Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b23fe7-3028-434f-a2eb-b629b7a00128/1/KosgkxjOD0ecTtrbtjyTWyjbshs.mft
File:                     KosgkxjOD0ecTtrbtjyTWyjbshs.mft (raw, json)
Hash identifier:          rQYpDx8fWAYFwhQSNKBU7W9Hp74GhhEZzc+nMm2yxZQ=
Subject key identifier:   96:81:79:26:D9:1F:C1:3F:AD:FC:3F:C4:CE:68:42:0D:0A:1E:8D:09
Authority key identifier: 2A:8B:20:93:18:CE:0F:47:9C:4E:DA:DB:B6:3C:93:5B:28:DB:B2:1B
Certificate issuer:       /CN=2a8b209318ce0f479c4edadbb63c935b28dbb21b
Certificate serial:       018BDBA7778EAF5D26AD6E0E01FFDFE8752F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KosgkxjOD0ecTtrbtjyTWyjbshs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b23fe7-3028-434f-a2eb-b629b7a00128/1/KosgkxjOD0ecTtrbtjyTWyjbshs.mft
Manifest number:          0868
Signing time:             Fri 17 Nov 2023 05:01:06 +0000
Manifest this update:     Fri 17 Nov 2023 05:01:06 +0000
Manifest next update:     Sat 18 Nov 2023 05:01:06 +0000
Files and hashes:         1: KosgkxjOD0ecTtrbtjyTWyjbshs.crl (hash: qvwU12reUwDH2xtV/T9/u04OVLBjwa5H6p3QD6VZqaY=)
                          2: k5esYaK4nuAk5q2qIL7GtQd-ot0.roa (hash: YMUqp1mo44gZUFMmw0858UEibwm2RpwpjEtj9zTmbO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:db:a7:77:8e:af:5d:26:ad:6e:0e:01:ff:df:e8:75:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a8b209318ce0f479c4edadbb63c935b28dbb21b
        Validity
            Not Before: Nov 17 05:01:06 2023 GMT
            Not After : Nov 18 05:01:06 2023 GMT
        Subject: CN=96817926d91fc13fadfc3fc4ce68420d0a1e8d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:51:69:2c:59:87:0a:2c:7b:79:04:79:4d:
                    4f:37:64:48:30:e4:ac:d2:50:ec:77:35:a7:8c:46:
                    05:21:61:80:f1:08:6e:a5:82:03:18:b6:14:09:a5:
                    c8:2c:7f:44:d8:14:98:c8:7c:00:1d:54:a9:ff:17:
                    86:cc:f0:74:fe:3c:6c:d6:fd:d6:56:0e:b3:b6:89:
                    20:ec:30:18:03:34:ac:09:ad:6a:c4:92:87:ef:29:
                    69:d9:66:04:5e:74:3e:46:ff:86:6d:70:22:d2:c7:
                    a8:4e:18:4d:d8:41:4f:6c:45:b6:0b:1a:90:15:00:
                    56:83:e3:d7:45:68:36:4e:d7:62:be:76:cb:d9:fb:
                    e7:0d:7b:62:f7:2d:c3:cf:cf:d6:8e:9d:81:7a:97:
                    e4:1c:b8:9b:1c:ea:c8:0b:3d:55:f1:a4:28:9b:87:
                    7f:bc:45:67:79:a6:4c:36:16:76:a7:af:e4:dc:2c:
                    07:fe:1b:ae:55:0a:0b:55:3b:20:95:d2:cf:be:28:
                    4e:bf:c6:b1:77:3c:88:4c:94:eb:d7:42:43:64:1a:
                    9a:91:5f:b0:23:8a:71:d2:0f:c5:25:05:46:e6:db:
                    ae:98:ad:1c:1d:7f:30:3d:8d:d4:17:b1:5d:e3:63:
                    52:24:a1:48:91:e2:c5:d8:4e:bf:6c:5b:3d:71:72:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:81:79:26:D9:1F:C1:3F:AD:FC:3F:C4:CE:68:42:0D:0A:1E:8D:09
            X509v3 Authority Key Identifier:
                keyid:2A:8B:20:93:18:CE:0F:47:9C:4E:DA:DB:B6:3C:93:5B:28:DB:B2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KosgkxjOD0ecTtrbtjyTWyjbshs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b23fe7-3028-434f-a2eb-b629b7a00128/1/KosgkxjOD0ecTtrbtjyTWyjbshs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b23fe7-3028-434f-a2eb-b629b7a00128/1/KosgkxjOD0ecTtrbtjyTWyjbshs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:8d:b4:68:ab:cc:6f:1a:d7:6f:fd:4f:56:c7:72:bf:3a:
         b7:3a:f1:dd:7f:df:9f:a5:f2:57:22:d0:b4:4b:6d:2f:56:d7:
         c9:18:f2:b0:a8:f0:17:79:15:17:aa:a0:8d:5e:74:b0:35:15:
         08:b5:0c:fe:05:bd:82:bd:e4:1c:46:88:29:1d:cd:2f:dd:c6:
         df:65:f8:7a:c9:20:4c:48:df:69:da:83:b4:55:76:f3:3a:97:
         e2:9b:f8:06:5f:9d:91:92:31:d0:1b:ee:37:dc:d8:75:85:1e:
         b7:8c:ca:d3:3b:c9:22:3c:a3:7b:55:f5:c5:55:dc:c2:2a:53:
         83:f6:ee:02:ea:68:21:55:83:43:a3:24:4c:35:4a:2d:ba:52:
         c2:97:38:7e:63:86:e1:0f:e5:54:7c:a1:59:eb:10:49:b6:15:
         ba:a3:0b:d5:97:98:45:19:f7:90:51:b7:27:9c:3f:79:72:81:
         06:6f:ef:23:14:84:66:cd:e4:ae:a0:15:8d:01:46:eb:db:25:
         4a:28:f6:95:19:1e:18:ac:e3:76:f9:1e:64:e2:28:12:22:15:
         1b:5a:93:d9:ea:cd:09:1e:72:8b:93:8c:79:55:96:59:03:95:
         6a:a9:c0:77:f0:a7:7e:93:0a:38:b3:54:45:a0:a1:4a:70:86:
         07:83:90:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:20 2024 by rpki-client on console-fra.rpki-client.org