Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/oVg32zVpA0cqiu3dbeZQ7UptsgY.mft
File:                     oVg32zVpA0cqiu3dbeZQ7UptsgY.mft (raw, json)
Hash identifier:          3tQbPhgWeoswFHOELOLAMamQqOFXWdesvGRyDP5rApo=
Subject key identifier:   DA:41:EC:E4:1D:48:51:86:55:0B:D6:32:FB:3C:6D:57:D5:67:8E:B4
Authority key identifier: A1:58:37:DB:35:69:03:47:2A:8A:ED:DD:6D:E6:50:ED:4A:6D:B2:06
Certificate issuer:       /CN=a15837db356903472a8aeddd6de650ed4a6db206
Certificate serial:       018CCDE9BF27B6FE2F09817DC89135429464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oVg32zVpA0cqiu3dbeZQ7UptsgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/oVg32zVpA0cqiu3dbeZQ7UptsgY.mft
Manifest number:          0AE4
Signing time:             Wed 03 Jan 2024 06:01:37 +0000
Manifest this update:     Wed 03 Jan 2024 06:01:37 +0000
Manifest next update:     Thu 04 Jan 2024 06:01:37 +0000
Files and hashes:         1: oVg32zVpA0cqiu3dbeZQ7UptsgY.crl (hash: T/2PXWe4JVfUSFK0IQ9E1xo99F4JrR3V+T02JMN1L00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:cd:e9:bf:27:b6:fe:2f:09:81:7d:c8:91:35:42:94:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15837db356903472a8aeddd6de650ed4a6db206
        Validity
            Not Before: Jan  3 06:01:37 2024 GMT
            Not After : Jan  4 06:01:37 2024 GMT
        Subject: CN=da41ece41d485186550bd632fb3c6d57d5678eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cf:e5:19:18:7e:ae:04:46:85:17:53:83:18:
                    3a:72:ca:16:97:3e:08:c7:35:f4:87:47:d1:39:7a:
                    b6:d4:62:6a:35:bb:71:6c:96:5c:1b:95:6f:07:4d:
                    f3:f4:c5:0b:3d:ed:c7:8b:aa:fc:39:61:e5:9b:80:
                    e7:d1:10:6f:b2:fd:9f:f9:1b:62:f1:85:c4:cd:3d:
                    06:5d:dd:fd:ec:35:77:79:e5:99:f3:23:d4:5a:67:
                    6f:eb:fd:bb:08:a1:83:fd:2e:6a:33:13:e1:59:4d:
                    e8:f0:72:90:4a:53:07:8c:74:93:19:b0:27:45:d1:
                    a0:38:89:37:9e:69:d1:b6:60:13:e6:4d:0c:52:44:
                    07:a4:8a:c5:71:cd:05:ae:41:ee:0e:77:5e:f0:75:
                    4b:dc:91:a2:e7:79:fd:e0:bb:4f:39:9b:50:51:94:
                    b5:6c:2f:eb:b6:19:d0:67:a9:fd:66:6a:66:eb:0f:
                    f0:3d:e9:9b:6c:8f:f4:06:48:ad:35:42:04:12:fa:
                    a5:80:35:7c:f5:6d:eb:8c:a4:f8:4a:90:cc:2a:a2:
                    d2:da:88:74:74:51:0d:ca:6b:3c:85:6e:fd:1a:d8:
                    12:fc:5b:45:2b:38:98:43:09:1e:57:37:87:37:19:
                    6b:62:2e:15:5b:0e:8d:85:08:6b:b0:6f:ec:02:7c:
                    3f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:EC:E4:1D:48:51:86:55:0B:D6:32:FB:3C:6D:57:D5:67:8E:B4
            X509v3 Authority Key Identifier:
                keyid:A1:58:37:DB:35:69:03:47:2A:8A:ED:DD:6D:E6:50:ED:4A:6D:B2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVg32zVpA0cqiu3dbeZQ7UptsgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/oVg32zVpA0cqiu3dbeZQ7UptsgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/860b23-92d2-41b1-9889-18dc1ae0dae4/1/oVg32zVpA0cqiu3dbeZQ7UptsgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:27:68:7b:84:19:75:82:85:71:48:c7:9e:76:19:f6:24:
         4a:2c:be:b6:01:de:47:97:bf:ec:c2:b8:6a:a0:6b:65:7d:3c:
         9d:df:11:fb:7a:b0:ed:aa:08:79:7a:54:7b:96:75:b3:83:0f:
         5d:19:8b:78:94:4d:97:5a:73:c5:22:75:4d:33:01:05:b9:ba:
         fd:87:22:94:7c:1c:d3:5a:91:72:19:b1:63:36:24:75:27:88:
         0b:09:72:bd:3b:8f:6b:5b:b5:a0:b0:a3:d5:e9:3c:00:90:42:
         ac:bc:90:4f:68:e1:e8:88:27:f4:d2:53:fe:f4:e2:51:e5:98:
         d6:54:b7:e1:37:71:95:4f:d9:e6:9c:9a:83:22:dd:3c:1b:b7:
         86:d6:d5:e3:12:c9:bc:1a:a2:89:e5:67:4e:2e:fb:dc:95:d4:
         64:e7:d2:33:1c:00:dd:bb:d8:18:53:09:cf:d9:4a:c4:7d:ef:
         1d:6d:75:50:3f:67:36:84:6c:20:37:31:3c:97:2e:7a:77:05:
         3f:b8:32:f5:0c:3b:25:ac:27:fd:0c:9d:78:9a:e4:19:7a:20:
         f4:e2:d7:a4:c1:6b:db:f9:43:53:fb:d7:7b:0a:ae:c0:0f:2a:
         61:00:91:07:d1:18:a1:23:01:9e:96:7f:b6:20:97:ad:27:87:
         b1:43:d9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:41 2024 by rpki-client on console-fra.rpki-client.org