Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.mft
File:                     Sy2QEiJkcZFHpWHnxsYffMFwbJI.mft (raw, json)
Hash identifier:          5Zq3GogmlmVvaP4atCe6fASyj4QkDkfZ11RBh47Bsjc=
Subject key identifier:   C2:0A:B2:B2:B3:13:A4:CB:F3:4C:30:79:62:63:56:54:76:45:EE:EB
Authority key identifier: 4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92
Certificate issuer:       /CN=4b2d90122264719147a561e7c6c61f7cc1706c92
Certificate serial:       018C1528E8A0BF6E81902F216F26924DA4EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.mft
Manifest number:          06CF
Signing time:             Tue 28 Nov 2023 09:00:51 +0000
Manifest this update:     Tue 28 Nov 2023 09:00:51 +0000
Manifest next update:     Wed 29 Nov 2023 09:00:51 +0000
Files and hashes:         1: 3-X7CtJ6-nDl2RV2DceCp7iM47k.roa (hash: Un4lCElE+ejDSann7RlzTPA5eXkCbygyyahT/80VvTg=)
                          2: Sy2QEiJkcZFHpWHnxsYffMFwbJI.crl (hash: YtQDDM5MH+cb2fsIowBWqFZf/vpJY2iFvqDp/QPztkg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:15:28:e8:a0:bf:6e:81:90:2f:21:6f:26:92:4d:a4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b2d90122264719147a561e7c6c61f7cc1706c92
        Validity
            Not Before: Nov 28 09:00:51 2023 GMT
            Not After : Nov 29 09:00:51 2023 GMT
        Subject: CN=c20ab2b2b313a4cbf34c3079626356547645eeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9a:f3:23:1e:16:80:2b:2a:f2:19:5d:53:bb:
                    c2:b4:3e:6a:12:c4:9f:a3:6e:98:b1:dd:b8:d2:a9:
                    7d:ab:41:2f:51:26:e6:d2:74:05:6e:58:d5:6e:6d:
                    47:3d:eb:9f:57:d2:4d:54:e7:3c:89:b9:84:e9:16:
                    6a:2b:6f:87:3b:1d:56:01:b9:c1:bb:5c:43:24:2b:
                    02:93:9a:b4:bf:c8:d4:e7:46:c8:1d:0e:01:47:2a:
                    71:2b:bc:37:c7:4a:7e:20:7a:df:0a:73:4a:c6:58:
                    31:41:26:8c:60:3c:7c:5e:35:0d:a2:67:c4:cb:02:
                    7c:0c:b5:46:ea:85:0c:ad:df:93:e1:eb:bf:e4:3b:
                    02:d9:a4:92:0d:2b:aa:d3:aa:df:fe:84:9b:39:5e:
                    25:2c:ac:2e:3a:09:fb:a6:62:d3:ed:16:9f:ad:ef:
                    44:01:16:90:fe:10:bf:ba:54:b9:4b:b3:4e:b4:f0:
                    8c:69:36:e8:8b:00:01:c9:0c:94:a5:94:c2:b3:b3:
                    06:f7:f5:77:ee:ad:e2:ba:7a:c5:6e:01:b5:b2:ed:
                    95:3c:08:0e:ae:7b:2f:da:e9:42:38:8f:e8:95:78:
                    97:41:c0:32:46:5d:70:79:0b:cc:a1:63:f8:6a:0c:
                    68:e7:9c:43:c5:8c:13:8b:1a:8e:a7:50:50:5e:0e:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0A:B2:B2:B3:13:A4:CB:F3:4C:30:79:62:63:56:54:76:45:EE:EB
            X509v3 Authority Key Identifier:
                keyid:4B:2D:90:12:22:64:71:91:47:A5:61:E7:C6:C6:1F:7C:C1:70:6C:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sy2QEiJkcZFHpWHnxsYffMFwbJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fa1a51-7a73-411c-971f-46dd2daddf80/1/Sy2QEiJkcZFHpWHnxsYffMFwbJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:a4:c9:9f:e3:a4:74:76:dd:8a:f4:8e:98:b9:cd:ab:4e:c6:
         e6:be:f8:cb:d9:eb:05:9f:9d:75:08:a2:c5:84:d9:1f:2d:6c:
         3a:e1:cb:ce:bc:e5:57:f0:a1:ec:a8:1a:f7:89:69:2c:b3:66:
         33:f3:6c:d8:88:38:d6:03:61:61:b6:4d:e7:aa:d7:1c:d1:96:
         95:65:27:5d:6d:5c:3e:9e:71:8d:8d:4a:24:f7:c5:63:a6:e7:
         26:d9:cc:23:ca:2f:d7:df:54:f7:d2:9f:e3:6c:fc:1d:10:2e:
         27:80:e5:68:f2:e7:7e:cc:3f:f7:94:f5:44:38:76:c0:b8:b7:
         ae:85:78:86:9c:92:6e:3f:1c:75:6f:9a:1f:a2:95:80:3a:32:
         63:cc:5e:5e:17:40:10:f7:e4:62:00:42:d7:1c:79:72:7c:1c:
         9b:66:92:81:21:7b:e4:b1:46:20:27:b2:3b:cf:d3:a0:87:95:
         c4:32:24:6c:f3:e0:f1:4b:f0:fc:96:b2:58:1d:5d:65:c0:f5:
         6b:0a:9c:f9:b8:59:b1:16:92:e3:60:3c:c6:5d:2e:31:24:5d:
         39:79:8d:29:4a:de:f4:f5:9e:56:7c:19:1d:9d:62:32:ee:19:
         6c:0e:b0:5d:72:f1:07:14:a3:db:c2:8e:37:8b:e4:14:62:2d:
         8f:0d:a9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:45 2024 by rpki-client on console-fra.rpki-client.org