Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft
File:                     3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft (raw, json)
Hash identifier:          QCH+Dp3VhlS1c73O5iA3lRHjXTIy9UVIm1v9Uw5rs/8=
Subject key identifier:   E7:1C:89:60:C3:15:99:57:9A:68:1D:70:97:62:B9:61:3E:50:A1:ED
Authority key identifier: DD:98:2A:72:9F:A3:2A:FC:53:09:66:32:23:48:85:60:BC:ED:3C:3E
Certificate issuer:       /CN=dd982a729fa32afc5309663223488560bced3c3e
Certificate serial:       0192B005C0CB646B2DFEBCBCCFB31334A4FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Zgqcp-jKvxTCWYyI0iFYLztPD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft
Manifest number:          0219
Signing time:             Mon 21 Oct 2024 17:00:19 +0000
Manifest this update:     Mon 21 Oct 2024 17:00:19 +0000
Manifest next update:     Tue 22 Oct 2024 17:00:19 +0000
Files and hashes:         1: 3Zgqcp-jKvxTCWYyI0iFYLztPD4.crl (hash: h/YVWzLwUWNWEdQLeOWzuTa8XcpVOFRo6NcXgLah6qQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:b0:05:c0:cb:64:6b:2d:fe:bc:bc:cf:b3:13:34:a4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd982a729fa32afc5309663223488560bced3c3e
        Validity
            Not Before: Oct 21 17:00:19 2024 GMT
            Not After : Oct 22 17:00:19 2024 GMT
        Subject: CN=e71c8960c31599579a681d709762b9613e50a1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d9:50:ca:01:41:47:85:76:05:09:73:71:7f:
                    08:ee:06:ea:33:e3:fe:bc:da:85:e0:ff:a1:6a:b7:
                    39:88:93:49:95:14:1b:c8:cd:92:63:4a:83:41:b3:
                    eb:6e:3a:9f:29:04:ea:79:54:52:7f:49:f2:6b:07:
                    40:ff:01:bc:1d:76:9e:69:4f:08:80:59:cb:4a:95:
                    14:dd:03:05:e0:4e:94:ff:11:07:3a:97:b3:9c:8b:
                    46:a3:03:6c:67:77:d0:27:69:23:7c:80:97:47:cf:
                    0c:a5:69:86:c8:ec:94:62:0d:a2:d4:19:bc:a5:7a:
                    1f:eb:72:14:4d:e4:06:b7:ff:cc:b1:07:2d:6e:6d:
                    fe:fe:d6:d6:c2:8c:29:ec:2b:d1:99:bd:ea:bd:21:
                    5c:b8:41:05:d9:ef:77:9d:6b:74:09:27:36:5c:ef:
                    4f:53:e1:59:2b:27:26:b8:f5:ac:75:42:db:7e:ef:
                    59:7a:52:b3:72:27:df:f2:d6:40:0e:22:a2:57:3e:
                    c9:22:89:10:e0:4a:90:70:b9:ef:02:4f:a4:44:c0:
                    66:fb:59:3e:44:5d:04:7b:e0:4b:8b:ff:95:26:99:
                    22:10:17:d4:12:51:5e:55:a5:9a:eb:77:00:0e:c6:
                    f4:00:77:5c:6a:aa:cd:65:e5:db:b6:e8:40:45:db:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1C:89:60:C3:15:99:57:9A:68:1D:70:97:62:B9:61:3E:50:A1:ED
            X509v3 Authority Key Identifier:
                keyid:DD:98:2A:72:9F:A3:2A:FC:53:09:66:32:23:48:85:60:BC:ED:3C:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Zgqcp-jKvxTCWYyI0iFYLztPD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/89c1fe-d2cb-4a9a-b091-7079bb51a70e/1/3Zgqcp-jKvxTCWYyI0iFYLztPD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:f5:f0:b4:69:17:6f:d6:c1:f9:e6:d5:ec:02:8f:90:be:
         86:46:db:e8:95:ef:6d:96:90:15:a0:e9:f8:0d:6e:bb:36:8d:
         53:19:27:ef:d5:13:60:d4:f9:6f:e1:fd:7f:f5:6d:b9:6e:ba:
         6a:7e:93:20:a4:91:ad:74:e9:48:6b:47:5b:a2:81:bc:f3:19:
         61:1e:4e:9a:8f:0a:07:b7:58:e2:83:47:2f:d7:4f:29:06:2d:
         55:c5:fb:f3:f4:dc:88:6b:d2:a2:03:3c:f2:f2:4c:cf:de:9d:
         46:6d:f8:9b:91:5f:d8:0a:b3:cd:21:69:7a:99:e1:60:a1:49:
         8a:36:3b:20:d4:66:ba:54:7c:c9:c5:01:85:d1:bd:5b:c7:a8:
         a0:25:4a:31:65:04:84:32:06:78:82:ba:5b:b3:5d:f7:dc:b2:
         32:bb:8f:e4:83:c6:47:ef:88:92:fb:5a:ab:c6:c7:af:83:b4:
         40:e8:87:3e:15:3b:8c:1b:65:90:14:63:9a:44:a3:76:3a:93:
         2c:2b:9e:ea:d7:fc:20:ec:cc:38:33:e2:73:43:59:c2:4c:95:
         a5:48:04:fe:30:3b:29:97:fe:76:6f:dd:88:f9:1e:30:56:ea:
         cc:29:16:f1:2c:8a:79:a1:ef:15:5f:a0:c4:cc:8e:c2:1a:4b:
         7d:8b:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:18:43 2024 by rpki-client on console.sobornost.net