Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/lo5TCUpiB6CmXN7sLomLLIEmeuE.mft
File:                     lo5TCUpiB6CmXN7sLomLLIEmeuE.mft (raw, json)
Hash identifier:          aJeC0Wai9wY+l+Y7U7wqHZfmVIg8gPZbseAaSjwVeyM=
Subject key identifier:   F2:9B:8E:9D:06:AC:E9:09:25:6B:BA:73:08:F5:47:55:ED:74:FF:47
Authority key identifier: 96:8E:53:09:4A:62:07:A0:A6:5C:DE:EC:2E:89:8B:2C:81:26:7A:E1
Certificate issuer:       /CN=968e53094a6207a0a65cdeec2e898b2c81267ae1
Certificate serial:       018BEBBEF0BDAE9B1E8A449C7D7094729FD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lo5TCUpiB6CmXN7sLomLLIEmeuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/lo5TCUpiB6CmXN7sLomLLIEmeuE.mft
Manifest number:          0F9A
Signing time:             Mon 20 Nov 2023 08:00:41 +0000
Manifest this update:     Mon 20 Nov 2023 08:00:41 +0000
Manifest next update:     Tue 21 Nov 2023 08:00:41 +0000
Files and hashes:         1: lo5TCUpiB6CmXN7sLomLLIEmeuE.crl (hash: j9Oe8pgsHnJNkAEokyo9qvOfKQyfApHtsx0/nHeiK1I=)
                          2: rkFrF0sm5SlFcNZcA5ydYVp9thU.roa (hash: P0yNF7AxGhpy2WuVhNpw8536amkL0OXrTTcycLl+bDw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:eb:be:f0:bd:ae:9b:1e:8a:44:9c:7d:70:94:72:9f:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968e53094a6207a0a65cdeec2e898b2c81267ae1
        Validity
            Not Before: Nov 20 08:00:41 2023 GMT
            Not After : Nov 21 08:00:41 2023 GMT
        Subject: CN=f29b8e9d06ace909256bba7308f54755ed74ff47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:3d:fa:1e:b5:2e:ae:2a:15:07:b2:01:09:
                    43:75:77:21:f8:ab:88:b6:33:11:a7:ea:2b:cb:26:
                    ae:1f:53:0c:3f:2e:ee:bc:53:04:58:b4:0a:86:b2:
                    a2:32:93:4c:77:3f:fa:c3:97:64:5e:b7:b2:76:b2:
                    f0:62:a2:23:ea:1b:9f:e7:e7:39:3c:8f:3c:f0:19:
                    49:84:23:05:39:98:95:14:2c:91:19:02:e5:ac:36:
                    17:d6:4b:f5:c7:33:1d:a8:3a:72:fd:46:2a:e1:e6:
                    20:84:d5:fd:b4:d8:f6:55:5b:1f:11:61:fe:b6:9a:
                    a4:19:d2:6e:6d:b4:d3:03:56:0a:b8:63:19:3b:fb:
                    74:84:b4:57:31:69:57:a1:45:dd:37:c3:82:65:cc:
                    94:e3:83:4d:fa:81:8e:ba:c4:d9:d1:02:cb:0d:bb:
                    06:74:8c:ab:39:75:5a:50:25:97:54:72:3b:db:aa:
                    a4:3c:54:a6:17:01:4d:5c:e9:fe:2a:76:f1:77:5d:
                    be:80:28:5b:6b:9f:2e:55:7b:07:65:be:e1:01:ba:
                    07:70:e5:3a:e8:21:ef:a1:fc:8b:64:86:bc:dd:96:
                    38:5f:18:b7:71:ea:fa:86:5a:bf:c7:61:1e:61:ec:
                    fb:73:4c:db:38:71:f9:8e:38:f6:7d:ff:fb:42:35:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:9B:8E:9D:06:AC:E9:09:25:6B:BA:73:08:F5:47:55:ED:74:FF:47
            X509v3 Authority Key Identifier:
                keyid:96:8E:53:09:4A:62:07:A0:A6:5C:DE:EC:2E:89:8B:2C:81:26:7A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lo5TCUpiB6CmXN7sLomLLIEmeuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/lo5TCUpiB6CmXN7sLomLLIEmeuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/514258-0fd0-4831-bcf6-d4d69a1d4347/1/lo5TCUpiB6CmXN7sLomLLIEmeuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:49:15:88:f1:73:d6:4c:79:1d:3a:b5:9d:06:ef:19:bd:21:
         dc:86:8b:a6:46:af:49:de:5e:93:fc:aa:2a:0f:6d:ee:f0:76:
         7f:d5:90:14:cc:31:08:77:e5:ad:72:f6:e0:ce:e0:51:72:e0:
         52:44:03:16:a6:62:1a:fc:f3:c9:1c:83:87:80:94:97:4f:97:
         22:e1:0a:bd:67:40:a1:7b:53:99:80:c1:1c:9a:51:5f:bb:da:
         26:38:6f:04:fa:8c:1b:6b:79:d4:f7:19:83:a8:01:d2:5f:c2:
         3f:96:03:67:f1:b5:22:0f:ad:79:57:5f:09:b0:2a:84:fd:cd:
         62:9f:f8:4c:c2:18:64:ae:5b:f7:a4:ec:24:9b:31:12:a2:8f:
         81:b1:3e:3b:9e:ce:5a:b5:96:93:e1:28:dc:cb:07:23:f7:bf:
         cf:39:14:79:34:e0:c4:5d:3c:e3:75:21:ef:2f:88:ae:d0:14:
         61:98:9d:67:70:e8:27:10:e7:df:93:c1:74:6b:20:9a:6a:58:
         49:8b:b5:87:21:57:f3:00:71:58:43:7c:e4:92:b1:3b:e7:b3:
         51:47:47:1c:a5:73:31:eb:2a:40:1d:cc:17:6f:e2:e5:48:ac:
         7e:ec:df:03:5a:73:72:46:01:55:3a:81:3f:81:ac:b3:4d:82:
         ef:65:36:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:57 2024 by rpki-client on console-fra.rpki-client.org