Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/FkxwThoBNkSvdIUMC79bb2y3GuA.mft
File:                     FkxwThoBNkSvdIUMC79bb2y3GuA.mft (raw, json)
Hash identifier:          kV1Lxlj0MLByMjKyzkdlUEymTaebkFbc6akp68RvwXw=
Subject key identifier:   55:83:8E:9A:B0:CF:A1:10:38:0F:28:A9:F6:02:DD:27:1D:C0:06:1B
Authority key identifier: 16:4C:70:4E:1A:01:36:44:AF:74:85:0C:0B:BF:5B:6F:6C:B7:1A:E0
Certificate issuer:       /CN=164c704e1a013644af74850c0bbf5b6f6cb71ae0
Certificate serial:       018B9320A99F6F8FD6AE8711041C48DF3332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FkxwThoBNkSvdIUMC79bb2y3GuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/FkxwThoBNkSvdIUMC79bb2y3GuA.mft
Manifest number:          0924
Signing time:             Fri 03 Nov 2023 03:01:13 +0000
Manifest this update:     Fri 03 Nov 2023 03:01:13 +0000
Manifest next update:     Sat 04 Nov 2023 03:01:13 +0000
Files and hashes:         1: FkxwThoBNkSvdIUMC79bb2y3GuA.crl (hash: Su8gpfFXYxhKREST8+5e6h1uB0BWZ3PVdMLZHfk9ju0=)
                          2: L7KQbKw2rUYCNpNHGiTd_i0boHE.roa (hash: m+DRvpa1cb9oNQQX++vX59Oap1bk4Hmhxwgh8ODSO+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:20:a9:9f:6f:8f:d6:ae:87:11:04:1c:48:df:33:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=164c704e1a013644af74850c0bbf5b6f6cb71ae0
        Validity
            Not Before: Nov  3 03:01:13 2023 GMT
            Not After : Nov  4 03:01:13 2023 GMT
        Subject: CN=55838e9ab0cfa110380f28a9f602dd271dc0061b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:af:df:cd:b2:0a:de:28:f4:86:a3:7f:16:
                    1a:53:02:b8:e4:c9:5e:a7:e3:d9:da:79:eb:a5:6a:
                    d2:28:b9:2f:da:3c:62:1b:aa:20:d9:cd:85:87:2d:
                    28:63:d1:07:19:9d:72:41:2c:75:ac:72:93:02:50:
                    5e:13:e7:8f:d6:dd:52:2e:10:8c:c4:7c:c4:39:67:
                    8e:3e:f8:72:d0:ca:d9:63:88:0d:57:4a:bb:6e:b8:
                    04:eb:d2:ee:d4:86:bc:bb:74:18:cf:42:0d:67:03:
                    73:de:54:ec:37:c5:27:7d:98:ff:58:d0:ac:bd:c4:
                    2a:d8:b3:2c:2c:41:43:80:da:5e:68:ae:6e:8a:7d:
                    c4:bc:ce:4a:e3:4b:e8:3e:a7:b5:2a:26:2f:a0:e0:
                    b3:71:43:e4:61:d1:76:46:3d:a9:5a:84:a8:e6:06:
                    3b:e0:49:37:95:dd:dc:bd:d8:90:e5:d9:de:d9:13:
                    d2:90:a7:aa:54:e6:be:0b:f0:05:e5:b9:94:0d:01:
                    66:85:33:0f:b9:c5:d8:aa:f3:02:1a:28:78:2a:3f:
                    be:8d:1d:a1:6b:b1:b9:56:16:4d:83:7f:41:39:d3:
                    1d:ae:7f:ed:42:dd:2a:c7:0c:af:e8:b9:81:39:80:
                    af:ab:0a:b9:0e:e9:1e:26:16:99:db:5f:3d:1c:f3:
                    85:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:83:8E:9A:B0:CF:A1:10:38:0F:28:A9:F6:02:DD:27:1D:C0:06:1B
            X509v3 Authority Key Identifier:
                keyid:16:4C:70:4E:1A:01:36:44:AF:74:85:0C:0B:BF:5B:6F:6C:B7:1A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkxwThoBNkSvdIUMC79bb2y3GuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/FkxwThoBNkSvdIUMC79bb2y3GuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/959e6c-8dc6-47a8-9171-ba09a5945c8e/1/FkxwThoBNkSvdIUMC79bb2y3GuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fd:45:c9:db:cb:a4:d1:03:6b:63:29:37:cb:be:4c:38:47:
         ab:c2:c7:5f:c1:b7:97:93:a3:15:5b:ee:d0:45:22:53:36:73:
         d7:43:a5:35:3a:40:e2:f2:18:d6:42:a7:d2:df:13:35:11:28:
         f4:c7:47:80:9f:e9:7b:bd:2d:77:40:04:2c:7c:5b:d2:d8:e3:
         6e:23:30:b9:8f:e4:70:81:d1:a4:bd:ae:2f:4a:ff:72:17:df:
         44:2e:2a:2a:2e:f1:f7:f3:e7:08:2d:25:63:9e:70:ea:23:35:
         90:bc:4d:93:41:3e:ce:08:a8:8a:8d:ab:9d:76:2a:3f:b6:2a:
         69:08:fe:73:1e:97:83:77:2a:fb:ac:f5:f1:50:ef:07:d0:dd:
         43:4d:cf:d4:a6:b7:97:0f:6e:d0:04:01:a1:8b:88:f3:79:ce:
         65:b7:5d:8c:2c:0d:6d:d8:02:cf:16:7c:ab:8c:55:2b:48:03:
         5b:6c:a3:3d:e7:04:82:a2:8a:06:49:65:50:af:f2:3a:f5:86:
         af:a8:de:c0:f2:c9:6c:07:31:ef:c4:b3:16:01:18:19:42:64:
         73:5e:65:b2:91:f1:8c:19:32:00:8d:ca:76:51:8d:10:88:8d:
         4e:4d:c5:61:0c:58:3c:a4:0b:52:38:40:a4:00:e8:34:82:8d:
         af:39:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 09:32:02 2023 by rpki-client on console-fra.rpki-client.org