Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/RkvKbLafIQvClI_C5DW8IZpwpxg.mft
File:                     RkvKbLafIQvClI_C5DW8IZpwpxg.mft (raw, json)
Hash identifier:          AqH3hc2quXlvzLgLhQsSqed93xdl1N3aKKjMC7Ul+eo=
Subject key identifier:   14:6A:B0:37:CF:75:BB:FE:23:AF:37:83:3C:6D:9E:9D:06:04:68:29
Authority key identifier: 46:4B:CA:6C:B6:9F:21:0B:C2:94:8F:C2:E4:35:BC:21:9A:70:A7:18
Certificate issuer:       /CN=464bca6cb69f210bc2948fc2e435bc219a70a718
Certificate serial:       018509F5CF6668AFBFDE67E7182495632589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RkvKbLafIQvClI_C5DW8IZpwpxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/RkvKbLafIQvClI_C5DW8IZpwpxg.mft
Manifest number:          74
Signing time:             Tue 13 Dec 2022 05:29:42 +0000
Manifest this update:     Tue 13 Dec 2022 05:29:42 +0000
Manifest next update:     Wed 14 Dec 2022 05:29:42 +0000
Files and hashes:         1: JSdR6LdO4GCDGs8DQtx_SbZqtFA.roa (hash: 5WtAuyfS7q0IrmKeHbLrrYg6TKdLUXMl5HgPPlelpVs=)
                          2: RkvKbLafIQvClI_C5DW8IZpwpxg.crl (hash: H9b9+MfBvyLZog4AyljgzMrllfrWdYjn0oPJt4tW2fA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:09:f5:cf:66:68:af:bf:de:67:e7:18:24:95:63:25:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464bca6cb69f210bc2948fc2e435bc219a70a718
        Validity
            Not Before: Dec 13 05:29:42 2022 GMT
            Not After : Dec 14 05:29:42 2022 GMT
        Subject: CN=146ab037cf75bbfe23af37833c6d9e9d06046829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:cc:c9:8c:2f:3d:ce:d2:d1:05:f0:a0:ce:
                    87:e1:2f:f1:38:59:31:58:70:c3:9c:cb:52:29:8c:
                    1c:d1:11:d0:30:d6:68:3d:fa:b2:15:bd:9c:ac:d6:
                    b6:d6:ee:ca:ea:75:a8:ef:29:7b:57:6e:30:04:28:
                    0e:fc:14:f9:ea:71:79:2d:6f:d2:4a:c8:2e:ba:c0:
                    67:6c:69:cc:04:15:e3:f6:05:ce:5b:76:ee:5c:b7:
                    9a:f0:08:1b:21:a7:a8:bc:3c:69:b4:45:a4:fb:d9:
                    80:cc:0c:a9:72:0b:24:74:06:ad:fb:ee:94:e6:25:
                    c1:37:43:3b:3c:5c:d1:11:36:17:fd:36:0a:97:cb:
                    ce:09:e4:c9:0d:ca:e5:f1:d2:80:35:a5:ea:e8:97:
                    73:67:16:b2:8b:b9:51:7e:97:2b:66:69:ed:fe:b8:
                    23:89:8d:82:b0:c6:1f:5c:de:55:d2:42:26:c0:25:
                    3d:af:e3:43:c2:90:eb:b2:4b:d1:1b:b3:c3:af:01:
                    64:3f:c6:fa:5d:8d:fc:c1:c2:c2:cb:f3:10:08:a7:
                    7c:b0:8f:4b:d5:06:6b:4b:f8:d5:cf:a9:fe:58:d3:
                    00:d9:d3:f1:b4:0b:fb:35:87:7e:84:75:75:d2:b1:
                    2e:01:f8:c7:c1:be:f0:44:86:fd:4a:70:17:ff:b5:
                    97:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6A:B0:37:CF:75:BB:FE:23:AF:37:83:3C:6D:9E:9D:06:04:68:29
            X509v3 Authority Key Identifier:
                keyid:46:4B:CA:6C:B6:9F:21:0B:C2:94:8F:C2:E4:35:BC:21:9A:70:A7:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkvKbLafIQvClI_C5DW8IZpwpxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/RkvKbLafIQvClI_C5DW8IZpwpxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/848d17-4804-4069-8274-abb686790c28/1/RkvKbLafIQvClI_C5DW8IZpwpxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:3e:24:15:0c:ef:5f:7a:38:f4:58:ed:d8:3d:93:1d:8e:
         8d:31:44:71:5a:13:6e:23:51:6e:61:4c:cd:0a:0b:bf:5a:5c:
         98:e9:c1:5f:61:84:2c:fe:a0:07:a6:2a:2a:55:7a:9e:fa:3c:
         77:c6:5b:94:54:d6:1d:ca:84:f5:9a:fb:69:ff:61:75:23:5f:
         09:aa:47:61:4a:0c:0f:97:d8:c9:df:31:a0:1c:aa:98:bc:52:
         e5:93:5d:f0:fe:77:15:6f:6f:60:de:4c:e5:3b:46:3f:e1:f2:
         02:2b:7a:69:39:38:c6:39:f7:11:8f:ca:bb:88:21:ff:52:5b:
         ad:ae:92:dc:6c:2e:a5:be:53:3a:22:73:43:17:81:37:3a:eb:
         d4:16:3c:2e:5e:8b:5b:42:e6:64:ef:4d:57:3e:70:56:fd:f1:
         05:eb:3c:73:4c:a6:6d:f3:5e:29:08:e6:88:a5:d9:60:22:34:
         f1:bb:7d:e7:2c:ad:5d:a0:6a:46:7a:56:92:73:23:a5:69:e6:
         20:33:b7:04:25:74:a0:1d:d9:d8:d8:f4:68:6e:e2:4a:36:a6:
         04:3d:c7:8c:97:8c:09:ad:29:6f:e6:b7:fa:7c:43:2f:9e:1c:
         31:99:f5:63:07:f4:b2:d2:f4:25:22:d5:78:c4:31:d2:f8:5b:
         a2:d6:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org