Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.mft
File:                     cDQ9_wCyroWh3kzbZV1ZHK1w9cY.mft (raw, json)
Hash identifier:          5Z3iDa+dQfFpVyu3lqQA88wcKzlEaG0uQXBrCM7AT9g=
Subject key identifier:   75:03:DE:6E:1E:60:4B:0D:52:55:18:46:59:57:E0:D9:86:0A:9E:F8
Authority key identifier: 70:34:3D:FF:00:B2:AE:85:A1:DE:4C:DB:65:5D:59:1C:AD:70:F5:C6
Certificate issuer:       /CN=70343dff00b2ae85a1de4cdb655d591cad70f5c6
Certificate serial:       0185C23A03D002AD8A59D5DF867631B3D2DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.mft
Manifest number:          02D0
Signing time:             Wed 18 Jan 2023 00:14:19 +0000
Manifest this update:     Wed 18 Jan 2023 00:14:19 +0000
Manifest next update:     Thu 19 Jan 2023 00:14:19 +0000
Files and hashes:         1: cDQ9_wCyroWh3kzbZV1ZHK1w9cY.crl (hash: TsJtXFtv+5HsCdpu9FvepEMPJ3gE+Oocx0YwU2qK7IQ=)
                          2: dUBKwu7JJlp4VUki1q-_iyYIpjM.roa (hash: Or1cA0Lrof1Rw34e2o92SgJLgrRGAK9XpYH/NXuEvFk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c2:3a:03:d0:02:ad:8a:59:d5:df:86:76:31:b3:d2:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70343dff00b2ae85a1de4cdb655d591cad70f5c6
        Validity
            Not Before: Jan 18 00:14:19 2023 GMT
            Not After : Jan 19 00:14:19 2023 GMT
        Subject: CN=7503de6e1e604b0d525518465957e0d9860a9ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:60:9d:d6:e4:fb:91:c8:9b:6b:7a:20:99:
                    41:77:dc:6c:43:4c:51:39:28:c4:a1:2b:14:3f:17:
                    49:72:09:9c:cd:e2:49:3e:c9:96:17:cf:45:9b:8b:
                    82:1a:4c:d7:80:a3:3e:4a:2c:66:c3:95:d3:d7:53:
                    4f:81:ea:f5:70:38:8b:7f:37:7c:8f:98:65:ea:b8:
                    02:81:7a:4c:fc:a7:c1:30:0f:4f:e9:ce:b6:76:32:
                    ef:88:76:5e:2b:a4:b5:dd:9b:eb:e3:80:cb:89:b5:
                    4d:f1:6c:77:cc:d5:10:d4:d8:9b:e9:bf:b1:e5:83:
                    ba:22:7a:c9:5a:b7:42:1c:7b:d9:c6:4e:34:07:47:
                    ae:84:48:7e:d1:4f:fe:93:55:41:ea:36:47:18:f1:
                    f7:c1:08:2a:26:f5:6f:bc:c7:bd:bc:1c:99:60:ab:
                    d5:3a:b2:58:e0:da:bb:db:9e:08:d6:53:b7:aa:57:
                    0d:e8:d7:46:77:fb:44:4c:53:ae:bf:04:db:17:f2:
                    e6:d3:8d:d4:94:3e:4c:49:03:3b:3e:d8:92:e7:bc:
                    b9:e9:67:a6:7e:77:b6:c5:12:e9:0f:c8:06:fb:38:
                    74:eb:11:63:25:14:1e:ac:3b:67:4b:f6:09:63:e6:
                    47:57:e6:57:ae:13:e7:68:f1:80:b6:8c:17:b2:a7:
                    de:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:03:DE:6E:1E:60:4B:0D:52:55:18:46:59:57:E0:D9:86:0A:9E:F8
            X509v3 Authority Key Identifier:
                keyid:70:34:3D:FF:00:B2:AE:85:A1:DE:4C:DB:65:5D:59:1C:AD:70:F5:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a9b77-b05f-4eff-b934-530b12c437b6/1/cDQ9_wCyroWh3kzbZV1ZHK1w9cY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ed:33:a0:be:84:3f:45:23:2e:af:d2:28:f7:ba:a5:ed:0a:
         83:9d:6a:55:a4:5e:2b:2d:b8:7a:e9:2e:f9:a8:2d:e9:c2:d9:
         39:cd:08:33:b2:2b:ad:57:db:ab:e0:e3:4d:a5:27:75:42:1c:
         47:d9:a0:e0:7a:74:af:47:38:6a:35:85:46:24:a2:90:a7:53:
         70:47:b1:74:76:0c:46:41:13:b3:f7:5d:75:fd:16:14:48:44:
         73:40:9e:8a:11:f4:ca:26:a6:35:75:f5:49:3f:9d:94:e8:57:
         4a:29:9d:f4:1c:7a:03:af:31:18:0c:84:bd:b4:ae:9c:64:62:
         ab:a7:ce:2d:aa:b7:b5:5a:4c:e1:95:f3:2e:bc:73:24:a2:72:
         16:64:87:d8:b6:66:18:ad:2c:a7:b9:bd:52:f7:60:21:ce:10:
         9e:34:f5:bf:38:b7:54:a9:3f:7e:5d:41:cb:f9:b1:1b:ab:74:
         5c:ff:de:73:f5:43:bb:3c:eb:dd:74:0f:99:0d:78:d6:87:cf:
         7c:ec:56:12:2c:34:64:d4:6b:d0:b4:12:77:ae:69:b2:52:2d:
         a6:ed:a9:b4:dc:0c:37:f8:4f:fd:0f:72:a0:4c:d2:48:66:d7:
         e1:11:0d:b9:57:89:ac:9a:b9:36:39:7e:a5:b6:30:f5:a4:b9:
         e0:e1:2e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:10 2024 by rpki-client on console-fra.rpki-client.org