Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ded5b5-299a-479a-8f40-7e030875cbdc/1/YzoKaw_zF5HfoIJti7J6WGlVOaA.mft
File:                     YzoKaw_zF5HfoIJti7J6WGlVOaA.mft (raw, json)
Hash identifier:          onKRjBuSoEimUSsre9uwtJD4k7OlMN8gpIn6HKbl1NA=
Subject key identifier:   0F:8A:CC:14:5B:A7:DB:34:30:70:3C:00:D1:48:F1:A9:20:AF:D0:9A
Authority key identifier: 63:3A:0A:6B:0F:F3:17:91:DF:A0:82:6D:8B:B2:7A:58:69:55:39:A0
Certificate issuer:       /CN=633a0a6b0ff31791dfa0826d8bb27a58695539a0
Certificate serial:       018C5D0ABA56427A06F7481F408ADFA93EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzoKaw_zF5HfoIJti7J6WGlVOaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/ded5b5-299a-479a-8f40-7e030875cbdc/1/YzoKaw_zF5HfoIJti7J6WGlVOaA.mft
Manifest number:          0F11
Signing time:             Tue 12 Dec 2023 08:00:33 +0000
Manifest this update:     Tue 12 Dec 2023 08:00:33 +0000
Manifest next update:     Wed 13 Dec 2023 08:00:33 +0000
Files and hashes:         1: YzoKaw_zF5HfoIJti7J6WGlVOaA.crl (hash: W7vs+2Fa154gtbCu+Rj29QSrcE95M2GosT+zpusACNQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:5d:0a:ba:56:42:7a:06:f7:48:1f:40:8a:df:a9:3e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=633a0a6b0ff31791dfa0826d8bb27a58695539a0
        Validity
            Not Before: Dec 12 08:00:33 2023 GMT
            Not After : Dec 13 08:00:33 2023 GMT
        Subject: CN=0f8acc145ba7db3430703c00d148f1a920afd09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:58:62:6d:a6:5e:5b:e5:38:70:83:e5:9d:
                    04:92:56:ff:51:db:26:fc:e1:8f:6e:65:b2:39:3b:
                    8c:2e:da:4d:c9:9a:b1:58:71:1f:ce:1c:e3:43:1a:
                    fe:90:8e:a0:8b:07:b2:34:9e:85:47:1d:11:2d:57:
                    11:eb:65:d2:bc:b1:dc:99:76:c1:5e:23:f4:8b:a7:
                    75:11:fb:19:47:6f:5d:ab:c2:20:09:22:40:ee:15:
                    61:88:10:b8:0e:20:df:7e:15:fb:6a:6d:33:46:5e:
                    31:1c:bb:79:f3:c1:f4:6f:f7:5f:9a:25:35:0d:df:
                    b5:d9:16:dd:4f:58:d4:d5:61:8e:84:75:2c:d1:63:
                    cf:10:e2:62:86:ef:2e:a0:44:e8:db:c5:c6:78:ef:
                    99:55:62:4b:a4:1d:28:26:f9:18:62:85:42:9b:e3:
                    be:4c:27:5f:ab:77:6f:81:4b:33:d5:e4:ed:43:00:
                    1a:bc:56:f3:ee:dd:cb:22:97:94:7c:26:b4:2c:b6:
                    f1:74:c9:ba:43:b8:1d:af:f0:ea:a3:e4:1e:9c:43:
                    a5:1c:20:67:5d:51:1f:60:9a:c9:10:d1:96:e0:dd:
                    37:97:01:05:f8:b3:47:4e:6c:8d:58:e2:9d:5c:ff:
                    43:2b:af:c8:42:c2:1c:db:46:db:60:bf:ec:26:ba:
                    da:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:8A:CC:14:5B:A7:DB:34:30:70:3C:00:D1:48:F1:A9:20:AF:D0:9A
            X509v3 Authority Key Identifier:
                keyid:63:3A:0A:6B:0F:F3:17:91:DF:A0:82:6D:8B:B2:7A:58:69:55:39:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzoKaw_zF5HfoIJti7J6WGlVOaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ded5b5-299a-479a-8f40-7e030875cbdc/1/YzoKaw_zF5HfoIJti7J6WGlVOaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ded5b5-299a-479a-8f40-7e030875cbdc/1/YzoKaw_zF5HfoIJti7J6WGlVOaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fe:ee:7f:32:de:58:af:40:52:60:cb:14:79:be:ce:e3:6c:
         8c:5e:a4:c8:c2:b5:95:61:15:eb:af:b3:9f:4e:aa:9f:15:ce:
         b6:ae:d6:6b:8d:7d:f7:d1:03:34:a3:60:c0:d9:e0:bf:8e:ea:
         17:96:be:5d:84:59:75:ee:69:37:bb:f0:d9:04:7e:16:0a:a2:
         4a:03:8d:4e:c7:c6:d5:a0:b0:af:71:62:bd:30:e2:dc:65:5a:
         04:5d:b2:55:79:d0:11:46:14:2b:6e:ef:e3:6a:45:67:bf:4d:
         1b:1c:06:f5:cf:2a:e3:8d:ec:46:dc:2e:2a:9f:3f:77:98:67:
         0c:c8:37:7c:6c:5a:70:e7:95:a4:de:67:1b:5d:1c:b1:f9:1e:
         10:f5:fc:28:11:d9:4b:99:99:63:1c:53:ec:58:7d:d2:8a:2f:
         dd:76:7d:dc:c7:03:ee:0b:ef:ea:0a:85:73:09:64:b2:e7:33:
         ea:63:c4:52:2a:0e:3f:b6:5a:57:76:51:b4:cc:fb:59:e4:e3:
         ee:04:86:ad:db:96:87:8b:47:f3:67:08:9f:1a:27:2a:dc:ca:
         aa:f0:eb:98:e6:f5:32:52:bc:72:1e:e7:44:7e:39:f5:1c:65:
         f3:08:3b:b3:10:03:cf:8f:45:97:58:e6:01:a0:c8:72:19:a3:
         e6:e3:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:57 2024 by rpki-client on console-ams.rpki-client.org