Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/sX2Wkgjhny_LnQzgvo9ymVCB1rc.mft
File:                     sX2Wkgjhny_LnQzgvo9ymVCB1rc.mft (raw, json)
Hash identifier:          1f5BUEwK+zsg6akMFRLm5dBwv2IxrE0Rvqp74UF8vK0=
Subject key identifier:   4D:F9:28:84:34:79:AF:8C:B4:2B:89:1A:8E:ED:31:56:A8:C9:80:2E
Authority key identifier: B1:7D:96:92:08:E1:9F:2F:CB:9D:0C:E0:BE:8F:72:99:50:81:D6:B7
Certificate issuer:       /CN=b17d969208e19f2fcb9d0ce0be8f72995081d6b7
Certificate serial:       018BEFD29E5C2E0BE8B788485BD9EB6779AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sX2Wkgjhny_LnQzgvo9ymVCB1rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/sX2Wkgjhny_LnQzgvo9ymVCB1rc.mft
Manifest number:          08C6
Signing time:             Tue 21 Nov 2023 03:00:39 +0000
Manifest this update:     Tue 21 Nov 2023 03:00:39 +0000
Manifest next update:     Wed 22 Nov 2023 03:00:39 +0000
Files and hashes:         1: LurlPP9CqIb-GTBCOQulsRmsrxo.roa (hash: pyEwtmZ3Mg91puwDM8OApbVtTLOKid6zokASDPPIIeE=)
                          2: dC_SVH25idqutIbLIZNkW6czqHU.roa (hash: 9Mu85+e8f/QGGIlA+OHY5iElXCixblFhqRYbDBSSZ7g=)
                          3: sX2Wkgjhny_LnQzgvo9ymVCB1rc.crl (hash: EJ7hfPi9nP3cDDDnWwI/UUrPUuYZ6wqtLIyW36VaoBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ef:d2:9e:5c:2e:0b:e8:b7:88:48:5b:d9:eb:67:79:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b17d969208e19f2fcb9d0ce0be8f72995081d6b7
        Validity
            Not Before: Nov 21 03:00:39 2023 GMT
            Not After : Nov 22 03:00:39 2023 GMT
        Subject: CN=4df928843479af8cb42b891a8eed3156a8c9802e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:91:eb:71:79:e2:d6:ce:c2:40:35:18:3c:
                    39:f2:b5:c7:f3:e5:00:04:bf:46:7e:2f:0f:aa:59:
                    11:11:e7:76:7d:74:84:75:2d:44:69:23:9d:b8:a1:
                    ca:a9:c9:00:73:0b:b7:f5:fb:d9:9d:b1:97:99:92:
                    1d:ac:59:58:14:29:e9:1e:d2:d9:cf:16:65:79:f9:
                    2c:9b:f0:a4:bf:ae:ca:08:88:6d:93:ca:64:9c:0c:
                    88:64:fb:90:be:c2:7d:ea:4e:af:8c:92:48:93:f5:
                    e7:17:24:08:20:89:ef:16:e4:a8:d1:96:ae:cc:23:
                    7f:ae:f2:61:ee:ec:a5:16:38:c4:2a:8f:fa:c8:52:
                    bf:00:9a:9b:7c:35:f4:22:02:b2:d4:40:ee:4a:a5:
                    21:a8:f6:27:9c:40:fd:d6:86:c4:78:62:54:3d:1a:
                    0b:37:2e:0f:38:d7:ce:04:e9:9c:bb:47:8f:fb:58:
                    48:80:a7:b9:77:a3:f3:87:96:b1:4f:3f:5d:7a:8b:
                    21:ff:19:0d:99:46:4b:26:35:b8:67:7d:c1:25:eb:
                    bd:ad:ab:57:6d:db:f9:5f:05:df:90:2c:1f:ea:19:
                    8f:5f:80:73:8d:0c:da:57:bb:b1:94:40:56:3d:00:
                    b8:30:0a:88:f1:cd:93:12:e6:7b:c5:d4:68:db:b5:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F9:28:84:34:79:AF:8C:B4:2B:89:1A:8E:ED:31:56:A8:C9:80:2E
            X509v3 Authority Key Identifier:
                keyid:B1:7D:96:92:08:E1:9F:2F:CB:9D:0C:E0:BE:8F:72:99:50:81:D6:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sX2Wkgjhny_LnQzgvo9ymVCB1rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/sX2Wkgjhny_LnQzgvo9ymVCB1rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/0bd823-a81f-4824-9f5d-fcca19c3f635/1/sX2Wkgjhny_LnQzgvo9ymVCB1rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:77:8b:5b:0d:bf:90:61:ae:3d:9a:04:c8:23:91:ba:59:14:
         54:ad:c9:28:fa:0f:51:75:62:ab:ee:0f:73:8b:0e:8f:8a:f2:
         ad:fd:0e:06:90:c7:35:d8:00:ea:8d:49:ca:65:3f:11:57:a1:
         a7:c1:34:9f:0a:96:32:8f:85:b9:8a:00:92:53:35:7d:40:aa:
         a1:2c:aa:e2:8a:63:39:2f:09:58:aa:98:05:b2:bf:64:09:fb:
         a2:1e:de:1f:9b:15:57:fc:41:47:8d:ce:d5:34:15:5a:38:6f:
         c4:08:42:e0:e8:53:cc:ad:cd:2a:2f:9c:90:1b:f2:ea:42:f1:
         48:e1:1b:fe:87:64:73:af:59:18:80:e2:be:91:15:db:e3:66:
         6a:23:12:b9:c1:88:f5:b2:c0:64:b6:4b:c4:17:52:aa:dc:5b:
         01:d2:a5:cf:a9:ec:62:e1:5f:f6:a2:6b:61:09:d6:88:3d:bc:
         ad:da:5d:4f:d1:dd:22:79:1c:f9:69:0a:20:e2:ed:81:88:ea:
         b3:80:31:66:3f:19:4d:57:55:90:8a:13:99:63:7a:c2:5f:41:
         d3:2d:a1:fe:64:89:8a:f4:9a:14:6f:90:67:9c:11:c5:84:84:
         c8:9e:64:f0:63:16:41:1b:54:fe:82:4c:70:b3:f7:be:b4:40:
         99:6a:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:28 2024 by rpki-client on console-fra.rpki-client.org