Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft
File:                     EM0IembnD-9CkWzZhnUBqh1Jwsw.mft (raw, json)
Hash identifier:          hF9SswMPLinfU1M1pKcnebiCm6Agmowq1W1j/ttyQtU=
Subject key identifier:   2B:55:A0:6D:29:35:8B:E3:EC:94:37:19:3D:91:75:EF:4A:82:C0:92
Authority key identifier: 10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC
Certificate issuer:       /CN=10cd087a66e70fef42916cd9867501aa1d49c2cc
Certificate serial:       01932641C6C22E87D231F44759CA0E49266C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EM0IembnD-9CkWzZhnUBqh1Jwsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft
Manifest number:          02EC
Signing time:             Wed 13 Nov 2024 16:01:05 +0000
Manifest this update:     Wed 13 Nov 2024 16:01:05 +0000
Manifest next update:     Thu 14 Nov 2024 16:01:05 +0000
Files and hashes:         1: EM0IembnD-9CkWzZhnUBqh1Jwsw.crl (hash: JYq7ZJJK7/Mxvk8m8c+Nj9TZS2FitXYFo+P5bJX3tzE=)
                          2: NYhPs1QRitz7Bu8CfjaaYxZo-4M.roa (hash: tvBGxNMBvzCStAgU/+/EKvlm38bg83swpNCdyVmGBfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:41:c6:c2:2e:87:d2:31:f4:47:59:ca:0e:49:26:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10cd087a66e70fef42916cd9867501aa1d49c2cc
        Validity
            Not Before: Nov 13 16:01:05 2024 GMT
            Not After : Nov 14 16:01:05 2024 GMT
        Subject: CN=2b55a06d29358be3ec9437193d9175ef4a82c092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ab:74:b3:cc:85:29:c2:b2:fe:83:a2:8b:6e:
                    35:a9:56:20:31:63:fa:aa:a6:45:ef:5b:07:08:d3:
                    eb:6a:e5:ac:dc:ea:ae:f7:37:bb:50:21:f2:06:7d:
                    89:0f:47:05:23:64:6e:fe:f0:8c:59:ea:75:a3:a7:
                    08:73:cb:f2:0b:1e:42:39:ae:f8:74:bd:28:be:af:
                    92:07:8a:71:c4:d6:3a:22:41:4b:75:92:be:c7:26:
                    99:fa:32:67:f2:a4:fe:1e:e9:f2:33:a3:1b:79:bb:
                    ec:7a:8c:e9:b3:8e:d0:ba:bc:eb:36:31:18:df:9c:
                    fd:27:42:a7:2c:66:66:bb:64:c5:16:a3:4b:08:a2:
                    f3:30:9c:5d:1f:b0:86:d5:c7:db:1c:02:73:01:94:
                    5c:a3:b1:6c:21:29:83:14:0d:07:11:e9:d0:57:97:
                    24:2f:97:7b:53:39:12:69:0c:37:2f:1e:68:b3:b8:
                    34:03:ac:05:b6:1f:ea:40:e3:9a:d3:11:49:52:df:
                    87:98:3d:e6:24:1b:7f:03:ab:d9:e4:e2:32:91:14:
                    b6:de:a6:1f:27:e0:fc:7f:97:7c:53:b7:8b:13:82:
                    0f:53:24:fa:8e:c5:8a:cb:de:a8:51:2c:0a:7a:43:
                    0e:09:59:a1:08:1b:be:70:fa:6a:fa:0d:2b:d1:5c:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:55:A0:6D:29:35:8B:E3:EC:94:37:19:3D:91:75:EF:4A:82:C0:92
            X509v3 Authority Key Identifier:
                keyid:10:CD:08:7A:66:E7:0F:EF:42:91:6C:D9:86:75:01:AA:1D:49:C2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EM0IembnD-9CkWzZhnUBqh1Jwsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/17b917-502e-4c70-9eeb-823262316d84/1/EM0IembnD-9CkWzZhnUBqh1Jwsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:c5:cd:16:e2:fc:ef:33:c5:4b:55:e6:6e:2c:fd:61:c3:50:
         8b:32:de:d7:3b:51:d2:72:fb:82:c5:dc:1d:66:df:cd:9a:90:
         a2:00:a9:18:cc:bd:65:07:82:96:88:e6:ed:e3:f4:7f:e4:a8:
         92:3f:b5:2b:c1:89:b8:f0:ab:01:cb:06:fe:85:e5:fb:d1:22:
         4e:86:f8:41:0f:34:ca:67:60:95:e3:db:8a:f0:2f:d5:61:ce:
         2a:ff:0d:b9:9c:b1:05:fe:98:50:e4:09:e9:39:24:ec:13:36:
         d2:2d:15:46:92:e3:d4:19:e7:4b:05:1a:e9:af:01:dc:02:6b:
         7a:3a:ed:14:d5:14:f9:57:62:56:5a:d1:9b:2e:aa:c5:58:97:
         84:d3:09:94:e4:d5:cb:90:9e:58:f4:f7:9b:2c:41:3a:ba:00:
         27:03:de:77:52:cd:c9:36:95:da:ac:99:48:79:9c:2f:6f:f4:
         4f:d6:e3:ab:6b:3a:0a:1b:d3:10:35:1b:45:a4:49:37:87:5d:
         15:b6:19:ce:1c:90:f5:28:0a:f3:cb:c8:62:05:4a:ad:81:10:
         ca:3b:d0:e6:1a:57:58:ef:04:be:1f:bc:50:ea:f5:6b:1f:cc:
         68:a2:5b:01:9b:f7:33:0f:69:b3:51:40:12:56:8a:04:cb:60:
         b3:07:c6:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMmQcbCLofSMfRHWcoOSSZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwY2QwODdhNjZlNzBmZWY0MjkxNmNkOTg2NzUwMWFhMWQ0
OWMyY2MwHhcNMjQxMTEzMTYwMTA1WhcNMjQxMTE0MTYwMTA1WjAzMTEwLwYDVQQD
EygyYjU1YTA2ZDI5MzU4YmUzZWM5NDM3MTkzZDkxNzVlZjRhODJjMDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzat0s8yFKcKy/oOii241qVYgMWP6
qqZF71sHCNPrauWs3Oqu9ze7UCHyBn2JD0cFI2Ru/vCMWep1o6cIc8vyCx5COa74
dL0ovq+SB4pxxNY6IkFLdZK+xyaZ+jJn8qT+HunyM6Mbebvseozps47QurzrNjEY
35z9J0KnLGZmu2TFFqNLCKLzMJxdH7CG1cfbHAJzAZRco7FsISmDFA0HEenQV5ck
L5d7UzkSaQw3Lx5os7g0A6wFth/qQOOa0xFJUt+HmD3mJBt/A6vZ5OIykRS23qYf
J+D8f5d8U7eLE4IPUyT6jsWKy96oUSwKekMOCVmhCBu+cPpq+g0r0VyiZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtVoG0pNYvj7JQ3GT2Rde9KgsCSMB8GA1UdIwQY
MBaAFBDNCHpm5w/vQpFs2YZ1AaodScLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU0wSWVtYm5ELTlDa1d6WmhuVUJxaDFKd3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xN2I5MTctNTAyZS00YzcwLTllZWIt
ODIzMjYyMzE2ZDg0LzEvRU0wSWVtYm5ELTlDa1d6WmhuVUJxaDFKd3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xN2I5MTctNTAyZS00YzcwLTllZWItODIzMjYyMzE2ZDg0
LzEvRU0wSWVtYm5ELTlDa1d6WmhuVUJxaDFKd3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsXNFuL8
7zPFS1Xmbiz9YcNQizLe1ztR0nL7gsXcHWbfzZqQogCpGMy9ZQeClojm7eP0f+So
kj+1K8GJuPCrAcsG/oXl+9EiTob4QQ80ymdglePbivAv1WHOKv8NuZyxBf6YUOQJ
6Tkk7BM20i0VRpLj1BnnSwUa6a8B3AJrejrtFNUU+VdiVlrRmy6qxViXhNMJlOTV
y5CeWPT3myxBOroAJwPed1LNyTaV2qyZSHmcL2/0T9bjq2s6ChvTEDUbRaRJN4dd
FbYZzhyQ9SgK88vIYgVKrYEQyjvQ5hpXWO8Evh+8UOr1ax/MaKJbAZv3Mw9ps1FA
ElaKBMtgswfGJg==
-----END CERTIFICATE-----
Generated at Thu Nov 14 16:39:47 2024 by rpki-client on console.sobornost.net