Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3feb8c-2c4a-4151-b086-45a19c320bb5/1/ghajZRBQ0Rx5PgokckAAXOJ9fl4.mft
File:                     ghajZRBQ0Rx5PgokckAAXOJ9fl4.mft (raw, json)
Hash identifier:          EHl1iMOIaYMpR8Gr7gJepanprsqCjnCM6sBw+QLmVvs=
Subject key identifier:   10:96:93:28:1B:A5:55:4E:6F:1F:B0:A1:97:25:F7:D0:29:BB:B7:E1
Authority key identifier: 82:16:A3:65:10:50:D1:1C:79:3E:0A:24:72:40:00:5C:E2:7D:7E:5E
Certificate issuer:       /CN=8216a3651050d11c793e0a247240005ce27d7e5e
Certificate serial:       018BAD4DA3531F135BB7A933169BB7FF866C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ghajZRBQ0Rx5PgokckAAXOJ9fl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/3feb8c-2c4a-4151-b086-45a19c320bb5/1/ghajZRBQ0Rx5PgokckAAXOJ9fl4.mft
Manifest number:          0F75
Signing time:             Wed 08 Nov 2023 05:00:28 +0000
Manifest this update:     Wed 08 Nov 2023 05:00:28 +0000
Manifest next update:     Thu 09 Nov 2023 05:00:28 +0000
Files and hashes:         1: ghajZRBQ0Rx5PgokckAAXOJ9fl4.crl (hash: nRbnNJ2BeF1iSY/g4tApDQ6/vbRmVwIJB3i+ok3Vh38=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ad:4d:a3:53:1f:13:5b:b7:a9:33:16:9b:b7:ff:86:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8216a3651050d11c793e0a247240005ce27d7e5e
        Validity
            Not Before: Nov  8 05:00:28 2023 GMT
            Not After : Nov  9 05:00:28 2023 GMT
        Subject: CN=109693281ba5554e6f1fb0a19725f7d029bbb7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:06:61:cd:4e:c2:c4:54:1d:e5:a6:0a:c6:
                    5e:20:55:60:d3:92:e4:b6:43:58:a1:c3:25:bc:43:
                    5b:4d:69:f4:30:fc:bf:3a:06:00:94:34:2d:10:74:
                    a7:9c:07:2b:fc:4c:3e:4f:bf:cb:2e:b8:b2:e3:18:
                    83:51:5d:d0:84:50:9d:e6:3e:8f:18:c2:12:41:6a:
                    91:7b:c8:aa:b4:b3:0a:7d:80:6d:64:17:42:14:6b:
                    15:89:11:16:e3:ce:ec:5f:00:8e:9a:c0:79:0e:97:
                    4d:87:9e:8b:90:eb:a9:b3:1f:2a:88:37:ce:a9:44:
                    21:93:af:06:eb:42:8e:7f:ab:19:47:c9:b4:e2:48:
                    4f:13:cd:cd:97:31:17:69:3e:64:45:2c:21:92:a9:
                    2a:c3:11:9f:91:29:eb:3e:65:a4:99:7c:81:76:49:
                    9c:59:ec:59:7e:25:1f:f4:b9:f4:63:2b:c4:bd:ae:
                    81:a7:58:41:94:d2:9f:0f:1a:24:75:22:60:4a:63:
                    60:d8:aa:65:0b:61:24:e2:60:e8:4a:6d:c8:ba:c4:
                    c6:6e:5c:8a:36:f4:ea:ed:43:d3:c4:0d:fc:63:25:
                    fd:bc:c7:ed:7e:98:8b:c0:6d:1d:8c:b2:d2:78:1d:
                    31:41:e0:80:6d:50:c2:13:eb:e7:e7:98:d0:92:91:
                    68:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:96:93:28:1B:A5:55:4E:6F:1F:B0:A1:97:25:F7:D0:29:BB:B7:E1
            X509v3 Authority Key Identifier:
                keyid:82:16:A3:65:10:50:D1:1C:79:3E:0A:24:72:40:00:5C:E2:7D:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghajZRBQ0Rx5PgokckAAXOJ9fl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3feb8c-2c4a-4151-b086-45a19c320bb5/1/ghajZRBQ0Rx5PgokckAAXOJ9fl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3feb8c-2c4a-4151-b086-45a19c320bb5/1/ghajZRBQ0Rx5PgokckAAXOJ9fl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:39:11:09:17:4a:08:20:09:b0:9d:3f:9c:75:94:10:69:06:
         15:c8:df:2a:02:4e:61:d7:ed:2e:ac:7a:68:46:f9:74:2c:ad:
         49:b8:76:52:a4:a5:33:2e:d8:3d:58:63:cc:85:d4:94:56:ee:
         5d:f1:5a:86:3e:23:07:8f:01:b7:6d:b8:24:89:fa:33:89:af:
         07:5e:b6:6d:cf:d9:ab:1d:7a:4e:ce:a6:6c:11:97:02:15:26:
         2f:f2:36:77:23:de:5a:42:ca:87:3d:ca:02:c9:b8:21:8a:ff:
         b2:b8:05:04:f5:0b:ea:3e:c5:4b:1b:3e:da:3f:1b:7b:49:de:
         2a:4a:92:e9:63:e3:2e:58:8b:66:2f:9f:07:09:3b:5c:d6:2c:
         2e:78:fe:93:b9:6a:46:7a:bf:c2:a1:d5:3e:3c:c2:5a:16:39:
         b6:84:a0:dd:07:39:4d:4c:da:c4:11:63:d9:16:8c:54:a9:b2:
         a3:03:20:c7:1a:aa:a9:15:a9:6d:0f:18:49:77:98:df:80:1e:
         da:f6:9e:8b:6f:5e:d8:e5:19:e6:04:1c:97:c5:b3:9b:f4:33:
         b6:bb:b3:15:7f:2d:d2:8b:f8:d6:c3:12:07:ce:95:e8:d0:ef:
         a8:d3:4a:06:74:74:53:d1:85:35:4e:1a:5f:9e:56:f5:31:9f:
         62:b7:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:16 2024 by rpki-client on console-fra.rpki-client.org