Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/_gs-Mh_5PzFjLrmSj1XIDeJC78U.mft
File:                     _gs-Mh_5PzFjLrmSj1XIDeJC78U.mft (raw, json)
Hash identifier:          j7zP0rlruNS84iSPSKnlzrURZMj/gJV10/mBsG3hGPY=
Subject key identifier:   69:D4:AA:3C:3B:62:3F:1C:20:C7:F4:FE:A7:00:19:15:8E:30:25:8B
Authority key identifier: FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5
Certificate issuer:       /CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
Certificate serial:       0189D8B3A9374300E011EC1D9F4AFF2EAB9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/_gs-Mh_5PzFjLrmSj1XIDeJC78U.mft
Manifest number:          0857
Signing time:             Wed 09 Aug 2023 05:10:00 +0000
Manifest this update:     Wed 09 Aug 2023 05:10:00 +0000
Manifest next update:     Thu 10 Aug 2023 05:10:00 +0000
Files and hashes:         1: QFx2IDftlhN1WBo137bzF6wbX_w.roa (hash: 1MD7imLWoAueY1SrF7PEae9TSfetnym9pUS5W73oxcc=)
                          2: _gs-Mh_5PzFjLrmSj1XIDeJC78U.crl (hash: zhYmcgyS8+uuAIvsfxh4VBY/udfEVn+E54rgB2P68Uo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d8:b3:a9:37:43:00:e0:11:ec:1d:9f:4a:ff:2e:ab:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe0b3e321ff93f31632eb9928f55c80de242efc5
        Validity
            Not Before: Aug  9 05:10:00 2023 GMT
            Not After : Aug 10 05:10:00 2023 GMT
        Subject: CN=69d4aa3c3b623f1c20c7f4fea70019158e30258b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cc:6e:03:0a:38:74:db:e8:f7:41:48:65:7a:
                    65:37:8f:0c:01:e4:13:75:e0:ac:f8:ef:53:8d:14:
                    85:3b:83:de:eb:72:7f:d1:f9:5a:ab:7c:99:39:af:
                    e5:7b:07:26:d4:55:69:3f:d5:1d:79:3b:3a:61:2d:
                    30:8d:f3:6b:68:54:85:e3:6b:0b:1f:66:ba:91:f3:
                    56:78:c2:d8:84:34:45:dd:42:02:33:d2:44:62:f7:
                    46:bf:49:4f:28:31:6e:72:41:e6:db:85:d3:1e:95:
                    ad:a0:13:b8:ee:20:a6:d0:bc:3e:36:00:c5:28:f7:
                    09:75:80:e7:df:82:5b:83:8a:b9:0a:3d:d4:71:35:
                    9f:60:f7:5f:f8:d6:f6:fb:74:9b:f1:2a:5a:be:3a:
                    e1:7e:f9:27:94:80:56:04:0d:d3:d8:e1:78:2b:ad:
                    40:20:6a:61:a2:75:d2:b2:65:59:4a:64:64:a0:6b:
                    a5:01:33:30:1d:a9:8d:aa:43:ce:c6:c8:56:46:b8:
                    39:8e:55:50:b1:e1:40:cd:ff:15:bf:41:b1:23:23:
                    84:ca:4f:5b:2a:b9:3e:ce:62:69:3a:1a:d5:16:c8:
                    4f:ad:c8:69:41:c5:9e:5f:3c:f8:bb:55:1c:8c:df:
                    2f:44:a8:49:3b:d3:3d:e5:5f:21:d7:3a:10:45:6e:
                    4e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D4:AA:3C:3B:62:3F:1C:20:C7:F4:FE:A7:00:19:15:8E:30:25:8B
            X509v3 Authority Key Identifier:
                keyid:FE:0B:3E:32:1F:F9:3F:31:63:2E:B9:92:8F:55:C8:0D:E2:42:EF:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gs-Mh_5PzFjLrmSj1XIDeJC78U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/_gs-Mh_5PzFjLrmSj1XIDeJC78U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/659064-157b-46ed-abe0-1c805d603343/1/_gs-Mh_5PzFjLrmSj1XIDeJC78U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f1:75:cb:4c:6a:3c:69:42:53:b3:15:36:2c:ad:b5:76:ed:
         b4:6f:7b:2f:6c:07:40:df:be:6f:b0:42:aa:e3:ed:55:74:68:
         a5:37:74:b6:87:fa:15:b8:ad:5c:18:cb:79:07:a2:7f:92:5c:
         80:52:f6:7f:43:73:e6:17:e2:53:c3:6f:0f:8b:e0:e7:95:6d:
         bc:ab:d4:0a:b4:8e:88:a5:99:54:20:b6:e7:df:55:97:21:7b:
         f5:fb:0b:a2:28:86:b5:0c:07:48:56:c2:68:4b:02:26:c8:5c:
         3f:4f:3f:f0:16:ff:5d:d1:6b:25:35:82:3b:84:12:31:5a:ef:
         39:f3:40:e5:da:05:48:92:83:49:59:0c:d1:e1:7d:a4:9e:c1:
         f4:d1:35:72:8b:d0:31:4a:de:fa:40:a1:24:88:73:d8:3f:c5:
         af:8d:19:14:ff:f4:c6:ee:96:ce:25:9a:ad:b9:f4:e0:43:2a:
         4e:49:b2:31:98:78:7f:35:ed:4a:99:3d:92:90:9b:1a:66:bb:
         c4:42:a9:52:50:0f:85:72:48:c5:f8:fe:ed:08:1d:10:d0:45:
         22:1f:21:05:e5:52:07:43:a7:0e:64:fb:c2:0c:d8:74:ec:27:
         d8:5c:51:2f:db:a2:f0:ee:63:87:ce:77:1e:11:56:28:dc:22:
         1b:fa:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:44 2024 by rpki-client on console-fra.rpki-client.org