Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/9iy3B8KX8LzkOvT0y6y7imNszGE.mft
File:                     9iy3B8KX8LzkOvT0y6y7imNszGE.mft (raw, json)
Hash identifier:          MWhdxD8iLF6u9zYLgc5D3YAXxgeBNq+RnaEIv5izYUQ=
Subject key identifier:   03:00:60:6F:56:B3:C7:0D:F5:67:94:D9:5F:A4:6D:C8:36:86:B1:05
Authority key identifier: F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61
Certificate issuer:       /CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
Certificate serial:       0189D34D42449AA3125BDC947600AD8A4A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/9iy3B8KX8LzkOvT0y6y7imNszGE.mft
Manifest number:          0853
Signing time:             Tue 08 Aug 2023 04:00:02 +0000
Manifest this update:     Tue 08 Aug 2023 04:00:02 +0000
Manifest next update:     Wed 09 Aug 2023 04:00:02 +0000
Files and hashes:         1: 9iy3B8KX8LzkOvT0y6y7imNszGE.crl (hash: Rs8KS2A6gm1vc9yJI847PKn39aq0iEEShuIXyhu5FA8=)
                          2: yHMWVhy9Nqm1Vl6j5naHqT78EjQ.roa (hash: dXdvx+bn6mM27zp17Dkz4T3UyljedjJxpNze3LeVM90=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d3:4d:42:44:9a:a3:12:5b:dc:94:76:00:ad:8a:4a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62cb707c297f0bce43af4f4cbacbb8a636ccc61
        Validity
            Not Before: Aug  8 04:00:02 2023 GMT
            Not After : Aug  9 04:00:02 2023 GMT
        Subject: CN=0300606f56b3c70df56794d95fa46dc83686b105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5f:4a:c4:64:de:98:c2:83:01:de:c1:ed:1c:
                    e3:fc:f5:53:af:c2:94:2d:fd:37:b3:1e:51:75:70:
                    11:4e:47:9b:22:97:3a:78:6d:97:bf:27:06:ea:d0:
                    8a:15:f4:b5:4d:76:55:7f:c1:da:c5:8d:31:c6:a3:
                    6e:71:c1:66:d8:04:e2:1d:a3:2a:5a:ac:de:9f:d5:
                    0f:ff:2c:b7:03:93:86:b9:37:d1:da:b0:19:95:a8:
                    6f:84:1a:f2:93:e3:ba:3f:ae:ed:19:32:28:5f:2e:
                    29:3c:07:82:c2:9c:c0:5b:99:34:37:3d:f9:53:b6:
                    41:bc:d8:48:ed:a3:64:d7:f1:17:ef:4b:4a:7d:cf:
                    0e:05:9d:d0:e1:f5:cd:5e:af:e3:85:fd:20:9f:59:
                    f2:03:3c:ef:49:ad:65:19:6f:48:23:7c:a4:2e:70:
                    39:61:fa:f6:c1:ad:24:aa:c8:bd:3d:4c:d3:79:68:
                    b0:91:bb:65:f1:f5:6d:59:b4:25:39:66:d4:0f:26:
                    bc:1f:cc:73:0e:da:84:93:c7:1d:e9:40:89:c7:fe:
                    be:42:45:0a:93:2f:8e:5b:d4:c2:38:ea:d9:68:82:
                    c0:ad:15:8a:92:d0:47:d6:3e:e4:6c:d8:0f:b0:ea:
                    38:8c:ce:c7:6a:8a:d5:79:c1:89:f2:bb:87:62:0a:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:00:60:6F:56:B3:C7:0D:F5:67:94:D9:5F:A4:6D:C8:36:86:B1:05
            X509v3 Authority Key Identifier:
                keyid:F6:2C:B7:07:C2:97:F0:BC:E4:3A:F4:F4:CB:AC:BB:8A:63:6C:CC:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iy3B8KX8LzkOvT0y6y7imNszGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/9iy3B8KX8LzkOvT0y6y7imNszGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/11362c-0ca8-4123-9b3c-3ca54d5c6f4f/1/9iy3B8KX8LzkOvT0y6y7imNszGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:27:d1:c7:8d:d0:c7:c4:d8:d5:4f:6d:83:41:65:37:1f:a1:
         b4:2d:f6:2a:14:2c:84:cd:3b:89:bc:8c:d4:35:07:3a:f3:2e:
         df:0a:43:79:ab:f0:cb:74:5b:44:96:0b:6e:88:3c:d7:11:29:
         9e:fd:10:4b:4d:35:78:d5:d8:65:36:a3:ac:77:07:68:ab:fb:
         e2:a5:ba:15:16:b7:c7:53:38:51:35:63:94:cb:62:11:2b:69:
         81:6d:6f:50:36:d5:08:22:23:d6:af:8d:6b:6e:48:57:01:e9:
         3e:fd:fc:1d:68:2d:48:f0:6a:82:c9:73:b8:2f:cb:8d:33:f8:
         93:68:5e:36:c5:af:f0:dd:a6:00:c9:2e:c6:04:0a:7e:a8:06:
         02:72:9b:58:ec:1c:3d:99:40:12:c7:4b:eb:30:81:af:10:10:
         1d:86:99:7b:f8:8d:b9:21:fa:6b:de:c7:58:f8:ff:0c:66:ff:
         1e:ca:1e:2c:56:86:bf:dc:c3:bf:b7:4a:b9:5a:9c:b8:d4:1c:
         41:49:82:e0:7d:9d:98:bb:28:5f:b1:0f:05:42:d6:be:f8:4e:
         a4:20:13:11:8b:ec:04:74:4d:36:72:80:56:4b:70:61:bb:1d:
         e7:d4:41:56:e8:05:e0:93:85:14:ec:b7:d0:9d:17:57:a6:eb:
         ba:59:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:53 2024 by rpki-client on console-fra.rpki-client.org