Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft
File:                     hcMT6ZZeqns66b1cvzVm1EpRCX0.mft (raw, json)
Hash identifier:          IIChl1sALKso9G1g1uEwMkKaeZ5yz+J095Cn1b9pgGI=
Subject key identifier:   C1:53:88:18:75:B9:BA:97:25:9B:CF:2A:89:23:35:7A:5D:C5:F4:12
Authority key identifier: 85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D
Certificate issuer:       /CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
Certificate serial:       018C90F8C4C53051573BBFC7FB7D406E105B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft
Manifest number:          0FF5
Signing time:             Fri 22 Dec 2023 10:01:11 +0000
Manifest this update:     Fri 22 Dec 2023 10:01:11 +0000
Manifest next update:     Sat 23 Dec 2023 10:01:11 +0000
Files and hashes:         1: hcMT6ZZeqns66b1cvzVm1EpRCX0.crl (hash: b6fVJWeDEVZRNiMx3Fwjg/PGmyjowiU2UJRKQZxUD6Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:90:f8:c4:c5:30:51:57:3b:bf:c7:fb:7d:40:6e:10:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c313e9965eaa7b3ae9bd5cbf3566d44a51097d
        Validity
            Not Before: Dec 22 10:01:11 2023 GMT
            Not After : Dec 23 10:01:11 2023 GMT
        Subject: CN=c153881875b9ba97259bcf2a8923357a5dc5f412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:62:a3:18:40:22:7b:50:3f:5d:b7:a3:4b:ba:
                    35:f1:b7:ac:b6:12:6f:c7:ce:f9:87:b0:aa:00:58:
                    92:0a:85:30:d2:a7:a6:cb:04:12:ce:13:2e:9f:b4:
                    fb:96:65:10:94:b8:79:85:fc:89:1f:3c:b8:3f:98:
                    a6:37:13:47:58:a1:1d:40:43:ef:d3:6c:6a:df:eb:
                    b0:89:6c:b9:a1:f9:32:ca:54:ce:00:f5:21:46:b5:
                    a1:5c:3f:2d:d2:eb:24:b8:66:0e:ac:37:8c:52:a1:
                    62:83:0d:96:f9:fb:83:71:23:23:a7:75:86:1c:3d:
                    cf:f1:04:8c:d6:c2:bb:f2:36:98:e8:da:bf:df:a6:
                    16:68:30:6b:04:28:05:e0:d3:59:14:17:46:41:03:
                    bc:08:fc:e6:09:ba:5e:35:91:f3:c6:23:1e:a9:18:
                    bc:94:1e:0d:cd:39:b5:f5:35:8d:b4:dd:cf:7a:53:
                    0e:e0:b2:8d:dc:fc:a4:18:01:8a:0f:f2:34:de:36:
                    70:10:2e:1e:25:c6:d4:de:2d:cf:29:ea:be:c2:c9:
                    fa:8f:8f:99:45:4f:2b:b8:c4:7d:88:de:ca:74:4e:
                    3f:3d:e8:5e:92:f9:03:98:23:8a:71:ec:71:6f:74:
                    81:93:ea:79:9b:5f:2e:3f:82:35:5e:45:85:00:f8:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:53:88:18:75:B9:BA:97:25:9B:CF:2A:89:23:35:7A:5D:C5:F4:12
            X509v3 Authority Key Identifier:
                keyid:85:C3:13:E9:96:5E:AA:7B:3A:E9:BD:5C:BF:35:66:D4:4A:51:09:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hcMT6ZZeqns66b1cvzVm1EpRCX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/059a7a-b569-4680-8de5-de231280c2a1/1/hcMT6ZZeqns66b1cvzVm1EpRCX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d8:7e:74:92:bc:e3:86:fb:0a:e4:da:24:4d:2f:d9:15:16:
         b0:f4:dc:7e:eb:2f:1a:57:5b:31:62:34:07:ef:9f:ff:63:b0:
         67:20:0a:38:d3:e8:c2:fb:a9:d5:aa:db:b8:97:a9:d2:c8:70:
         2f:3d:f9:ba:14:ae:ab:d1:91:2f:0a:99:21:5c:c2:f7:20:28:
         ba:2f:0f:45:3d:d6:de:30:a9:dd:3d:e7:59:6a:05:58:aa:a3:
         4a:da:ab:c8:02:fd:86:06:e8:f7:27:ae:4b:b7:0a:31:75:2d:
         67:08:b2:58:1c:f9:37:14:d2:82:95:2d:e8:61:58:f4:f1:e5:
         d7:1a:fa:17:6f:aa:39:c5:d5:72:0e:a0:bc:5a:10:2e:9f:5c:
         9c:a1:2e:a0:e2:05:c8:f9:8b:9f:45:91:fe:3e:5d:dd:be:81:
         75:2a:7f:c2:9c:3c:62:27:92:5e:80:b1:17:d1:85:9a:e8:f0:
         af:3b:e4:6c:23:10:7f:bd:d7:91:15:0d:dc:ea:a9:fe:8f:1a:
         11:37:02:c3:ee:c4:8c:b0:66:65:d7:8f:cb:86:20:22:b7:31:
         68:47:d2:35:31:45:a4:25:ac:5b:1e:34:30:da:13:8c:7a:a6:
         50:12:3d:2c:e2:aa:18:cd:70:cf:bb:ea:81:9d:af:83:ad:02:
         38:e0:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:33 2024 by rpki-client on console-fra.rpki-client.org