Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/kyqc4QXQiySIeJw1W4mKzM6KkIc.mft
File:                     kyqc4QXQiySIeJw1W4mKzM6KkIc.mft (raw, json)
Hash identifier:          sHbeKS+E0oHJ2k5fFmTyWIpUCzmrsmWdThYBBxxUye8=
Subject key identifier:   9C:F7:50:30:88:DF:C3:63:9F:57:4A:7C:0C:2A:23:F9:0B:36:1A:97
Authority key identifier: 93:2A:9C:E1:05:D0:8B:24:88:78:9C:35:5B:89:8A:CC:CE:8A:90:87
Certificate issuer:       /CN=932a9ce105d08b2488789c355b898accce8a9087
Certificate serial:       018E641B075CD39492E11C21EF4D0BA86BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kyqc4QXQiySIeJw1W4mKzM6KkIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/kyqc4QXQiySIeJw1W4mKzM6KkIc.mft
Manifest number:          04
Signing time:             Fri 22 Mar 2024 03:01:16 +0000
Manifest this update:     Fri 22 Mar 2024 03:01:16 +0000
Manifest next update:     Sat 23 Mar 2024 03:01:16 +0000
Files and hashes:         1: gmH1zvUdXML6_7GolIJ0Izzuv3s.roa (hash: W6uatrdah4UNNqYWX7hBI0/9XH40u16k95j1kG/ynLE=)
                          2: kyqc4QXQiySIeJw1W4mKzM6KkIc.crl (hash: lfYsD7BcbvdkEP0GeUSid02dSjGo2B5tkPITBvowaCE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:64:1b:07:5c:d3:94:92:e1:1c:21:ef:4d:0b:a8:6b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=932a9ce105d08b2488789c355b898accce8a9087
        Validity
            Not Before: Mar 22 03:01:16 2024 GMT
            Not After : Mar 23 03:01:16 2024 GMT
        Subject: CN=9cf7503088dfc3639f574a7c0c2a23f90b361a97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:3a:71:c2:f4:e3:83:d2:21:cb:e1:93:33:
                    e4:e8:51:a5:61:54:75:1c:0a:00:05:91:1b:cb:4d:
                    a6:8b:74:03:4d:9b:21:5c:3f:4b:04:93:89:f1:c8:
                    c0:17:7d:77:3d:ec:92:23:be:5b:ef:c5:c2:d0:54:
                    18:30:6c:f0:bd:fc:cc:bb:1e:4f:91:27:3d:5f:08:
                    88:97:d5:b5:71:79:6b:72:e3:4c:9a:9c:12:32:27:
                    80:7c:6d:da:7b:8e:ba:89:cc:79:33:07:68:e2:b1:
                    fb:6c:a3:a1:26:18:bb:88:a1:84:33:d1:90:7e:f2:
                    1b:39:1b:0a:71:d8:28:b3:e4:37:50:b9:37:26:0b:
                    7d:cc:e2:9b:bf:fd:c0:9d:69:39:52:ec:2a:96:d9:
                    e2:19:e2:ad:73:1b:71:5e:07:c0:dc:54:1d:22:9d:
                    fd:7f:08:86:59:42:0b:a2:3d:a4:45:c9:c9:2f:5e:
                    2b:fc:b4:cb:1d:ae:c8:e7:18:8e:ac:6e:ff:e1:5a:
                    c6:1c:11:a0:9d:95:d3:14:e7:a2:e2:73:1d:38:e1:
                    2e:ec:b5:27:4f:a3:2b:dc:94:6c:a3:6f:3a:6d:4d:
                    94:e3:42:1b:3f:f8:d8:e0:fb:f0:45:51:a6:b1:8b:
                    5b:3a:4c:e8:0f:57:2c:1e:d0:77:b6:d0:ce:67:8d:
                    25:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F7:50:30:88:DF:C3:63:9F:57:4A:7C:0C:2A:23:F9:0B:36:1A:97
            X509v3 Authority Key Identifier:
                keyid:93:2A:9C:E1:05:D0:8B:24:88:78:9C:35:5B:89:8A:CC:CE:8A:90:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyqc4QXQiySIeJw1W4mKzM6KkIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/kyqc4QXQiySIeJw1W4mKzM6KkIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/f191ee-04de-4894-adf2-c8d309c1040c/1/kyqc4QXQiySIeJw1W4mKzM6KkIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:00:98:87:fe:2c:4b:18:a7:7d:de:db:eb:3b:e8:9b:3f:36:
         0e:1f:b3:55:ce:fb:de:f5:ab:e9:dd:8d:27:ed:78:74:58:94:
         cb:55:e1:6e:25:00:9e:c8:c6:3e:03:ff:bd:43:ec:a2:e9:1c:
         83:8f:19:8c:77:47:7a:33:aa:3e:ff:da:08:91:62:90:a4:c2:
         10:30:36:ff:99:da:0c:69:f6:4b:32:86:13:d5:61:45:fb:6f:
         13:80:5a:49:8a:81:c9:c6:9b:71:53:72:41:b4:21:3f:30:7b:
         75:bd:b4:7f:59:e9:8f:78:d2:22:3e:fd:a0:b8:3a:0f:fa:1c:
         27:20:e2:1c:35:87:89:4c:22:3a:2b:ba:d3:dd:41:76:5f:4b:
         ef:f4:e4:9a:9f:66:fa:d8:da:f1:34:99:a5:49:6b:cb:f4:bf:
         68:e8:7b:fb:c4:80:6c:7d:bb:c1:36:ac:b0:7c:c5:25:fe:9f:
         de:e2:46:97:29:cf:18:f9:92:96:5a:a4:e4:3a:60:60:d6:6b:
         81:21:ac:43:58:ad:44:fd:f7:33:b0:a9:0f:8f:f1:a4:72:44:
         ef:a2:af:26:77:fb:29:07:23:23:1a:72:6b:9e:23:0b:fd:93:
         b6:a7:aa:b1:a4:ad:75:ae:91:44:38:7f:46:3f:e4:d8:a4:a7:
         08:32:1c:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY5kGwdc05SS4Rwh700LqGv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMmE5Y2UxMDVkMDhiMjQ4ODc4OWMzNTViODk4YWNjY2U4
YTkwODcwHhcNMjQwMzIyMDMwMTE2WhcNMjQwMzIzMDMwMTE2WjAzMTEwLwYDVQQD
Eyg5Y2Y3NTAzMDg4ZGZjMzYzOWY1NzRhN2MwYzJhMjNmOTBiMzYxYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk446ccL044PSIcvhkzPk6FGlYVR1
HAoABZEby02mi3QDTZshXD9LBJOJ8cjAF313PeySI75b78XC0FQYMGzwvfzMux5P
kSc9XwiIl9W1cXlrcuNMmpwSMieAfG3ae466icx5Mwdo4rH7bKOhJhi7iKGEM9GQ
fvIbORsKcdgos+Q3ULk3Jgt9zOKbv/3AnWk5UuwqltniGeKtcxtxXgfA3FQdIp39
fwiGWUILoj2kRcnJL14r/LTLHa7I5xiOrG7/4VrGHBGgnZXTFOei4nMdOOEu7LUn
T6Mr3JRso286bU2U40IbP/jY4PvwRVGmsYtbOkzoD1csHtB3ttDOZ40lVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJz3UDCI38Njn1dKfAwqI/kLNhqXMB8GA1UdIwQY
MBaAFJMqnOEF0IskiHicNVuJiszOipCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lxYzRRWFFpeVNJZUp3MVc0bUt6TTZLa0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mMTkxZWUtMDRkZS00ODk0LWFkZjIt
YzhkMzA5YzEwNDBjLzEva3lxYzRRWFFpeVNJZUp3MVc0bUt6TTZLa0ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9mMTkxZWUtMDRkZS00ODk0LWFkZjItYzhkMzA5YzEwNDBj
LzEva3lxYzRRWFFpeVNJZUp3MVc0bUt6TTZLa0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhwCYh/4s
Sxinfd7b6zvomz82Dh+zVc773vWr6d2NJ+14dFiUy1XhbiUAnsjGPgP/vUPsoukc
g48ZjHdHejOqPv/aCJFikKTCEDA2/5naDGn2SzKGE9VhRftvE4BaSYqBycabcVNy
QbQhPzB7db20f1npj3jSIj79oLg6D/ocJyDiHDWHiUwiOiu6091Bdl9L7/Tkmp9m
+tja8TSZpUlry/S/aOh7+8SAbH27wTassHzFJf6f3uJGlynPGPmSllqk5DpgYNZr
gSGsQ1itRP33M7CpD4/xpHJE76KvJnf7KQcjIxpya54jC/2TtqeqsaStda6RRDh/
Rj/k2KSnCDIchA==
-----END CERTIFICATE-----
Generated at Fri Mar 22 18:23:16 2024 by rpki-client on console.sobornost.net