Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/FxHAKlngL3q0r78oi-a8DWo1Iyc.mft
File:                     FxHAKlngL3q0r78oi-a8DWo1Iyc.mft (raw, json)
Hash identifier:          4pGf4oREtDMOK5egmIR+Q+a6XzPbgH1v87Y0R0ZeTco=
Subject key identifier:   66:F3:E1:6F:B5:28:97:F2:CB:AC:DB:A6:66:8A:0E:7F:E2:60:D9:4F
Authority key identifier: 17:11:C0:2A:59:E0:2F:7A:B4:AF:BF:28:8B:E6:BC:0D:6A:35:23:27
Certificate issuer:       /CN=1711c02a59e02f7ab4afbf288be6bc0d6a352327
Certificate serial:       0191580FB24C919F92A1E4C6EB7571883179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxHAKlngL3q0r78oi-a8DWo1Iyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/FxHAKlngL3q0r78oi-a8DWo1Iyc.mft
Manifest number:          0621
Signing time:             Thu 15 Aug 2024 22:01:49 +0000
Manifest this update:     Thu 15 Aug 2024 22:01:49 +0000
Manifest next update:     Fri 16 Aug 2024 22:01:49 +0000
Files and hashes:         1: FxHAKlngL3q0r78oi-a8DWo1Iyc.crl (hash: x5YAnJPRUSleGJ5/OBoX5vcYTogiSoDIur8YJmu1xKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:58:0f:b2:4c:91:9f:92:a1:e4:c6:eb:75:71:88:31:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1711c02a59e02f7ab4afbf288be6bc0d6a352327
        Validity
            Not Before: Aug 15 22:01:49 2024 GMT
            Not After : Aug 16 22:01:49 2024 GMT
        Subject: CN=66f3e16fb52897f2cbacdba6668a0e7fe260d94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:97:75:d8:09:5b:8b:4b:a5:9e:b8:44:86:d4:
                    7b:00:b0:7a:63:45:f6:c8:27:c7:f3:4b:1c:e8:c9:
                    9e:6b:2c:22:92:e4:87:98:8c:9d:ba:cc:17:a0:5e:
                    5a:09:4d:12:ea:0e:db:c0:18:89:88:53:21:ef:ec:
                    5e:92:e0:12:4d:70:bd:96:fd:f0:0e:e1:6a:0d:7f:
                    fc:fb:f8:d0:c5:b6:59:77:ab:41:49:e2:ac:2e:2a:
                    ab:bb:69:b0:17:6b:cb:a6:ff:ac:e3:44:55:7b:31:
                    6e:d5:f3:7c:1e:36:7b:67:7e:b3:be:ec:a5:87:76:
                    6f:75:23:bb:b4:ee:44:54:61:3f:dd:96:37:b3:ca:
                    2c:50:1b:af:ce:2d:e5:00:d4:38:52:42:49:62:74:
                    ba:c9:6a:8b:aa:fa:56:01:f1:bc:82:c4:d7:b3:c2:
                    4b:06:95:29:67:d1:08:24:6f:d7:bd:b9:38:3a:2d:
                    95:98:d9:7e:a3:29:b4:37:14:c5:30:16:2d:94:e9:
                    f8:b9:5b:e8:65:26:02:d0:07:14:2d:f2:1d:d9:66:
                    a4:07:e4:c1:d4:61:8f:7b:97:4e:dd:ce:8e:27:ce:
                    db:6b:76:18:58:b6:1f:42:a6:59:b2:9a:4c:f1:7f:
                    67:42:ac:5e:ce:d7:d5:45:29:b9:43:e5:3e:2d:f9:
                    f7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F3:E1:6F:B5:28:97:F2:CB:AC:DB:A6:66:8A:0E:7F:E2:60:D9:4F
            X509v3 Authority Key Identifier:
                keyid:17:11:C0:2A:59:E0:2F:7A:B4:AF:BF:28:8B:E6:BC:0D:6A:35:23:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxHAKlngL3q0r78oi-a8DWo1Iyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/FxHAKlngL3q0r78oi-a8DWo1Iyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/bf9c22-a8fe-4890-8a49-02c8a6908a2a/1/FxHAKlngL3q0r78oi-a8DWo1Iyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:85:1a:2c:2f:37:27:7f:2d:f2:be:2a:6f:56:35:b5:14:3d:
         6e:cc:31:d3:76:3b:e2:6f:ba:6f:40:e8:b3:3e:d5:a9:c1:39:
         ac:65:c9:c7:6b:3f:e9:c7:e2:d7:97:b7:d0:51:e0:e7:c5:d2:
         0f:39:bb:21:11:6c:e7:59:04:6d:17:c2:cd:f1:15:a5:7b:85:
         ca:6e:d1:63:ba:75:3f:93:29:6a:f0:c4:fd:56:7e:9b:48:60:
         5a:e8:ed:5d:1e:d3:47:48:58:e7:84:07:42:0e:d1:e2:ff:10:
         03:2e:eb:34:f0:60:16:bc:a9:68:f5:d2:39:60:be:2d:12:19:
         f9:ed:58:11:ce:55:ba:b1:52:f8:53:f2:61:c0:0c:dc:e5:3c:
         37:a0:54:40:8e:e4:16:b2:25:3e:18:40:90:ef:bc:17:0d:e5:
         fb:e5:c5:33:c3:f4:3a:83:96:54:18:4e:07:90:41:eb:ab:d6:
         f8:4d:2a:00:bc:9f:48:44:76:1d:75:e9:05:ea:7c:f6:44:3e:
         b3:df:7a:43:d1:82:25:19:ac:c9:32:97:3d:8f:6a:6a:f1:5c:
         b1:20:01:19:19:5e:32:69:ae:76:cc:28:86:40:23:99:4a:a2:
         b6:13:8b:81:89:ff:0a:34:1f:f5:1f:ba:40:4b:b8:7b:88:a0:
         41:42:42:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZFYD7JMkZ+SoeTG63VxiDF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MTFjMDJhNTllMDJmN2FiNGFmYmYyODhiZTZiYzBkNmEz
NTIzMjcwHhcNMjQwODE1MjIwMTQ5WhcNMjQwODE2MjIwMTQ5WjAzMTEwLwYDVQQD
Eyg2NmYzZTE2ZmI1Mjg5N2YyY2JhY2RiYTY2NjhhMGU3ZmUyNjBkOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppd12Albi0ulnrhEhtR7ALB6Y0X2
yCfH80sc6MmeaywikuSHmIyduswXoF5aCU0S6g7bwBiJiFMh7+xekuASTXC9lv3w
DuFqDX/8+/jQxbZZd6tBSeKsLiqru2mwF2vLpv+s40RVezFu1fN8HjZ7Z36zvuyl
h3ZvdSO7tO5EVGE/3ZY3s8osUBuvzi3lANQ4UkJJYnS6yWqLqvpWAfG8gsTXs8JL
BpUpZ9EIJG/Xvbk4Oi2VmNl+oym0NxTFMBYtlOn4uVvoZSYC0AcULfId2WakB+TB
1GGPe5dO3c6OJ87ba3YYWLYfQqZZsppM8X9nQqxeztfVRSm5Q+U+Lfn3JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbz4W+1KJfyy6zbpmaKDn/iYNlPMB8GA1UdIwQY
MBaAFBcRwCpZ4C96tK+/KIvmvA1qNSMnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnhIQUtsbmdMM3Ewcjc4b2ktYThEV28xSXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iZjljMjItYThmZS00ODkwLThhNDkt
MDJjOGE2OTA4YTJhLzEvRnhIQUtsbmdMM3Ewcjc4b2ktYThEV28xSXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iZjljMjItYThmZS00ODkwLThhNDktMDJjOGE2OTA4YTJh
LzEvRnhIQUtsbmdMM3Ewcjc4b2ktYThEV28xSXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIUaLC83
J38t8r4qb1Y1tRQ9bswx03Y74m+6b0Dosz7VqcE5rGXJx2s/6cfi15e30FHg58XS
Dzm7IRFs51kEbRfCzfEVpXuFym7RY7p1P5MpavDE/VZ+m0hgWujtXR7TR0hY54QH
Qg7R4v8QAy7rNPBgFrypaPXSOWC+LRIZ+e1YEc5VurFS+FPyYcAM3OU8N6BUQI7k
FrIlPhhAkO+8Fw3l++XFM8P0OoOWVBhOB5BB66vW+E0qALyfSER2HXXpBep89kQ+
s996Q9GCJRmsyTKXPY9qavFcsSABGRleMmmudswohkAjmUqithOLgYn/CjQf9R+6
QEu4e4igQUJC/A==
-----END CERTIFICATE-----