Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/1RUQTYj2YA0jJWnjpfDgoAqa0II.mft
File:                     1RUQTYj2YA0jJWnjpfDgoAqa0II.mft (raw, json)
Hash identifier:          BNR4Wt8rQcI4juhAFjAu+uT9aL1x2IDot5ad5hfLs/0=
Subject key identifier:   BF:89:C2:26:0D:93:63:68:AE:A2:C4:0E:40:EC:B1:8C:8C:E2:1F:48
Authority key identifier: D5:15:10:4D:88:F6:60:0D:23:25:69:E3:A5:F0:E0:A0:0A:9A:D0:82
Certificate issuer:       /CN=d515104d88f6600d232569e3a5f0e0a00a9ad082
Certificate serial:       018D8716B8084EC88194693528186D721857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1RUQTYj2YA0jJWnjpfDgoAqa0II.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/1RUQTYj2YA0jJWnjpfDgoAqa0II.mft
Manifest number:          085D
Signing time:             Thu 08 Feb 2024 05:00:29 +0000
Manifest this update:     Thu 08 Feb 2024 05:00:29 +0000
Manifest next update:     Fri 09 Feb 2024 05:00:29 +0000
Files and hashes:         1: 1RUQTYj2YA0jJWnjpfDgoAqa0II.crl (hash: eaMZE2wpmVMhfTIlWKYy+QzEhQD3q5ft8VphCmxoQAM=)
                          2: ah928ioeXT-uqIa15gAlD-4RPcI.roa (hash: VTu6kM3Iouby9IgyyK/f8AXaAxvjNf4YAQMoorCrVjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:87:16:b8:08:4e:c8:81:94:69:35:28:18:6d:72:18:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d515104d88f6600d232569e3a5f0e0a00a9ad082
        Validity
            Not Before: Feb  8 05:00:29 2024 GMT
            Not After : Feb  9 05:00:29 2024 GMT
        Subject: CN=bf89c2260d936368aea2c40e40ecb18c8ce21f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:7b:0e:c1:4d:fa:fd:d5:dc:e3:4b:4e:80:
                    a8:b7:45:9b:fe:65:6f:00:2a:59:31:23:14:f8:c7:
                    73:88:95:94:44:72:62:97:98:99:f2:49:93:fc:ba:
                    2c:c0:4d:db:b5:86:c1:2e:0b:ea:8d:5b:3a:ff:0a:
                    1a:29:57:a4:43:03:eb:72:71:c0:d4:90:8f:70:56:
                    25:a0:2d:f2:b3:12:9a:0a:16:17:70:80:ae:ad:92:
                    c1:e8:c4:02:b1:e4:51:12:a5:44:a8:41:84:82:e7:
                    da:d8:4e:71:ce:9f:f6:2f:6f:1b:c5:f9:53:11:a3:
                    50:f9:50:45:9e:ef:fd:0b:af:6c:31:6d:40:49:ed:
                    a3:65:0e:29:ef:e9:10:da:35:6c:10:87:80:d6:88:
                    4c:b2:5e:82:b3:fe:4b:a2:58:d8:01:86:f6:50:3b:
                    9c:69:ce:38:ed:ed:11:0c:54:d1:6d:86:73:b6:b0:
                    57:a9:67:31:e0:d5:a5:7e:1a:59:9e:29:be:27:6a:
                    6e:6f:e5:c8:2d:c4:91:26:0c:74:21:9a:ae:b3:47:
                    e3:48:2d:00:c0:a5:58:10:40:83:7e:76:92:dc:3b:
                    f4:54:32:c6:58:f3:ec:6f:1c:55:5e:ba:95:0e:54:
                    e6:0f:57:53:9c:03:97:79:c6:b9:4c:21:2f:64:1e:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:89:C2:26:0D:93:63:68:AE:A2:C4:0E:40:EC:B1:8C:8C:E2:1F:48
            X509v3 Authority Key Identifier:
                keyid:D5:15:10:4D:88:F6:60:0D:23:25:69:E3:A5:F0:E0:A0:0A:9A:D0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RUQTYj2YA0jJWnjpfDgoAqa0II.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/1RUQTYj2YA0jJWnjpfDgoAqa0II.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4bb401-3aeb-4ea9-9729-158ef855787d/1/1RUQTYj2YA0jJWnjpfDgoAqa0II.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:53:be:fe:f1:58:54:88:d3:3a:0d:00:32:b5:10:36:1d:
         87:e4:6e:f3:5a:e3:03:d7:7f:a8:8b:74:26:4f:1d:d6:ec:4c:
         a4:9c:29:42:76:73:4e:29:0b:35:3e:e7:4e:8e:e8:3a:ae:ba:
         2e:f3:20:34:60:56:ed:f5:c9:ea:e0:d3:2e:f2:ee:56:73:2b:
         10:fe:00:6e:68:5a:b8:00:5b:c9:7b:8f:2a:88:84:86:f3:d6:
         04:3d:95:8e:0c:ed:b9:a7:6a:30:cb:cf:ac:29:64:b6:0b:9e:
         39:f7:7d:a1:5f:15:78:88:cc:53:19:2c:ac:05:ba:7f:8b:60:
         0a:7a:67:94:87:d1:77:a7:94:c5:68:e0:63:92:bd:7a:85:d0:
         fe:98:ec:2f:f4:2b:cc:36:99:9b:b7:cd:35:52:1e:5d:49:15:
         69:e8:d2:c1:5f:21:df:9b:e4:3a:e8:96:4d:8f:af:57:f3:e9:
         1b:38:e5:75:f7:84:38:02:db:fa:7a:e8:2c:99:c8:75:cd:47:
         3a:77:79:8e:67:39:d2:47:f9:1b:c8:09:49:2b:67:d8:e1:43:
         be:99:53:e8:6e:ff:95:12:62:c6:17:0f:fd:ef:cb:3a:87:a4:
         ab:42:8c:e5:df:ea:7f:12:46:0c:11:55:5b:0c:9d:97:4c:b0:
         7f:82:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:56 2024 by rpki-client on console-ams.rpki-client.org