Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/ZH9geFS-UZbKNzogJ_ZYmTElDWE.mft
File:                     ZH9geFS-UZbKNzogJ_ZYmTElDWE.mft (raw, json)
Hash identifier:          iknrY3YznFUQv3zLFxvAc8Klsp+7zN7hXk8FT2/cuec=
Subject key identifier:   61:54:E9:5F:9E:8F:67:23:50:C1:1C:D8:78:EA:0B:D1:B7:FA:03:43
Authority key identifier: 64:7F:60:78:54:BE:51:96:CA:37:3A:20:27:F6:58:99:31:25:0D:61
Certificate issuer:       /CN=647f607854be5196ca373a2027f6589931250d61
Certificate serial:       018B366E55364559FA837C473BEC4E66C2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZH9geFS-UZbKNzogJ_ZYmTElDWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/ZH9geFS-UZbKNzogJ_ZYmTElDWE.mft
Manifest number:          0863
Signing time:             Mon 16 Oct 2023 03:01:22 +0000
Manifest this update:     Mon 16 Oct 2023 03:01:22 +0000
Manifest next update:     Tue 17 Oct 2023 03:01:22 +0000
Files and hashes:         1: 0MPrWcS3tMsdvCKTL4QToSxjDkc.roa (hash: uLeYJNm1TjAWgdmESqvXQD4lhraP4nLeDMc0VBRwvx8=)
                          2: ZH9geFS-UZbKNzogJ_ZYmTElDWE.crl (hash: zkLILXjY4KX+HGn6iQTweA8kEyr7QqdlQa2Y7R2pWZ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:36:6e:55:36:45:59:fa:83:7c:47:3b:ec:4e:66:c2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647f607854be5196ca373a2027f6589931250d61
        Validity
            Not Before: Oct 16 03:01:22 2023 GMT
            Not After : Oct 17 03:01:22 2023 GMT
        Subject: CN=6154e95f9e8f672350c11cd878ea0bd1b7fa0343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:45:dc:ce:08:c7:72:02:26:2f:21:27:8d:16:
                    70:10:7a:08:05:48:4e:31:fb:d2:10:f8:a9:9c:ec:
                    af:b6:23:2d:4e:a2:b5:43:15:3b:43:ea:6b:d2:67:
                    b6:a5:e8:c6:c4:eb:5a:02:fd:8c:46:fb:ca:0e:9c:
                    b9:0e:47:3e:8e:7e:b6:ba:93:19:4d:db:58:96:a2:
                    1d:e1:32:8c:cb:5b:fe:05:37:86:87:d1:50:76:ee:
                    33:bf:ac:b2:14:cd:36:6e:6c:3b:40:e6:25:fd:71:
                    1d:c9:bb:54:89:df:2c:78:05:59:17:8a:fb:ab:c3:
                    c6:7b:2f:68:54:0f:1b:75:ce:85:65:86:7c:5b:f8:
                    1b:58:eb:52:81:36:6c:1a:fc:1b:fa:7b:2a:c2:4d:
                    ed:ca:9f:4c:4f:eb:55:46:98:1c:fa:5a:6c:0b:e4:
                    99:83:f0:66:ec:5a:1c:bb:6f:ee:4e:f9:ff:f6:36:
                    ee:e8:a7:ae:7d:26:c5:df:4a:3e:4f:9e:85:39:27:
                    0f:9b:7f:d8:4a:95:43:38:98:ed:cc:58:6f:b7:ca:
                    b5:6a:62:24:4d:3e:9b:db:21:36:28:81:79:7d:56:
                    84:dd:b0:f5:4b:9c:ef:de:5b:7e:36:b6:d0:06:cb:
                    eb:b9:4b:a1:e8:71:ff:f0:a2:0e:fb:fe:a0:dc:c5:
                    c4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:54:E9:5F:9E:8F:67:23:50:C1:1C:D8:78:EA:0B:D1:B7:FA:03:43
            X509v3 Authority Key Identifier:
                keyid:64:7F:60:78:54:BE:51:96:CA:37:3A:20:27:F6:58:99:31:25:0D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZH9geFS-UZbKNzogJ_ZYmTElDWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/ZH9geFS-UZbKNzogJ_ZYmTElDWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/732555-8eb5-4dbd-a082-6b837ee2ecec/1/ZH9geFS-UZbKNzogJ_ZYmTElDWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d9:70:ec:19:5a:e9:3e:6e:2b:0f:f7:0f:01:63:1e:b6:07:
         13:95:e2:7d:70:60:18:83:eb:05:3c:a4:50:97:e9:23:00:b5:
         25:b6:57:99:c9:98:06:74:3f:c4:39:32:04:dc:28:16:0e:49:
         61:7d:3f:3e:7e:10:83:4a:ed:b4:3a:28:7b:0f:77:5c:70:50:
         9e:79:b0:a4:a7:74:d7:3d:ac:9e:e1:14:b3:1b:21:53:d1:59:
         5b:bf:f6:28:5e:0f:fd:eb:5b:5d:73:f3:af:2b:b6:e2:b0:00:
         f1:5e:5e:7b:30:0d:82:56:dc:d0:ea:b8:8d:9e:99:b7:f8:3d:
         72:e9:3d:29:53:5a:ec:53:76:44:2f:ba:cf:d3:b2:a2:06:7b:
         44:d5:df:7d:19:2c:2b:38:68:1d:72:0a:2b:31:70:02:dd:f6:
         36:c7:6f:b0:59:27:52:a2:51:a7:28:09:44:12:c0:e8:89:0f:
         06:58:30:46:1d:38:53:02:50:4d:b5:2c:0b:39:42:0b:aa:ea:
         c5:6c:41:c9:9b:38:dc:e0:a6:55:09:c7:8e:b2:57:c4:46:b8:
         2b:38:8b:fe:e7:2c:b8:a1:cf:1e:8c:24:69:b9:08:00:86:9a:
         7f:15:72:29:a0:10:a1:ab:8c:ab:9e:e0:bd:14:bc:ec:73:76:
         26:cb:67:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:09 2024 by rpki-client on console-fra.rpki-client.org