Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft
File:                     5U3oM48Z9DqxsNL44SEttITZ6QQ.mft (raw, json)
Hash identifier:          40OP9E3yWMGg6sDZreYus+50GP12F5PRSEoBhH3+p4Y=
Subject key identifier:   C9:77:B3:FA:9D:1F:53:97:F6:3B:32:5D:D4:B0:BF:ED:31:E2:C6:AB
Authority key identifier: E5:4D:E8:33:8F:19:F4:3A:B1:B0:D2:F8:E1:21:2D:B4:84:D9:E9:04
Certificate issuer:       /CN=e54de8338f19f43ab1b0d2f8e1212db484d9e904
Certificate serial:       0190E95606171CB44F68C0C671EB522D6435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U3oM48Z9DqxsNL44SEttITZ6QQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft
Manifest number:          A1
Signing time:             Thu 25 Jul 2024 10:00:47 +0000
Manifest this update:     Thu 25 Jul 2024 10:00:47 +0000
Manifest next update:     Fri 26 Jul 2024 10:00:47 +0000
Files and hashes:         1: 5U3oM48Z9DqxsNL44SEttITZ6QQ.crl (hash: XnQhkhGckweUgZsxLlk9Ec//phGaOJD/RlNNUWr783U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e9:56:06:17:1c:b4:4f:68:c0:c6:71:eb:52:2d:64:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54de8338f19f43ab1b0d2f8e1212db484d9e904
        Validity
            Not Before: Jul 25 10:00:47 2024 GMT
            Not After : Jul 26 10:00:47 2024 GMT
        Subject: CN=c977b3fa9d1f5397f63b325dd4b0bfed31e2c6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:cc:e7:59:c1:61:4b:2f:87:60:16:49:ee:
                    b3:02:f9:6d:20:13:a5:b5:01:fe:cf:41:41:8a:6f:
                    a1:86:61:29:95:18:5e:fd:0a:90:51:fb:12:1e:d1:
                    66:fc:d8:d7:01:ed:4a:45:48:0a:18:ea:75:44:e4:
                    c7:ab:91:12:be:c0:6e:9e:cb:bd:a0:c3:6c:b1:23:
                    43:05:b9:48:0b:58:c3:41:1a:08:1b:14:60:d2:a0:
                    1f:57:6a:8e:ee:98:5a:d5:8a:3b:33:3e:a8:48:3f:
                    88:4f:11:a0:c0:ce:bc:0b:97:25:ce:e7:4e:22:1b:
                    09:d9:40:6c:e5:f7:82:9e:8f:d4:30:d8:e3:02:e7:
                    14:bd:4c:12:fa:5f:88:b8:d2:fd:a4:1e:6d:31:37:
                    e3:24:a9:3a:62:71:20:0c:4a:e9:c5:dd:22:81:13:
                    26:90:05:0d:d6:ce:6b:f2:9f:d1:35:c2:5b:b5:bd:
                    72:33:0d:4c:0e:f6:b7:b1:ad:c2:72:3d:2e:e9:30:
                    9e:46:ca:f1:30:2f:8d:37:0a:7c:63:ae:f7:5f:6c:
                    11:01:83:51:fc:07:15:dc:f0:34:de:7f:bf:20:d2:
                    5d:ec:00:76:8a:e5:de:f0:2a:3b:85:40:57:34:71:
                    86:40:0a:9b:9e:48:6e:91:e2:b2:90:4f:bd:c1:d1:
                    4f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:77:B3:FA:9D:1F:53:97:F6:3B:32:5D:D4:B0:BF:ED:31:E2:C6:AB
            X509v3 Authority Key Identifier:
                keyid:E5:4D:E8:33:8F:19:F4:3A:B1:B0:D2:F8:E1:21:2D:B4:84:D9:E9:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U3oM48Z9DqxsNL44SEttITZ6QQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/da198c-c10b-4e42-86df-3a652f798ab9/1/5U3oM48Z9DqxsNL44SEttITZ6QQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:fd:8c:f5:e5:ce:c2:13:74:c9:27:ad:26:b5:69:e7:de:
         6f:98:13:e9:56:87:38:b0:d1:05:35:b2:15:e9:b2:b5:cf:84:
         e0:3c:7f:6c:a1:bf:99:ea:18:4f:7a:dc:f8:93:80:5d:fa:19:
         c2:60:e9:f6:84:e5:e5:d9:ab:08:5a:6e:90:61:96:a1:59:82:
         32:0a:b7:1c:8d:c9:ea:af:c6:13:56:0c:66:cc:8d:f8:9e:59:
         b5:8f:9f:fd:d9:7f:cd:67:5a:ed:a6:53:5b:ff:93:69:00:ae:
         5e:5c:f1:cf:72:1c:c6:28:d7:b7:c3:28:51:f6:8e:eb:a6:c0:
         22:33:c5:46:d4:2e:be:09:8d:b3:69:e4:94:d1:c4:e9:eb:e9:
         e8:75:b3:df:6b:b4:41:28:a4:a2:aa:20:86:e5:c6:8c:70:63:
         55:e8:c2:f2:7f:32:2a:75:b7:bf:a0:a0:fe:36:cd:f8:ed:ba:
         b8:4b:d1:38:f2:78:9f:71:3c:cf:fd:a6:86:31:1a:9b:cb:a3:
         96:a5:dd:ee:82:32:2e:8c:a0:14:c0:a6:6a:12:f7:6d:ac:49:
         7f:75:e0:e3:cd:8e:de:e7:a0:43:7b:38:22:d0:35:f9:75:c7:
         e6:f9:b0:30:c7:aa:55:b5:25:8b:6b:d4:cb:a0:85:32:d0:87:
         5e:5e:0a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 17:10:09 2024 by rpki-client on console-fra.rpki-client.org