Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/16ea5b-08ae-48c8-b537-1f7e5c4f7458/1/Mlp8NIFPL-pHteJHYzSsL2DBToM.mft
File:                     Mlp8NIFPL-pHteJHYzSsL2DBToM.mft (raw, json)
Hash identifier:          ZekIPMEi5gyxATlFc/f+n61s2zS3dp7x5UgK4FARd6M=
Subject key identifier:   10:2E:6E:FF:2B:C9:5A:B9:56:DE:46:11:AE:0F:28:9D:8E:EA:2D:3F
Authority key identifier: 32:5A:7C:34:81:4F:2F:EA:47:B5:E2:47:63:34:AC:2F:60:C1:4E:83
Certificate issuer:       /CN=325a7c34814f2fea47b5e2476334ac2f60c14e83
Certificate serial:       019346711FEFED317F3715190A1C53DB9EA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mlp8NIFPL-pHteJHYzSsL2DBToM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/16ea5b-08ae-48c8-b537-1f7e5c4f7458/1/Mlp8NIFPL-pHteJHYzSsL2DBToM.mft
Manifest number:          1175
Signing time:             Tue 19 Nov 2024 22:00:39 +0000
Manifest this update:     Tue 19 Nov 2024 22:00:39 +0000
Manifest next update:     Wed 20 Nov 2024 22:00:39 +0000
Files and hashes:         1: Mlp8NIFPL-pHteJHYzSsL2DBToM.crl (hash: EVwEOjvKCIJbwF0+e6WughwgLakaXpYpj3RQztd7hhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:71:1f:ef:ed:31:7f:37:15:19:0a:1c:53:db:9e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325a7c34814f2fea47b5e2476334ac2f60c14e83
        Validity
            Not Before: Nov 19 22:00:39 2024 GMT
            Not After : Nov 20 22:00:39 2024 GMT
        Subject: CN=102e6eff2bc95ab956de4611ae0f289d8eea2d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:8f:65:7b:99:27:d0:11:f0:d8:c2:9b:c5:
                    76:04:fa:3b:5c:c8:d5:58:77:0f:34:02:79:93:02:
                    12:31:43:f5:d1:9f:71:68:98:60:9d:55:a9:eb:81:
                    a3:89:1c:d0:df:2e:ca:bf:db:90:17:9e:56:98:dd:
                    5d:26:ff:59:23:5d:a5:8f:a3:b4:5c:10:0c:49:e6:
                    da:51:9a:49:d5:7e:05:d2:96:a5:31:03:31:ca:25:
                    e1:71:e0:c8:1d:e8:df:b4:5c:10:9d:c6:77:40:2f:
                    d9:a0:99:fe:ca:50:39:ff:42:0b:5d:be:3d:38:7f:
                    bb:40:6f:fd:aa:c2:6e:51:38:a7:e5:07:a9:17:dd:
                    c3:05:24:03:60:77:a6:bb:7e:52:30:7c:ed:76:c9:
                    56:73:91:e2:70:9d:d1:df:d2:79:cd:0b:96:86:16:
                    06:c2:78:99:2d:6a:f2:43:28:40:24:f5:16:ef:56:
                    7a:d3:be:fd:e8:99:a7:56:9e:16:9c:82:87:28:54:
                    22:36:ef:48:6d:64:33:8e:a7:1f:60:2a:f8:f6:e2:
                    80:e0:98:55:96:8b:56:4c:f0:5e:f2:89:4b:bc:07:
                    3d:1e:7a:61:4e:8d:fd:2f:fb:8d:df:49:ff:4d:d0:
                    bd:c7:d4:dd:1b:ab:89:63:ce:d2:f2:96:70:01:e3:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2E:6E:FF:2B:C9:5A:B9:56:DE:46:11:AE:0F:28:9D:8E:EA:2D:3F
            X509v3 Authority Key Identifier:
                keyid:32:5A:7C:34:81:4F:2F:EA:47:B5:E2:47:63:34:AC:2F:60:C1:4E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mlp8NIFPL-pHteJHYzSsL2DBToM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/16ea5b-08ae-48c8-b537-1f7e5c4f7458/1/Mlp8NIFPL-pHteJHYzSsL2DBToM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/16ea5b-08ae-48c8-b537-1f7e5c4f7458/1/Mlp8NIFPL-pHteJHYzSsL2DBToM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:98:32:d9:dd:69:02:03:ff:34:5d:58:fe:0c:2b:d0:b5:
         ac:af:de:d5:9c:d9:b3:7f:b9:4d:cc:1c:a3:ed:69:8e:4b:18:
         02:5e:1c:4d:93:35:6c:74:85:55:5a:65:e0:24:32:de:75:91:
         7b:d2:a1:4e:4d:6c:47:d3:db:44:44:92:f0:9c:63:2f:d5:db:
         ec:5b:8d:8c:05:19:24:ab:82:9f:7c:2b:cf:68:61:39:45:60:
         58:3c:21:8a:21:b1:24:af:c4:79:3f:d3:2b:36:31:60:f2:96:
         8a:b8:8e:71:a1:4e:1f:c7:29:15:b4:fa:dd:c9:fa:35:be:52:
         4f:03:65:32:ce:6a:58:0b:a1:73:a3:51:d9:2b:51:27:2e:d9:
         c9:cc:61:76:19:3a:6c:2f:c4:b3:f3:35:b9:6c:e9:07:08:0b:
         83:a8:f5:4e:48:09:75:b3:ec:72:48:a0:e4:97:ab:04:e4:6c:
         b9:cf:a5:67:cc:7d:94:dc:ea:3d:10:78:71:b5:31:92:ec:01:
         4f:68:89:22:1e:1d:41:65:9d:3f:19:ea:f8:9c:37:f9:da:ed:
         3b:27:75:6c:2d:6e:49:3f:ed:41:d4:ce:30:e2:32:43:aa:32:
         24:09:d2:af:43:31:06:4d:93:23:75:72:8c:e8:d7:39:8a:55:
         61:af:b9:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNGcR/v7TF/NxUZChxT256hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNWE3YzM0ODE0ZjJmZWE0N2I1ZTI0NzYzMzRhYzJmNjBj
MTRlODMwHhcNMjQxMTE5MjIwMDM5WhcNMjQxMTIwMjIwMDM5WjAzMTEwLwYDVQQD
EygxMDJlNmVmZjJiYzk1YWI5NTZkZTQ2MTFhZTBmMjg5ZDhlZWEyZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRqPZXuZJ9AR8NjCm8V2BPo7XMjV
WHcPNAJ5kwISMUP10Z9xaJhgnVWp64GjiRzQ3y7Kv9uQF55WmN1dJv9ZI12lj6O0
XBAMSebaUZpJ1X4F0palMQMxyiXhceDIHejftFwQncZ3QC/ZoJn+ylA5/0ILXb49
OH+7QG/9qsJuUTin5QepF93DBSQDYHemu35SMHztdslWc5HicJ3R39J5zQuWhhYG
wniZLWryQyhAJPUW71Z607796JmnVp4WnIKHKFQiNu9IbWQzjqcfYCr49uKA4JhV
lotWTPBe8olLvAc9HnphTo39L/uN30n/TdC9x9TdG6uJY87S8pZwAePIBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAubv8ryVq5Vt5GEa4PKJ2O6i0/MB8GA1UdIwQY
MBaAFDJafDSBTy/qR7XiR2M0rC9gwU6DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxwOE5JRlBMLXBIdGVKSFl6U3NMMkRCVG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xNmVhNWItMDhhZS00OGM4LWI1Mzct
MWY3ZTVjNGY3NDU4LzEvTWxwOE5JRlBMLXBIdGVKSFl6U3NMMkRCVG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8xNmVhNWItMDhhZS00OGM4LWI1MzctMWY3ZTVjNGY3NDU4
LzEvTWxwOE5JRlBMLXBIdGVKSFl6U3NMMkRCVG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs+YMtnd
aQID/zRdWP4MK9C1rK/e1ZzZs3+5Tcwco+1pjksYAl4cTZM1bHSFVVpl4CQy3nWR
e9KhTk1sR9PbRESS8JxjL9Xb7FuNjAUZJKuCn3wrz2hhOUVgWDwhiiGxJK/EeT/T
KzYxYPKWiriOcaFOH8cpFbT63cn6Nb5STwNlMs5qWAuhc6NR2StRJy7Zycxhdhk6
bC/Es/M1uWzpBwgLg6j1TkgJdbPsckig5JerBORsuc+lZ8x9lNzqPRB4cbUxkuwB
T2iJIh4dQWWdPxnq+Jw3+drtOyd1bC1uST/tQdTOMOIyQ6oyJAnSr0MxBk2TI3Vy
jOjXOYpVYa+5Cg==
-----END CERTIFICATE-----