Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bf5498-791b-4ba2-b322-d007ae3b5035/1/R3OSS5MaW8zZdnps6dh1wtrUZMY.mft
File:                     R3OSS5MaW8zZdnps6dh1wtrUZMY.mft (raw, json)
Hash identifier:          4m91DbSZV+FqomH4R1w/FEQ6PpZqHYPpFncf86QT7TQ=
Subject key identifier:   16:A8:AD:35:99:05:AC:70:73:1D:92:76:15:03:15:55:5F:43:D6:D2
Authority key identifier: 47:73:92:4B:93:1A:5B:CC:D9:76:7A:6C:E9:D8:75:C2:DA:D4:64:C6
Certificate issuer:       /CN=4773924b931a5bccd9767a6ce9d875c2dad464c6
Certificate serial:       018D0C240D0678AEA50F8C8481DA90F505B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3OSS5MaW8zZdnps6dh1wtrUZMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bf5498-791b-4ba2-b322-d007ae3b5035/1/R3OSS5MaW8zZdnps6dh1wtrUZMY.mft
Manifest number:          23
Signing time:             Mon 15 Jan 2024 08:01:45 +0000
Manifest this update:     Mon 15 Jan 2024 08:01:45 +0000
Manifest next update:     Tue 16 Jan 2024 08:01:45 +0000
Files and hashes:         1: R3OSS5MaW8zZdnps6dh1wtrUZMY.crl (hash: pERvOU1RvRkNDhvcwofAuN1E3uOcIX8lFkqQ/ndiq0o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0c:24:0d:06:78:ae:a5:0f:8c:84:81:da:90:f5:05:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4773924b931a5bccd9767a6ce9d875c2dad464c6
        Validity
            Not Before: Jan 15 08:01:45 2024 GMT
            Not After : Jan 16 08:01:45 2024 GMT
        Subject: CN=16a8ad359905ac70731d9276150315555f43d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:61:17:91:f9:16:73:b8:94:7b:e5:cb:16:
                    cf:ed:2e:b5:95:7b:e6:c0:f4:11:0b:4c:f2:27:6d:
                    ac:02:59:56:bc:6d:68:69:52:4c:70:da:ac:da:e3:
                    16:09:52:bf:0a:ce:8c:25:a4:bb:4a:ba:15:15:4c:
                    5b:60:fe:6d:4d:ae:16:d3:d4:24:a4:89:78:0b:de:
                    6a:d8:8b:e1:ab:3a:14:ba:e7:e1:e1:3e:d4:74:50:
                    59:93:0f:91:3c:37:e4:06:42:54:28:61:0e:c4:9f:
                    9d:3d:98:23:e4:61:cf:7d:29:90:65:00:34:b7:2a:
                    c8:d4:8b:00:12:26:94:d4:0f:51:d1:4e:47:d6:84:
                    0e:94:ea:15:47:54:0f:9e:ee:85:52:47:44:f7:cd:
                    e3:a9:a0:9a:4a:68:e3:da:d8:58:ac:19:93:d7:b2:
                    fa:61:6c:7c:0e:f0:0b:ac:b0:c9:57:e6:33:f2:39:
                    1b:0a:ce:a9:1f:a1:33:4e:ee:41:fe:45:d3:6d:d2:
                    68:69:0c:ea:29:14:29:62:e1:d9:4b:8e:a4:ec:d2:
                    96:4d:9c:89:5d:d6:31:20:64:c2:5b:ca:d2:ae:74:
                    d2:ed:46:71:e2:01:77:7e:13:8a:37:fa:ce:21:06:
                    46:92:c9:d7:ed:f7:9d:fd:8a:dd:2d:b5:ec:53:80:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A8:AD:35:99:05:AC:70:73:1D:92:76:15:03:15:55:5F:43:D6:D2
            X509v3 Authority Key Identifier:
                keyid:47:73:92:4B:93:1A:5B:CC:D9:76:7A:6C:E9:D8:75:C2:DA:D4:64:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3OSS5MaW8zZdnps6dh1wtrUZMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bf5498-791b-4ba2-b322-d007ae3b5035/1/R3OSS5MaW8zZdnps6dh1wtrUZMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bf5498-791b-4ba2-b322-d007ae3b5035/1/R3OSS5MaW8zZdnps6dh1wtrUZMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:96:a2:a6:a2:22:fe:29:e6:e4:48:2e:de:ca:2d:43:b0:0a:
         b9:6b:75:a3:a4:05:b2:1d:74:f0:fb:ae:cf:18:af:68:19:1c:
         ea:56:ef:a6:59:6c:f3:b3:95:76:33:67:d6:aa:03:09:93:19:
         a4:4a:99:36:b6:bc:35:2a:e5:fd:ec:e7:93:cb:c4:f1:8a:04:
         85:9d:73:fd:1b:53:db:78:b1:81:35:6c:bf:c7:5c:50:63:37:
         a9:13:1e:4d:19:a2:ca:d3:e1:b1:b2:3e:a3:be:1f:0c:18:05:
         64:cd:5b:a0:86:9b:4d:23:08:b9:03:15:19:ec:0e:53:ce:f6:
         57:c7:ab:27:c0:12:27:b0:75:cd:bf:5f:f8:11:eb:ce:7a:30:
         52:23:7d:0e:39:64:87:cf:f3:3d:2a:f2:fc:85:38:ee:7a:17:
         53:90:5d:c2:ed:46:cb:54:82:30:43:be:d8:59:d2:86:03:df:
         73:4f:19:21:fb:f6:f8:87:88:4f:b6:1a:d6:be:8e:80:95:d3:
         24:86:92:f2:c5:9e:6b:2f:a3:ca:0e:7e:20:37:9e:84:23:8e:
         16:8c:08:e8:eb:64:f8:b0:4a:3b:d9:7a:a2:7f:2c:98:61:ba:
         a5:31:91:93:30:11:29:30:c4:b8:07:9d:b3:ce:2e:ad:71:72:
         9f:ad:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:13 2024 by rpki-client on console-fra.rpki-client.org