Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.mft
File:                     XVUmDOvypzyhRwnZbSSl_zvLXcQ.mft (raw, json)
Hash identifier:          /Ih/DITwu64+z8cyL7vw9/ZVqCnQKMFzay22mjZ8iMw=
Subject key identifier:   A3:57:12:3D:F2:51:C8:08:FF:66:29:B9:08:9A:D5:B1:BE:44:2B:B0
Authority key identifier: 5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4
Certificate issuer:       /CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
Certificate serial:       018C0EEFFECA2156514D6975FC5433AE4B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.mft
Manifest number:          0FC0
Signing time:             Mon 27 Nov 2023 04:00:58 +0000
Manifest this update:     Mon 27 Nov 2023 04:00:58 +0000
Manifest next update:     Tue 28 Nov 2023 04:00:58 +0000
Files and hashes:         1: 2MzQERE_Max3U2C0o9YI9tMOeUY.roa (hash: SBc3WldKiGc5gzo/WuKgpscCkxv0oLMvitWB+r6G1Qk=)
                          2: 4d6OUoY5ncr53Sg8usSTNf_3F3w.roa (hash: goB43kRWNLYRVMiyXm1VYAossjmBSGY1oHTEMOOQZCo=)
                          3: NrE71IuktabMeqGn_y1NIBXEszA.roa (hash: DEHDrENYtuWH/rim6w9RJlA53YBgKh006wNZnv4O94A=)
                          4: TVGZRY6T5KwHmKP1t_4Wrnoy12k.roa (hash: M1G5zJV8ifEJHHcJ0Qff5bcDPjiEX9+4bGHH24aae8Y=)
                          5: WoBdHSpCRwmcHHY12kBUPBXHzTA.roa (hash: HKdpN1wdZbvOixAO2u4OxBD5p1in7ALle9an7Jhj/oo=)
                          6: XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl (hash: n52TL3EmldmKIeZDjFuN4OduRwvgEY75IBJ7PosJ8qk=)
                          7: aAebUG7kOfzglGb6fPeEVxm-AsU.roa (hash: naT1ZvBHLdEGyxYz7ngmZAN10FWIAUcaJltmEpxY/Bg=)
                          8: pjHAaJ4H2TUMrZpMgV8JIi8HhRI.roa (hash: QfEfi3cBINOmUTY1AwdZ00OUuPF0ZBMXikF/heBH8sk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:0e:ef:fe:ca:21:56:51:4d:69:75:fc:54:33:ae:4b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d55260cebf2a73ca14709d96d24a5ff3bcb5dc4
        Validity
            Not Before: Nov 27 04:00:58 2023 GMT
            Not After : Nov 28 04:00:58 2023 GMT
        Subject: CN=a357123df251c808ff6629b9089ad5b1be442bb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c7:f0:0e:a6:2e:a7:b5:1f:ed:e3:df:98:bf:
                    29:be:f5:c1:d4:5a:e9:55:59:f1:52:02:95:b8:4b:
                    01:37:14:85:ca:47:39:c8:64:57:2a:39:00:e1:d5:
                    8e:f8:da:f6:ea:74:b6:7c:99:00:0b:d2:de:62:34:
                    a2:1c:d0:4e:93:9e:d2:44:da:0e:0d:e3:08:13:f5:
                    25:81:33:f9:a7:f6:82:83:0f:6c:97:71:ac:a3:f5:
                    07:6c:cc:a1:ae:e7:4f:eb:6b:00:af:9b:8d:ae:e5:
                    ae:c9:52:ec:97:f1:ca:4a:5c:47:73:4e:8f:69:d6:
                    8c:13:a2:69:9d:c1:70:ef:57:36:63:05:f4:ca:85:
                    6f:01:ab:c4:29:10:d2:58:61:bf:25:9e:35:75:aa:
                    29:6f:e7:72:7f:d1:c6:c1:a1:c4:3f:8f:02:2e:2e:
                    04:aa:cf:08:ab:18:d0:d8:39:31:89:1f:54:14:cc:
                    0c:f0:7b:28:c8:9a:a1:c0:53:19:dc:c6:5a:8e:a8:
                    c7:32:a0:d8:4f:de:6c:2d:e4:c7:13:eb:8c:1e:9b:
                    de:a2:a5:1c:11:c4:de:e5:c3:9b:c6:bc:27:39:e0:
                    58:80:2a:66:ce:48:16:48:50:1e:c7:0e:5e:b9:5c:
                    d4:b2:c8:1d:33:69:a2:95:ff:6d:4a:4c:43:5a:06:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:57:12:3D:F2:51:C8:08:FF:66:29:B9:08:9A:D5:B1:BE:44:2B:B0
            X509v3 Authority Key Identifier:
                keyid:5D:55:26:0C:EB:F2:A7:3C:A1:47:09:D9:6D:24:A5:FF:3B:CB:5D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XVUmDOvypzyhRwnZbSSl_zvLXcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/70db6c-d162-4d49-8849-d2accda08bee/1/XVUmDOvypzyhRwnZbSSl_zvLXcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:55:1b:5d:8e:86:fd:ea:34:b1:13:b3:f4:47:33:2e:a3:98:
         50:dd:b5:e3:1b:e5:e6:75:38:20:7f:5d:6d:40:d9:5c:39:46:
         58:b9:80:54:38:cc:2c:2c:00:19:25:f5:13:1c:d3:87:86:ef:
         e1:f3:79:e9:f4:1b:19:5c:2b:34:74:f1:b9:e9:24:2d:86:fb:
         8a:76:cb:5e:ea:65:23:ea:38:68:82:fe:60:37:52:49:9f:3d:
         66:bc:29:33:0b:1d:07:5e:b1:14:92:19:f9:3b:2b:a9:36:da:
         de:80:e2:ea:04:7f:7e:51:c5:99:7b:6f:a7:2d:01:a6:ab:84:
         08:89:8e:8e:f9:1f:52:d3:4a:e8:47:40:ec:1e:6b:d0:3a:78:
         ac:05:1e:79:19:5f:3a:d9:ce:e6:fe:9e:f3:5b:fb:11:0a:99:
         ad:35:52:05:cc:dc:82:d5:30:94:89:cd:9d:f4:77:3a:87:ba:
         c7:ed:88:45:a5:b1:a0:2c:28:2f:ac:8d:30:0a:b6:35:af:28:
         1f:8e:19:cc:7e:e4:e8:c3:0e:c5:22:d4:aa:32:1f:70:02:ed:
         de:56:ce:d5:2e:b8:8d:7b:3c:b7:a5:08:b4:3f:8b:02:6e:5e:
         ed:28:99:b1:ec:95:3b:cb:55:07:d5:68:a1:3f:da:67:68:f9:
         f9:65:3e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org