Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.mft
File:                     ZHUSrRu4iKckKlhMbylkmI9ch9Q.mft (raw, json)
Hash identifier:          7FfE3K3EMuIl27F0oGGDV9bhisOXw1gQm7rDtl7QOhw=
Subject key identifier:   DA:47:E8:FD:FE:AF:AE:13:0F:E0:4E:9B:E1:F1:7C:62:2E:D7:F1:EC
Authority key identifier: 64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4
Certificate issuer:       /CN=647512ad1bb888a7242a584c6f2964988f5c87d4
Certificate serial:       018C33339635BAD7F994137E368A287E7668
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.mft
Manifest number:          0676
Signing time:             Mon 04 Dec 2023 05:01:07 +0000
Manifest this update:     Mon 04 Dec 2023 05:01:07 +0000
Manifest next update:     Tue 05 Dec 2023 05:01:07 +0000
Files and hashes:         1: 1-yZWYEWKpdiUVFOL7C4_x01X6Oc.roa (hash: BdS2Dp32vzhTaJNlCgZ1HekK7BiHWT6kiw66hscQXdQ=)
                          2: GbLvIZs3K39fPEn2eNODi4DsAwk.roa (hash: WTTmB3gzBYzTz4v9cDeCed2jUpi/68R0f8Me148znak=)
                          3: ZHUSrRu4iKckKlhMbylkmI9ch9Q.crl (hash: vsMSlEbqjkVb61PFJNuthIUhynTz0VxjnnOWYlOCl/A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:33:33:96:35:ba:d7:f9:94:13:7e:36:8a:28:7e:76:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647512ad1bb888a7242a584c6f2964988f5c87d4
        Validity
            Not Before: Dec  4 05:01:07 2023 GMT
            Not After : Dec  5 05:01:07 2023 GMT
        Subject: CN=da47e8fdfeafae130fe04e9be1f17c622ed7f1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:c0:9d:58:4d:95:1b:72:23:92:f4:15:57:
                    5b:3b:04:16:a7:38:32:fe:e6:43:58:a2:e7:2a:2c:
                    5d:05:7c:9c:72:64:af:b1:a6:a9:f6:d2:5b:73:28:
                    5c:e7:71:a3:22:77:72:59:0b:a0:01:80:a9:54:3f:
                    69:35:8c:5a:d4:34:31:8a:f2:be:c0:b5:5d:a7:de:
                    e4:bd:8c:ff:46:32:d5:b3:33:e6:51:0a:c8:f0:9c:
                    db:2f:b4:f1:60:2b:1c:19:30:04:48:ce:47:eb:9b:
                    5d:30:57:12:80:d6:5c:78:fe:09:60:c0:95:09:42:
                    d8:ae:39:6e:7f:c6:5f:d1:98:95:12:38:69:74:41:
                    b5:f0:b2:d7:30:1a:a2:e8:15:58:fe:4d:ee:3d:a7:
                    92:64:5c:24:51:2e:7e:d0:6e:e0:35:08:68:1e:7e:
                    20:87:09:e5:f0:c0:89:d9:96:63:d5:ac:f7:40:a5:
                    20:4b:86:a7:1b:f3:86:51:6f:f6:2b:b7:9e:cd:88:
                    59:e6:46:fb:7c:72:15:0e:8a:87:54:14:51:ef:87:
                    40:2a:fe:8d:60:ec:6a:a8:f4:18:0b:d7:74:90:73:
                    f6:c1:95:56:0c:0e:0e:a0:a2:dd:5f:52:20:0e:11:
                    fe:5c:95:10:ae:ca:a5:8a:17:3c:ca:04:3a:1c:d3:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:47:E8:FD:FE:AF:AE:13:0F:E0:4E:9B:E1:F1:7C:62:2E:D7:F1:EC
            X509v3 Authority Key Identifier:
                keyid:64:75:12:AD:1B:B8:88:A7:24:2A:58:4C:6F:29:64:98:8F:5C:87:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHUSrRu4iKckKlhMbylkmI9ch9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/61c478-2257-49aa-9e80-2bd3fcfbf845/1/ZHUSrRu4iKckKlhMbylkmI9ch9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ee:e4:02:18:e8:ed:1c:65:c0:e1:5d:da:0f:7f:90:59:1d:
         05:72:7c:d4:da:b2:7b:98:a8:fd:6e:6d:ba:ef:f7:00:8e:d0:
         8a:0d:2b:31:f5:be:70:55:4d:4b:4d:c4:63:ef:47:5e:7d:27:
         89:26:36:97:8f:49:ee:6e:b8:9a:cd:83:a8:55:30:a5:89:cd:
         7c:69:6a:9b:a4:e7:cf:0e:d2:22:03:f7:f8:1a:50:54:e7:3c:
         df:2d:96:64:ac:45:c4:4b:94:c2:b7:36:a5:7b:3c:2c:20:6c:
         b8:f9:04:ea:cf:f4:82:02:a5:e2:62:2c:53:aa:84:96:4c:49:
         e2:ac:af:60:48:36:33:ff:f3:fb:48:16:1f:13:d6:c0:40:70:
         69:32:75:db:4f:b7:3f:40:5c:68:e6:4c:07:ea:72:fb:3f:a8:
         d5:b1:35:b1:35:63:d4:0b:3e:66:39:56:0c:8d:ba:5d:4f:8b:
         14:35:35:db:67:dc:dd:44:4a:92:34:b8:05:3f:09:06:ce:bd:
         2b:1e:a0:9a:2f:49:5d:d1:20:15:85:6b:ac:2e:0e:d3:de:71:
         c0:7f:2e:6d:d5:6e:19:4d:2d:4a:a9:54:4e:3b:6a:a1:24:0b:
         4f:04:6f:01:92:4b:c6:cc:f5:b1:d4:7f:2f:c2:61:25:79:20:
         2e:68:6c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:48 2024 by rpki-client on console-ams.rpki-client.org