Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/vPgUN0V8vDLfonMoSCQ6ie5Thwg.mft
File:                     vPgUN0V8vDLfonMoSCQ6ie5Thwg.mft (raw, json)
Hash identifier:          KKme58LjcGoENxTwkFcZi6f25TTxhoz9xREgIYE2/9U=
Subject key identifier:   35:B7:C3:07:8D:22:7C:8C:7C:BB:7C:2A:48:13:57:AB:D7:04:99:0D
Authority key identifier: BC:F8:14:37:45:7C:BC:32:DF:A2:73:28:48:24:3A:89:EE:53:87:08
Certificate issuer:       /CN=bcf81437457cbc32dfa2732848243a89ee538708
Certificate serial:       019275DFF1C59CF838F4114DBA166F02A177
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPgUN0V8vDLfonMoSCQ6ie5Thwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/vPgUN0V8vDLfonMoSCQ6ie5Thwg.mft
Manifest number:          07E6
Signing time:             Thu 10 Oct 2024 10:01:03 +0000
Manifest this update:     Thu 10 Oct 2024 10:01:03 +0000
Manifest next update:     Fri 11 Oct 2024 10:01:03 +0000
Files and hashes:         1: t8aKTouTRM3_q5Kzenauuai4xhs.roa (hash: ksGDEdZ5dGbcXjTs2bbKXpTj2I8zTfPSO/Te88Xnyvk=)
                          2: vPgUN0V8vDLfonMoSCQ6ie5Thwg.crl (hash: 8RyzID9rplr4eMrsk2yacEJJ7vEf+4pu7lq+I0hiWjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:75:df:f1:c5:9c:f8:38:f4:11:4d:ba:16:6f:02:a1:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf81437457cbc32dfa2732848243a89ee538708
        Validity
            Not Before: Oct 10 10:01:03 2024 GMT
            Not After : Oct 11 10:01:03 2024 GMT
        Subject: CN=35b7c3078d227c8c7cbb7c2a481357abd704990d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:aa:37:72:ba:24:c2:c3:58:3e:b6:c6:3c:
                    e4:fc:71:ad:d1:25:88:eb:12:f2:5a:f6:06:29:cc:
                    c0:cf:4a:b9:91:85:ae:00:21:58:8c:83:d9:76:9e:
                    76:81:22:30:85:41:ae:d0:5b:ec:c4:b7:81:24:e0:
                    b6:c0:7d:6e:f9:39:41:bd:c3:59:3f:58:e3:c8:1d:
                    f1:7c:f4:05:60:3c:1c:65:44:be:ee:61:47:21:90:
                    fb:b4:9d:3d:6e:fc:c1:9b:38:74:89:ab:ec:67:6b:
                    48:3a:88:24:cc:6e:71:38:23:92:95:69:a1:e2:f3:
                    32:28:3a:3a:18:a2:0d:47:31:21:d8:0f:1b:1e:7f:
                    3a:71:e9:8b:30:1a:ae:9b:25:b9:cf:62:2a:c5:a5:
                    34:aa:b0:27:30:36:58:46:2b:9e:b6:55:dd:84:bf:
                    91:c1:1d:31:73:36:c1:ee:b7:b1:4e:35:3c:1e:74:
                    da:6c:8c:5b:14:35:28:65:43:a1:95:3f:d0:71:3a:
                    1f:62:df:aa:4e:4f:5f:54:db:fe:cd:02:33:ed:a7:
                    47:36:5e:c5:e9:97:ac:9f:17:16:d8:b7:b3:92:21:
                    c1:c2:1d:f9:89:49:dd:de:8b:a0:7a:9d:c8:87:5f:
                    82:0b:55:e7:13:4e:d4:d9:29:ab:99:72:fb:97:4e:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:C3:07:8D:22:7C:8C:7C:BB:7C:2A:48:13:57:AB:D7:04:99:0D
            X509v3 Authority Key Identifier:
                keyid:BC:F8:14:37:45:7C:BC:32:DF:A2:73:28:48:24:3A:89:EE:53:87:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPgUN0V8vDLfonMoSCQ6ie5Thwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/vPgUN0V8vDLfonMoSCQ6ie5Thwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1507f8-e7d1-406f-9aeb-df169270b134/1/vPgUN0V8vDLfonMoSCQ6ie5Thwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:30:5d:be:13:61:09:f7:e5:28:e8:0d:9c:52:f6:30:d6:2d:
         eb:c2:9b:4e:1f:21:e8:54:39:68:d5:66:5f:51:f6:b5:fd:8b:
         3c:9d:9e:e2:f8:33:bd:2e:bd:4a:35:45:c1:8f:81:6f:49:a0:
         0b:b4:d3:f0:a2:68:91:34:24:28:a1:75:a0:4b:75:69:8c:1c:
         f9:b1:5d:d3:54:61:70:57:1c:28:8a:a5:ee:25:f7:34:42:ef:
         49:b2:52:a4:c9:89:88:9a:b8:42:c2:ab:db:62:ae:86:04:c2:
         73:7d:43:73:48:b5:bc:41:8d:45:f2:f5:14:1a:49:35:6a:2e:
         e8:b1:c7:b8:77:ec:01:b2:78:cd:59:5c:c5:89:40:4f:66:cb:
         3e:5d:a5:0d:a7:08:f5:b8:5a:b7:61:43:9a:6b:49:80:fe:e3:
         c8:c4:ef:a4:19:09:87:1b:c4:13:de:ab:7a:87:33:04:39:62:
         10:34:2b:32:61:fe:18:bf:13:ad:47:27:0a:78:f6:a2:f2:a3:
         f5:30:0b:a5:4b:b6:cb:43:3f:20:6d:0f:5b:7f:55:e9:96:b8:
         96:3f:45:79:3d:44:5a:ad:06:13:98:51:11:f8:68:0a:fb:8b:
         6e:a8:5d:c9:56:a9:31:1c:4e:62:12:59:2b:19:ba:e5:bc:58:
         90:31:87:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:27 2024 by rpki-client on console-ams.rpki-client.org