Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/pI14rYm7b-aK8r2xFonELNsPp_M.mft
File:                     pI14rYm7b-aK8r2xFonELNsPp_M.mft (raw, json)
Hash identifier:          kAUDDBSWPZW9oRJoVTErNH+hh5IAXOxvbjsUf1iwPL0=
Subject key identifier:   B9:0B:DA:81:9E:43:3D:C0:FF:B6:1A:C1:A7:EA:CA:3E:6D:4E:CE:15
Authority key identifier: A4:8D:78:AD:89:BB:6F:E6:8A:F2:BD:B1:16:89:C4:2C:DB:0F:A7:F3
Certificate issuer:       /CN=a48d78ad89bb6fe68af2bdb11689c42cdb0fa7f3
Certificate serial:       018CC8E021B8E74725556F2C13AE1E9875A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pI14rYm7b-aK8r2xFonELNsPp_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/pI14rYm7b-aK8r2xFonELNsPp_M.mft
Manifest number:          100B
Signing time:             Tue 02 Jan 2024 06:33:00 +0000
Manifest this update:     Tue 02 Jan 2024 06:33:00 +0000
Manifest next update:     Wed 03 Jan 2024 06:33:00 +0000
Files and hashes:         1: pI14rYm7b-aK8r2xFonELNsPp_M.crl (hash: xh+iXiJ4IZTf9jSYSEZZi7WCO6jYUVkkiQz4owYA+yo=)
                          2: tYSW2EfwR6uq-Jhqhzlnpe4wR2s.roa (hash: 6TJ8cGKx3GlAsi11xoNTudsA652tDIfNd4Pc2QQz3wM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:e0:21:b8:e7:47:25:55:6f:2c:13:ae:1e:98:75:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48d78ad89bb6fe68af2bdb11689c42cdb0fa7f3
        Validity
            Not Before: Jan  2 06:33:00 2024 GMT
            Not After : Jan  3 06:33:00 2024 GMT
        Subject: CN=b90bda819e433dc0ffb61ac1a7eaca3e6d4ece15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:2e:45:80:5e:8d:cd:6b:32:f3:18:36:9d:
                    0d:fc:0f:e1:a8:c5:9c:be:8f:8e:23:81:94:e3:e9:
                    dd:27:7e:30:23:4b:87:37:98:44:55:4f:31:bd:28:
                    a1:5c:6f:fb:6e:6b:f8:0c:25:77:e6:34:28:b1:6c:
                    ec:c6:c4:a3:f6:04:c9:fe:90:58:b6:ed:be:5d:81:
                    6d:f0:88:2b:b7:82:28:c1:4a:1a:0a:29:e2:b6:e2:
                    69:d9:0b:60:fa:74:6e:81:15:49:a8:b4:f9:80:85:
                    55:2f:8c:54:d7:23:96:36:b6:ae:bd:d8:53:10:44:
                    27:f1:af:e1:bb:87:28:a0:82:fa:87:2d:36:27:65:
                    fe:1f:8c:f7:a7:99:9a:19:ad:bc:1d:8e:9a:53:be:
                    6f:54:67:63:ec:87:b1:ed:23:06:74:c1:27:6d:07:
                    0a:25:09:c0:e3:79:66:98:95:5c:20:c2:6a:dd:b5:
                    d1:66:97:63:bb:b5:cd:91:05:e0:17:84:00:83:9d:
                    9b:7a:ef:2e:98:51:7a:46:e9:37:cf:f8:07:9a:d0:
                    6a:fa:dd:f7:f8:45:8c:ac:01:db:a7:69:a4:6f:98:
                    7e:b1:ce:8a:60:dc:bf:be:df:f1:cd:ed:ee:c0:8f:
                    2b:6f:31:df:50:e1:12:d0:93:82:e0:fb:7e:fe:12:
                    d6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0B:DA:81:9E:43:3D:C0:FF:B6:1A:C1:A7:EA:CA:3E:6D:4E:CE:15
            X509v3 Authority Key Identifier:
                keyid:A4:8D:78:AD:89:BB:6F:E6:8A:F2:BD:B1:16:89:C4:2C:DB:0F:A7:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pI14rYm7b-aK8r2xFonELNsPp_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/pI14rYm7b-aK8r2xFonELNsPp_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/6bc9f1-5fdc-431f-baac-72a4e16c19f0/1/pI14rYm7b-aK8r2xFonELNsPp_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e0:a9:8f:81:9d:af:d4:96:52:f3:d3:25:55:c4:ef:3a:6d:
         22:8c:78:28:6a:96:c2:6f:f7:8a:7f:44:5e:b6:4f:7e:65:1b:
         b7:6c:82:50:b2:4b:7f:13:9d:89:76:15:c0:4f:02:95:10:d1:
         a7:84:a3:f8:81:3c:54:b1:a2:4e:92:78:08:d9:39:e8:85:10:
         8b:85:a0:a8:64:de:dc:62:f7:20:96:ad:15:a2:3a:38:06:80:
         bd:bb:4a:84:27:20:41:19:f2:de:5a:b2:b0:87:fb:54:29:46:
         ca:b2:c5:01:49:68:55:f0:8a:3b:b8:6a:3d:b9:64:26:88:85:
         d8:ce:d2:a5:d2:38:7b:31:ac:f0:fd:5c:21:33:81:ac:8c:a9:
         52:56:af:b7:3a:99:30:62:50:56:6c:c0:59:d6:79:fa:dc:6a:
         f8:79:f2:a9:0c:13:64:ff:cd:98:90:b9:d6:54:7e:cf:b9:cf:
         af:93:76:6c:f6:68:f5:80:46:b3:80:a3:b2:64:99:79:40:fc:
         f7:04:f2:ef:13:9a:0b:d6:a9:46:04:bd:0f:cc:5b:5a:8e:3f:
         b4:9f:f1:c4:92:1f:6e:99:24:5d:19:eb:90:87:ff:15:28:ef:
         a4:31:ac:00:6a:c2:43:49:e9:6a:20:91:ae:de:12:d4:79:56:
         f0:c6:f7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:55 2024 by rpki-client on console-fra.rpki-client.org