Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
File:                     o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft (raw, json)
Hash identifier:          pRfXLufZptJmCMs7mdXrfz2FNjFE+Y4XNYFYokrQiHY=
Subject key identifier:   F3:F0:35:8D:C8:D1:FA:24:8C:B9:28:DD:6F:9F:28:58:30:5E:A7:FD
Authority key identifier: A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02
Certificate issuer:       /CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
Certificate serial:       01934716F472198FC4CF4CCBA41506468B9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft
Manifest number:          0660
Signing time:             Wed 20 Nov 2024 01:01:46 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:46 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:46 +0000
Files and hashes:         1: hetelT-FRG_bHpO0RqW2JskTYug.roa (hash: je/CZRQfYGzlTl5t2Ogh0NcIDSAzmn8Eoi/V49KsI0Y=)
                          2: o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl (hash: 2lO/E+uVYS5rbhGml6e6z3V2bZZObGyPRFjlv/eIWZg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:f4:72:19:8f:c4:cf:4c:cb:a4:15:06:46:8b:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c0b3ee890e7dec5b249ea625bed59b91032c02
        Validity
            Not Before: Nov 20 01:01:46 2024 GMT
            Not After : Nov 21 01:01:46 2024 GMT
        Subject: CN=f3f0358dc8d1fa248cb928dd6f9f2858305ea7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a9:bc:de:a9:cf:90:ff:1f:7f:08:be:d4:dd:
                    c1:13:82:93:0b:87:2a:25:e5:63:20:b7:95:ba:bd:
                    7e:f5:22:2e:5d:d3:9d:4a:70:a7:95:00:c9:65:f0:
                    26:44:ed:0b:1e:43:a3:84:70:4b:21:dd:98:3d:ce:
                    d4:1b:27:d3:cd:50:4e:f6:99:fd:c8:08:40:c5:14:
                    53:dc:3d:98:83:78:5a:63:ec:4b:19:ec:e9:68:ff:
                    b8:0d:fc:4a:56:6b:27:39:73:5f:1b:28:1d:62:48:
                    5f:b8:90:b8:4a:b5:12:5e:d3:66:d4:cd:fb:c2:63:
                    81:60:e0:42:c2:fa:96:ee:7a:f9:da:7b:0b:50:a0:
                    6f:0f:09:85:78:87:6e:76:62:c5:5c:a0:c3:8a:b4:
                    e5:88:01:00:52:d4:ff:32:ce:9b:f3:68:aa:79:73:
                    43:40:33:ac:56:50:ec:a4:51:2b:a5:25:4d:61:8b:
                    46:46:af:8a:f9:31:97:db:66:9a:e5:ff:f3:b2:0c:
                    e0:26:c0:17:01:22:19:e4:cf:cf:98:bb:50:a4:8e:
                    99:1e:33:d0:f9:96:fd:4e:1f:d8:c5:e8:2e:03:5f:
                    d0:53:b9:35:bb:ea:44:47:c2:0d:cb:88:70:17:95:
                    a6:0c:67:88:66:1f:63:5d:98:5c:a9:85:37:0d:28:
                    7d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F0:35:8D:C8:D1:FA:24:8C:B9:28:DD:6F:9F:28:58:30:5E:A7:FD
            X509v3 Authority Key Identifier:
                keyid:A3:C0:B3:EE:89:0E:7D:EC:5B:24:9E:A6:25:BE:D5:9B:91:03:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/o8Cz7okOfexbJJ6mJb7Vm5EDLAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c2:59:c8:01:57:85:3d:9d:85:af:8f:20:fa:b5:fe:88:03:
         70:12:df:c7:1e:4e:4b:d1:00:8c:42:a2:98:41:8f:b8:51:8a:
         e7:c9:72:d3:30:2c:02:f9:26:0a:71:ee:aa:4f:4c:19:9b:2f:
         db:7d:23:f3:91:a0:40:26:66:7b:15:cd:cd:c0:d2:35:37:3c:
         3c:34:71:3a:3d:2e:94:11:d8:69:3a:f5:d9:14:d6:19:a4:ad:
         78:1d:bf:86:22:03:f2:46:23:c6:c6:be:ed:51:32:8c:cb:4f:
         d1:5e:9c:a4:6d:4f:3e:b6:2a:a4:27:cd:96:72:ab:29:ef:7f:
         a7:de:c3:26:27:10:44:46:2b:2e:b6:47:2c:bc:15:d6:2e:7e:
         f6:c6:75:4a:1e:b7:00:e6:55:16:9e:c0:42:2c:a3:24:96:39:
         68:fa:35:46:30:b4:ec:80:9c:d1:3b:55:cc:81:c3:b7:11:3e:
         b2:5d:dd:00:7e:25:52:6f:eb:3a:c3:d2:c4:91:12:1c:05:6e:
         b8:a6:4a:2f:23:35:18:36:c0:31:68:aa:96:d0:2c:3c:e3:4c:
         61:8a:e3:3c:6e:12:82:6f:c1:68:f9:bb:1b:42:c9:38:86:d2:
         40:7e:d0:62:11:0c:93:e0:24:07:90:3c:a6:2e:29:74:44:99:
         fe:7c:ac:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNHFvRyGY/Ez0zLpBUGRoudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzBiM2VlODkwZTdkZWM1YjI0OWVhNjI1YmVkNTliOTEw
MzJjMDIwHhcNMjQxMTIwMDEwMTQ2WhcNMjQxMTIxMDEwMTQ2WjAzMTEwLwYDVQQD
EyhmM2YwMzU4ZGM4ZDFmYTI0OGNiOTI4ZGQ2ZjlmMjg1ODMwNWVhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7am83qnPkP8ffwi+1N3BE4KTC4cq
JeVjILeVur1+9SIuXdOdSnCnlQDJZfAmRO0LHkOjhHBLId2YPc7UGyfTzVBO9pn9
yAhAxRRT3D2Yg3haY+xLGezpaP+4DfxKVmsnOXNfGygdYkhfuJC4SrUSXtNm1M37
wmOBYOBCwvqW7nr52nsLUKBvDwmFeIdudmLFXKDDirTliAEAUtT/Ms6b82iqeXND
QDOsVlDspFErpSVNYYtGRq+K+TGX22aa5f/zsgzgJsAXASIZ5M/PmLtQpI6ZHjPQ
+Zb9Th/YxeguA1/QU7k1u+pER8INy4hwF5WmDGeIZh9jXZhcqYU3DSh9hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPwNY3I0fokjLko3W+fKFgwXqf9MB8GA1UdIwQY
MBaAFKPAs+6JDn3sWySepiW+1ZuRAywCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhDejdva09mZXhiSko2bUpiN1ZtNUVETEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODIt
Yzg3NTFmOTU0NTI0LzEvbzhDejdva09mZXhiSko2bUpiN1ZtNUVETEFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kZWNlNjMtZjBjMC00NjViLWFkODItYzg3NTFmOTU0NTI0
LzEvbzhDejdva09mZXhiSko2bUpiN1ZtNUVETEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcJZyAFX
hT2dha+PIPq1/ogDcBLfxx5OS9EAjEKimEGPuFGK58ly0zAsAvkmCnHuqk9MGZsv
230j85GgQCZmexXNzcDSNTc8PDRxOj0ulBHYaTr12RTWGaSteB2/hiID8kYjxsa+
7VEyjMtP0V6cpG1PPrYqpCfNlnKrKe9/p97DJicQREYrLrZHLLwV1i5+9sZ1Sh63
AOZVFp7AQiyjJJY5aPo1RjC07ICc0TtVzIHDtxE+sl3dAH4lUm/rOsPSxJESHAVu
uKZKLyM1GDbAMWiqltAsPONMYYrjPG4Sgm/BaPm7G0LJOIbSQH7QYhEMk+AkB5A8
pi4pdESZ/nys5A==
-----END CERTIFICATE-----