Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/v79iP0w-o9G5abQFlFF37rqvns0.mft
File:                     v79iP0w-o9G5abQFlFF37rqvns0.mft (raw, json)
Hash identifier:          fBOCy1RM0zKlCeRMoUkH4E6MQQHaUJ+/liYGd+/q7aQ=
Subject key identifier:   DC:09:CF:70:5D:AA:BA:3C:D3:BF:30:D2:90:89:CF:55:16:00:B7:28
Authority key identifier: BF:BF:62:3F:4C:3E:A3:D1:B9:69:B4:05:94:51:77:EE:BA:AF:9E:CD
Certificate issuer:       /CN=bfbf623f4c3ea3d1b969b405945177eebaaf9ecd
Certificate serial:       018A4EAFD34287C05EB6ECCF14B487C7C263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v79iP0w-o9G5abQFlFF37rqvns0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/v79iP0w-o9G5abQFlFF37rqvns0.mft
Manifest number:          034F
Signing time:             Fri 01 Sep 2023 03:01:00 +0000
Manifest this update:     Fri 01 Sep 2023 03:01:00 +0000
Manifest next update:     Sat 02 Sep 2023 03:01:00 +0000
Files and hashes:         1: KnFVEhmSgVXfUvWwZM-QPT83EwU.roa (hash: Db6+go92szzR9X+xabdfjkHIRDd55+FjYPcH42OY2Y8=)
                          2: pdVFFfJ8w8yYOn85F882cyEsuYE.roa (hash: Vtw34dKw5P1dGI9tEcoJcNQ4vrknGIsfeuJUDgElBTs=)
                          3: v79iP0w-o9G5abQFlFF37rqvns0.crl (hash: aqAijFqqG9lM+3L5pYUTwfylZV0Do0Wsm0jT3dUf1jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4e:af:d3:42:87:c0:5e:b6:ec:cf:14:b4:87:c7:c2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbf623f4c3ea3d1b969b405945177eebaaf9ecd
        Validity
            Not Before: Sep  1 03:01:00 2023 GMT
            Not After : Sep  2 03:01:00 2023 GMT
        Subject: CN=dc09cf705daaba3cd3bf30d29089cf551600b728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f0:93:af:89:44:67:a8:53:9a:62:49:fa:fa:
                    ff:f8:d6:73:a7:d8:a3:71:29:da:aa:ca:61:7b:d9:
                    02:e3:5c:be:a2:16:f1:30:0f:84:f6:3e:f4:53:ef:
                    47:71:f2:0b:06:1b:1b:55:b3:62:32:a8:28:e3:32:
                    3c:e7:6b:e2:00:ac:f2:c2:71:d0:85:ab:68:82:ce:
                    20:b1:65:04:56:a1:08:e4:50:cb:9f:57:a1:4a:d1:
                    a1:74:22:90:bc:08:5c:56:13:12:0b:6f:05:97:c1:
                    4c:9c:87:fc:32:29:83:d8:ef:6e:f2:26:0f:cf:97:
                    b1:1a:3a:78:f8:df:7f:92:17:f3:73:06:4b:95:5c:
                    12:30:ee:3a:ee:a0:d9:6f:43:9e:5f:0d:e2:5c:65:
                    95:07:34:55:1e:0f:52:5f:7b:20:16:11:2e:c8:0c:
                    17:ae:4f:60:0e:c3:64:6e:47:e9:a4:52:90:2e:d4:
                    74:e0:04:0e:81:b9:6a:5c:da:48:64:e7:4a:6d:a4:
                    df:d1:47:a3:9f:26:4a:6c:15:a2:3f:f2:8b:61:b3:
                    34:62:cf:27:83:3a:df:61:2c:01:24:4c:32:b2:33:
                    71:19:56:92:24:87:21:43:ab:f8:a3:f6:16:30:4f:
                    79:b5:6f:73:41:5a:d9:58:a3:71:ef:79:3e:99:64:
                    87:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:09:CF:70:5D:AA:BA:3C:D3:BF:30:D2:90:89:CF:55:16:00:B7:28
            X509v3 Authority Key Identifier:
                keyid:BF:BF:62:3F:4C:3E:A3:D1:B9:69:B4:05:94:51:77:EE:BA:AF:9E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v79iP0w-o9G5abQFlFF37rqvns0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/v79iP0w-o9G5abQFlFF37rqvns0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ea6f71-49bc-43fa-a288-179ce9408242/1/v79iP0w-o9G5abQFlFF37rqvns0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1d:f4:bd:9f:ad:6a:7b:a8:56:55:65:3e:26:6f:15:88:ee:
         54:01:f6:57:3b:08:6c:c7:cf:f2:f1:40:c7:21:40:72:97:21:
         29:5b:82:c8:12:bf:cc:df:41:33:2f:94:69:1b:ef:0e:c2:46:
         b0:75:ab:07:d8:5a:8e:49:16:d0:a9:ef:c7:ec:f0:20:6a:c8:
         81:e8:c6:51:7e:2f:66:17:32:19:ab:09:17:98:d7:b3:07:20:
         5a:a3:44:16:8c:96:60:f6:0c:51:bf:1e:87:03:1d:6c:15:4f:
         15:be:3f:80:c6:8a:ae:1c:08:40:98:41:a5:2b:93:6a:51:37:
         d7:06:68:9d:71:0f:09:7e:3d:3d:5d:7c:52:8f:7d:94:09:e7:
         cb:7c:84:1d:89:f5:0a:3c:c3:31:54:38:f2:b3:1b:c1:12:dc:
         82:c4:66:b7:19:84:cf:57:6b:34:d1:24:74:2b:aa:05:9f:60:
         27:9f:46:3c:31:5a:b2:50:c2:36:44:76:57:d4:50:5f:37:be:
         93:b6:30:9b:c4:c1:73:be:e0:51:87:98:be:a1:49:da:05:8e:
         15:42:fa:c6:5e:f6:1e:ed:9f:bf:ba:90:78:79:6b:08:07:b2:
         91:95:2c:84:47:67:5c:8b:91:d0:ac:74:7e:cc:06:91:45:06:
         cd:1d:37:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org