Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
File:                     JDPLPigynY7phe1GyEKDubN0CPM.mft (raw, json)
Hash identifier:          HEtNEYumspHdWM9zEqHMUXqZZJ484il9dYeu8MIgS0U=
Subject key identifier:   3B:9D:99:AA:72:6A:5C:16:8D:39:4E:11:61:44:44:90:4E:B5:EE:23
Authority key identifier: 24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3
Certificate issuer:       /CN=2433cb3e28329d8ee985ed46c84283b9b37408f3
Certificate serial:       01948EBEAC25FDDE9D947267BD6097A25FBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft
Manifest number:          086F
Signing time:             Wed 22 Jan 2025 16:00:48 +0000
Manifest this update:     Wed 22 Jan 2025 16:00:48 +0000
Manifest next update:     Thu 23 Jan 2025 16:00:48 +0000
Files and hashes:         1: JDPLPigynY7phe1GyEKDubN0CPM.crl (hash: 6j0gOy7v1bIaDZgrG4yPBp5HBiPqDLmrKRSrau5w+6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:be:ac:25:fd:de:9d:94:72:67:bd:60:97:a2:5f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2433cb3e28329d8ee985ed46c84283b9b37408f3
        Validity
            Not Before: Jan 22 16:00:48 2025 GMT
            Not After : Jan 23 16:00:48 2025 GMT
        Subject: CN=3b9d99aa726a5c168d394e11614444904eb5ee23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:30:b2:a9:3c:74:96:d0:a8:da:e5:9d:bc:
                    6f:52:e5:62:83:48:d7:8a:b3:d5:1a:c1:ee:4e:27:
                    a8:6b:c0:ad:37:50:b4:69:af:0c:d5:b1:cf:61:44:
                    68:70:0d:4f:30:b2:cb:07:5a:e5:5d:dc:98:ba:43:
                    72:1a:80:fd:f3:a2:91:66:1e:05:e8:fa:8c:2a:ac:
                    ab:9a:70:d3:d7:55:e5:ff:ee:61:db:e5:a7:91:17:
                    44:33:e6:88:47:96:6d:2e:ff:a1:45:7b:a5:c8:87:
                    df:27:0e:14:b2:ab:5e:3c:63:bd:7d:ec:ff:a1:b4:
                    84:02:42:ac:99:4b:6e:61:65:44:07:64:d5:1c:dc:
                    e8:92:df:53:d3:f8:84:33:03:d4:ac:87:97:4c:a8:
                    3c:c7:20:b2:61:c9:f4:19:6f:17:fe:dd:5d:35:a1:
                    01:4c:18:bd:fa:1b:c1:44:b5:26:25:9a:00:77:79:
                    47:82:9c:a0:f2:9a:7d:ee:29:39:70:92:b7:64:36:
                    88:96:27:53:70:81:b5:84:ec:c5:81:0a:f5:57:fb:
                    b7:bd:79:39:15:85:85:27:39:75:b4:20:91:a6:4e:
                    2c:bc:56:42:b7:54:c9:22:98:75:f6:ba:f7:09:62:
                    85:68:11:61:bd:a5:84:27:ef:e5:a0:a0:69:04:fd:
                    0c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:9D:99:AA:72:6A:5C:16:8D:39:4E:11:61:44:44:90:4E:B5:EE:23
            X509v3 Authority Key Identifier:
                keyid:24:33:CB:3E:28:32:9D:8E:E9:85:ED:46:C8:42:83:B9:B3:74:08:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDPLPigynY7phe1GyEKDubN0CPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5eb3c2-4f8b-4845-a760-679524b80631/1/JDPLPigynY7phe1GyEKDubN0CPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b8:da:ff:f7:d5:39:9d:f6:47:fa:63:ca:18:50:af:ab:52:
         dc:1e:03:7f:85:2f:52:a7:06:89:fa:ca:f1:c4:44:1e:e5:1a:
         0d:7a:0e:34:f0:a1:27:7d:03:54:42:83:19:de:5d:1d:1b:4e:
         ba:57:39:2b:6a:48:a8:80:9f:74:c9:eb:17:ad:69:f1:f0:30:
         d9:6d:ae:ec:26:38:ac:60:a1:bb:32:67:65:7e:f1:36:e4:10:
         31:a7:7d:0e:67:13:cf:3b:21:00:53:05:f3:3b:1c:41:02:e0:
         4a:ff:ca:a7:2a:1f:1e:8f:b2:72:f7:d8:8c:f6:0f:bc:fc:0f:
         38:53:76:b1:ca:07:8d:fb:ae:1a:1a:67:d9:15:c0:c1:c1:54:
         52:5b:47:a1:01:c0:e1:f5:c2:d0:b4:bd:8b:f9:c3:79:e6:cc:
         a5:2e:a7:66:0a:76:a8:64:f2:78:69:7e:1c:38:bb:15:a8:8d:
         5b:35:9f:56:fa:44:7c:09:fd:aa:c4:ee:a0:16:c5:2a:02:da:
         c2:f8:e2:5d:ec:a8:1a:d8:21:81:60:bc:2b:77:89:6f:7e:34:
         e9:de:a6:43:ae:95:b9:38:80:13:c0:5a:dc:75:90:aa:f8:ff:
         b8:92:bf:b6:38:f0:b0:c5:fc:da:38:a9:eb:d2:86:47:0a:2b:
         e5:39:34:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSOvqwl/d6dlHJnvWCXol++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzNjYjNlMjgzMjlkOGVlOTg1ZWQ0NmM4NDI4M2I5YjM3
NDA4ZjMwHhcNMjUwMTIyMTYwMDQ4WhcNMjUwMTIzMTYwMDQ4WjAzMTEwLwYDVQQD
EygzYjlkOTlhYTcyNmE1YzE2OGQzOTRlMTE2MTQ0NDQ5MDRlYjVlZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc0wsqk8dJbQqNrlnbxvUuVig0jX
irPVGsHuTieoa8CtN1C0aa8M1bHPYURocA1PMLLLB1rlXdyYukNyGoD986KRZh4F
6PqMKqyrmnDT11Xl/+5h2+WnkRdEM+aIR5ZtLv+hRXulyIffJw4UsqtePGO9fez/
obSEAkKsmUtuYWVEB2TVHNzokt9T0/iEMwPUrIeXTKg8xyCyYcn0GW8X/t1dNaEB
TBi9+hvBRLUmJZoAd3lHgpyg8pp97ik5cJK3ZDaIlidTcIG1hOzFgQr1V/u3vXk5
FYWFJzl1tCCRpk4svFZCt1TJIph19rr3CWKFaBFhvaWEJ+/loKBpBP0MIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDudmapyalwWjTlOEWFERJBOte4jMB8GA1UdIwQY
MBaAFCQzyz4oMp2O6YXtRshCg7mzdAjzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRQTFBpZ3luWTdwaGUxR3lFS0R1Yk4wQ1BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81ZWIzYzItNGY4Yi00ODQ1LWE3NjAt
Njc5NTI0YjgwNjMxLzEvSkRQTFBpZ3luWTdwaGUxR3lFS0R1Yk4wQ1BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81ZWIzYzItNGY4Yi00ODQ1LWE3NjAtNjc5NTI0YjgwNjMx
LzEvSkRQTFBpZ3luWTdwaGUxR3lFS0R1Yk4wQ1BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFrja//fV
OZ32R/pjyhhQr6tS3B4Df4UvUqcGifrK8cREHuUaDXoONPChJ30DVEKDGd5dHRtO
ulc5K2pIqICfdMnrF61p8fAw2W2u7CY4rGChuzJnZX7xNuQQMad9DmcTzzshAFMF
8zscQQLgSv/KpyofHo+ycvfYjPYPvPwPOFN2scoHjfuuGhpn2RXAwcFUUltHoQHA
4fXC0LS9i/nDeebMpS6nZgp2qGTyeGl+HDi7FaiNWzWfVvpEfAn9qsTuoBbFKgLa
wvjiXeyoGtghgWC8K3eJb3406d6mQ66VuTiAE8Ba3HWQqvj/uJK/tjjwsMX82jip
69KGRwor5Tk0EQ==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:17:00 2025 by rpki-client on console.sobornost.net