Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/gp8b5Xt5YGiOGXXJjciJC59KmFI.mft
File:                     gp8b5Xt5YGiOGXXJjciJC59KmFI.mft (raw, json)
Hash identifier:          4zl8nRT//UwUh5bouyQulNgWm9FZsHpHDJBxj2CVcII=
Subject key identifier:   18:3E:15:9E:59:9C:54:44:7F:0F:AA:C2:68:90:C8:96:45:1A:FB:AB
Authority key identifier: 82:9F:1B:E5:7B:79:60:68:8E:19:75:C9:8D:C8:89:0B:9F:4A:98:52
Certificate issuer:       /CN=829f1be57b7960688e1975c98dc8890b9f4a9852
Certificate serial:       018B89AF88A3D9AE3DD188D147BE1559428D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gp8b5Xt5YGiOGXXJjciJC59KmFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/gp8b5Xt5YGiOGXXJjciJC59KmFI.mft
Manifest number:          D1
Signing time:             Wed 01 Nov 2023 07:01:04 +0000
Manifest this update:     Wed 01 Nov 2023 07:01:04 +0000
Manifest next update:     Thu 02 Nov 2023 07:01:04 +0000
Files and hashes:         1: Opr1cdHV2yQUBqiY6CGUhJCZjMc.roa (hash: qPPY7tk6YV8shdqM3jx/nROM6N19bY1Ayj2kbJDOu/E=)
                          2: gp8b5Xt5YGiOGXXJjciJC59KmFI.crl (hash: FAGBOh6sSruPnsBQJXvkH9FoezDKhG2rrKIKicxTaPk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:89:af:88:a3:d9:ae:3d:d1:88:d1:47:be:15:59:42:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=829f1be57b7960688e1975c98dc8890b9f4a9852
        Validity
            Not Before: Nov  1 07:01:04 2023 GMT
            Not After : Nov  2 07:01:04 2023 GMT
        Subject: CN=183e159e599c54447f0faac26890c896451afbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:08:b7:f6:2c:c2:81:3c:05:9e:ae:86:d7:
                    f7:17:dc:e5:10:c2:59:fa:13:4d:1d:51:1f:96:59:
                    3e:bd:04:49:1b:c0:9f:05:32:f2:b4:a6:23:34:63:
                    ca:c8:fe:3a:a2:ce:da:d6:1f:56:4f:a9:b5:fc:06:
                    bc:2c:4e:3a:4b:30:65:38:77:f9:59:15:49:d3:e6:
                    16:ce:dc:08:ff:be:a1:72:dd:12:4c:12:b8:56:c8:
                    6a:72:16:d4:ba:27:85:d3:f7:90:32:78:83:57:6d:
                    9d:f8:26:0d:04:9c:da:4a:27:1b:a5:de:c6:78:60:
                    70:ec:b9:10:82:6a:c1:88:ab:a8:0d:04:ae:14:00:
                    a1:26:c8:83:a4:0c:b4:cd:1c:2b:74:4c:3a:e9:ed:
                    81:e7:1c:1e:ec:d0:db:7f:b1:19:88:e3:85:81:d4:
                    f9:10:00:da:bd:90:5a:cf:21:9b:98:a8:00:c2:5e:
                    9a:64:02:ad:d7:f5:82:2b:65:be:f7:d3:2c:64:21:
                    e2:04:fc:cf:ab:64:e2:ce:9d:b9:ed:38:f7:58:52:
                    42:ca:78:ca:6a:c0:b3:e6:47:f7:68:6c:80:2c:3c:
                    f7:82:2f:b3:db:05:7c:5b:61:87:ce:bb:b0:a6:40:
                    85:d2:21:f1:7a:53:63:5c:e5:e7:e5:5f:dd:fc:8a:
                    49:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3E:15:9E:59:9C:54:44:7F:0F:AA:C2:68:90:C8:96:45:1A:FB:AB
            X509v3 Authority Key Identifier:
                keyid:82:9F:1B:E5:7B:79:60:68:8E:19:75:C9:8D:C8:89:0B:9F:4A:98:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gp8b5Xt5YGiOGXXJjciJC59KmFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/gp8b5Xt5YGiOGXXJjciJC59KmFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/gp8b5Xt5YGiOGXXJjciJC59KmFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:d1:24:4b:51:0e:01:12:c5:eb:ae:bf:86:25:fa:47:3c:6a:
         2e:0b:66:b9:41:57:a7:9e:48:c9:99:7e:55:f2:e6:36:32:3f:
         76:ad:e9:9a:ce:20:40:c3:10:9e:69:b7:2c:9a:20:98:56:7d:
         fd:60:2d:36:f0:eb:0d:ed:96:cf:29:9a:c5:4e:77:09:f5:35:
         6f:2a:46:3b:37:d9:29:a4:fa:0b:19:e6:d3:f2:fc:e3:92:99:
         98:5b:f0:6a:cc:91:f1:8e:24:45:f7:c4:f4:c5:a8:53:8e:3b:
         fa:be:a0:bb:4e:18:ea:70:9b:f3:65:b2:3d:b9:63:30:b5:68:
         da:b5:db:38:91:3d:af:f1:2f:4f:0a:d7:67:d2:7a:ac:96:f8:
         37:b5:e9:d0:2e:5f:f2:0e:cd:05:70:c6:80:92:e4:cb:b6:e7:
         49:8d:47:a1:29:73:18:79:52:08:0b:48:82:f2:f0:74:90:3f:
         db:78:a6:57:4e:d7:98:c7:45:86:05:13:fc:98:a4:b6:a9:61:
         1a:94:4d:60:83:79:80:c3:05:18:0b:c5:1e:dd:95:39:a2:ca:
         e3:fe:1d:2d:0b:0c:6a:39:5c:2f:6e:61:ef:40:cd:2b:65:be:
         d9:5a:d0:a0:ea:a9:1d:ae:2d:fd:dc:30:ea:95:78:36:61:ac:
         79:a9:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 14:42:54 2023 by rpki-client on console-ams.rpki-client.org