Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft
File:                     FrONMAlX-hWzqALTj_BZyrJ5bFo.mft (raw, json)
Hash identifier:          KTF1tOHxqisGYTWXf+sxt2kKOZLtcSGscR7yX4EHfyU=
Subject key identifier:   D8:06:6A:6C:55:8A:C5:42:EA:B7:DF:2B:0E:80:56:00:4A:72:F1:52
Authority key identifier: 16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A
Certificate issuer:       /CN=16b38d300957fa15b3a802d38ff059cab2796c5a
Certificate serial:       018D5EC07AB9668CF1C40088695A5770DC41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft
Manifest number:          08FF
Signing time:             Wed 31 Jan 2024 09:01:29 +0000
Manifest this update:     Wed 31 Jan 2024 09:01:29 +0000
Manifest next update:     Thu 01 Feb 2024 09:01:29 +0000
Files and hashes:         1: FrONMAlX-hWzqALTj_BZyrJ5bFo.crl (hash: tmy4bB7Z5E0jkMIVZmqH2k8lY5dyvG0n8fBTc517fsg=)
                          2: abG89RC27Esi4XqOEO3uNPqCQmk.roa (hash: GyDToUzK9XEFFJawY9ZvEnVUuUbT9jgXLL13okDoXKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5e:c0:7a:b9:66:8c:f1:c4:00:88:69:5a:57:70:dc:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b38d300957fa15b3a802d38ff059cab2796c5a
        Validity
            Not Before: Jan 31 09:01:29 2024 GMT
            Not After : Feb  1 09:01:29 2024 GMT
        Subject: CN=d8066a6c558ac542eab7df2b0e8056004a72f152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:ea:f2:e6:58:1b:21:b0:7d:a1:84:a6:2e:
                    ed:e6:0b:67:40:2a:46:96:d2:5e:78:2a:75:dd:5e:
                    d9:ca:91:04:a6:45:46:96:42:c9:99:57:6b:c2:39:
                    eb:01:27:93:6f:8a:0d:79:55:4f:d0:7f:ad:9d:58:
                    ed:b1:6e:d3:4d:34:cb:9b:22:fe:96:9f:42:23:c5:
                    c3:40:dd:14:2e:ca:a8:33:da:67:68:0d:17:ac:eb:
                    fe:b3:5a:bb:5f:28:bc:e5:f0:ba:ec:e5:ff:0f:ee:
                    67:3c:5a:e2:48:59:ee:fd:4b:33:2d:12:1f:84:c9:
                    07:f3:39:6c:58:80:c1:ac:87:77:4e:66:81:9e:c6:
                    59:8e:3f:53:8e:65:ae:0c:ff:3e:a7:9d:b6:1a:ae:
                    dc:18:3a:00:62:a2:57:20:b3:91:23:05:77:99:e5:
                    ce:b7:6d:9c:70:2c:66:56:5c:8d:d3:87:bc:c4:25:
                    9b:6e:d8:73:8e:a9:a6:58:2e:e1:7f:1a:69:42:fd:
                    5c:25:5c:03:7b:c0:47:f5:a7:d2:ac:b5:09:40:a8:
                    b4:a2:17:46:e9:3b:e8:fb:df:ee:8e:cb:29:81:11:
                    67:e0:57:6f:7e:ec:ad:0a:15:07:58:87:33:57:c6:
                    f6:12:32:75:c2:42:cc:c1:63:14:df:67:37:ef:fe:
                    a3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:6A:6C:55:8A:C5:42:EA:B7:DF:2B:0E:80:56:00:4A:72:F1:52
            X509v3 Authority Key Identifier:
                keyid:16:B3:8D:30:09:57:FA:15:B3:A8:02:D3:8F:F0:59:CA:B2:79:6C:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrONMAlX-hWzqALTj_BZyrJ5bFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/42e981-5556-46b8-89cf-87c3868f161e/1/FrONMAlX-hWzqALTj_BZyrJ5bFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:86:76:70:30:1e:1c:8c:87:4f:0b:58:41:dd:16:93:9f:9c:
         c0:ce:51:b4:12:0a:51:82:26:b8:49:f7:2c:1b:1f:dc:2b:c1:
         0a:3e:17:e1:7e:f3:41:83:1f:47:c0:c5:33:05:fd:e9:0d:37:
         70:66:aa:bd:38:cc:7d:ef:8d:75:9b:d1:b3:8d:0b:b5:ad:5b:
         46:3d:4c:cd:e5:91:1b:82:16:68:d9:34:47:19:0f:2b:5a:fe:
         84:ef:ca:f3:57:07:21:df:3e:fa:cf:1c:5d:24:25:37:6e:40:
         3e:a9:bc:c8:da:49:b2:90:9a:f9:73:4d:e4:7a:ec:13:26:83:
         ef:a8:26:a3:8c:92:a9:3e:ec:08:ff:08:55:8b:7a:2d:67:52:
         de:57:a3:04:5d:0d:36:65:b1:00:70:e7:5b:42:63:20:06:9b:
         f8:63:f6:cb:5d:8b:cb:70:7c:14:89:ca:fa:b4:dc:f1:ea:d6:
         53:d7:84:95:5e:fd:66:ad:69:93:03:f5:4d:3c:bc:06:a3:85:
         67:de:86:ba:1d:b3:c8:d0:36:73:a7:09:2e:99:24:18:de:78:
         5b:31:ba:e3:54:3b:67:aa:1d:68:50:76:d6:24:73:21:23:4d:
         66:79:9f:27:d2:04:69:f6:3e:2d:b6:c7:88:a1:f1:7b:ae:13:
         a5:a5:69:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:51:07 2024 by rpki-client on console-fra.rpki-client.org