Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.mft
File:                     G74s_7WsriD9ejp1rduru4HUdgA.mft (raw, json)
Hash identifier:          0uVLNkHDCE3JcKJ3PxFaBZmwSjuUrCT/67f0miRod4A=
Subject key identifier:   BA:7D:7A:12:D1:90:9A:B2:76:65:A6:C6:B0:B8:C0:F8:DA:55:8C:69
Authority key identifier: 1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00
Certificate issuer:       /CN=1bbe2cffb5acae20fd7a3a75addbabbb81d47600
Certificate serial:       018CC8F9EA154D659FF696BF1FDE32EDBC19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G74s_7WsriD9ejp1rduru4HUdgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.mft
Manifest number:          034B
Signing time:             Tue 02 Jan 2024 07:01:10 +0000
Manifest this update:     Tue 02 Jan 2024 07:01:10 +0000
Manifest next update:     Wed 03 Jan 2024 07:01:10 +0000
Files and hashes:         1: 5qKykUUqkbLjKLHbz2U1FZ6dibc.roa (hash: Tcy9CQIYBp57Qhgnrq9yN3y6l+JPofhqPEUzeJMb3Mo=)
                          2: G74s_7WsriD9ejp1rduru4HUdgA.crl (hash: 1SEzZQnOhBG2jr05dencah1x1tkeTUxMINz1VWWTLeY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:f9:ea:15:4d:65:9f:f6:96:bf:1f:de:32:ed:bc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bbe2cffb5acae20fd7a3a75addbabbb81d47600
        Validity
            Not Before: Jan  2 07:01:10 2024 GMT
            Not After : Jan  3 07:01:10 2024 GMT
        Subject: CN=ba7d7a12d1909ab27665a6c6b0b8c0f8da558c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:e4:91:f8:bd:9b:51:83:1d:bd:89:37:01:
                    30:64:49:fe:36:7e:33:5a:2b:42:b0:0d:e3:09:12:
                    62:6a:db:92:a4:04:7c:ec:5e:6f:83:c0:b7:d9:18:
                    e4:b8:fa:58:4b:ab:19:3e:45:26:cb:4f:52:98:91:
                    4a:57:9a:02:9d:f0:33:6c:d5:56:5e:59:f0:ca:d7:
                    e8:8d:36:e0:fe:29:b3:be:99:f2:63:a3:df:49:bf:
                    35:b3:4c:8b:8a:d0:53:52:d6:21:29:ce:01:2a:01:
                    5b:cd:49:b2:48:49:71:1a:d6:d4:bf:c3:f2:d4:59:
                    f8:12:62:64:68:86:de:eb:72:9a:ea:e7:7a:03:22:
                    f0:a3:11:9e:ac:b5:25:89:55:a1:c8:fd:6f:72:1e:
                    64:99:15:92:33:28:f6:46:94:86:e9:95:d9:12:08:
                    c5:2a:b6:32:c1:90:6b:68:dd:ba:62:05:00:80:cd:
                    29:2f:b9:2b:41:b5:0e:c8:ce:41:c4:2c:1c:22:e3:
                    bd:df:1e:9e:92:8f:38:3c:1b:ab:da:be:12:75:e9:
                    80:8d:b1:ce:c3:f0:73:6d:46:ab:90:2f:e4:df:54:
                    08:27:d0:82:0c:e1:d8:0e:58:4e:a3:d8:02:b1:76:
                    53:1b:bd:cb:bf:f1:c2:2a:d3:79:14:bb:f3:06:d6:
                    d8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:7A:12:D1:90:9A:B2:76:65:A6:C6:B0:B8:C0:F8:DA:55:8C:69
            X509v3 Authority Key Identifier:
                keyid:1B:BE:2C:FF:B5:AC:AE:20:FD:7A:3A:75:AD:DB:AB:BB:81:D4:76:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G74s_7WsriD9ejp1rduru4HUdgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a46763-19cc-434c-b229-38c07c0c8f59/1/G74s_7WsriD9ejp1rduru4HUdgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:12:96:e9:43:8c:f4:1e:19:21:3a:12:59:d8:2e:76:7a:d0:
         8e:cd:3c:7f:d2:fa:6f:1a:db:d3:81:ad:f3:7c:bf:a5:c8:af:
         e8:0c:5a:4c:58:87:0f:fb:38:92:69:cf:19:ee:7f:fa:bf:e0:
         b4:ac:23:43:7a:32:fb:f0:2f:6e:c9:f2:d2:1c:ed:e6:24:d6:
         7a:ac:bc:59:6b:68:80:01:43:44:a3:07:15:dc:19:c5:3f:9c:
         e1:14:34:78:83:75:60:a7:ca:00:7d:d2:6a:04:00:30:7a:c9:
         e1:56:6b:89:5c:60:c9:75:48:35:2a:4f:d5:c1:80:91:b2:f6:
         ee:61:89:83:44:6b:1e:62:7b:bc:b4:aa:84:eb:63:0d:2b:f7:
         d2:6c:5b:6b:e4:a2:f9:b0:7c:a6:2c:ea:3a:74:53:d6:a1:77:
         23:2b:18:00:e0:4d:f6:75:de:e8:3d:82:be:af:a4:ee:cc:9b:
         8d:8c:21:e0:ee:8e:cb:b4:df:53:4f:db:7e:c3:b4:00:16:3b:
         3f:8d:96:d5:18:f1:04:b2:34:96:b3:14:81:1f:35:c7:5d:ab:
         ce:55:9a:7e:71:d4:de:39:0c:8b:13:ad:28:5b:38:13:0c:3c:
         96:85:5c:85:9e:4e:71:4c:93:7d:ab:45:e1:41:1a:f9:5c:99:
         f5:78:b5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:13 2024 by rpki-client on console-fra.rpki-client.org