Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/RSvZTe73IQZ5Q5nIs3GQyViDeho.mft
File:                     RSvZTe73IQZ5Q5nIs3GQyViDeho.mft (raw, json)
Hash identifier:          Wb4hOqfR8llKlGEo8DIt4zp7kgvSOE0v0JRgvOc0TwY=
Subject key identifier:   9F:4D:87:E6:77:E0:2E:8B:E7:63:76:78:6E:73:3A:D5:03:5B:17:DD
Authority key identifier: 45:2B:D9:4D:EE:F7:21:06:79:43:99:C8:B3:71:90:C9:58:83:7A:1A
Certificate issuer:       /CN=452bd94deef72106794399c8b37190c958837a1a
Certificate serial:       01870978DEDA8FAB936EE8C8B27F8DE9937C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RSvZTe73IQZ5Q5nIs3GQyViDeho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/RSvZTe73IQZ5Q5nIs3GQyViDeho.mft
Manifest number:          0665
Signing time:             Wed 22 Mar 2023 13:18:48 +0000
Manifest this update:     Wed 22 Mar 2023 13:18:48 +0000
Manifest next update:     Thu 23 Mar 2023 13:18:48 +0000
Files and hashes:         1: 8nIC4o69-V54VO371EVA2M9I-L0.roa (hash: 2Apv5R+pzCyEY651p5VArk7l9C4F+fmy0hitZkMTvo8=)
                          2: RSvZTe73IQZ5Q5nIs3GQyViDeho.crl (hash: XIdfweSUDhRCZAcwOm8cL8EIc+2O8yra/SJ8Ed7CqCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:78:de:da:8f:ab:93:6e:e8:c8:b2:7f:8d:e9:93:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452bd94deef72106794399c8b37190c958837a1a
        Validity
            Not Before: Mar 22 13:18:48 2023 GMT
            Not After : Mar 23 13:18:48 2023 GMT
        Subject: CN=9f4d87e677e02e8be76376786e733ad5035b17dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:56:94:f0:db:44:f5:9f:ea:1b:4c:5a:b3:29:
                    97:a4:d3:f3:19:6a:55:67:11:da:7e:f0:9b:5c:18:
                    4a:c0:ef:ab:1c:4e:52:75:0f:2d:9c:ce:88:ba:dd:
                    54:b3:ad:99:de:34:fe:23:3f:70:13:b0:41:f5:59:
                    0e:f4:42:70:91:be:e0:00:44:4c:e0:ba:53:91:43:
                    7b:62:c6:93:e1:0a:bb:32:1c:de:df:d0:29:64:9e:
                    16:78:e2:17:2c:0c:a5:86:5e:f9:b1:76:0a:a8:02:
                    d8:b6:dc:9a:70:f8:c4:94:79:d6:9a:f6:3f:21:98:
                    10:99:fa:06:6d:13:05:09:df:ab:3a:7c:33:45:7b:
                    e5:84:8d:a7:33:33:82:90:bb:4c:10:dc:01:9a:b1:
                    d8:94:ee:9d:9b:0b:04:80:0e:ac:59:ec:52:ab:13:
                    c8:9c:a7:06:ee:e5:a7:ad:25:24:2a:8c:7f:dd:e1:
                    19:5a:68:67:6e:81:63:11:02:0a:4b:a8:bc:15:f6:
                    c8:c4:73:b4:ad:b0:b9:22:af:f5:00:8b:d7:5d:a3:
                    ba:a3:30:a0:23:ae:1e:47:f4:3a:b9:cf:8d:53:0c:
                    08:7f:a4:14:45:4d:5c:63:c7:d3:b3:cb:57:96:6b:
                    1e:66:e9:20:25:19:b9:81:1c:5f:0b:01:0e:f0:9b:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4D:87:E6:77:E0:2E:8B:E7:63:76:78:6E:73:3A:D5:03:5B:17:DD
            X509v3 Authority Key Identifier:
                keyid:45:2B:D9:4D:EE:F7:21:06:79:43:99:C8:B3:71:90:C9:58:83:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSvZTe73IQZ5Q5nIs3GQyViDeho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/RSvZTe73IQZ5Q5nIs3GQyViDeho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/574984-3689-4283-b133-2a5fcac44778/1/RSvZTe73IQZ5Q5nIs3GQyViDeho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:97:c5:be:26:3e:d6:c9:ad:b0:77:03:06:f7:d1:bf:d8:c5:
         1e:43:49:6c:96:04:b7:e3:07:b3:a4:52:e5:12:2b:2f:20:44:
         1d:c2:71:8f:0a:1a:4e:08:d1:53:e7:54:fc:9a:de:04:77:ff:
         2e:f5:d1:20:72:8c:e9:67:2f:ab:dc:b2:4f:31:33:f5:32:d6:
         e9:5d:ab:42:61:ef:66:9f:c6:7b:ad:07:05:55:93:7e:35:e6:
         1f:5d:d5:21:cd:03:f4:17:6e:58:02:aa:e4:3b:24:d8:d2:92:
         06:b8:0a:65:31:e2:39:af:0a:45:be:5e:22:b2:8e:22:9c:58:
         f6:32:3e:fa:06:9f:dc:88:7e:c2:10:a3:9a:78:71:5d:b5:43:
         b9:f5:ba:22:03:a1:77:c5:4a:5e:d6:12:b7:3a:fc:67:ed:f9:
         35:ad:b4:ec:81:85:96:34:3c:36:ee:48:54:22:67:f8:7b:61:
         21:4e:26:7b:62:a8:62:ca:92:88:d0:e1:04:b2:36:4d:f2:61:
         28:0c:67:e3:4a:92:58:ed:32:f6:94:ec:c5:b1:d3:c4:83:df:
         99:66:43:d7:e2:90:46:cf:83:b3:a7:87:91:a6:4f:8e:7e:8f:
         f0:d2:fb:19:3d:38:2a:1f:e0:f0:25:57:3d:65:51:02:be:18:
         f1:69:7a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:43 2024 by rpki-client on console-fra.rpki-client.org