Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.mft
File:                     sB_78i43x65CwD9uY_Mhcjmc_gc.mft (raw, json)
Hash identifier:          cOC8ag7A9vg8VlagNZabu5MnhIgSep6L+3V+JGfrTco=
Subject key identifier:   2D:42:FB:DB:11:16:DC:5C:DB:51:40:4A:CA:A4:5C:A6:42:74:3B:CA
Authority key identifier: B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07
Certificate issuer:       /CN=b01ffbf22e37c7ae42c03f6e63f32172399cfe07
Certificate serial:       018D7C5C4D505347E3BAB1FDA0E297024C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sB_78i43x65CwD9uY_Mhcjmc_gc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.mft
Manifest number:          090E
Signing time:             Tue 06 Feb 2024 03:00:40 +0000
Manifest this update:     Tue 06 Feb 2024 03:00:40 +0000
Manifest next update:     Wed 07 Feb 2024 03:00:40 +0000
Files and hashes:         1: sB_78i43x65CwD9uY_Mhcjmc_gc.crl (hash: xe0cupTHzwjdRWL/Zqp5tMEcYyQkNJxRc+dPFOtE6wU=)
                          2: uwbsY5Wqn_DU6kOr3IQRAHMYWCU.roa (hash: 4CKbEASrliMtxyGUD5lj9cskKR9OwbPCgCJwz0tSxP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:7c:5c:4d:50:53:47:e3:ba:b1:fd:a0:e2:97:02:4c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b01ffbf22e37c7ae42c03f6e63f32172399cfe07
        Validity
            Not Before: Feb  6 03:00:40 2024 GMT
            Not After : Feb  7 03:00:40 2024 GMT
        Subject: CN=2d42fbdb1116dc5cdb51404acaa45ca642743bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:d3:5e:c9:c2:5e:da:2f:5c:6e:3d:40:f0:
                    05:be:7f:b3:d3:09:48:6e:72:12:5f:57:ee:d9:8c:
                    00:df:92:83:d5:0e:ad:1f:0d:c7:5b:17:16:9e:b6:
                    dc:46:00:ce:d3:80:7e:dd:13:9b:75:f3:70:71:bc:
                    b1:19:1c:ce:fb:26:90:9f:52:cd:68:6a:98:e5:c4:
                    39:2a:e6:db:07:a2:d3:41:38:2b:6e:4f:e0:17:a3:
                    c9:cc:53:e3:0b:c1:d7:cb:98:ad:7c:0e:03:9c:91:
                    52:6a:6c:37:6e:fc:d2:87:92:fa:be:50:06:37:f3:
                    20:95:83:65:2c:b9:36:a8:02:9d:7f:77:d0:16:30:
                    de:99:02:49:86:fb:21:7b:0f:bf:24:dc:9d:ca:31:
                    fd:82:64:2d:96:cb:94:03:e6:be:c6:78:90:b9:38:
                    26:a6:8c:32:5e:36:e6:36:6a:10:5d:ad:d1:bf:99:
                    d1:3c:15:ea:63:1e:31:4f:f5:8c:75:ff:f8:42:9b:
                    ce:c2:89:8c:ee:f5:cf:6b:f6:f2:4e:29:21:ac:a5:
                    7c:95:c7:8d:18:b7:36:35:44:8c:e4:08:9a:07:42:
                    97:c1:fe:27:07:1b:8f:b5:5a:27:2a:e3:55:df:4e:
                    44:f6:61:5c:c8:d3:7e:40:ca:6e:49:61:15:a0:f4:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:42:FB:DB:11:16:DC:5C:DB:51:40:4A:CA:A4:5C:A6:42:74:3B:CA
            X509v3 Authority Key Identifier:
                keyid:B0:1F:FB:F2:2E:37:C7:AE:42:C0:3F:6E:63:F3:21:72:39:9C:FE:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sB_78i43x65CwD9uY_Mhcjmc_gc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a2df45-f4b7-4ec6-8612-4ab036cac2db/1/sB_78i43x65CwD9uY_Mhcjmc_gc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3d:70:6e:c3:ef:4c:50:0e:5a:34:20:bd:32:6a:ca:1c:64:
         39:f2:44:3d:4c:b3:e7:8d:75:3a:f3:31:22:83:6e:fb:25:2d:
         d6:ba:f2:2f:48:77:6e:c2:03:26:8f:b8:65:ac:b5:69:90:5e:
         53:97:6e:96:40:88:60:20:0e:cc:d6:c5:29:19:d6:54:c4:22:
         68:35:65:5f:75:6e:2d:05:54:bf:71:5e:9b:92:ce:2a:24:8c:
         cd:d6:93:a6:cc:df:93:2a:33:80:12:bb:12:f1:56:c6:83:9e:
         53:0a:35:84:54:2c:da:b5:70:33:79:23:bb:1e:37:1d:1e:40:
         35:76:36:1c:c1:94:ea:93:aa:aa:78:67:1b:10:5d:b4:0d:c3:
         10:95:9c:74:21:3e:d4:ed:00:e1:7d:bc:47:fc:4e:5d:55:47:
         b8:d2:d0:29:54:31:b6:46:a6:c5:cc:77:01:e2:45:f7:87:ec:
         06:f2:0b:44:13:fc:4a:b2:f5:a8:9f:a9:74:03:fc:c5:21:94:
         fa:47:fa:27:67:2c:a2:fa:69:41:0e:d3:90:2d:50:46:0b:44:
         a7:23:1e:57:ba:46:36:db:99:5a:1f:19:db:98:fa:f7:f6:62:
         de:08:80:f0:02:a1:c3:4c:48:88:f9:04:9c:aa:b6:bc:a4:ae:
         d3:db:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:00 2024 by rpki-client on console-ams.rpki-client.org