Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/1W7pU99FxAKuzefKlyMIuiyDD6c.mft
File:                     1W7pU99FxAKuzefKlyMIuiyDD6c.mft (raw, json)
Hash identifier:          JuYVp3SIfLXvMCdsBeXFEEq6yxDR40VaAkdf/dYfejw=
Subject key identifier:   23:C4:40:27:4D:14:AB:86:C5:C8:4B:16:C2:FA:BF:DC:5E:49:B9:DA
Authority key identifier: D5:6E:E9:53:DF:45:C4:02:AE:CD:E7:CA:97:23:08:BA:2C:83:0F:A7
Certificate issuer:       /CN=d56ee953df45c402aecde7ca972308ba2c830fa7
Certificate serial:       018E3179225590B196D142E00004B84D70C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W7pU99FxAKuzefKlyMIuiyDD6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/1W7pU99FxAKuzefKlyMIuiyDD6c.mft
Manifest number:          0289
Signing time:             Tue 12 Mar 2024 07:03:25 +0000
Manifest this update:     Tue 12 Mar 2024 07:03:25 +0000
Manifest next update:     Wed 13 Mar 2024 07:03:25 +0000
Files and hashes:         1: 1W7pU99FxAKuzefKlyMIuiyDD6c.crl (hash: ycdoKz2q/dMTsGls8meiZJ9OHmqzTS807bvefkqG7G0=)
                          2: gFGZ62GXGoH2H-YjlVVNWvlARVQ.roa (hash: HxqRVyGMll3qlByYgxCYkAyUmOFo5t5hrQVRqFvcrKo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:31:79:22:55:90:b1:96:d1:42:e0:00:04:b8:4d:70:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56ee953df45c402aecde7ca972308ba2c830fa7
        Validity
            Not Before: Mar 12 07:03:25 2024 GMT
            Not After : Mar 13 07:03:25 2024 GMT
        Subject: CN=23c440274d14ab86c5c84b16c2fabfdc5e49b9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:dd:c8:dc:e4:ed:fb:2b:61:1f:e2:d4:67:87:
                    a2:35:20:ea:de:71:58:7b:8f:b9:59:05:8d:e9:72:
                    4e:d5:49:32:e9:1e:f9:b8:87:b7:12:46:71:a7:04:
                    49:68:4b:3c:4a:f8:47:d5:fc:74:40:d4:00:45:02:
                    74:24:da:51:36:31:4e:55:60:26:df:41:3d:56:b7:
                    43:b1:f8:b6:21:34:18:c4:91:31:04:60:43:b7:97:
                    46:d0:bc:c6:a7:12:7a:d6:c2:b6:d8:7a:1e:b9:61:
                    47:c0:e0:fe:01:e3:80:83:09:77:16:6e:77:e7:b8:
                    97:5b:67:ac:6c:b3:23:53:3b:1a:80:4c:bc:34:f2:
                    8c:1c:18:ff:89:fc:1e:0a:a9:80:88:2b:db:4a:f1:
                    33:9f:f2:7f:a4:0a:97:d3:ea:f1:3e:de:30:83:b0:
                    8e:86:42:f2:4c:e6:7a:76:1e:9b:b1:a6:e8:ba:6b:
                    49:dd:ba:dc:5d:17:81:80:0e:42:c3:8b:e5:cc:a8:
                    d1:b1:70:8a:63:ef:6c:7e:b1:54:03:b6:fe:56:2d:
                    f1:12:5e:84:83:f1:49:ae:6d:db:aa:ff:a7:32:ff:
                    bc:01:55:e4:4c:90:3e:fe:74:a0:bb:1d:6c:fe:e6:
                    5d:39:b7:47:69:76:0c:2c:5f:bb:73:c2:b9:ba:7d:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:40:27:4D:14:AB:86:C5:C8:4B:16:C2:FA:BF:DC:5E:49:B9:DA
            X509v3 Authority Key Identifier:
                keyid:D5:6E:E9:53:DF:45:C4:02:AE:CD:E7:CA:97:23:08:BA:2C:83:0F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W7pU99FxAKuzefKlyMIuiyDD6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/1W7pU99FxAKuzefKlyMIuiyDD6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f79c91-cc4f-43ba-b99c-05785925473f/1/1W7pU99FxAKuzefKlyMIuiyDD6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:67:65:7a:63:03:c2:66:0a:72:68:8b:0f:29:6f:3f:ab:af:
         c7:cd:08:22:09:88:ba:bd:bc:9c:2e:2d:3a:5c:92:29:24:ab:
         88:1f:dc:1a:1f:15:9a:3e:bd:31:56:ff:f2:bb:55:7d:5b:d1:
         57:b0:3c:02:0d:51:bc:5c:08:1f:0a:11:3a:c9:25:58:4c:54:
         63:12:ad:54:da:62:81:5e:96:d3:cb:cc:f6:0a:51:a0:a9:0f:
         b7:3b:99:3a:36:c0:77:87:66:7a:13:04:22:f7:8b:ff:49:04:
         7c:14:88:4e:28:d4:01:57:a4:1b:4a:5a:e6:f8:07:33:a2:15:
         a2:a0:c4:ac:1e:64:6a:96:fa:38:c2:8a:5e:fe:23:21:dc:03:
         e8:cf:cf:03:19:b5:e0:7e:e5:df:2f:b8:72:e6:f6:59:11:ef:
         9b:28:36:0b:84:ea:6b:e0:84:f8:91:a1:31:65:f9:35:4f:9a:
         1d:68:f1:aa:b0:65:24:01:1c:6b:e6:8a:4f:ee:8b:7f:35:91:
         86:06:11:cb:86:bc:94:9a:86:b9:71:24:a4:94:f2:a2:49:a3:
         01:63:68:0a:4c:a5:a1:ad:57:45:b2:dd:8d:e1:07:f6:2a:9f:
         dc:fa:07:fc:66:9a:93:27:9a:54:6b:90:18:cf:45:d1:fe:d4:
         43:78:9d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:19 2024 by rpki-client on console-fra.rpki-client.org