Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/Mijq-eXSQw55IrrnlLaYyGqOh8s.mft
File:                     Mijq-eXSQw55IrrnlLaYyGqOh8s.mft (raw, json)
Hash identifier:          cnwbTE9ncGv/mk0YzPeCe6uC14s0+56DA8Utsc+lTu0=
Subject key identifier:   D3:21:BD:72:81:35:49:3F:3A:DC:1E:18:DC:52:86:E0:E9:AC:55:48
Authority key identifier: 32:28:EA:F9:E5:D2:43:0E:79:22:BA:E7:94:B6:98:C8:6A:8E:87:CB
Certificate issuer:       /CN=3228eaf9e5d2430e7922bae794b698c86a8e87cb
Certificate serial:       01859F1939F2838563AA85B0E42913B7B8C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mijq-eXSQw55IrrnlLaYyGqOh8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/Mijq-eXSQw55IrrnlLaYyGqOh8s.mft
Manifest number:          028E
Signing time:             Wed 11 Jan 2023 04:31:48 +0000
Manifest this update:     Wed 11 Jan 2023 04:31:48 +0000
Manifest next update:     Thu 12 Jan 2023 04:31:48 +0000
Files and hashes:         1: Mijq-eXSQw55IrrnlLaYyGqOh8s.crl (hash: 0U5aCgRFnpM10RcPDcCqfYjHMgPdJHRhRN+RUnfi3NY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9f:19:39:f2:83:85:63:aa:85:b0:e4:29:13:b7:b8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3228eaf9e5d2430e7922bae794b698c86a8e87cb
        Validity
            Not Before: Jan 11 04:31:48 2023 GMT
            Not After : Jan 12 04:31:48 2023 GMT
        Subject: CN=d321bd728135493f3adc1e18dc5286e0e9ac5548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:8a:b3:7d:a2:de:bc:b7:8b:1a:33:17:4a:
                    93:c4:4c:65:7f:7e:b6:3d:d2:97:e1:fc:fe:21:6b:
                    0e:a5:56:23:63:52:bc:3c:a0:f7:64:bd:4e:1b:0f:
                    16:d7:c5:f6:b0:63:fa:e8:99:a2:61:b6:25:e8:dd:
                    fa:a8:61:62:8c:1e:ea:ca:ff:0c:65:a0:89:4f:84:
                    ba:03:cb:69:6e:47:02:d9:1b:81:26:ce:5a:f4:75:
                    f0:6e:b1:1b:10:5b:e8:a0:7b:3f:fd:51:14:02:77:
                    c5:e9:7a:dc:0d:ed:b0:d3:f5:a4:c9:22:08:dc:31:
                    14:e3:e4:86:0a:98:06:d8:b7:79:1f:68:30:8d:cf:
                    1d:3c:25:15:9e:41:9e:b8:ab:a0:8e:b5:4b:63:b9:
                    50:36:68:96:d3:a8:4e:e8:5e:ab:97:b0:d4:1b:14:
                    ea:f2:1f:f6:8a:c8:81:0e:3e:96:c6:6d:2d:e9:1e:
                    7d:ce:bd:97:69:5b:9d:0e:91:13:85:bd:03:44:92:
                    97:84:f3:2c:b4:34:0d:4b:ae:ed:60:f8:e1:4c:07:
                    b7:62:6e:62:96:50:a8:19:77:11:1d:bb:b4:7e:80:
                    6a:0c:2b:2a:45:5a:ff:0d:93:61:ae:a2:a0:ba:b9:
                    02:24:57:c0:d1:b5:bf:1a:a1:5e:8c:a5:c9:8d:bd:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:21:BD:72:81:35:49:3F:3A:DC:1E:18:DC:52:86:E0:E9:AC:55:48
            X509v3 Authority Key Identifier:
                keyid:32:28:EA:F9:E5:D2:43:0E:79:22:BA:E7:94:B6:98:C8:6A:8E:87:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mijq-eXSQw55IrrnlLaYyGqOh8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/Mijq-eXSQw55IrrnlLaYyGqOh8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/833ead-0351-4e01-8287-9657ae7529f0/1/Mijq-eXSQw55IrrnlLaYyGqOh8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ed:a1:2e:56:4a:8a:10:c3:a0:e5:5f:72:bc:8a:8d:b1:70:
         97:8f:04:7a:86:c9:cd:7f:b3:a2:1b:9a:d4:22:72:a2:ae:85:
         d1:40:6c:2d:96:18:9f:13:02:6e:6d:ab:4e:0c:2c:4a:b2:70:
         84:29:02:0e:82:ef:4d:c4:f1:b6:58:c0:80:5b:6f:8e:a1:2f:
         3f:c0:54:39:ff:37:1f:c3:2e:ca:34:1b:83:d9:05:25:71:07:
         f7:78:8a:3f:96:cb:4d:05:0d:4f:c3:f5:26:08:61:e0:e0:a8:
         4b:94:90:36:6a:77:d4:42:d1:65:87:4c:04:ed:20:d1:ce:a4:
         3f:80:45:f0:74:49:f0:5c:6f:2e:a0:bc:c7:3f:df:42:df:eb:
         f0:95:7e:30:02:0b:e7:ae:59:f9:d5:9c:4f:e7:a4:7b:39:88:
         a3:b4:6e:77:44:24:82:24:34:61:71:dc:70:be:f3:fd:65:55:
         27:2c:c1:7c:28:b4:ad:c3:64:ed:7d:f9:96:6a:4a:28:36:2b:
         3e:91:96:0d:f6:ea:86:81:9e:00:90:b8:41:a4:68:f8:00:bb:
         d1:53:53:86:22:a1:30:3b:ab:c8:b3:4c:22:6f:0c:50:a8:e1:
         af:29:56:d3:68:7d:37:0f:97:21:54:9b:79:f5:91:12:ef:43:
         c5:1c:31:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:07 2024 by rpki-client on console-fra.rpki-client.org