Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/NvIPLddxzYov0RHf-VFDlQKU6Vc.mft
File:                     NvIPLddxzYov0RHf-VFDlQKU6Vc.mft (raw, json)
Hash identifier:          xeahZBzld2M7xMu8Iisn28ElpqQsBDOi3mmwpjU7IYI=
Subject key identifier:   F9:53:FF:6B:12:C7:B8:83:15:66:E1:05:5B:82:58:D7:A9:50:52:6E
Authority key identifier: 36:F2:0F:2D:D7:71:CD:8A:2F:D1:11:DF:F9:51:43:95:02:94:E9:57
Certificate issuer:       /CN=36f20f2dd771cd8a2fd111dff95143950294e957
Certificate serial:       018315BD33B3CB81E923759F7198E25C34E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvIPLddxzYov0RHf-VFDlQKU6Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/NvIPLddxzYov0RHf-VFDlQKU6Vc.mft
Manifest number:          092A
Signing time:             Wed 07 Sep 2022 02:17:43 +0000
Manifest this update:     Wed 07 Sep 2022 02:17:43 +0000
Manifest next update:     Thu 08 Sep 2022 02:17:43 +0000
Files and hashes:         1: NvIPLddxzYov0RHf-VFDlQKU6Vc.crl (hash: MiRURxJQcGZRXG/xRxQt7X7YdocQbb0QtM1hCS8iZyE=)
                          2: dHXQCy7lwpRQ1dcXCUQjckU1_2A.roa (hash: FFKOKYc/DvTuPEf8TX/28Wsf3outPIXy+4ru+AdUpc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:83:15:bd:33:b3:cb:81:e9:23:75:9f:71:98:e2:5c:34:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f20f2dd771cd8a2fd111dff95143950294e957
        Validity
            Not Before: Sep  7 02:17:43 2022 GMT
            Not After : Sep  8 02:17:43 2022 GMT
        Subject: CN=f953ff6b12c7b8831566e1055b8258d7a950526e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:63:41:29:26:ed:b3:52:68:27:77:87:e5:
                    f9:79:32:cc:48:9c:bb:e8:ba:f3:6d:0c:4f:27:77:
                    7e:30:88:02:c7:e7:3b:4e:8c:23:c5:29:5d:b4:85:
                    81:f6:15:22:58:f5:aa:33:5f:db:17:a9:dd:c3:db:
                    0f:16:33:fb:a4:66:47:19:04:ee:8c:ae:04:52:68:
                    7a:f2:9d:9c:75:34:37:bd:54:a4:27:c6:40:d2:a6:
                    3c:30:22:d4:02:da:b6:f9:7d:31:ff:e1:ca:02:64:
                    f1:68:46:9b:d0:03:34:45:79:28:94:e2:32:cd:20:
                    10:da:51:90:23:be:52:bd:f0:6d:ec:9d:0d:53:8f:
                    4c:c7:61:dc:34:92:8b:3a:57:56:a4:13:35:8a:8c:
                    d7:85:c0:0c:26:5a:91:cd:ed:f3:3e:0f:95:28:6c:
                    53:42:57:8e:d3:08:8a:a9:83:1d:45:e3:e7:b7:15:
                    df:3e:4f:0c:ab:c3:6b:89:5f:ef:22:c0:17:d8:b3:
                    33:d9:84:7b:54:17:3d:d0:eb:a8:b7:e0:ed:c7:84:
                    97:2f:23:7f:2b:c2:ab:40:1b:17:61:07:b8:81:df:
                    20:09:98:45:76:18:60:8c:1c:7c:5d:88:44:f2:cd:
                    bf:c3:a0:eb:07:83:28:c9:a0:fb:b4:a2:6c:ad:6c:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:53:FF:6B:12:C7:B8:83:15:66:E1:05:5B:82:58:D7:A9:50:52:6E
            X509v3 Authority Key Identifier:
                keyid:36:F2:0F:2D:D7:71:CD:8A:2F:D1:11:DF:F9:51:43:95:02:94:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvIPLddxzYov0RHf-VFDlQKU6Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/NvIPLddxzYov0RHf-VFDlQKU6Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/89e159-dcb8-4c14-9d03-3dd42c163f25/1/NvIPLddxzYov0RHf-VFDlQKU6Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:61:30:79:fc:fe:3c:51:62:b6:f8:2a:d4:4e:eb:c5:f5:
         68:b8:69:9d:e5:47:ec:68:79:3d:39:81:6c:09:98:1a:c7:c2:
         44:1d:6e:dd:98:1b:a6:c5:af:b3:ac:85:b3:31:a6:ce:c7:e0:
         ba:1c:0c:0a:73:38:f1:ea:5b:cb:bc:40:2c:71:50:2d:20:7f:
         b8:81:16:39:d2:d7:a9:9f:2b:43:10:e3:1e:e5:9e:d3:d9:e2:
         44:c6:91:4f:1e:ee:f2:d0:b2:c7:7f:2a:ea:19:b1:e5:16:6d:
         98:70:51:8b:02:9c:79:77:de:d7:04:ba:48:a7:51:4f:83:0b:
         61:20:32:3d:9e:59:2f:40:59:31:d7:46:45:6a:06:c7:84:9d:
         d2:83:1c:44:ef:77:57:2b:38:70:0e:b7:ba:bc:17:3c:90:67:
         4a:06:39:d8:8a:88:3f:40:6f:0b:d5:43:54:bd:78:4e:ea:3e:
         23:60:6c:52:b7:14:2e:fb:b9:c3:78:2d:45:d7:19:5d:66:49:
         36:a3:bc:cf:2f:04:51:de:d2:28:70:7e:17:4e:39:d5:d8:9b:
         32:60:7d:cc:0d:4a:da:6b:19:b6:53:ef:3b:ea:8f:bd:b1:f5:
         9c:ba:21:1b:6c:50:63:ef:9f:69:84:02:71:4f:4b:1b:80:8d:
         bc:a4:28:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:04 2024 by rpki-client on console-fra.rpki-client.org