:b4:
         ad:c3:41:a9:1e:ba:71:5b:24:ee:dd:d4:64:12:1e:31:be:65:
         9a:fe:17:42:58:c1:46:83:6d:a1:fb:45:7a:5f:43:87:b7:a9:
         b3:13:2b:80:a0:ab:ba:0f:9c:3d:76:88:ba:11:63:54:0e:3d:
         db:94:cb:74:e0:7f:80:4f:0f:61:45:de:45:e3:25:6b:7b:2c:
         d5:e9:7b:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwPXerJSMGxBTLj1O3aaUOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMTA3YTkxYTliZDk1MGI4NzMyYmMyNzg1ZjY2NWI3M2U2
OWZlODcwHhcNMjMxMTI3MDYwMTAyWhcNMjMxMTI4MDYwMTAyWjAzMTEwLwYDVQQD
Eyg3ZjdiNGM3NGFhMzcxNjllY2ZjM2JiNGMyOTRjMDhlM2E3MjQxMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQWCTCWYYkPD7coh1832cc18GaVv
i8INS0yxh1blevROw9DsG97yDfWBmO/1TB7hB7IRFW0c19uukj27sQcf2KkRpaCz
sMX597Hrx7X9j0PzcxYx7GPHEGBsaG97W/64ibeTm2J71HcArTlSESprVZjloJBr
zFsXhsvIX//2L3xq0vzKLy+k/NVfPTIyCEvu9ZJSMeKoCd5Wtsv3TWiNVKBoC9bn
/XpzVmvWCVAV4TrCim5l8RPhzQUTR662PTXlDLHcROCI7cH3js8PwdkmasxJUk1k
Kq7PxzTkp7muymTFN+meFItOVsLoNV4fvcFMm0VsjipDMrIhWy6lkCj5BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH97THSqNxaez8O7TClMCOOnJBEbMB8GA1UdIwQY
MBaAFKwQepGpvZULhzK8J4X2Zbc+af6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckJCNmthbTlsUXVITXJ3bmhmWmx0ejVwX29jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZWVmZmYtNGM4Yy00MDZhLWE3OTkt
ZmRlNTQ0MWRhYzk3LzEvckJCNmthbTlsUXVITXJ3bmhmWmx0ejVwX29jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8yZWVmZmYtNGM4Yy00MDZhLWE3OTktZmRlNTQ0MWRhYzk3
LzEvckJCNmthbTlsUXVITXJ3bmhmWmx0ejVwX29jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMFtMptq
hFZk/FZDv8uFHoEhCCbKEUjqGjwIJ1f658pPSXePcRrvZcks9froSw9esHBso4AS
VBEEPZYIonyjlhQIVZDwXyM5Or8HQb8NUc5yOVAVTNkZy5hwFbVXIIa5vP2/QW9t
POXssnKa4pPFU7OlbvEdUVb3J3KDheMz4VEsGuWHvFGchHxxrtzUBZLC3KYxggMn
xXdvFxgvQp29KUP8uJuWmOVdPacU1zephpbVd1a0rcNBqR66cVsk7t3UZBIeMb5l
mv4XQljBRoNtoftFel9Dh7epsxMrgKCrug+cPXaIuhFjVA4925TLdOB/gE8PYUXe
ReMla3ss1el79Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:48 2024 by rpki-client on console-ams.rpki-client.org