Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/r_1leKfLxohASaDr62XAOcWOJYM.mft
File:                     r_1leKfLxohASaDr62XAOcWOJYM.mft (raw, json)
Hash identifier:          OOQIayDW0MURJZruSw88uxGyh96xmF/rXn21lm7Kvjg=
Subject key identifier:   E9:61:D5:FE:BC:60:F8:4F:8A:D6:83:9A:A6:EC:F1:18:81:28:29:54
Authority key identifier: AF:FD:65:78:A7:CB:C6:88:40:49:A0:EB:EB:65:C0:39:C5:8E:25:83
Certificate issuer:       /CN=affd6578a7cbc6884049a0ebeb65c039c58e2583
Certificate serial:       018692BD044B21E2290C59A0EE1487B94BD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_1leKfLxohASaDr62XAOcWOJYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/r_1leKfLxohASaDr62XAOcWOJYM.mft
Manifest number:          0766
Signing time:             Mon 27 Feb 2023 11:58:26 +0000
Manifest this update:     Mon 27 Feb 2023 11:58:26 +0000
Manifest next update:     Tue 28 Feb 2023 11:58:26 +0000
Files and hashes:         1: qISidSbvT14F6ra-3VpZ9gIrALg.roa (hash: Mj7f2jXi9wTNRo4F+tejQ+J0V3kMC8WIP8gowfEIo0Y=)
                          2: r_1leKfLxohASaDr62XAOcWOJYM.crl (hash: rSSr8TqaICLVgYvjv6IlVzpC60CowJaTHBaJhMltriU=)
                          3: xcaCPjfxNE-bMIhBma4fyXMlaZQ.roa (hash: yYdX1ql8PPor9dkDIewsgeRsEwHeTlXSD5FCyiIiPbg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:bd:04:4b:21:e2:29:0c:59:a0:ee:14:87:b9:4b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=affd6578a7cbc6884049a0ebeb65c039c58e2583
        Validity
            Not Before: Feb 27 11:58:26 2023 GMT
            Not After : Feb 28 11:58:26 2023 GMT
        Subject: CN=e961d5febc60f84f8ad6839aa6ecf11881282954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:a5:62:0c:15:26:b2:fb:5a:22:20:dc:d9:
                    f5:c7:9a:59:99:47:bb:78:55:3b:6b:ef:7c:3d:3c:
                    20:26:0b:cf:15:b2:a9:ee:86:60:7f:fa:2e:10:a9:
                    bb:76:b3:3b:9f:19:5e:e9:ef:87:62:6b:9d:12:8c:
                    0b:21:32:8a:eb:a8:5e:57:32:6e:6f:7a:20:fc:44:
                    d6:2e:2c:37:78:12:4c:03:99:d6:56:39:0b:bb:03:
                    9b:e3:1b:4a:40:34:d5:de:66:3a:af:76:34:87:cc:
                    27:d6:20:b2:aa:ec:d8:45:95:6d:98:53:97:7f:32:
                    47:65:0c:c8:47:29:36:64:c1:c3:08:4c:ac:ac:10:
                    93:61:fd:fa:f8:f9:3a:a3:c2:d9:c8:b0:44:74:d8:
                    56:85:9a:be:cb:39:d4:ca:5d:7d:44:4d:6a:94:0d:
                    83:14:39:31:53:5a:c8:0a:68:39:6f:17:e8:37:95:
                    80:ae:b8:8f:21:8d:87:c9:45:04:07:c8:c4:91:c2:
                    3b:f2:7f:2c:65:6e:71:59:8e:51:20:42:1c:89:6d:
                    2a:a5:b4:15:00:6f:84:28:dd:c6:d9:a9:fa:31:ed:
                    cf:07:49:c1:c4:4c:8b:1f:ca:2b:7f:61:eb:74:6e:
                    8e:4e:d5:7e:f7:ac:4c:4f:56:48:1d:f3:0b:9d:c7:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:61:D5:FE:BC:60:F8:4F:8A:D6:83:9A:A6:EC:F1:18:81:28:29:54
            X509v3 Authority Key Identifier:
                keyid:AF:FD:65:78:A7:CB:C6:88:40:49:A0:EB:EB:65:C0:39:C5:8E:25:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_1leKfLxohASaDr62XAOcWOJYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/r_1leKfLxohASaDr62XAOcWOJYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3d01dc-35f5-48d5-a489-e5c1ca2c6cfb/1/r_1leKfLxohASaDr62XAOcWOJYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3d:cc:28:4d:95:67:26:af:23:ac:e7:73:04:18:50:17:9a:
         67:7a:ba:57:80:06:37:5c:81:ab:ee:de:a5:c9:2b:38:2b:77:
         af:aa:2b:15:06:8e:ee:0a:47:76:b5:d6:e9:61:02:fd:33:3d:
         09:ac:b7:7d:52:de:00:f9:79:2d:64:37:b0:1c:be:63:1a:1d:
         f1:0e:f7:04:e7:40:df:ec:51:ca:0d:37:22:e9:ed:b1:6f:97:
         5e:7d:71:ba:2b:c6:34:48:79:b0:2b:30:78:d6:bd:7d:3b:e3:
         1e:18:e9:2f:3a:00:8b:39:9b:0d:59:ee:91:6a:af:b4:7f:4d:
         0b:92:09:33:0a:6c:65:03:db:94:7b:94:5f:e9:5e:80:4b:d8:
         9e:f8:90:70:06:da:1b:4c:66:c8:65:c1:1b:20:8f:d3:f4:6e:
         9b:16:64:6d:67:0d:d4:1e:8a:71:9d:56:a9:d6:b1:00:f0:30:
         26:c9:98:68:7d:06:ed:8b:f0:c0:95:f6:ed:2c:49:9a:4e:92:
         23:e9:15:71:51:e1:b5:b2:03:01:6f:40:ef:28:be:97:ac:53:
         14:81:5e:9b:b0:d2:c3:78:2c:07:d1:db:f4:92:1b:47:5f:0b:
         0f:29:75:a9:e3:36:9d:6c:bd:64:9d:72:66:2e:d0:3c:50:cc:
         4a:5f:96:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:51 2024 by rpki-client on console-ams.rpki-client.org