Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/bNYFadP3ECjttTJJkowr7eWvA38.mft
File:                     bNYFadP3ECjttTJJkowr7eWvA38.mft (raw, json)
Hash identifier:          PF9W9eROjoruAEpPpprj303Tfk9ZXXzkN+wUnOyHu1E=
Subject key identifier:   59:6E:93:01:AB:43:3D:91:29:07:1D:DB:6C:39:92:20:13:50:79:63
Authority key identifier: 6C:D6:05:69:D3:F7:10:28:ED:B5:32:49:92:8C:2B:ED:E5:AF:03:7F
Certificate issuer:       /CN=6cd60569d3f71028edb53249928c2bede5af037f
Certificate serial:       01909985E0FB567974E8AA3055A2281BA3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNYFadP3ECjttTJJkowr7eWvA38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/bNYFadP3ECjttTJJkowr7eWvA38.mft
Manifest number:          0462
Signing time:             Tue 09 Jul 2024 22:03:26 +0000
Manifest this update:     Tue 09 Jul 2024 22:03:26 +0000
Manifest next update:     Wed 10 Jul 2024 22:03:26 +0000
Files and hashes:         1: bNYFadP3ECjttTJJkowr7eWvA38.crl (hash: XDfqpCNEx5dLcyEiLa/wTYcVDk8/Lg3Zd07Qbf4Pbe0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:99:85:e0:fb:56:79:74:e8:aa:30:55:a2:28:1b:a3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cd60569d3f71028edb53249928c2bede5af037f
        Validity
            Not Before: Jul  9 22:03:26 2024 GMT
            Not After : Jul 10 22:03:26 2024 GMT
        Subject: CN=596e9301ab433d9129071ddb6c39922013507963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:2f:c5:6d:fe:c1:d6:7f:7c:04:dd:74:bb:
                    08:35:9c:e1:53:14:33:63:00:55:eb:80:76:1f:c0:
                    9f:db:21:b5:12:28:cf:21:cc:b5:97:81:18:72:59:
                    a5:46:23:9b:7f:6d:c1:21:13:41:8d:91:f6:17:3e:
                    b1:1d:8d:71:e5:2c:60:27:ba:86:63:90:12:24:c4:
                    cb:bc:bf:76:94:0c:f8:63:8f:c7:39:69:41:33:db:
                    59:3a:05:fa:e7:bc:ec:98:41:e7:9d:6f:0e:87:44:
                    a0:7b:ab:81:f5:a8:bf:b6:f8:62:51:1d:fc:a5:43:
                    40:69:c0:0f:57:b7:db:06:c9:e0:5e:3b:e8:2b:67:
                    c6:8b:9e:87:49:e2:b9:d6:c8:f8:d8:40:f3:ae:40:
                    af:2a:ba:a6:30:92:13:9b:9b:41:42:7d:7e:9d:76:
                    81:20:ef:4c:55:20:2a:cb:d5:f0:db:ff:40:20:0f:
                    c4:a8:aa:e4:fb:51:83:96:2d:71:3f:cc:6e:0c:44:
                    89:45:66:f2:cd:4d:a6:ca:e2:d9:26:3f:cd:35:cb:
                    1a:dd:f4:3d:59:e9:e3:e0:a1:82:af:a7:9c:80:a0:
                    9f:b1:99:21:b2:2f:7f:4c:ca:cf:ec:95:4a:e6:bb:
                    7a:71:e0:13:fc:7e:66:15:a1:ae:7b:eb:69:21:36:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:93:01:AB:43:3D:91:29:07:1D:DB:6C:39:92:20:13:50:79:63
            X509v3 Authority Key Identifier:
                keyid:6C:D6:05:69:D3:F7:10:28:ED:B5:32:49:92:8C:2B:ED:E5:AF:03:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNYFadP3ECjttTJJkowr7eWvA38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/bNYFadP3ECjttTJJkowr7eWvA38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1de5c5-5e07-4e94-9331-362313ebe5f3/1/bNYFadP3ECjttTJJkowr7eWvA38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:07:5a:bd:e5:a2:82:6f:ac:37:5e:3c:28:c8:03:d7:68:c4:
         06:c3:f9:72:6e:cd:d9:6f:f7:d8:b2:75:ac:5a:a9:21:e8:06:
         bb:99:05:97:ab:7c:48:39:99:47:6d:e9:c3:a7:f4:e3:e9:86:
         10:4b:24:8a:f7:f1:36:c0:b2:7a:79:b9:41:3a:7a:f0:30:d4:
         eb:d6:93:9a:b4:fc:68:ac:35:f0:50:d0:08:dd:05:e8:e7:24:
         5f:e2:22:16:22:56:dc:b6:b1:4e:1f:aa:47:23:a9:87:d9:38:
         76:02:9e:c7:34:00:95:eb:6c:94:ef:51:1f:e4:5e:cd:85:ff:
         80:5f:3b:b4:6b:2f:8e:e6:17:59:bb:e2:e0:d1:72:16:52:65:
         54:41:b7:4b:2f:cb:ae:96:be:a3:29:cc:7f:4c:c7:10:b3:03:
         52:4f:9a:36:76:a6:6d:70:4f:ba:2e:1e:ce:79:fd:f5:21:fb:
         87:10:6d:e8:c5:df:08:bb:d9:5f:fb:a4:22:b9:0c:c9:70:1c:
         39:9a:72:07:cb:32:36:36:b7:65:09:c7:f6:51:79:3c:e4:a2:
         09:bf:f8:5b:8c:63:79:f9:b4:fc:f8:28:e3:47:66:8e:ad:ec:
         ff:34:9c:4e:bf:d3:d4:6f:03:21:e9:c1:92:6f:1f:d5:58:08:
         29:fe:fd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 08:01:39 2024 by rpki-client on console-fra.rpki-client.org