Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.mft
File:                     isKQYMVdB0oL8iDbSUoexJJHFdI.mft (raw, json)
Hash identifier:          FX0E9edhUBgP5Tra9NnaypwpflypfG8ZlqmNgAalftE=
Subject key identifier:   83:94:7D:8D:F6:38:29:21:3C:16:C9:5E:75:8A:15:87:D1:4B:F0:B2
Authority key identifier: 8A:C2:90:60:C5:5D:07:4A:0B:F2:20:DB:49:4A:1E:C4:92:47:15:D2
Certificate issuer:       /CN=8ac29060c55d074a0bf220db494a1ec4924715d2
Certificate serial:       018B13AB9882392FCEA9D32FA447AB51851A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/isKQYMVdB0oL8iDbSUoexJJHFdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.mft
Manifest number:          088A
Signing time:             Mon 09 Oct 2023 09:01:33 +0000
Manifest this update:     Mon 09 Oct 2023 09:01:33 +0000
Manifest next update:     Tue 10 Oct 2023 09:01:33 +0000
Files and hashes:         1: 93gLrAxkNJ7FcwnAxp5py-9l6nM.roa (hash: 94eR+/7aQDSjO4TQX0lxVJNoiVqmrbMoQxSmlynyU0Y=)
                          2: isKQYMVdB0oL8iDbSUoexJJHFdI.crl (hash: ZSInNEB+lTAyUuokrlMwhG/nz4vM2CfH/x11CUPQzgs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:13:ab:98:82:39:2f:ce:a9:d3:2f:a4:47:ab:51:85:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ac29060c55d074a0bf220db494a1ec4924715d2
        Validity
            Not Before: Oct  9 09:01:33 2023 GMT
            Not After : Oct 10 09:01:33 2023 GMT
        Subject: CN=83947d8df63829213c16c95e758a1587d14bf0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:e0:e0:1a:75:6d:23:02:d5:e8:45:10:97:
                    0b:a1:e7:07:05:ee:e0:07:06:e5:12:a0:e6:13:e7:
                    fb:d0:86:4c:81:75:cc:e8:11:c5:53:ce:53:36:24:
                    e4:64:7a:72:8a:ed:dc:37:27:61:87:93:79:82:9c:
                    3f:76:68:3f:3d:a3:d4:70:8b:68:72:e4:8f:2d:9d:
                    8f:38:17:83:55:5d:bb:e5:23:92:33:41:2e:df:ba:
                    e2:18:ec:85:fa:a5:4d:fc:f5:94:5c:a7:d6:55:76:
                    26:64:11:b0:84:1c:34:c2:5a:31:67:38:d7:17:58:
                    fb:34:72:b2:75:fc:a1:d6:26:ba:4d:b0:e5:52:ef:
                    28:15:2c:bc:6d:cc:1a:8b:cb:6f:ab:de:2d:2e:fd:
                    11:ef:8b:bf:e0:55:fa:62:15:dd:81:7b:7b:e8:01:
                    a8:2b:93:1d:dc:e7:dd:ba:1b:92:db:6a:05:26:e4:
                    d9:da:85:18:fb:e1:c0:a6:14:c8:f7:fc:ce:a7:0c:
                    6b:9f:21:ba:28:1a:67:e8:4e:69:c4:2e:5e:2e:0d:
                    87:2e:8f:4b:12:e3:21:6d:9d:6a:fe:a0:e4:2b:3b:
                    44:64:f4:65:c6:0f:00:cd:16:c5:2a:ef:e8:18:2a:
                    50:fe:bc:ae:6d:cb:53:94:4e:4c:0d:91:1d:36:30:
                    44:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:94:7D:8D:F6:38:29:21:3C:16:C9:5E:75:8A:15:87:D1:4B:F0:B2
            X509v3 Authority Key Identifier:
                keyid:8A:C2:90:60:C5:5D:07:4A:0B:F2:20:DB:49:4A:1E:C4:92:47:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isKQYMVdB0oL8iDbSUoexJJHFdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4696e8-7b29-420e-890e-7a904b9c771e/1/isKQYMVdB0oL8iDbSUoexJJHFdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ea:f3:34:46:ab:e6:62:51:fa:0c:b1:28:de:a6:dc:57:04:
         d4:16:52:6e:13:6c:57:04:87:de:f1:7d:4c:13:7f:84:cd:9e:
         9b:6d:10:8a:a3:d0:c8:98:67:cc:8c:26:67:91:23:c9:9e:58:
         f6:30:50:68:79:9b:5f:02:8b:cf:23:94:cd:46:26:be:b8:c8:
         1e:1f:91:42:f9:da:0b:5b:79:60:65:98:2f:bc:da:ed:ec:ec:
         42:18:ee:68:88:08:e2:59:a8:dc:8e:2f:de:9f:d6:8b:12:9d:
         d6:87:e8:08:65:8d:08:79:cc:9d:4b:ea:56:88:9d:90:e9:5d:
         2d:42:95:e9:96:66:ec:bb:de:62:69:bf:4a:1b:20:25:7d:21:
         b2:9a:43:7b:17:de:2e:4e:6d:cb:b0:b5:19:70:d4:5e:ad:b1:
         a5:cc:1c:1f:17:51:e8:b1:c7:31:da:bc:5a:c9:40:f5:05:3c:
         80:af:1c:c0:87:c1:ac:18:02:29:54:6a:5f:89:76:03:12:c5:
         07:d8:9e:e1:47:75:dd:96:9c:69:8e:cb:eb:1b:40:e2:1b:b0:
         23:2b:17:0b:6c:a4:8e:bc:33:45:e6:1a:a1:2e:e2:1b:51:f2:
         7b:7b:74:17:d7:f4:8f:6f:79:72:99:38:f8:58:91:b5:f7:e0:
         18:96:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:54 2024 by rpki-client on console-ams.rpki-client.org