Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/lSNBQ5NVofaeOuBlxDcm0e_0eW0.mft
File:                     lSNBQ5NVofaeOuBlxDcm0e_0eW0.mft (raw, json)
Hash identifier:          KPTJuiW3QULwPmd+4yhlzwvM09zb4y8+QTWjQG7mzjo=
Subject key identifier:   4C:DC:46:57:E9:80:79:81:31:A1:98:F4:76:D6:14:10:1E:D9:B1:23
Authority key identifier: 95:23:41:43:93:55:A1:F6:9E:3A:E0:65:C4:37:26:D1:EF:F4:79:6D
Certificate issuer:       /CN=952341439355a1f69e3ae065c43726d1eff4796d
Certificate serial:       01823F764AB6771784418CE6670FC0DCF308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSNBQ5NVofaeOuBlxDcm0e_0eW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/lSNBQ5NVofaeOuBlxDcm0e_0eW0.mft
Manifest number:          0542
Signing time:             Wed 27 Jul 2022 11:41:32 +0000
Manifest this update:     Wed 27 Jul 2022 11:41:32 +0000
Manifest next update:     Thu 28 Jul 2022 11:41:32 +0000
Files and hashes:         1: 1-RfruXybn75diFqH2jBXjyVTZAs.roa (hash: WJPeGzcSj5hfCRfdidG+zlr2Yrk/kxlL8AvE0kZfQA8=)
                          2: lSNBQ5NVofaeOuBlxDcm0e_0eW0.crl (hash: FiCBM/xlviFsq1Sf8ImDaW3j+BNcQhqYSrL6+K/ucjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:3f:76:4a:b6:77:17:84:41:8c:e6:67:0f:c0:dc:f3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952341439355a1f69e3ae065c43726d1eff4796d
        Validity
            Not Before: Jul 27 11:41:32 2022 GMT
            Not After : Jul 28 11:41:32 2022 GMT
        Subject: CN=4cdc4657e980798131a198f476d614101ed9b123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:ef:75:d5:6d:9a:bc:32:a4:9d:29:9e:36:
                    c7:43:4b:ed:5c:b6:77:58:05:a6:4c:95:5f:b6:d1:
                    44:23:46:97:c5:0a:0d:31:f0:55:00:ea:1d:d6:8c:
                    07:83:4e:25:c6:d1:79:3c:6b:06:a7:8d:2e:30:ef:
                    ae:ae:4c:c5:fb:6a:5b:4c:91:bc:4f:52:16:48:7c:
                    16:bd:44:80:dc:cf:f1:13:97:45:ef:1c:ec:fa:08:
                    c3:d4:02:3b:b8:58:e3:11:20:54:38:30:0d:4b:0f:
                    e6:10:a9:22:24:ea:01:3d:a8:4c:96:48:9b:95:70:
                    d2:82:53:a2:d0:95:b2:dc:a7:ee:a7:1f:e0:20:93:
                    34:e7:11:7f:78:b0:d4:96:1b:69:78:13:7a:36:e7:
                    c3:79:97:72:bf:a0:7b:1d:09:50:72:f1:06:80:c5:
                    5e:6a:53:b4:9f:0f:62:24:44:92:45:f0:d3:ed:6f:
                    cd:7b:f2:be:fa:8e:8e:b4:7a:51:75:04:a6:57:0e:
                    8d:ab:5c:76:48:52:6b:3c:9c:ab:aa:62:8a:5a:31:
                    59:2f:9c:31:ad:95:b5:78:87:a6:a8:6f:28:07:fc:
                    8e:da:8f:ec:59:2e:f1:ad:89:d3:58:72:1b:d5:fc:
                    00:45:1a:6f:2d:6f:06:b1:59:e3:a3:4d:5b:c0:3f:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DC:46:57:E9:80:79:81:31:A1:98:F4:76:D6:14:10:1E:D9:B1:23
            X509v3 Authority Key Identifier:
                keyid:95:23:41:43:93:55:A1:F6:9E:3A:E0:65:C4:37:26:D1:EF:F4:79:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSNBQ5NVofaeOuBlxDcm0e_0eW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/lSNBQ5NVofaeOuBlxDcm0e_0eW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/cd9945-b467-466b-b83e-9aa75fb6bb04/1/lSNBQ5NVofaeOuBlxDcm0e_0eW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:7a:f7:a2:0c:13:7b:1d:b5:ec:c0:e7:21:ee:37:54:f6:6a:
         28:9f:c8:d9:4e:43:01:36:96:9d:ca:e1:d3:9c:f9:dd:e8:28:
         bb:e6:f0:c2:c7:f9:56:48:ec:85:42:a1:18:53:b6:60:55:17:
         e0:04:87:1d:4d:c3:25:ff:0c:37:fa:5f:56:57:8c:cc:61:12:
         19:11:94:5d:6c:9a:86:97:00:52:e9:98:59:ec:46:61:dd:f1:
         c7:ac:f9:17:79:60:04:62:08:18:41:f4:c9:89:23:57:00:6e:
         4d:37:b1:e6:72:40:81:2c:ec:03:5c:b1:fc:a1:29:cd:2f:0a:
         b6:cd:bb:05:63:c1:3d:46:c3:bd:10:98:a6:03:7e:db:3d:59:
         74:04:df:dd:f6:96:76:bd:5e:70:8e:c0:de:1e:75:a6:ee:56:
         59:68:6e:50:e0:64:3a:ab:4d:73:5d:81:5a:4a:e7:8f:ab:21:
         60:1b:77:4f:96:b6:96:54:5c:d7:b3:26:d9:67:c1:fb:e2:2b:
         54:08:d3:c3:31:b0:fe:04:84:6c:3a:58:b3:46:39:32:46:b8:
         45:2a:7d:d5:5c:30:37:c0:5b:ef:58:eb:70:36:64:f0:71:ba:
         be:61:a1:79:17:55:4d:ff:a5:71:82:8d:fb:d4:09:8f:59:fc:
         f2:19:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:15 2024 by rpki-client on console-fra.rpki-client.org