Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/66cc6b-c268-494b-a2e0-5c2ad3416423/1/Gaxw5FINJDUlquzyhSl-HWNCNA0.mft
File:                     Gaxw5FINJDUlquzyhSl-HWNCNA0.mft (raw, json)
Hash identifier:          UWwoCfrNgaljLaBTKd1Plx54yYjjQ8U/EK5j2fympmo=
Subject key identifier:   BD:6A:88:0E:96:3E:E1:5D:9B:2F:24:CA:7D:2E:66:53:15:4F:0C:B0
Authority key identifier: 19:AC:70:E4:52:0D:24:35:25:AA:EC:F2:85:29:7E:1D:63:42:34:0D
Certificate issuer:       /CN=19ac70e4520d243525aaecf285297e1d6342340d
Certificate serial:       018F60AAD910EE5EAC1ECA7651C811A82A28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gaxw5FINJDUlquzyhSl-HWNCNA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/66cc6b-c268-494b-a2e0-5c2ad3416423/1/Gaxw5FINJDUlquzyhSl-HWNCNA0.mft
Manifest number:          0DE6
Signing time:             Fri 10 May 2024 04:02:40 +0000
Manifest this update:     Fri 10 May 2024 04:02:40 +0000
Manifest next update:     Sat 11 May 2024 04:02:40 +0000
Files and hashes:         1: Gaxw5FINJDUlquzyhSl-HWNCNA0.crl (hash: QQW47em6qdQCJxa8/xyAn7qslIYI5UZjNEjfwbhhugA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:60:aa:d9:10:ee:5e:ac:1e:ca:76:51:c8:11:a8:2a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ac70e4520d243525aaecf285297e1d6342340d
        Validity
            Not Before: May 10 04:02:40 2024 GMT
            Not After : May 11 04:02:40 2024 GMT
        Subject: CN=bd6a880e963ee15d9b2f24ca7d2e6653154f0cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:c6:b2:61:1b:cb:cd:a6:b6:ee:f6:c7:9b:
                    d0:40:c4:e1:28:e3:6d:1b:d8:ee:ac:36:99:af:98:
                    b5:75:f1:67:10:83:12:41:ff:e4:83:f2:36:44:7c:
                    3c:d7:0a:36:bb:cf:a9:1a:a9:ef:40:b6:67:fc:a5:
                    d2:9f:f1:22:86:f2:a8:48:ea:74:cf:3c:9d:2a:56:
                    70:7b:6f:7d:49:a4:c0:5c:3c:5b:11:04:0b:5c:9c:
                    9b:2f:8b:d7:47:2a:ee:ba:e2:ec:a8:fc:da:bf:02:
                    f2:3d:0a:ee:3d:7d:df:96:83:34:ab:77:95:98:5c:
                    b0:c3:7d:23:7c:7a:e8:5f:f6:65:82:3e:20:02:a7:
                    ba:37:4a:e0:ea:9b:27:16:1f:40:e3:d9:0d:f3:5e:
                    a3:e6:ee:64:30:10:92:cc:0c:11:23:29:ce:10:f9:
                    61:ec:a7:d1:0c:d7:b4:34:86:0a:a5:39:59:08:c6:
                    7a:f7:2f:64:66:dd:57:b5:3d:21:de:6c:bb:37:20:
                    eb:fc:d5:50:ce:6d:5a:a0:ef:78:22:95:ff:68:8e:
                    20:cf:6b:6c:68:85:c4:31:a8:e3:62:79:3f:eb:3a:
                    5a:f7:eb:3b:dc:07:d9:fe:af:9f:51:f2:8f:1d:c6:
                    c0:fd:f1:a6:22:55:14:b0:c8:5e:4a:7e:16:a4:31:
                    a0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6A:88:0E:96:3E:E1:5D:9B:2F:24:CA:7D:2E:66:53:15:4F:0C:B0
            X509v3 Authority Key Identifier:
                keyid:19:AC:70:E4:52:0D:24:35:25:AA:EC:F2:85:29:7E:1D:63:42:34:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gaxw5FINJDUlquzyhSl-HWNCNA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/66cc6b-c268-494b-a2e0-5c2ad3416423/1/Gaxw5FINJDUlquzyhSl-HWNCNA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/66cc6b-c268-494b-a2e0-5c2ad3416423/1/Gaxw5FINJDUlquzyhSl-HWNCNA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:fb:44:4e:93:83:c1:c5:b0:b9:b8:a8:72:3f:f4:16:2e:
         fd:66:0b:b7:68:a8:a1:e4:a6:50:8d:e9:ee:94:08:94:7e:a6:
         14:75:92:4a:2e:2d:c2:90:55:ea:4c:e0:da:f2:62:2a:14:05:
         5e:c6:d9:64:49:c2:22:c2:c3:ab:4c:39:f6:88:fa:1e:95:5b:
         15:68:f0:8e:a4:13:2d:c5:ad:a2:fa:89:6d:66:67:b8:a6:8c:
         92:19:82:6a:07:de:17:5b:07:13:6e:e9:76:12:4b:82:66:08:
         c9:fb:17:50:80:c4:30:8f:53:28:2e:48:7f:f2:c7:fc:4d:5b:
         1a:31:53:e4:21:04:b0:f1:7f:d6:ac:fd:5c:f1:a7:c0:61:06:
         bb:84:3c:9a:9e:81:bb:74:22:9d:86:6b:fb:f2:c7:6c:ee:4b:
         55:1e:78:01:88:1c:57:f6:c7:61:a9:d0:5c:eb:c3:49:02:51:
         cb:aa:91:44:08:ef:f6:07:52:bb:d7:bd:09:48:27:81:bb:3e:
         41:96:b5:2d:ec:d1:80:61:b7:d3:43:ec:a6:52:dc:43:a7:0a:
         d4:c9:23:f5:0f:30:70:52:72:49:5e:2b:95:6f:d3:d6:92:30:
         a0:76:ec:2f:ab:9d:8e:e9:74:e2:5b:b8:a7:d6:94:88:13:1a:
         c2:e1:2b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:14 2024 by rpki-client on console-fra.rpki-client.org