Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.mft
File:                     foNIgaqBpJmvueLYIdZcbJIUc-4.mft (raw, json)
Hash identifier:          LeI9gxg9IE9HiMxDBJOSsR9OXCCi61fMkIL0p0lVY6w=
Subject key identifier:   AC:B1:B4:6D:10:93:C7:93:AF:A6:8E:5B:43:05:DE:14:E8:3F:26:6C
Authority key identifier: 7E:83:48:81:AA:81:A4:99:AF:B9:E2:D8:21:D6:5C:6C:92:14:73:EE
Certificate issuer:       /CN=7e834881aa81a499afb9e2d821d65c6c921473ee
Certificate serial:       01909ACD38618AD93C3223D0168B1811BD80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/foNIgaqBpJmvueLYIdZcbJIUc-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.mft
Manifest number:          0492
Signing time:             Wed 10 Jul 2024 04:00:58 +0000
Manifest this update:     Wed 10 Jul 2024 04:00:58 +0000
Manifest next update:     Thu 11 Jul 2024 04:00:58 +0000
Files and hashes:         1: foNIgaqBpJmvueLYIdZcbJIUc-4.crl (hash: +KEiAVnqfSAYiS4GiJzmOWMqVRziNzRiF2yc1gIZBj0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9a:cd:38:61:8a:d9:3c:32:23:d0:16:8b:18:11:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e834881aa81a499afb9e2d821d65c6c921473ee
        Validity
            Not Before: Jul 10 04:00:58 2024 GMT
            Not After : Jul 11 04:00:58 2024 GMT
        Subject: CN=acb1b46d1093c793afa68e5b4305de14e83f266c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:22:56:fc:5d:8c:0d:ee:b4:c5:df:f2:77:
                    1e:7f:06:dc:21:c9:6a:d5:20:ff:32:ff:ac:ee:c0:
                    12:95:2e:40:8b:3e:6c:77:2b:43:59:70:80:8e:07:
                    73:64:66:66:3d:03:41:22:15:b0:67:d5:bf:27:10:
                    61:dd:c9:f7:97:2c:d5:af:0c:de:ea:b1:d0:f2:36:
                    f3:5e:fe:18:06:ae:84:f6:bc:b8:b1:32:2b:4a:04:
                    30:07:16:4d:24:43:67:ba:25:87:3b:38:c8:f6:41:
                    50:d2:47:7e:a5:2e:c5:66:1a:95:cf:1e:cf:27:f9:
                    af:a2:1a:5e:38:51:df:fb:3f:7e:8f:b7:82:42:52:
                    ed:60:f5:b7:51:22:5a:6e:8e:30:04:f9:78:26:1e:
                    2c:ca:b6:f3:3c:6f:04:f7:61:25:56:33:3a:4e:a8:
                    67:08:11:24:38:39:4d:6d:ab:4e:76:6c:0f:61:8f:
                    b3:3f:30:1b:c4:56:ba:91:1d:5c:f4:15:84:96:ab:
                    4d:07:66:c3:3c:0f:0f:9d:16:ef:20:d7:e3:1f:15:
                    b6:83:66:8a:c6:77:8b:3e:d1:b0:6f:89:a0:bb:18:
                    7d:c4:67:3c:ea:b3:d4:7d:02:0c:c1:a4:07:db:43:
                    17:c3:88:93:4f:60:58:5f:58:43:de:e2:13:ee:2e:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B1:B4:6D:10:93:C7:93:AF:A6:8E:5B:43:05:DE:14:E8:3F:26:6C
            X509v3 Authority Key Identifier:
                keyid:7E:83:48:81:AA:81:A4:99:AF:B9:E2:D8:21:D6:5C:6C:92:14:73:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/foNIgaqBpJmvueLYIdZcbJIUc-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1368bd-7a3b-4725-9583-38bcce2cd88b/1/foNIgaqBpJmvueLYIdZcbJIUc-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:56:f9:12:ae:09:f8:f3:7c:3b:7b:53:98:74:0e:9b:5b:e9:
         ce:43:54:2b:15:40:57:56:1e:07:39:cb:6c:50:ac:2f:99:0c:
         2d:30:0c:86:78:ae:1c:7b:ae:b3:6e:64:18:59:19:88:19:1a:
         a2:25:d4:81:a3:6d:ba:ec:4a:e1:77:11:45:83:5f:c9:5d:b1:
         57:b1:0f:d0:88:fe:62:1a:c2:24:e1:ff:7f:37:25:47:95:fc:
         aa:25:79:59:3f:f2:37:ff:36:31:92:54:11:04:9f:4b:8a:34:
         2f:f9:5f:38:e2:15:16:34:ff:a7:ce:54:3a:e1:10:d7:1e:ff:
         e3:9a:1e:21:11:c6:3a:3a:e2:7c:ad:93:ad:34:48:5a:49:51:
         6f:a4:80:aa:87:d8:09:14:5b:e6:46:5a:2b:49:04:61:b8:1b:
         9b:d7:7e:d7:92:50:17:6f:a0:b4:c9:04:33:a4:ad:a5:9a:9d:
         9e:89:ed:be:3e:a2:7a:e1:bb:55:d3:51:b9:a3:90:90:1c:72:
         7b:93:d6:a0:49:19:b2:a4:db:fc:a2:2d:9e:61:8b:c4:a6:82:
         9c:e7:94:5c:22:1a:fb:ca:fd:65:24:4a:b2:7d:b4:4a:f3:7d:
         54:50:4b:7a:03:cf:88:a0:c1:49:14:2b:4b:b9:a5:3d:3f:92:
         ad:ae:c1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCazThhitk8MiPQFosYEb2AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlODM0ODgxYWE4MWE0OTlhZmI5ZTJkODIxZDY1YzZjOTIx
NDczZWUwHhcNMjQwNzEwMDQwMDU4WhcNMjQwNzExMDQwMDU4WjAzMTEwLwYDVQQD
EyhhY2IxYjQ2ZDEwOTNjNzkzYWZhNjhlNWI0MzA1ZGUxNGU4M2YyNjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KQiVvxdjA3utMXf8ncefwbcIclq
1SD/Mv+s7sASlS5Aiz5sdytDWXCAjgdzZGZmPQNBIhWwZ9W/JxBh3cn3lyzVrwze
6rHQ8jbzXv4YBq6E9ry4sTIrSgQwBxZNJENnuiWHOzjI9kFQ0kd+pS7FZhqVzx7P
J/mvohpeOFHf+z9+j7eCQlLtYPW3USJabo4wBPl4Jh4syrbzPG8E92ElVjM6Tqhn
CBEkODlNbatOdmwPYY+zPzAbxFa6kR1c9BWElqtNB2bDPA8PnRbvINfjHxW2g2aK
xneLPtGwb4mguxh9xGc86rPUfQIMwaQH20MXw4iTT2BYX1hD3uIT7i4VLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyxtG0Qk8eTr6aOW0MF3hToPyZsMB8GA1UdIwQY
MBaAFH6DSIGqgaSZr7ni2CHWXGySFHPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZm9OSWdhcUJwSm12dWVMWUlkWmNiSklVYy00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xMzY4YmQtN2EzYi00NzI1LTk1ODMt
MzhiY2NlMmNkODhiLzEvZm9OSWdhcUJwSm12dWVMWUlkWmNiSklVYy00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xMzY4YmQtN2EzYi00NzI1LTk1ODMtMzhiY2NlMmNkODhi
LzEvZm9OSWdhcUJwSm12dWVMWUlkWmNiSklVYy00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1b5Eq4J
+PN8O3tTmHQOm1vpzkNUKxVAV1YeBznLbFCsL5kMLTAMhniuHHuus25kGFkZiBka
oiXUgaNtuuxK4XcRRYNfyV2xV7EP0Ij+YhrCJOH/fzclR5X8qiV5WT/yN/82MZJU
EQSfS4o0L/lfOOIVFjT/p85UOuEQ1x7/45oeIRHGOjrifK2TrTRIWklRb6SAqofY
CRRb5kZaK0kEYbgbm9d+15JQF2+gtMkEM6StpZqdnontvj6ieuG7VdNRuaOQkBxy
e5PWoEkZsqTb/KItnmGLxKaCnOeUXCIa+8r9ZSRKsn20SvN9VFBLegPPiKDBSRQr
S7mlPT+Sra7BPQ==
-----END CERTIFICATE-----
Generated at Fri Jun 20 16:58:36 2025 by rpki-client