Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.mft
File:                     108dgnQNHa8ku-4yxYKksaw78Ug.mft (raw, json)
Hash identifier:          rwzp5H6guZiIwiWWzMZfHvXLz4W4DVpcNjqYGUl9obE=
Subject key identifier:   65:99:2E:53:84:4E:9A:EF:63:F6:69:30:EF:A6:77:BB:98:6A:0A:9D
Authority key identifier: D7:4F:1D:82:74:0D:1D:AF:24:BB:EE:32:C5:82:A4:B1:AC:3B:F1:48
Certificate issuer:       /CN=d74f1d82740d1daf24bbee32c582a4b1ac3bf148
Certificate serial:       01922F12471CF976B4DB039E3E4784AD3211
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/108dgnQNHa8ku-4yxYKksaw78Ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.mft
Manifest number:          02CA
Signing time:             Thu 26 Sep 2024 16:02:59 +0000
Manifest this update:     Thu 26 Sep 2024 16:02:59 +0000
Manifest next update:     Fri 27 Sep 2024 16:02:59 +0000
Files and hashes:         1: 02vMc21dPaykc1WVuH9FQYWFUUg.roa (hash: rnh24wDGF5C/+sBUB6MWDQ4k2JvxDecmw+5DMz6O+zU=)
                          2: 108dgnQNHa8ku-4yxYKksaw78Ug.crl (hash: h0d6lS124ChhBcFBgI1RF+sMk0Gh9A7spoGx11UbzXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:2f:12:47:1c:f9:76:b4:db:03:9e:3e:47:84:ad:32:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d74f1d82740d1daf24bbee32c582a4b1ac3bf148
        Validity
            Not Before: Sep 26 16:02:59 2024 GMT
            Not After : Sep 27 16:02:59 2024 GMT
        Subject: CN=65992e53844e9aef63f66930efa677bb986a0a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:88:fd:df:a3:4a:31:c5:ab:2f:5c:6b:78:
                    5f:07:80:93:b3:43:d8:1c:85:06:c5:43:56:9b:3b:
                    fc:52:d1:2d:78:5f:c8:87:ad:2c:79:16:f6:8f:29:
                    58:71:22:31:a5:83:b8:21:de:0d:d3:16:53:05:8a:
                    57:46:ff:25:c9:15:45:4e:cf:0b:a7:3d:17:09:6c:
                    e1:81:c9:eb:f9:c0:a6:92:fa:a3:f8:ae:7d:37:15:
                    5c:b4:20:4e:26:76:5d:cb:20:fa:cf:9c:f4:cb:43:
                    9b:b1:37:de:39:75:cf:89:c7:ce:55:c8:6c:7c:b2:
                    08:e8:fe:7f:5c:d6:20:a8:55:63:7e:22:c6:38:4f:
                    bd:e5:39:86:f6:56:af:b4:df:b6:d9:50:dc:0c:7b:
                    72:7d:83:63:35:86:52:f3:0c:bd:ef:86:ce:93:02:
                    8b:e6:3e:b3:72:09:22:31:5c:b1:30:80:f6:21:c3:
                    18:eb:38:37:6c:dc:4a:a3:d3:51:21:ca:2c:5b:3c:
                    51:e4:7a:f2:08:3c:b2:3b:7c:e4:74:6d:7f:58:0c:
                    6c:f7:5f:9d:0f:52:22:bc:63:dc:d7:16:2b:3f:af:
                    67:3f:1f:b4:41:25:07:bd:b8:7c:34:32:32:14:d2:
                    18:a6:c9:89:ed:03:bd:03:3b:49:31:c6:a3:00:18:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:99:2E:53:84:4E:9A:EF:63:F6:69:30:EF:A6:77:BB:98:6A:0A:9D
            X509v3 Authority Key Identifier:
                keyid:D7:4F:1D:82:74:0D:1D:AF:24:BB:EE:32:C5:82:A4:B1:AC:3B:F1:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/108dgnQNHa8ku-4yxYKksaw78Ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b40465-ef81-465d-9b7b-bee00309db6f/1/108dgnQNHa8ku-4yxYKksaw78Ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:07:d5:f8:4d:b8:47:d4:02:19:79:a7:8a:66:d7:01:85:
         ab:02:48:5c:35:ac:a5:ab:49:a6:c1:ae:15:fa:5e:73:5f:df:
         16:a0:83:3d:69:c2:7f:53:23:20:72:e5:8f:57:1c:84:57:55:
         3f:bb:eb:b2:06:88:09:b4:c9:75:99:1e:4d:72:91:a4:f9:9e:
         ad:9f:5b:29:b1:40:34:38:50:d9:49:50:7d:35:e5:7a:d6:4f:
         1a:8f:d8:e1:b8:22:91:5e:53:c9:07:03:c2:db:90:e1:9f:bf:
         d5:25:d4:91:77:78:04:fd:10:d6:4e:77:aa:08:38:5e:c7:14:
         48:97:ff:f8:0e:e7:51:4c:5e:17:ec:62:8b:a5:11:77:40:36:
         91:5e:c8:87:a7:e4:97:dc:84:1c:6f:e4:e9:6f:1e:f7:a6:9c:
         f0:b3:b3:1e:33:28:68:7b:8e:7b:f7:a2:9b:63:69:4a:1b:3e:
         0c:e7:4c:ed:b2:f7:9c:b0:5f:07:89:0a:f2:07:6e:3b:af:08:
         13:78:d6:3e:52:f0:f0:8c:53:b1:b3:f9:6c:c7:d2:5c:a9:3b:
         f7:21:8f:ec:3d:30:e2:59:5a:2f:86:86:44:e0:42:00:4f:65:
         2a:91:08:cd:73:a2:4e:74:7d:ef:0c:28:16:7e:28:36:60:1c:
         5d:ea:8b:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZIvEkcc+Xa02wOePkeErTIRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NGYxZDgyNzQwZDFkYWYyNGJiZWUzMmM1ODJhNGIxYWMz
YmYxNDgwHhcNMjQwOTI2MTYwMjU5WhcNMjQwOTI3MTYwMjU5WjAzMTEwLwYDVQQD
Eyg2NTk5MmU1Mzg0NGU5YWVmNjNmNjY5MzBlZmE2NzdiYjk4NmEwYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4OI/d+jSjHFqy9ca3hfB4CTs0PY
HIUGxUNWmzv8UtEteF/Ih60seRb2jylYcSIxpYO4Id4N0xZTBYpXRv8lyRVFTs8L
pz0XCWzhgcnr+cCmkvqj+K59NxVctCBOJnZdyyD6z5z0y0ObsTfeOXXPicfOVchs
fLII6P5/XNYgqFVjfiLGOE+95TmG9lavtN+22VDcDHtyfYNjNYZS8wy974bOkwKL
5j6zcgkiMVyxMID2IcMY6zg3bNxKo9NRIcosWzxR5HryCDyyO3zkdG1/WAxs91+d
D1IivGPc1xYrP69nPx+0QSUHvbh8NDIyFNIYpsmJ7QO9AztJMcajABhV+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWZLlOETprvY/ZpMO+md7uYagqdMB8GA1UdIwQY
MBaAFNdPHYJ0DR2vJLvuMsWCpLGsO/FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTA4ZGduUU5IYThrdS00eXhZS2tzYXc3OFVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNDA0NjUtZWY4MS00NjVkLTliN2It
YmVlMDAzMDlkYjZmLzEvMTA4ZGduUU5IYThrdS00eXhZS2tzYXc3OFVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9iNDA0NjUtZWY4MS00NjVkLTliN2ItYmVlMDAzMDlkYjZm
LzEvMTA4ZGduUU5IYThrdS00eXhZS2tzYXc3OFVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt8H1fhN
uEfUAhl5p4pm1wGFqwJIXDWspatJpsGuFfpec1/fFqCDPWnCf1MjIHLlj1cchFdV
P7vrsgaICbTJdZkeTXKRpPmerZ9bKbFANDhQ2UlQfTXletZPGo/Y4bgikV5TyQcD
wtuQ4Z+/1SXUkXd4BP0Q1k53qgg4XscUSJf/+A7nUUxeF+xii6URd0A2kV7Ih6fk
l9yEHG/k6W8e96ac8LOzHjMoaHuOe/eim2NpShs+DOdM7bL3nLBfB4kK8gduO68I
E3jWPlLw8IxTsbP5bMfSXKk79yGP7D0w4llaL4aGROBCAE9lKpEIzXOiTnR97wwo
Fn4oNmAcXeqLyw==
-----END CERTIFICATE-----
Generated at Fri Sep 27 20:08:33 2024 by rpki-client on console.sobornost.net