Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.mft
File:                     kT9MnGOI8KA0J2IAnjJOwTJxM34.mft (raw, json)
Hash identifier:          eOCJKodi/ZBTQpZERwdAUjA8zFor636rM47scDVUWBY=
Subject key identifier:   15:11:1D:65:91:18:45:BB:40:AB:21:84:A6:E0:BC:86:E8:BD:30:1D
Authority key identifier: 91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E
Certificate issuer:       /CN=913f4c9c6388f0a0342762009e324ec13271337e
Certificate serial:       0189D456B69F06571A6C55B11681E1294B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.mft
Manifest number:          0854
Signing time:             Tue 08 Aug 2023 08:49:59 +0000
Manifest this update:     Tue 08 Aug 2023 08:49:59 +0000
Manifest next update:     Wed 09 Aug 2023 08:49:59 +0000
Files and hashes:         1: Z3LVGRibJD3FOlJiXtRqMUO4xDM.roa (hash: nak8c0H0SvVfOFUvEyDjrRweBCjpwCoXO5Oefl1gbnM=)
                          2: kT9MnGOI8KA0J2IAnjJOwTJxM34.crl (hash: cRX2xmkuC8AD5BfmgA+FFQ2wvyULx0qwfwEc77gOcIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:56:b6:9f:06:57:1a:6c:55:b1:16:81:e1:29:4b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913f4c9c6388f0a0342762009e324ec13271337e
        Validity
            Not Before: Aug  8 08:49:59 2023 GMT
            Not After : Aug  9 08:49:59 2023 GMT
        Subject: CN=15111d65911845bb40ab2184a6e0bc86e8bd301d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:91:c8:6d:a6:3a:9f:da:0f:39:5d:d2:f6:
                    c3:85:13:3d:17:54:4d:27:06:1b:e9:cd:37:be:a6:
                    ae:32:c3:2a:c0:a6:69:80:fd:1c:04:43:74:e5:57:
                    c1:8c:12:9a:3a:41:51:c7:8c:47:3a:09:4c:f7:5e:
                    74:43:99:e3:a0:73:0c:07:b8:eb:54:2b:5d:89:d0:
                    53:cf:5e:ec:5b:b3:b6:fa:7b:28:81:e6:7d:35:ce:
                    8c:be:87:2f:37:fa:76:d6:b4:c3:40:bf:2a:51:14:
                    5b:f5:e2:a7:c1:f7:e3:28:34:04:9f:88:b4:b6:a6:
                    93:0f:60:45:71:a8:4e:d6:86:df:28:a8:74:1d:ce:
                    2e:94:cf:56:dd:6c:fd:c3:ee:65:df:b1:e0:4f:67:
                    82:03:6b:49:4c:ba:ba:9d:86:4e:de:7f:9b:bc:86:
                    7f:ca:d9:41:2f:91:37:7b:84:ac:ab:cc:47:39:af:
                    59:da:a3:6f:9c:3f:3d:26:98:80:63:fe:8e:7a:1d:
                    52:a8:af:b1:aa:bb:70:09:29:a7:2d:69:a4:bd:5e:
                    c9:28:a4:2a:58:ce:36:ee:29:eb:c8:d8:1c:fb:ff:
                    30:c9:31:bb:87:b9:f6:6e:e3:11:3c:a4:75:40:c8:
                    05:27:bf:1a:cd:85:2d:ba:2a:3f:2d:fc:c3:4f:ef:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:11:1D:65:91:18:45:BB:40:AB:21:84:A6:E0:BC:86:E8:BD:30:1D
            X509v3 Authority Key Identifier:
                keyid:91:3F:4C:9C:63:88:F0:A0:34:27:62:00:9E:32:4E:C1:32:71:33:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kT9MnGOI8KA0J2IAnjJOwTJxM34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1c7481-e6a0-4a1c-87e6-4027423aa38c/1/kT9MnGOI8KA0J2IAnjJOwTJxM34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:6e:3b:a4:da:ae:fa:35:9b:1c:04:f8:68:6a:bf:3e:64:97:
         59:db:6c:52:d6:55:9b:e5:fd:c4:b4:51:ad:d1:f4:62:97:47:
         38:31:74:71:07:65:9a:e2:8c:62:d6:c0:d4:1e:69:84:dd:9c:
         34:2b:43:7d:d3:94:c5:72:c0:7e:73:28:fc:b3:85:68:99:2c:
         bf:aa:d1:1b:a7:e8:f9:5c:a8:04:e9:ad:50:e7:3b:2b:87:8d:
         74:22:3e:61:9e:10:43:34:06:60:b9:fc:01:42:53:89:17:b3:
         ee:44:cc:00:9a:23:11:bd:49:ad:0a:7c:77:45:4f:a7:9e:4a:
         4e:be:81:23:9c:0c:22:5e:e1:c3:4f:82:a7:3d:23:a1:6a:54:
         10:62:96:3d:f4:6d:bd:49:7e:ad:16:85:90:c9:bd:c0:4f:41:
         3a:e0:c6:24:c2:07:16:af:a7:e7:8b:75:5c:39:48:21:c0:ef:
         30:41:4d:69:05:df:2e:46:83:11:f0:80:3b:19:38:d2:81:85:
         9e:4e:51:92:91:51:48:42:5e:2a:fa:9c:22:72:f7:8f:00:a8:
         0b:1b:0f:51:c9:d0:01:fc:c4:4c:55:0f:50:aa:94:a1:02:c4:
         21:df:57:0c:68:5b:fa:95:aa:99:fd:3f:19:b5:11:4f:8f:b5:
         06:19:e4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:14:24 2023 by rpki-client on console-ams.rpki-client.org