Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/eXFRERalM71qr0IX1N_D8-DLSXg.mft
File:                     eXFRERalM71qr0IX1N_D8-DLSXg.mft (raw, json)
Hash identifier:          zHNd32FcxSLFhnXc6IDWbKDGGsbUx3QPkfzHB599cjA=
Subject key identifier:   60:FE:FD:C8:B9:F4:71:BA:4F:D7:12:BA:84:77:88:6C:48:52:9F:5A
Authority key identifier: 79:71:51:11:16:A5:33:BD:6A:AF:42:17:D4:DF:C3:F3:E0:CB:49:78
Certificate issuer:       /CN=7971511116a533bd6aaf4217d4dfc3f3e0cb4978
Certificate serial:       018B7F99C0975493DD66B3FF865E1552C393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXFRERalM71qr0IX1N_D8-DLSXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/eXFRERalM71qr0IX1N_D8-DLSXg.mft
Manifest number:          0872
Signing time:             Mon 30 Oct 2023 08:01:04 +0000
Manifest this update:     Mon 30 Oct 2023 08:01:04 +0000
Manifest next update:     Tue 31 Oct 2023 08:01:04 +0000
Files and hashes:         1: bZtv6RWTKY6VxlSrD88z7s5BADM.roa (hash: wbbaLQCsXpZ8gbVwFtctlzgAMg+GYxav1LAwx89rM78=)
                          2: eXFRERalM71qr0IX1N_D8-DLSXg.crl (hash: Y46Ad6Ry9QM3ahdI1jyglYsGMAUWz3Q9cXfI336nR3I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:7f:99:c0:97:54:93:dd:66:b3:ff:86:5e:15:52:c3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7971511116a533bd6aaf4217d4dfc3f3e0cb4978
        Validity
            Not Before: Oct 30 08:01:04 2023 GMT
            Not After : Oct 31 08:01:04 2023 GMT
        Subject: CN=60fefdc8b9f471ba4fd712ba8477886c48529f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:73:a4:2e:42:d0:30:5c:fa:ae:71:14:66:
                    5c:ef:bf:5b:d0:dd:7a:de:3d:34:d2:db:90:4c:02:
                    a3:2f:f3:5c:f0:7f:eb:47:e2:b9:47:b5:2c:7d:50:
                    e4:71:c6:a1:7b:0a:bc:c7:bd:a7:c8:ad:76:1c:69:
                    02:97:71:9e:aa:17:62:49:23:07:af:f5:7e:4f:d2:
                    97:ea:cf:bc:a7:96:33:b4:7b:d3:d2:07:f4:77:c8:
                    03:b7:8e:89:13:4b:7a:41:10:75:f9:cc:62:fe:64:
                    f2:59:f7:67:82:67:44:b2:2a:a7:67:3a:ca:85:ee:
                    93:32:92:1e:df:9c:83:4f:16:1f:97:d7:ae:d9:4c:
                    2b:b0:13:e9:61:82:09:76:38:d7:44:dd:63:72:ae:
                    09:90:fe:00:50:3a:34:62:1d:1b:9f:1f:05:87:c7:
                    91:93:46:2a:dd:13:f1:25:f8:a4:9a:35:69:4c:93:
                    2c:89:f3:e6:d6:ad:40:fe:30:97:22:39:d5:4e:f7:
                    bc:ff:d3:ec:d1:ba:e0:03:6d:37:ef:55:1a:2d:63:
                    f6:1a:e4:94:da:cf:08:f4:95:8f:a5:74:5e:50:b5:
                    82:b9:15:dc:2d:52:69:ca:a5:ab:91:5f:79:7c:78:
                    6e:52:a1:a3:0c:3d:88:d7:f1:61:8c:ca:91:3b:92:
                    63:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FE:FD:C8:B9:F4:71:BA:4F:D7:12:BA:84:77:88:6C:48:52:9F:5A
            X509v3 Authority Key Identifier:
                keyid:79:71:51:11:16:A5:33:BD:6A:AF:42:17:D4:DF:C3:F3:E0:CB:49:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXFRERalM71qr0IX1N_D8-DLSXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/eXFRERalM71qr0IX1N_D8-DLSXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/83d49c-1e18-43d3-8e3f-dc7a50e51b39/1/eXFRERalM71qr0IX1N_D8-DLSXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0b:b5:d0:c8:40:d0:de:a0:a5:75:54:8e:47:13:b2:68:43:
         5a:8a:51:68:c1:c5:a9:9f:aa:0b:dd:a1:99:5e:ad:3e:01:2b:
         f1:49:7b:3c:6b:d0:57:a5:e5:c8:b8:70:85:c7:3a:7c:ca:e8:
         a5:04:45:86:fc:77:a9:23:49:b2:06:34:ea:c2:1e:35:0b:9c:
         e0:f6:58:3b:f2:eb:7b:6c:3e:3a:72:05:cd:41:5d:84:4f:3b:
         3a:a7:ee:76:25:e2:85:5e:5a:c5:31:07:3d:c0:5d:6c:ca:20:
         de:65:58:33:a0:67:1f:84:19:30:4c:77:40:ed:01:1e:2c:de:
         17:00:91:66:1c:f1:e8:95:d4:21:51:5e:f5:53:3e:77:2b:ba:
         01:af:b2:8d:4c:46:bf:dd:f1:d8:a0:a9:ed:85:6a:50:c6:20:
         d2:91:72:68:e6:d5:7c:08:2a:a7:af:10:23:62:c1:5b:5a:9b:
         b7:19:56:a3:1c:ac:05:bd:d3:1a:8a:35:bb:b4:9a:29:eb:11:
         ba:d3:e8:bc:05:d8:87:bd:b4:8f:b6:51:01:0f:13:3f:cd:95:
         30:21:1a:e7:05:d2:bf:ca:c6:81:c9:94:5c:25:ca:b8:89:ae:
         3b:4b:35:e2:0b:eb:04:67:e8:ef:5e:53:b6:5f:52:2c:90:97:
         01:cf:85:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org