Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.mft
File:                     fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.mft (raw, json)
Hash identifier:          hk6XLIxaVrFrtMPM/TGbJjAwID2Jb1tHVq1iFbw8DeA=
Subject key identifier:   5C:43:DA:8E:1C:24:D8:B9:5A:D7:44:B6:59:5D:21:1D:DE:DE:55:DF
Authority key identifier: 7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F
Certificate issuer:       /CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
Certificate serial:       018AF8A1D0FCFC62593362B5E83F7FDF432B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.mft
Manifest number:          0834
Signing time:             Wed 04 Oct 2023 03:01:08 +0000
Manifest this update:     Wed 04 Oct 2023 03:01:08 +0000
Manifest next update:     Thu 05 Oct 2023 03:01:08 +0000
Files and hashes:         1: HB1Z9wcQSAjsJ_lT58BCnBEILDs.roa (hash: C6OdaAGie3C8RZw6ZPo4UKh3F0YbuZDNWaWgJRHhcd8=)
                          2: fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.crl (hash: 9HjVcKFTm6OtZxoZbLz9D2x6rMcEqoYJe7tah/GwrNI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f8:a1:d0:fc:fc:62:59:33:62:b5:e8:3f:7f:df:43:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d00ccf61fa633675bc7c652c7946be09c2c465f
        Validity
            Not Before: Oct  4 03:01:08 2023 GMT
            Not After : Oct  5 03:01:08 2023 GMT
        Subject: CN=5c43da8e1c24d8b95ad744b6595d211ddede55df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:36:4a:e8:7f:91:b8:7a:27:1c:44:8d:68:
                    22:a8:98:b1:ca:41:cc:7a:5c:f1:c8:39:81:00:7a:
                    c4:48:8c:b0:bb:1b:b0:79:ff:24:cf:75:f9:ce:5c:
                    a5:74:22:05:c5:92:35:96:57:2c:0a:e0:d1:ae:b2:
                    9b:de:d0:5e:63:fc:3b:0b:af:cb:7f:ae:d1:9e:92:
                    12:e9:3a:56:79:2e:8c:76:25:cc:92:f8:bc:38:85:
                    dc:4d:cf:d8:fd:1a:94:d0:1f:27:17:44:31:98:be:
                    45:7b:34:7c:f7:11:46:08:48:32:a5:d6:56:54:d3:
                    ee:f9:80:ed:b9:66:ef:23:cb:25:b6:8e:bb:a8:fe:
                    a8:3e:3a:17:c9:a4:2e:83:7a:a3:fb:ed:85:ca:bd:
                    18:30:35:49:43:99:97:f0:76:9a:83:e0:51:80:b8:
                    2f:14:00:10:52:7f:ca:0c:0c:60:1a:1d:51:da:15:
                    c5:ca:e7:30:98:4c:09:19:cb:c4:e5:68:44:7c:65:
                    82:57:33:43:d5:57:74:a7:53:a7:51:7c:fb:b6:2b:
                    4b:68:21:67:35:b6:39:98:bd:3f:2e:22:ab:62:29:
                    00:6e:1a:0a:88:f3:a5:d1:77:ed:9d:ab:08:9b:32:
                    66:80:d6:ca:de:a2:44:89:f5:b8:be:32:9a:48:2d:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:43:DA:8E:1C:24:D8:B9:5A:D7:44:B6:59:5D:21:1D:DE:DE:55:DF
            X509v3 Authority Key Identifier:
                keyid:7D:00:CC:F6:1F:A6:33:67:5B:C7:C6:52:C7:94:6B:E0:9C:2C:46:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbecfc-1fde-4c46-834c-19be17db55f9/1/fQDM9h-mM2dbx8ZSx5Rr4JwsRl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e8:89:d0:55:cb:29:ee:70:e7:00:1f:e6:ea:80:3d:f4:e9:
         ba:56:fb:e8:7f:02:c4:8f:52:6b:5e:93:7a:43:1a:02:c2:e1:
         c0:b1:67:c4:da:62:dc:72:3a:6d:64:45:45:be:b7:77:4c:3b:
         25:db:b3:d6:bd:65:6c:f7:50:0d:da:ee:27:72:c3:df:99:ae:
         06:fc:6d:ba:9a:46:5c:64:b0:48:1d:29:9b:00:16:74:e3:2c:
         f1:37:16:5a:91:f3:22:6a:25:33:c4:25:fa:d8:b2:ca:58:44:
         db:f6:46:93:44:95:78:65:42:c2:6a:2e:7f:04:27:97:69:e8:
         3e:6b:ed:1b:94:27:d2:44:70:61:e1:bc:5e:e6:23:f2:ac:2d:
         c4:20:bb:a8:66:cf:5d:f1:06:75:1b:2b:2b:41:ac:0f:84:6e:
         4d:f1:c7:f2:77:97:ba:7f:0a:74:e5:50:dd:30:71:2f:fc:1f:
         61:b3:d5:53:96:cc:b3:33:70:f0:56:f4:1f:26:68:39:ec:ef:
         b7:ad:e6:b3:7a:75:47:a9:98:94:fc:7f:ba:d7:06:d3:c0:0c:
         67:72:86:6c:1f:87:72:09:b4:f2:5d:38:07:e1:9e:af:37:96:
         52:ce:37:05:95:4f:0e:d6:47:6b:de:d8:a8:62:6f:7e:90:9c:
         3e:bd:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:01 2024 by rpki-client on console-fra.rpki-client.org