Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0001c2-7c23-4bab-acba-76d026ad3a9d/1/17rKuzMp3u6N3-V7qECJsnEWLW4.mft
File:                     17rKuzMp3u6N3-V7qECJsnEWLW4.mft (raw, json)
Hash identifier:          BBaDKQhPY48orlYIgM4+nlwkH7a14C1VS5Na42p4k+Y=
Subject key identifier:   D3:BA:A4:C6:C1:31:31:D7:A3:92:83:B5:42:AC:A1:CC:4C:02:A0:73
Authority key identifier: D7:BA:CA:BB:33:29:DE:EE:8D:DF:E5:7B:A8:40:89:B2:71:16:2D:6E
Certificate issuer:       /CN=d7bacabb3329deee8ddfe57ba84089b271162d6e
Certificate serial:       018F51A46F772F3881A79ED9282268298494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17rKuzMp3u6N3-V7qECJsnEWLW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0001c2-7c23-4bab-acba-76d026ad3a9d/1/17rKuzMp3u6N3-V7qECJsnEWLW4.mft
Manifest number:          1158
Signing time:             Tue 07 May 2024 06:01:21 +0000
Manifest this update:     Tue 07 May 2024 06:01:21 +0000
Manifest next update:     Wed 08 May 2024 06:01:21 +0000
Files and hashes:         1: 17rKuzMp3u6N3-V7qECJsnEWLW4.crl (hash: kHwIqS+dF1hAZlr56viVDJPidRWl2kuzdIhlJBfkdy8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:a4:6f:77:2f:38:81:a7:9e:d9:28:22:68:29:84:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bacabb3329deee8ddfe57ba84089b271162d6e
        Validity
            Not Before: May  7 06:01:21 2024 GMT
            Not After : May  8 06:01:21 2024 GMT
        Subject: CN=d3baa4c6c13131d7a39283b542aca1cc4c02a073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1a:c1:b1:f8:57:92:b8:7e:f8:a5:6f:76:41:
                    74:1f:4a:d7:4f:c8:d4:86:f5:06:c1:69:c9:4e:51:
                    6e:88:df:6e:ff:ce:45:59:5e:a6:9e:40:ec:22:31:
                    01:1d:c2:39:3f:94:90:73:bb:6f:c2:fc:ab:60:9e:
                    f6:37:a7:f3:d8:94:4a:f8:38:56:ed:23:b0:70:21:
                    63:f8:2d:de:4c:63:1c:37:40:4d:89:5d:3e:18:8c:
                    44:f7:25:d1:c7:ba:41:3c:b3:70:db:62:8e:74:ab:
                    72:63:db:5e:03:57:9d:34:a3:70:14:19:60:14:6a:
                    d3:c8:b0:47:ab:09:2d:cc:b9:66:84:16:fc:71:2f:
                    0b:1a:30:76:02:44:6f:b1:24:1c:40:e6:7c:5b:8f:
                    64:ad:94:2b:ce:bf:af:14:56:80:4e:9e:01:f5:63:
                    57:35:54:4c:ea:c1:e3:0d:5a:4e:07:24:e9:d8:a9:
                    40:6d:06:59:21:a5:e5:fb:cb:bf:d4:4c:24:c4:88:
                    b9:85:6f:03:9e:59:bc:31:68:ba:fb:7b:74:91:12:
                    20:0f:4e:8c:ce:22:af:f8:aa:53:47:46:d2:e3:5c:
                    42:3f:b6:91:13:fd:d8:42:c6:cb:c3:40:df:e4:0c:
                    62:17:e9:17:73:41:f9:4c:75:e4:02:5d:02:75:6e:
                    f9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BA:A4:C6:C1:31:31:D7:A3:92:83:B5:42:AC:A1:CC:4C:02:A0:73
            X509v3 Authority Key Identifier:
                keyid:D7:BA:CA:BB:33:29:DE:EE:8D:DF:E5:7B:A8:40:89:B2:71:16:2D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17rKuzMp3u6N3-V7qECJsnEWLW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0001c2-7c23-4bab-acba-76d026ad3a9d/1/17rKuzMp3u6N3-V7qECJsnEWLW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0001c2-7c23-4bab-acba-76d026ad3a9d/1/17rKuzMp3u6N3-V7qECJsnEWLW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:44:0c:03:ff:48:6f:b8:e2:8e:43:9c:a8:06:6a:0c:09:77:
         9c:65:31:c7:cb:59:d9:87:cf:55:51:33:60:7e:19:51:f5:ef:
         de:48:f5:f7:a5:83:66:86:33:87:35:0b:36:59:7d:ea:4e:1c:
         4f:9d:89:6e:a4:d7:19:85:91:aa:c5:f7:5a:a9:4c:17:5b:b0:
         41:02:e6:55:df:08:a3:40:c0:92:1f:7c:7e:19:21:bb:dd:8f:
         42:96:54:1c:8f:17:54:44:31:26:c7:93:60:f1:2a:9a:b6:65:
         1f:89:63:e8:ed:6a:a0:24:ad:fb:8f:b9:a5:a1:c1:a0:f3:6b:
         e3:2b:7c:03:32:26:ab:5c:6a:17:f6:78:ea:09:d7:9a:46:9e:
         7d:d8:d8:70:e5:8c:85:a2:e2:1a:15:13:7a:9e:77:8c:b0:b3:
         8e:ff:88:f2:d8:37:07:e4:8e:4a:54:29:6e:e4:3f:66:42:e4:
         79:86:43:de:05:28:90:ed:92:69:b0:fd:12:be:74:b7:9a:3d:
         61:ac:2d:a8:c4:22:8e:5e:f3:12:3c:e2:c3:62:e4:de:22:70:
         10:6f:25:5b:81:c2:f5:74:a8:39:cd:43:e5:b9:df:43:2b:b3:
         19:97:35:05:32:39:0a:5c:6e:10:b2:f3:d7:29:04:db:bf:9c:
         73:37:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org