Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/03a925-f1bd-40b0-93d9-b93fad88c747/1/JdY-cvNvJ_eBYElVymJPxVzhSpI.mft
File:                     JdY-cvNvJ_eBYElVymJPxVzhSpI.mft (raw, json)
Hash identifier:          xc0YHtH1pglZEZUBHCetQ5x9CfzNAh5rkyu7igvxf5E=
Subject key identifier:   22:5D:BA:E9:19:46:AF:B0:3C:E0:D7:CF:D2:9F:E7:A7:C3:40:94:01
Authority key identifier: 25:D6:3E:72:F3:6F:27:F7:81:60:49:55:CA:62:4F:C5:5C:E1:4A:92
Certificate issuer:       /CN=25d63e72f36f27f781604955ca624fc55ce14a92
Certificate serial:       018AFDFF6B0D21059353C642AC299A9994CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JdY-cvNvJ_eBYElVymJPxVzhSpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/03a925-f1bd-40b0-93d9-b93fad88c747/1/JdY-cvNvJ_eBYElVymJPxVzhSpI.mft
Manifest number:          0485
Signing time:             Thu 05 Oct 2023 04:01:29 +0000
Manifest this update:     Thu 05 Oct 2023 04:01:29 +0000
Manifest next update:     Fri 06 Oct 2023 04:01:29 +0000
Files and hashes:         1: JdY-cvNvJ_eBYElVymJPxVzhSpI.crl (hash: YR106SJbdIjXVPpwjiTCP7cWuHM+7vcNB//CqzxsEQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fd:ff:6b:0d:21:05:93:53:c6:42:ac:29:9a:99:94:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25d63e72f36f27f781604955ca624fc55ce14a92
        Validity
            Not Before: Oct  5 04:01:29 2023 GMT
            Not After : Oct  6 04:01:29 2023 GMT
        Subject: CN=225dbae91946afb03ce0d7cfd29fe7a7c3409401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:ed:c5:d7:ab:63:ce:41:5e:c9:a8:96:fc:
                    05:20:4d:aa:ad:6b:ae:be:af:01:7d:db:12:e8:bd:
                    92:97:ed:9a:08:46:12:de:39:c3:e8:fe:ad:8b:2c:
                    d1:71:1e:87:54:a2:d7:f4:e0:55:0c:0f:d4:67:11:
                    08:82:34:a0:da:14:d3:6c:81:31:25:de:d1:cb:4f:
                    f7:a0:e6:8e:06:ad:75:41:4e:c5:2a:b9:70:33:4a:
                    4e:5d:52:47:32:e9:44:63:10:4a:cb:24:c6:df:6c:
                    f6:44:6d:04:55:ff:cf:ac:7d:b3:9f:ea:c4:b3:57:
                    d8:9f:44:b3:2c:d8:d5:67:44:11:dc:f5:2d:1b:d1:
                    6d:44:ea:45:15:a6:ed:70:0e:14:70:2a:8d:c9:80:
                    e1:e4:52:b7:2b:1d:c1:c6:c7:63:4e:f2:8a:07:dc:
                    40:98:3e:6a:00:b9:f9:54:79:5a:9d:b7:0a:1d:32:
                    bd:8b:00:99:c9:c3:fa:c9:d6:70:4a:92:27:9e:1b:
                    0b:aa:c6:6e:69:87:0c:1c:21:18:07:86:50:bf:ea:
                    9c:c3:d3:23:6c:49:9d:91:ed:b9:ba:4b:c2:31:59:
                    09:2e:cd:f4:0f:9c:66:1c:dc:12:35:77:f6:db:d2:
                    e5:f4:9f:9a:c2:79:e7:a4:bc:e0:fa:73:43:2b:53:
                    7d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5D:BA:E9:19:46:AF:B0:3C:E0:D7:CF:D2:9F:E7:A7:C3:40:94:01
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:72:F3:6F:27:F7:81:60:49:55:CA:62:4F:C5:5C:E1:4A:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdY-cvNvJ_eBYElVymJPxVzhSpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/03a925-f1bd-40b0-93d9-b93fad88c747/1/JdY-cvNvJ_eBYElVymJPxVzhSpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/03a925-f1bd-40b0-93d9-b93fad88c747/1/JdY-cvNvJ_eBYElVymJPxVzhSpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:de:ef:41:74:44:8d:a5:8a:ac:e1:a9:30:53:3d:1b:50:55:
         37:51:81:34:7c:99:8c:b3:0a:ae:c6:50:3a:8f:09:80:70:18:
         75:7b:92:e9:de:aa:0d:c5:93:ec:39:1b:ba:7b:50:75:e6:80:
         f2:c1:96:08:da:2a:31:e8:c8:d7:dd:41:ad:3a:ae:a4:5b:12:
         9a:f7:0d:55:bb:f8:7c:95:6e:f5:91:78:8f:94:fd:66:36:a7:
         94:4a:ce:5b:84:eb:6f:73:86:71:cc:72:ec:59:67:ba:87:a2:
         a7:89:e7:75:8d:29:ab:1b:8f:4b:2d:02:e2:ca:39:ac:63:05:
         b0:92:19:6c:aa:1a:57:72:fb:5f:5e:66:29:a7:6d:de:d7:6d:
         53:7e:6b:c5:7e:ee:81:2f:33:2e:3e:6f:bd:b0:43:0f:7a:a2:
         f3:01:5d:10:ff:04:d0:9e:07:a8:6f:0d:be:f1:0f:c1:e5:0c:
         5c:9c:e5:52:9b:98:38:45:e8:0e:0f:3b:09:ef:a1:69:76:69:
         bd:0a:82:87:66:41:88:17:ac:76:bd:17:0d:95:09:c4:ef:8f:
         3d:51:81:00:99:c1:a1:3e:dc:de:f7:5c:a7:e4:de:a4:85:f8:
         b0:b9:a5:b1:6c:15:87:b2:c7:b7:8c:1c:bc:e7:51:64:dc:fe:
         65:38:6a:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYr9/2sNIQWTU8ZCrCmamZTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDYzZTcyZjM2ZjI3Zjc4MTYwNDk1NWNhNjI0ZmM1NWNl
MTRhOTIwHhcNMjMxMDA1MDQwMTI5WhcNMjMxMDA2MDQwMTI5WjAzMTEwLwYDVQQD
EygyMjVkYmFlOTE5NDZhZmIwM2NlMGQ3Y2ZkMjlmZTdhN2MzNDA5NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxDtxderY85BXsmolvwFIE2qrWuu
vq8BfdsS6L2Sl+2aCEYS3jnD6P6tiyzRcR6HVKLX9OBVDA/UZxEIgjSg2hTTbIEx
Jd7Ry0/3oOaOBq11QU7FKrlwM0pOXVJHMulEYxBKyyTG32z2RG0EVf/PrH2zn+rE
s1fYn0SzLNjVZ0QR3PUtG9FtROpFFabtcA4UcCqNyYDh5FK3Kx3BxsdjTvKKB9xA
mD5qALn5VHlanbcKHTK9iwCZycP6ydZwSpInnhsLqsZuaYcMHCEYB4ZQv+qcw9Mj
bEmdke25ukvCMVkJLs30D5xmHNwSNXf229Ll9J+awnnnpLzg+nNDK1N9oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJduukZRq+wPODXz9Kf56fDQJQBMB8GA1UdIwQY
MBaAFCXWPnLzbyf3gWBJVcpiT8Vc4UqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRZLWN2TnZKX2VCWUVsVnltSlB4VnpoU3BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wM2E5MjUtZjFiZC00MGIwLTkzZDkt
YjkzZmFkODhjNzQ3LzEvSmRZLWN2TnZKX2VCWUVsVnltSlB4VnpoU3BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wM2E5MjUtZjFiZC00MGIwLTkzZDktYjkzZmFkODhjNzQ3
LzEvSmRZLWN2TnZKX2VCWUVsVnltSlB4VnpoU3BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACN7vQXRE
jaWKrOGpMFM9G1BVN1GBNHyZjLMKrsZQOo8JgHAYdXuS6d6qDcWT7DkbuntQdeaA
8sGWCNoqMejI191BrTqupFsSmvcNVbv4fJVu9ZF4j5T9ZjanlErOW4Trb3OGccxy
7Flnuoeip4nndY0pqxuPSy0C4so5rGMFsJIZbKoaV3L7X15mKadt3tdtU35rxX7u
gS8zLj5vvbBDD3qi8wFdEP8E0J4HqG8NvvEPweUMXJzlUpuYOEXoDg87Ce+haXZp
vQqCh2ZBiBesdr0XDZUJxO+PPVGBAJnBoT7c3vdcp+TepIX4sLmlsWwVh7LHt4wc
vOdRZNz+ZThqVw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org