Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/fZoKW2hh4-7OblbhjKS6YF3mVvE.mft
File:                     fZoKW2hh4-7OblbhjKS6YF3mVvE.mft (raw, json)
Hash identifier:          b4OWV/6jFDpWCc7cbTv8yL68lUV8u/fUefXtlvOK/Bk=
Subject key identifier:   BD:0B:49:00:F2:3B:63:94:C5:D0:40:4A:A6:94:7D:8A:54:75:B8:A4
Authority key identifier: 7D:9A:0A:5B:68:61:E3:EE:CE:6E:56:E1:8C:A4:BA:60:5D:E6:56:F1
Certificate issuer:       /CN=7d9a0a5b6861e3eece6e56e18ca4ba605de656f1
Certificate serial:       0187E07838D8689AD5D3B82B598B893B6DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fZoKW2hh4-7OblbhjKS6YF3mVvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/fZoKW2hh4-7OblbhjKS6YF3mVvE.mft
Manifest number:          09E8
Signing time:             Wed 03 May 2023 07:16:27 +0000
Manifest this update:     Wed 03 May 2023 07:16:27 +0000
Manifest next update:     Thu 04 May 2023 07:16:27 +0000
Files and hashes:         1: GyU4xnCaXrgCfPJIsN8DoWJWZBk.roa (hash: FnwI3BVo+CDHsPPiROyVOv8fAmrKD8X2wWUyzv5sQsc=)
                          2: bBqKH9pXy6leKEeknB5A31m8sj0.roa (hash: 1ZhmqyuMulGCUNWbfGKw7zMAplapUPxzlPDJb3ssoBI=)
                          3: fZoKW2hh4-7OblbhjKS6YF3mVvE.crl (hash: qfO35216Q4gaxGLnJS7AuSEpvBAjvJb1JUsWgKJbEug=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e0:78:38:d8:68:9a:d5:d3:b8:2b:59:8b:89:3b:6d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d9a0a5b6861e3eece6e56e18ca4ba605de656f1
        Validity
            Not Before: May  3 07:16:27 2023 GMT
            Not After : May  4 07:16:27 2023 GMT
        Subject: CN=bd0b4900f23b6394c5d0404aa6947d8a5475b8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:32:55:77:b8:8c:eb:06:29:f5:80:4a:5b:81:
                    95:08:15:a1:f8:4d:12:cc:33:b9:d4:3a:9f:70:42:
                    cd:a1:25:21:3e:eb:da:ad:ce:2f:20:f9:77:91:14:
                    e1:58:11:48:7b:c5:7f:f9:50:5d:fd:ce:db:83:e3:
                    f1:b7:b2:b9:de:5f:82:3c:bc:41:aa:99:3a:34:e4:
                    27:f8:b7:81:dc:b8:d6:e1:5f:37:32:eb:82:20:1c:
                    73:a8:de:50:1a:0e:df:ee:20:10:6e:53:76:76:60:
                    63:91:0f:21:86:34:b6:99:1c:f8:96:f5:2f:13:b4:
                    75:25:87:f8:1f:76:1e:c3:ae:6d:66:88:f9:f6:b3:
                    dd:b3:24:de:4e:cd:a9:cb:dc:0c:1e:0e:cd:42:0c:
                    76:38:24:4e:47:32:9c:c9:15:69:c8:b9:ba:bd:15:
                    fe:a6:da:4b:67:1d:04:64:b6:32:56:51:4d:a5:54:
                    23:6c:65:b7:73:50:69:56:e3:9a:e7:46:de:f4:3c:
                    67:c8:dc:9a:ae:52:bd:e8:1f:1e:3e:8d:cf:32:c0:
                    4f:e0:55:02:a7:53:3d:76:96:f6:59:67:9c:24:7c:
                    e0:ea:29:7a:09:b3:4c:28:a0:86:cf:fd:16:3a:a5:
                    0e:42:fb:a5:8e:f9:aa:fa:e5:46:63:5f:00:2c:34:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0B:49:00:F2:3B:63:94:C5:D0:40:4A:A6:94:7D:8A:54:75:B8:A4
            X509v3 Authority Key Identifier:
                keyid:7D:9A:0A:5B:68:61:E3:EE:CE:6E:56:E1:8C:A4:BA:60:5D:E6:56:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZoKW2hh4-7OblbhjKS6YF3mVvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/fZoKW2hh4-7OblbhjKS6YF3mVvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d12538-2b32-464e-b517-708ecf91c657/1/fZoKW2hh4-7OblbhjKS6YF3mVvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:3e:bd:49:a1:fc:66:a1:a1:e6:80:3e:5a:35:50:7c:02:c7:
         e0:a9:17:c3:2d:9e:22:c0:0d:fe:8b:dc:0b:51:aa:1d:ef:b1:
         5a:e3:d9:6b:34:be:8f:06:42:7f:5f:13:88:85:95:e4:30:0d:
         87:cf:d8:62:6b:0d:4f:17:95:8c:6e:be:39:69:ce:a7:2d:e1:
         ef:4b:36:28:20:6d:c6:81:02:68:17:51:cd:09:87:db:6d:3c:
         ea:dd:1d:0e:27:4d:b9:7d:4f:b1:72:a6:54:63:df:f0:a6:66:
         bd:6a:79:f0:b9:b2:fb:7e:c7:0c:bf:4e:2c:7d:a6:88:b5:43:
         05:a0:63:62:33:8a:e6:1c:cb:8d:f3:71:a0:4d:c8:de:b7:f1:
         d9:79:7f:29:14:8d:c2:20:e1:27:b1:f9:ff:01:90:39:7c:d3:
         f9:1b:5e:1e:79:9f:1e:f9:05:9a:d2:e2:18:59:46:c2:60:81:
         35:07:45:53:d5:d7:b0:5e:c6:f1:2f:a5:52:f4:b6:af:3a:b7:
         37:83:e2:77:01:cd:7d:4f:0d:42:49:8d:9c:6d:de:6f:9a:7a:
         6a:44:66:13:c6:a2:9a:3d:f5:ff:e2:1d:6f:b1:62:59:dd:29:
         d4:00:5b:e6:2a:1f:71:dd:83:52:40:a1:f8:08:03:a7:4b:8d:
         44:4c:1f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:44 2024 by rpki-client on console-fra.rpki-client.org