Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/D8NJHE8k4f3psAgvAYjtEcShnjQ.mft
File:                     D8NJHE8k4f3psAgvAYjtEcShnjQ.mft (raw, json)
Hash identifier:          IcMy8VZWlNhjcMhqmCBuMUBjjEmgSg9CcOOzIIZSOYg=
Subject key identifier:   DB:AE:F1:BC:19:D0:4E:94:72:00:A8:D7:81:DD:9F:A2:42:AE:54:6F
Authority key identifier: 0F:C3:49:1C:4F:24:E1:FD:E9:B0:08:2F:01:88:ED:11:C4:A1:9E:34
Certificate issuer:       /CN=0fc3491c4f24e1fde9b0082f0188ed11c4a19e34
Certificate serial:       0192042626DA6F9536B7B66B3F01268E6349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D8NJHE8k4f3psAgvAYjtEcShnjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/D8NJHE8k4f3psAgvAYjtEcShnjQ.mft
Manifest number:          2B
Signing time:             Wed 18 Sep 2024 08:01:02 +0000
Manifest this update:     Wed 18 Sep 2024 08:01:02 +0000
Manifest next update:     Thu 19 Sep 2024 08:01:02 +0000
Files and hashes:         1: D8NJHE8k4f3psAgvAYjtEcShnjQ.crl (hash: UM94K4pia8OoMNKRREd9xzVDBySGEjp5Lzx+F0byu+8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:04:26:26:da:6f:95:36:b7:b6:6b:3f:01:26:8e:63:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fc3491c4f24e1fde9b0082f0188ed11c4a19e34
        Validity
            Not Before: Sep 18 08:01:02 2024 GMT
            Not After : Sep 19 08:01:02 2024 GMT
        Subject: CN=dbaef1bc19d04e947200a8d781dd9fa242ae546f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:a0:60:ba:02:d0:84:f6:ea:fb:67:a5:7a:
                    bf:98:a4:be:64:2d:e4:db:36:f0:0e:8c:3a:10:49:
                    4e:25:a4:2a:30:90:86:5d:75:28:ce:4e:eb:6e:80:
                    2f:fc:34:24:a4:be:96:45:6f:98:8c:ca:dc:e6:37:
                    30:0f:0f:2b:56:a1:9e:95:3b:26:43:c8:c4:e5:0b:
                    c6:20:8a:41:ec:49:88:d8:67:c6:a7:85:99:bb:2a:
                    a1:7c:cd:59:c6:49:64:81:32:78:ba:84:ab:ab:0f:
                    12:79:f6:39:7e:36:c5:c1:5a:71:20:97:52:80:57:
                    19:86:21:f1:4a:81:a7:8c:d3:3d:2e:9a:ab:5a:44:
                    40:2b:c2:1d:b6:67:be:d4:bd:97:6b:e1:ea:a0:e4:
                    be:ca:37:c0:3c:c5:e7:bb:54:85:b2:13:04:8f:5f:
                    c4:43:cc:53:5b:88:97:f7:41:2e:6f:e7:50:d4:d6:
                    7f:a4:e8:0a:65:32:c1:e7:02:1b:a4:1c:2c:f6:fd:
                    69:6a:93:ef:ae:9f:e6:2b:44:3a:90:b9:95:c6:55:
                    f0:f4:6a:23:a0:ca:95:aa:b1:51:dd:a3:5e:64:d2:
                    6e:d5:28:6f:b7:0d:b3:77:84:f4:17:68:b6:77:9c:
                    b5:60:b4:2b:7b:16:70:ce:95:39:9b:45:08:30:ac:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:F1:BC:19:D0:4E:94:72:00:A8:D7:81:DD:9F:A2:42:AE:54:6F
            X509v3 Authority Key Identifier:
                keyid:0F:C3:49:1C:4F:24:E1:FD:E9:B0:08:2F:01:88:ED:11:C4:A1:9E:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D8NJHE8k4f3psAgvAYjtEcShnjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/D8NJHE8k4f3psAgvAYjtEcShnjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e574c6-945a-4772-87fb-4eaccc1b310b/1/D8NJHE8k4f3psAgvAYjtEcShnjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:35:73:4f:4a:71:e8:58:ba:7f:b6:9a:fc:25:b2:4e:c5:ca:
         11:b3:b3:d1:8f:10:7b:ce:42:fb:13:f2:8b:b9:a5:10:79:38:
         e6:27:a1:ad:21:21:16:86:8d:ea:4b:a9:a7:f5:5c:17:25:83:
         73:8d:78:cc:1c:36:90:38:21:60:23:e9:e4:3b:c1:a6:21:42:
         77:9a:b6:2a:c6:9e:0d:a2:32:b0:0c:a3:29:8b:cf:66:38:07:
         23:98:50:90:ff:75:4d:f8:e8:4e:1f:af:02:3e:ed:79:e4:27:
         de:97:9d:92:9a:92:ce:2e:8c:15:71:cb:17:52:7b:b3:1d:ef:
         8a:c0:24:9f:ee:27:4d:3f:a2:aa:fc:eb:71:31:4f:b9:e9:a9:
         bf:cd:1c:89:f6:a4:94:20:4a:29:82:8e:df:a3:99:fd:17:dd:
         cb:ce:4b:af:07:2a:86:03:83:b1:82:f7:a7:38:49:c4:8f:a9:
         01:aa:76:87:8a:0c:59:a7:1a:8b:43:95:18:55:f8:8d:59:67:
         44:1d:69:6d:2c:b7:a8:b3:90:3c:0a:f7:f9:31:49:be:f7:9b:
         12:c7:26:25:91:5c:ca:39:07:3f:15:6a:91:eb:df:ff:b7:2a:
         3c:de:5a:e3:3e:62:a8:77:a2:9b:53:58:3d:f1:bd:92:87:1a:
         86:0a:a1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:38 2024 by rpki-client on console-fra.rpki-client.org