Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft
File:                     Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft (raw, json)
Hash identifier:          0Q/7LWiDr42+6nMVGM+Jlwh3QwNWinVihJsGWdixtbg=
Subject key identifier:   CD:00:72:F2:4E:A5:E7:80:70:D3:B7:17:4D:A6:1F:2F:BE:80:9D:AA
Authority key identifier: 43:B5:B2:D1:0C:0F:4E:78:4D:24:94:A7:01:7F:B8:E0:13:19:FE:70
Certificate issuer:       /CN=43b5b2d10c0f4e784d2494a7017fb8e01319fe70
Certificate serial:       019326436FBBE8D15962A53AA92B28BC0984
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft
Manifest number:          1355
Signing time:             Wed 13 Nov 2024 16:02:53 +0000
Manifest this update:     Wed 13 Nov 2024 16:02:53 +0000
Manifest next update:     Thu 14 Nov 2024 16:02:53 +0000
Files and hashes:         1: Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.crl (hash: AUyZ6BwrQQZJw1AE/xzZLLMdwkcI2+/cUtm2VE6VGKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:43:6f:bb:e8:d1:59:62:a5:3a:a9:2b:28:bc:09:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43b5b2d10c0f4e784d2494a7017fb8e01319fe70
        Validity
            Not Before: Nov 13 16:02:53 2024 GMT
            Not After : Nov 14 16:02:53 2024 GMT
        Subject: CN=cd0072f24ea5e78070d3b7174da61f2fbe809daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7a:49:b9:76:de:89:7a:37:7f:9b:d4:9f:c8:
                    e1:25:5f:de:d7:30:f2:98:b3:fa:f9:c0:a1:9b:0a:
                    fa:d9:da:fb:ff:36:79:4d:a7:04:60:58:15:b9:43:
                    41:e3:10:5b:bf:14:37:11:8d:b1:16:26:89:bd:b1:
                    49:d9:64:7b:6a:37:01:26:19:e0:db:c0:22:d6:be:
                    cf:66:00:ca:7d:0e:e0:78:0b:d4:fc:2e:a1:e5:9c:
                    fb:f2:4f:99:7a:c3:e6:03:d3:1b:e7:0d:ff:75:b0:
                    2d:d5:66:a4:10:99:ef:4c:30:eb:86:52:66:20:b6:
                    af:74:73:c4:52:30:fa:e2:a9:4d:c0:00:d4:e0:60:
                    4c:63:3d:54:0f:b0:1a:ca:a0:87:16:fe:d6:05:2f:
                    bf:43:66:82:84:89:bb:fd:49:72:03:1c:e6:97:a2:
                    c1:12:8c:3e:80:c3:fe:23:3d:67:29:00:f8:b8:e0:
                    7d:2b:c8:66:9a:0f:46:c7:85:d2:32:b2:92:a4:97:
                    06:ee:36:05:3d:4f:c6:e1:c8:72:aa:4e:8a:67:51:
                    9b:8e:57:30:07:a5:06:c4:02:ce:4f:fc:b7:f7:5b:
                    b1:5b:bd:2b:45:11:6b:81:00:0c:fa:f7:16:d2:63:
                    7d:c0:b9:be:60:9b:49:75:b0:93:16:b4:cd:ad:b9:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:00:72:F2:4E:A5:E7:80:70:D3:B7:17:4D:A6:1F:2F:BE:80:9D:AA
            X509v3 Authority Key Identifier:
                keyid:43:B5:B2:D1:0C:0F:4E:78:4D:24:94:A7:01:7F:B8:E0:13:19:FE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ec2565-711c-4b86-ba35-03e9d49d5f3f/1/Q7Wy0QwPTnhNJJSnAX-44BMZ_nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:18:fa:34:6a:24:02:11:ac:d0:b8:82:62:8c:de:27:5a:
         38:e1:0e:82:22:a1:fc:61:21:83:c2:b9:1d:ca:16:1e:a3:07:
         54:e6:e3:4c:6c:12:d4:dc:e6:e9:ca:82:ad:9b:d4:e5:d8:40:
         40:22:dd:85:fa:e3:10:64:6a:8b:6e:a5:9c:82:3d:b9:2d:37:
         18:6b:72:13:35:8e:2d:54:36:21:09:12:75:0d:61:ad:40:15:
         91:1f:bb:4c:ce:5e:5f:4d:de:6e:80:62:bc:db:56:70:0a:dd:
         3e:eb:fc:35:5f:1a:43:09:f6:c5:89:ff:d8:d2:21:15:3c:61:
         8e:5e:69:9e:f8:3c:a6:2d:60:21:7a:af:ce:12:ad:bf:17:5c:
         0c:98:a6:45:87:0c:fa:e7:6c:5e:8d:92:ea:09:23:59:58:a3:
         99:41:78:00:14:00:c4:72:ff:66:b1:5b:ed:65:54:cb:ff:a7:
         4e:49:41:6a:18:fe:f4:45:08:42:49:2c:c7:cd:b7:0b:52:56:
         84:ca:18:48:10:9e:79:6c:2a:dc:dc:f6:2d:50:c3:76:eb:f1:
         ff:69:cd:00:9c:e6:eb:c0:b2:10:53:71:19:ed:8b:29:5c:f0:
         69:ca:50:d4:1b:0a:08:ee:2b:3c:5f:a8:5b:2f:9b:12:de:2a:
         f3:d5:4c:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMmQ2+76NFZYqU6qSsovAmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYjViMmQxMGMwZjRlNzg0ZDI0OTRhNzAxN2ZiOGUwMTMx
OWZlNzAwHhcNMjQxMTEzMTYwMjUzWhcNMjQxMTE0MTYwMjUzWjAzMTEwLwYDVQQD
EyhjZDAwNzJmMjRlYTVlNzgwNzBkM2I3MTc0ZGE2MWYyZmJlODA5ZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XpJuXbeiXo3f5vUn8jhJV/e1zDy
mLP6+cChmwr62dr7/zZ5TacEYFgVuUNB4xBbvxQ3EY2xFiaJvbFJ2WR7ajcBJhng
28Ai1r7PZgDKfQ7geAvU/C6h5Zz78k+ZesPmA9Mb5w3/dbAt1WakEJnvTDDrhlJm
ILavdHPEUjD64qlNwADU4GBMYz1UD7AayqCHFv7WBS+/Q2aChIm7/UlyAxzml6LB
Eow+gMP+Iz1nKQD4uOB9K8hmmg9Gx4XSMrKSpJcG7jYFPU/G4chyqk6KZ1Gbjlcw
B6UGxALOT/y391uxW70rRRFrgQAM+vcW0mN9wLm+YJtJdbCTFrTNrbmncQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0AcvJOpeeAcNO3F02mHy++gJ2qMB8GA1UdIwQY
MBaAFEO1stEMD054TSSUpwF/uOATGf5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdXeTBRd1BUbmhOSkpTbkFYLTQ0Qk1aX25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lYzI1NjUtNzExYy00Yjg2LWJhMzUt
MDNlOWQ0OWQ1ZjNmLzEvUTdXeTBRd1BUbmhOSkpTbkFYLTQ0Qk1aX25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9lYzI1NjUtNzExYy00Yjg2LWJhMzUtMDNlOWQ0OWQ1ZjNm
LzEvUTdXeTBRd1BUbmhOSkpTbkFYLTQ0Qk1aX25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgwY+jRq
JAIRrNC4gmKM3idaOOEOgiKh/GEhg8K5HcoWHqMHVObjTGwS1Nzm6cqCrZvU5dhA
QCLdhfrjEGRqi26lnII9uS03GGtyEzWOLVQ2IQkSdQ1hrUAVkR+7TM5eX03eboBi
vNtWcArdPuv8NV8aQwn2xYn/2NIhFTxhjl5pnvg8pi1gIXqvzhKtvxdcDJimRYcM
+udsXo2S6gkjWVijmUF4ABQAxHL/ZrFb7WVUy/+nTklBahj+9EUIQkksx823C1JW
hMoYSBCeeWwq3Nz2LVDDduvx/2nNAJzm68CyEFNxGe2LKVzwacpQ1BsKCO4rPF+o
Wy+bEt4q89VMFA==
-----END CERTIFICATE-----