Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/E6_4hR0v0vXp8gEzlpEAIbDINHw.mft
File:                     E6_4hR0v0vXp8gEzlpEAIbDINHw.mft (raw, json)
Hash identifier:          i0ZS/41di3PCDGs/2vUdOq+/Wb9mzBMJgqjiOyS5Uso=
Subject key identifier:   75:B3:80:8F:7D:E4:FD:7F:85:C0:8B:94:F2:C1:2E:25:D2:1E:D0:67
Authority key identifier: 13:AF:F8:85:1D:2F:D2:F5:E9:F2:01:33:96:91:00:21:B0:C8:34:7C
Certificate issuer:       /CN=13aff8851d2fd2f5e9f2013396910021b0c8347c
Certificate serial:       018D5EC055D080306E31DA25BB41A9CEE239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6_4hR0v0vXp8gEzlpEAIbDINHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/E6_4hR0v0vXp8gEzlpEAIbDINHw.mft
Manifest number:          0AA6
Signing time:             Wed 31 Jan 2024 09:01:19 +0000
Manifest this update:     Wed 31 Jan 2024 09:01:19 +0000
Manifest next update:     Thu 01 Feb 2024 09:01:19 +0000
Files and hashes:         1: E6_4hR0v0vXp8gEzlpEAIbDINHw.crl (hash: p+cpmS9/DR9iXVH9DFPGQlwBwZjCXrRHnrnleNIqHYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5e:c0:55:d0:80:30:6e:31:da:25:bb:41:a9:ce:e2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13aff8851d2fd2f5e9f2013396910021b0c8347c
        Validity
            Not Before: Jan 31 09:01:19 2024 GMT
            Not After : Feb  1 09:01:19 2024 GMT
        Subject: CN=75b3808f7de4fd7f85c08b94f2c12e25d21ed067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:1d:88:d9:3c:72:dc:a3:4f:28:c6:56:ef:
                    18:93:0b:85:ac:a4:f4:12:a1:5c:30:74:d0:66:24:
                    fe:90:21:9b:b7:93:5d:19:98:8c:8f:28:6a:e4:e2:
                    84:c3:01:94:d7:a3:65:d5:9e:aa:9d:b9:ac:a8:85:
                    bc:f9:32:e6:e2:dc:6a:f1:0b:e0:89:ff:b0:46:14:
                    1a:dd:8f:5f:e1:af:3f:21:ca:14:66:de:14:82:94:
                    34:05:2f:44:89:5f:10:da:4d:0a:8f:d9:9f:98:e9:
                    b5:84:48:24:77:77:1d:11:4a:1f:2d:47:4b:6b:57:
                    ba:2d:4d:df:3d:4c:a3:29:54:1b:ff:00:fc:76:17:
                    9d:be:7a:4e:41:d8:c0:6e:50:82:2d:40:ae:df:15:
                    44:d5:04:bc:29:e9:9e:af:d8:47:51:8a:8d:9b:5c:
                    c6:b8:fe:68:f0:95:7d:94:c3:e4:4c:9b:e7:21:4d:
                    ea:b3:8c:a1:84:14:e1:5b:1b:44:12:59:99:a0:12:
                    5a:0a:6b:6a:af:fa:90:7a:95:5b:d3:d7:07:3d:ee:
                    46:79:20:87:cc:04:b8:e2:c1:0c:8e:80:12:03:40:
                    01:14:5b:5b:ed:72:c7:af:e1:b8:63:d1:a4:66:ab:
                    c3:9a:c1:54:cc:ff:c8:44:ea:1e:d1:77:09:10:bd:
                    24:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B3:80:8F:7D:E4:FD:7F:85:C0:8B:94:F2:C1:2E:25:D2:1E:D0:67
            X509v3 Authority Key Identifier:
                keyid:13:AF:F8:85:1D:2F:D2:F5:E9:F2:01:33:96:91:00:21:B0:C8:34:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6_4hR0v0vXp8gEzlpEAIbDINHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/E6_4hR0v0vXp8gEzlpEAIbDINHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3fb19e-44d2-4289-a91c-5f2499ac0d16/1/E6_4hR0v0vXp8gEzlpEAIbDINHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:e6:ae:a8:0d:eb:bc:fe:cc:69:85:8e:a5:35:e0:a8:e3:
         8f:6c:d8:68:1f:b7:78:39:e9:2d:ce:4f:00:dc:79:94:88:63:
         52:97:b2:69:f3:6e:d8:aa:72:96:e1:e1:c2:e6:d1:29:99:db:
         36:05:66:cd:01:ae:84:cc:98:26:87:8f:9d:48:12:41:e4:bf:
         3f:b5:3d:d0:e2:dd:0f:f8:bf:f0:d5:54:c5:9a:dc:75:7d:d4:
         77:eb:99:b7:32:e8:da:ff:c1:21:07:f4:f2:11:01:0f:cc:0e:
         10:2b:0c:69:df:c0:14:83:26:ba:ab:04:3d:66:52:10:7e:a9:
         49:da:84:a5:4b:38:09:58:15:28:dd:7a:6e:9a:4f:9a:18:5c:
         98:4f:99:7d:6f:eb:4f:25:d8:e7:4a:ea:c6:97:3e:fa:a9:f6:
         64:7f:1e:2a:25:c1:45:8f:d2:4f:f6:f7:71:12:9a:46:a7:78:
         25:ac:51:b8:40:f2:80:b8:19:15:9f:6d:c8:c8:72:80:a1:31:
         d5:73:14:ee:23:13:a6:1d:80:4d:d1:b3:27:31:35:66:9c:5b:
         11:a9:a0:88:7f:19:76:77:79:45:ed:81:54:49:39:62:7c:83:
         97:e7:c4:94:66:5d:fc:c3:81:d9:3a:a3:b8:52:55:d0:c7:e0:
         09:13:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 14:51:10 2024 by rpki-client on console-fra.rpki-client.org