Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/dNfvRNcBnkpXI6kbHZj6j9XXjtc.mft
File:                     dNfvRNcBnkpXI6kbHZj6j9XXjtc.mft (raw, json)
Hash identifier:          LTdPYarRevOYcnL0xz5Zshmhq+P605WiQS7R8kfpuyY=
Subject key identifier:   8F:BD:7E:B0:AD:E8:FA:0E:99:A0:08:17:A8:93:49:CA:41:CA:9B:85
Authority key identifier: 74:D7:EF:44:D7:01:9E:4A:57:23:A9:1B:1D:98:FA:8F:D5:D7:8E:D7
Certificate issuer:       /CN=74d7ef44d7019e4a5723a91b1d98fa8fd5d78ed7
Certificate serial:       01862FFAB4096138B9BF04492C5AF62C6D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNfvRNcBnkpXI6kbHZj6j9XXjtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/dNfvRNcBnkpXI6kbHZj6j9XXjtc.mft
Manifest number:          0C6B
Signing time:             Wed 08 Feb 2023 07:43:24 +0000
Manifest this update:     Wed 08 Feb 2023 07:43:24 +0000
Manifest next update:     Thu 09 Feb 2023 07:43:24 +0000
Files and hashes:         1: cFe0fcTVTSC7B0d5gvNTXz-xep4.roa (hash: ZQYaaS1K6tl7IhYwt/p+rn1rZG3UhpXFq8Qzr2zV5hQ=)
                          2: dNfvRNcBnkpXI6kbHZj6j9XXjtc.crl (hash: Rw3YiFeDh14kdo2xXE4D583Wn4qntzskj2O19BJpirk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:2f:fa:b4:09:61:38:b9:bf:04:49:2c:5a:f6:2c:6d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d7ef44d7019e4a5723a91b1d98fa8fd5d78ed7
        Validity
            Not Before: Feb  8 07:43:24 2023 GMT
            Not After : Feb  9 07:43:24 2023 GMT
        Subject: CN=8fbd7eb0ade8fa0e99a00817a89349ca41ca9b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:b6:41:7c:f4:d0:ce:ed:fc:13:c2:1f:be:
                    52:21:d2:d6:4b:a9:34:7e:6e:d7:26:52:6c:ad:a8:
                    d6:96:fa:72:41:68:aa:0f:74:2f:b5:ba:f8:21:97:
                    2e:34:e4:c1:f7:f5:01:da:07:a9:b1:93:09:24:c6:
                    12:3a:c1:f9:e4:fd:ce:1b:c9:6a:6b:7a:04:4f:e7:
                    e5:3c:05:2b:79:cb:1c:08:ae:78:12:e1:59:26:46:
                    d3:0e:4f:60:5e:5b:d6:c1:f4:ca:c5:bc:61:34:ba:
                    8f:8f:da:55:4c:1a:af:06:5d:84:7b:31:6a:ea:d1:
                    7a:9e:e8:bd:76:90:61:b8:bc:3d:17:7d:18:c4:ec:
                    bb:b5:21:e1:38:78:21:de:bc:61:33:b1:cc:42:54:
                    1d:af:c5:a5:5c:61:ca:b0:44:c0:34:e5:36:13:9d:
                    96:e1:ef:8f:cd:b5:06:38:98:78:c4:ce:73:85:9c:
                    98:14:63:1d:b0:23:6b:6a:78:1e:3d:8d:fd:b3:82:
                    be:b3:52:82:48:eb:b5:08:d1:df:1b:5e:9d:49:16:
                    92:9a:5b:bf:f5:b7:8e:dc:6e:98:86:90:b1:ca:e8:
                    bf:91:5e:16:73:d7:2d:bb:6b:1c:0d:a7:f8:59:9d:
                    f0:9d:7e:06:62:b3:a4:f4:9a:d0:5c:6e:d4:2a:d0:
                    26:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BD:7E:B0:AD:E8:FA:0E:99:A0:08:17:A8:93:49:CA:41:CA:9B:85
            X509v3 Authority Key Identifier:
                keyid:74:D7:EF:44:D7:01:9E:4A:57:23:A9:1B:1D:98:FA:8F:D5:D7:8E:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfvRNcBnkpXI6kbHZj6j9XXjtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/dNfvRNcBnkpXI6kbHZj6j9XXjtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3ed5e-3d25-4fc9-a552-33c93ae6587f/1/dNfvRNcBnkpXI6kbHZj6j9XXjtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:0a:5e:4d:85:46:5f:aa:94:26:da:91:86:e5:7f:d2:9b:f4:
         a4:0c:d4:02:14:d9:5a:fa:c6:c1:52:82:a8:85:14:48:ea:0a:
         f3:05:07:71:0e:7d:33:0d:98:01:1c:73:69:31:d1:d3:a1:37:
         e7:a6:f2:7e:f2:e1:d1:43:77:10:bd:d6:c2:93:78:e7:6c:36:
         1d:5c:12:f6:a3:c2:56:97:c1:1e:a6:b0:0f:82:d7:73:67:29:
         39:b8:ff:36:83:c7:b5:20:fd:ab:4a:b2:c3:3e:04:c0:96:80:
         94:96:12:88:52:32:7d:9e:3a:56:55:71:9e:cc:c8:6f:de:5a:
         f4:dd:f8:db:27:18:71:8a:fa:82:80:50:8e:30:dc:14:d9:f0:
         dc:25:9c:4d:74:40:3d:72:31:17:8e:38:ae:da:45:21:5e:a8:
         97:ca:dc:7d:b5:c6:99:c3:ce:17:34:06:05:7d:d6:1f:7a:cd:
         e4:50:70:29:84:14:55:f3:51:a8:59:f0:7d:64:53:f6:a2:6e:
         97:e2:f6:70:2e:96:b3:a4:48:c1:bc:44:4f:ed:2a:51:07:77:
         2e:9c:d7:58:8d:3f:7f:8a:7a:d3:66:48:26:bf:87:83:a3:22:
         74:88:23:02:c0:4c:c8:e4:46:37:a4:a3:7d:a0:a4:55:50:61:
         38:5d:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:58 2024 by rpki-client on console-ams.rpki-client.org