Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/tZ2dDCjvR_5BQupRkFWHFyywMwY.mft
File:                     tZ2dDCjvR_5BQupRkFWHFyywMwY.mft (raw, json)
Hash identifier:          xa3GtG8gJh96Sbf9/pFF1NwJyin9LYBL/aqFyUm2Ngc=
Subject key identifier:   1C:26:7E:2D:41:5B:90:18:DA:DE:CA:6D:01:B9:E8:56:E0:F1:4C:EB
Authority key identifier: B5:9D:9D:0C:28:EF:47:FE:41:42:EA:51:90:55:87:17:2C:B0:33:06
Certificate issuer:       /CN=b59d9d0c28ef47fe4142ea51905587172cb03306
Certificate serial:       018B8F4368BDD15763772185FAFE527DA9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tZ2dDCjvR_5BQupRkFWHFyywMwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/tZ2dDCjvR_5BQupRkFWHFyywMwY.mft
Manifest number:          0814
Signing time:             Thu 02 Nov 2023 09:00:41 +0000
Manifest this update:     Thu 02 Nov 2023 09:00:41 +0000
Manifest next update:     Fri 03 Nov 2023 09:00:41 +0000
Files and hashes:         1: nDMDkgwfGMCrg86qXPBqReqbUZU.roa (hash: jeiVkyay25SjEdmgGdM1p/cu+vj2SgaJlxL+8FbCFoQ=)
                          2: tZ2dDCjvR_5BQupRkFWHFyywMwY.crl (hash: qmStwQiJrP0c0QCOA0M/tAcHJ/5CDKoLCy8I3CSv8Vk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:43:68:bd:d1:57:63:77:21:85:fa:fe:52:7d:a9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59d9d0c28ef47fe4142ea51905587172cb03306
        Validity
            Not Before: Nov  2 09:00:41 2023 GMT
            Not After : Nov  3 09:00:41 2023 GMT
        Subject: CN=1c267e2d415b9018dadeca6d01b9e856e0f14ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:22:4b:91:09:b4:2a:93:8f:ce:af:e4:cd:85:
                    32:e9:72:15:b5:62:a7:4c:c5:a9:64:65:2f:e6:a0:
                    85:e0:83:2a:af:ba:83:9f:84:b3:33:87:e4:16:c1:
                    f0:fc:7c:7e:51:73:24:40:59:18:ac:e3:3d:7b:16:
                    48:c8:ba:0a:69:0d:82:f8:d6:72:ec:44:02:e4:93:
                    72:1d:c4:0d:e5:c8:c9:5c:2a:31:48:b7:85:35:41:
                    01:3b:be:53:ca:d7:cb:b4:2c:b8:15:d1:22:43:19:
                    59:5f:e4:35:2d:c8:47:96:ae:3f:96:7a:fb:0b:9a:
                    d6:e4:c2:72:91:ed:79:df:8e:ff:5d:48:df:68:ce:
                    52:55:1c:08:05:8a:20:0b:3a:80:1d:c4:78:e4:9c:
                    e6:7f:1c:a5:a9:4e:37:b2:45:01:4b:01:3c:2f:a1:
                    e4:37:1a:c7:cb:f8:1b:14:26:67:c7:d2:4d:e9:72:
                    b8:55:ab:74:66:cf:22:19:4f:d4:f3:39:54:f8:d8:
                    3e:86:a8:1d:ad:72:b1:1c:b7:0e:84:d2:8f:d1:18:
                    b7:02:32:3a:6a:08:39:79:9b:a6:76:3a:81:7e:35:
                    72:ad:d2:1c:ef:83:09:62:95:33:46:3d:d9:b7:57:
                    bb:0b:e9:9c:bd:4e:5d:6e:a7:69:36:49:c8:e7:af:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:26:7E:2D:41:5B:90:18:DA:DE:CA:6D:01:B9:E8:56:E0:F1:4C:EB
            X509v3 Authority Key Identifier:
                keyid:B5:9D:9D:0C:28:EF:47:FE:41:42:EA:51:90:55:87:17:2C:B0:33:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZ2dDCjvR_5BQupRkFWHFyywMwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/tZ2dDCjvR_5BQupRkFWHFyywMwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8cd8ba-a04a-43b9-9807-3f8f8fb83ccf/1/tZ2dDCjvR_5BQupRkFWHFyywMwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c2:c1:c3:f6:db:d7:b4:18:d8:02:8c:2c:93:3c:e6:99:e0:
         da:1e:62:2c:ba:3c:3d:59:a4:65:32:f1:a2:f8:50:ff:73:ce:
         59:88:fe:ec:8e:e6:ba:90:9d:e8:92:9c:20:ff:ad:02:c2:68:
         f5:9c:16:f1:cc:10:d2:ea:2b:d5:1b:c0:d5:92:fa:d2:c6:b7:
         17:28:05:13:35:9d:52:14:63:85:d8:52:f9:ee:fb:9c:1a:c0:
         9a:dd:72:ba:0f:01:f8:f2:ad:df:89:8f:17:24:64:a1:be:96:
         d3:0b:b8:f7:7d:a2:0b:59:d6:31:a8:bc:4b:d1:d3:3b:64:8f:
         37:87:ed:e7:fa:b5:35:81:df:51:3a:47:10:0f:a4:73:6f:69:
         fb:e3:aa:46:48:ae:d6:06:c8:ff:aa:d2:fc:53:bf:d8:0d:9a:
         e6:1e:b6:e7:da:20:45:fc:14:a7:3b:4a:36:06:76:e9:22:67:
         0d:90:b6:c4:9e:29:81:87:1d:c5:3f:56:12:cf:66:a2:22:02:
         c3:63:d1:6c:f2:b2:cc:34:af:09:b1:d3:f9:57:29:13:41:83:
         9d:c5:ae:b1:c1:f8:a0:17:3f:3e:b4:ef:ec:3e:38:45:ff:88:
         0b:90:fd:e8:77:b2:44:78:57:99:6e:03:98:61:2e:f1:25:68:
         5e:08:c8:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuPQ2i90VdjdyGF+v5SfanbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1OWQ5ZDBjMjhlZjQ3ZmU0MTQyZWE1MTkwNTU4NzE3MmNi
MDMzMDYwHhcNMjMxMTAyMDkwMDQxWhcNMjMxMTAzMDkwMDQxWjAzMTEwLwYDVQQD
EygxYzI2N2UyZDQxNWI5MDE4ZGFkZWNhNmQwMWI5ZTg1NmUwZjE0Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJLkQm0KpOPzq/kzYUy6XIVtWKn
TMWpZGUv5qCF4IMqr7qDn4SzM4fkFsHw/Hx+UXMkQFkYrOM9exZIyLoKaQ2C+NZy
7EQC5JNyHcQN5cjJXCoxSLeFNUEBO75TytfLtCy4FdEiQxlZX+Q1LchHlq4/lnr7
C5rW5MJyke15347/XUjfaM5SVRwIBYogCzqAHcR45JzmfxylqU43skUBSwE8L6Hk
NxrHy/gbFCZnx9JN6XK4Vat0Zs8iGU/U8zlU+Ng+hqgdrXKxHLcOhNKP0Ri3AjI6
agg5eZumdjqBfjVyrdIc74MJYpUzRj3Zt1e7C+mcvU5dbqdpNknI56/+BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBwmfi1BW5AY2t7KbQG56Fbg8UzrMB8GA1UdIwQY
MBaAFLWdnQwo70f+QULqUZBVhxcssDMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFoyZERDanZSXzVCUXVwUmtGV0hGeXl3TXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84Y2Q4YmEtYTA0YS00M2I5LTk4MDct
M2Y4ZjhmYjgzY2NmLzEvdFoyZERDanZSXzVCUXVwUmtGV0hGeXl3TXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84Y2Q4YmEtYTA0YS00M2I5LTk4MDctM2Y4ZjhmYjgzY2Nm
LzEvdFoyZERDanZSXzVCUXVwUmtGV0hGeXl3TXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosLBw/bb
17QY2AKMLJM85png2h5iLLo8PVmkZTLxovhQ/3POWYj+7I7mupCd6JKcIP+tAsJo
9ZwW8cwQ0uor1RvA1ZL60sa3FygFEzWdUhRjhdhS+e77nBrAmt1yug8B+PKt34mP
FyRkob6W0wu4932iC1nWMai8S9HTO2SPN4ft5/q1NYHfUTpHEA+kc29p++OqRkiu
1gbI/6rS/FO/2A2a5h6259ogRfwUpztKNgZ26SJnDZC2xJ4pgYcdxT9WEs9moiIC
w2PRbPKyzDSvCbHT+VcpE0GDncWuscH4oBc/PrTv7D44Rf+IC5D96HeyRHhXmW4D
mGEu8SVoXgjIQQ==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:54 2023 by rpki-client on console.sobornost.net