Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/U4fC0BCOE7IB8FBakCXK12tfUJg.mft
File:                     U4fC0BCOE7IB8FBakCXK12tfUJg.mft (raw, json)
Hash identifier:          0EHGirf3c94nMxsodVqNUi9Bt5jDWOmrl1wBc4YmJcM=
Subject key identifier:   6E:AE:0B:72:17:69:4C:58:42:FC:37:B8:6D:F1:50:44:25:DE:07:E8
Authority key identifier: 53:87:C2:D0:10:8E:13:B2:01:F0:50:5A:90:25:CA:D7:6B:5F:50:98
Certificate issuer:       /CN=5387c2d0108e13b201f0505a9025cad76b5f5098
Certificate serial:       0184E582DE2A780EC8E0D8605592E94BB6E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4fC0BCOE7IB8FBakCXK12tfUJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/U4fC0BCOE7IB8FBakCXK12tfUJg.mft
Manifest number:          05D2
Signing time:             Tue 06 Dec 2022 03:37:49 +0000
Manifest this update:     Tue 06 Dec 2022 03:37:49 +0000
Manifest next update:     Wed 07 Dec 2022 03:37:49 +0000
Files and hashes:         1: RYxpAycRmeibJz3LFEBJxzzA4NA.roa (hash: WC0Cf/WaSLkrzgz7QVO3f9YoFzMCPMZt5+KNHtcVpMQ=)
                          2: U4fC0BCOE7IB8FBakCXK12tfUJg.crl (hash: uo1rm1KBTWIYOcK0lGk2ZqtHY2RW8ldfB97mhIcq/j0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:84:e5:82:de:2a:78:0e:c8:e0:d8:60:55:92:e9:4b:b6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5387c2d0108e13b201f0505a9025cad76b5f5098
        Validity
            Not Before: Dec  6 03:37:49 2022 GMT
            Not After : Dec  7 03:37:49 2022 GMT
        Subject: CN=6eae0b7217694c5842fc37b86df1504425de07e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:13:d7:f5:d2:04:3f:ca:2d:6f:d3:d4:f9:58:
                    8d:dd:b1:3e:ea:d1:9c:89:35:a2:f2:a8:0a:74:3e:
                    c7:80:a0:1c:80:3b:1f:f3:c7:53:2b:4a:23:3d:8e:
                    39:58:a9:a7:64:4f:b7:4d:85:5b:48:c8:82:49:02:
                    39:64:53:ce:8f:ec:34:66:88:4b:3c:08:84:a3:51:
                    de:21:53:12:33:81:12:86:56:69:87:31:e4:25:95:
                    ca:b5:4d:63:77:60:c6:72:77:63:50:92:70:43:e0:
                    38:30:6f:9d:1b:71:d4:fd:39:f3:9e:b3:3e:56:bb:
                    e7:c7:86:8a:b7:19:8f:54:18:c5:8a:c0:da:93:c5:
                    a0:d3:bf:31:ba:76:a5:e2:ab:b4:99:70:d6:73:20:
                    21:9d:9e:60:09:08:2a:96:c0:2f:3c:ef:62:d8:54:
                    d2:55:f6:c6:91:15:02:06:53:5d:ff:84:91:08:5e:
                    25:be:1d:32:58:a4:ca:0b:8b:2b:29:02:53:91:41:
                    e1:5a:8a:bc:c2:9f:26:3b:77:27:90:3f:11:22:54:
                    ea:bd:26:a4:ff:ed:3b:9a:d8:c5:2f:02:44:68:39:
                    51:73:6e:b3:96:38:29:f8:94:9c:c8:42:26:fd:f3:
                    ba:6a:73:52:ca:aa:e5:b5:d3:b4:21:72:19:0f:ba:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AE:0B:72:17:69:4C:58:42:FC:37:B8:6D:F1:50:44:25:DE:07:E8
            X509v3 Authority Key Identifier:
                keyid:53:87:C2:D0:10:8E:13:B2:01:F0:50:5A:90:25:CA:D7:6B:5F:50:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4fC0BCOE7IB8FBakCXK12tfUJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/U4fC0BCOE7IB8FBakCXK12tfUJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b3e5e9-5b65-4461-be96-368af02cf775/1/U4fC0BCOE7IB8FBakCXK12tfUJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:38:c7:5f:29:88:05:81:e3:78:cc:41:ce:ff:80:be:d8:c6:
         59:4d:ac:ac:55:2a:51:41:24:3b:97:4f:f7:d7:00:ea:49:e6:
         6a:1f:21:fc:29:20:5c:41:b9:27:a0:c4:39:66:b6:d2:7b:53:
         e2:a0:ba:45:a9:6d:83:8e:44:53:96:fd:02:32:28:cd:09:89:
         99:fd:48:e9:c7:bd:59:6f:49:3b:4a:ec:25:39:a9:5e:15:2c:
         52:da:44:f2:3e:02:78:f6:02:34:16:3a:8b:6f:42:54:1a:a1:
         e6:c3:6f:fb:de:01:37:18:f6:a8:64:05:fe:77:af:e8:98:ff:
         12:06:b2:96:62:1c:60:f2:32:76:3a:9a:2e:7b:17:14:4e:a8:
         fc:40:d1:40:d1:c0:26:56:cf:0c:d6:80:ea:51:95:58:a9:80:
         29:4d:a1:d7:a3:7b:c8:d5:4f:59:41:3f:6b:39:8c:b6:19:46:
         b1:72:fe:b3:42:dd:e5:92:1c:76:13:0b:98:e2:1f:08:e4:a9:
         9a:fa:de:fe:88:d4:06:24:ac:2c:a4:b0:69:f5:75:39:f4:ee:
         c0:b9:38:af:2d:1e:fc:e2:a5:ba:62:49:4b:06:3b:e3:38:0e:
         c2:68:b6:5b:52:65:ce:28:64:a8:0c:cc:03:33:f6:64:24:bb:
         d1:f4:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:40 2024 by rpki-client on console-ams.rpki-client.org