Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/845783-5c0f-49dd-aebb-5f900a64cc96/1/iKMFFMsJ_5OgMQ16TnsmxiRrIKE.mft
File:                     iKMFFMsJ_5OgMQ16TnsmxiRrIKE.mft (raw, json)
Hash identifier:          dgrgFagK5GM0+OfoADJtRiCZugb3VI643j3FsmITYZY=
Subject key identifier:   83:E4:30:E5:DB:E6:EA:CB:F1:AF:19:3E:F9:F2:BA:EE:3E:D8:71:97
Authority key identifier: 88:A3:05:14:CB:09:FF:93:A0:31:0D:7A:4E:7B:26:C6:24:6B:20:A1
Certificate issuer:       /CN=88a30514cb09ff93a0310d7a4e7b26c6246b20a1
Certificate serial:       018F75E88DBBBE0413FB5B2AD24830F684DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKMFFMsJ_5OgMQ16TnsmxiRrIKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/845783-5c0f-49dd-aebb-5f900a64cc96/1/iKMFFMsJ_5OgMQ16TnsmxiRrIKE.mft
Manifest number:          014D
Signing time:             Tue 14 May 2024 07:02:05 +0000
Manifest this update:     Tue 14 May 2024 07:02:05 +0000
Manifest next update:     Wed 15 May 2024 07:02:05 +0000
Files and hashes:         1: bI_UPN2fGpmRbIQmxdjvG6D6qyc.roa (hash: 8Hw/ELELxlNCCL+zWeaZ9rKRqMsYbzB+gHlmoy8aIzM=)
                          2: iKMFFMsJ_5OgMQ16TnsmxiRrIKE.crl (hash: 14pViWVBWfcm09mZpkKGtHygH/bg2Q8AuCiKi4ENYsQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:75:e8:8d:bb:be:04:13:fb:5b:2a:d2:48:30:f6:84:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a30514cb09ff93a0310d7a4e7b26c6246b20a1
        Validity
            Not Before: May 14 07:02:05 2024 GMT
            Not After : May 15 07:02:05 2024 GMT
        Subject: CN=83e430e5dbe6eacbf1af193ef9f2baee3ed87197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:02:68:c5:14:16:96:64:8b:9c:47:8a:4d:
                    c4:72:0f:16:3d:16:7b:87:74:64:d7:67:bb:9f:34:
                    21:4f:22:43:c7:df:01:78:47:80:7f:31:f2:24:73:
                    04:c7:9c:3e:40:f4:55:41:dd:66:34:c7:79:14:23:
                    89:fb:7f:9f:ee:93:b1:3b:10:15:ab:26:f7:78:4b:
                    61:e1:1c:d1:95:41:18:8a:57:fb:d3:61:c7:7e:db:
                    36:34:06:3c:6d:84:d3:9a:e1:7f:ba:25:89:6b:32:
                    be:4e:ff:c9:e4:27:6e:1d:0d:c1:d2:2e:ab:ac:be:
                    1a:d8:7a:ca:e7:11:6e:b0:4b:b6:f9:c8:cb:83:39:
                    d3:57:57:cc:fb:92:45:66:f9:84:54:5c:46:2d:a0:
                    35:c4:8d:9c:0a:fe:7f:d6:f9:0b:86:9d:b9:08:08:
                    d2:77:74:2c:3f:39:35:32:4b:f6:3e:4a:3a:a2:29:
                    26:ae:ab:25:33:f2:82:d4:ce:ca:8b:ea:6e:18:c4:
                    ef:07:40:cc:04:ef:cf:5a:c4:c9:b1:2a:d3:8b:39:
                    70:66:3f:8d:60:12:25:7e:d6:f7:75:7e:92:dc:8c:
                    83:32:6a:16:1a:4c:e5:bb:9b:71:4f:bd:e0:5e:ed:
                    92:c4:7d:fc:0c:01:df:53:55:d9:6e:74:d3:b2:57:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E4:30:E5:DB:E6:EA:CB:F1:AF:19:3E:F9:F2:BA:EE:3E:D8:71:97
            X509v3 Authority Key Identifier:
                keyid:88:A3:05:14:CB:09:FF:93:A0:31:0D:7A:4E:7B:26:C6:24:6B:20:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKMFFMsJ_5OgMQ16TnsmxiRrIKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/845783-5c0f-49dd-aebb-5f900a64cc96/1/iKMFFMsJ_5OgMQ16TnsmxiRrIKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/845783-5c0f-49dd-aebb-5f900a64cc96/1/iKMFFMsJ_5OgMQ16TnsmxiRrIKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:14:9f:e0:02:ff:fe:c1:ad:5f:3d:63:24:90:26:c0:61:4f:
         31:9d:08:c6:78:cc:b6:47:8e:fc:0e:9f:3b:f2:7e:3c:8b:db:
         1c:fc:68:05:55:2d:b2:ad:d5:43:04:b4:4d:d7:2a:60:90:13:
         60:4e:a3:e0:04:d8:8b:e5:e6:7a:6e:be:2c:d9:7e:65:d1:e9:
         b2:60:1d:a3:ae:7c:54:4f:cd:e3:a7:a2:7a:b0:9b:e2:54:9d:
         7b:0b:5a:05:cc:eb:bc:95:7d:fc:24:0f:20:e9:b2:ef:5d:7b:
         60:74:3c:38:cd:04:36:e0:e7:2b:1e:d6:b9:d6:1c:08:82:e1:
         86:e5:a8:fe:fd:bc:7a:8f:c5:1e:e4:f1:07:6e:cc:a5:e0:0d:
         47:28:29:12:d0:6b:24:55:c5:8a:89:bc:21:f1:31:8c:08:4a:
         d2:92:91:0e:d4:30:86:a6:47:56:11:4b:6e:67:a0:72:54:bd:
         94:e5:a3:62:ec:a0:dc:af:ea:1c:57:96:02:75:58:79:6b:4c:
         94:ab:50:22:23:72:e2:54:28:55:a2:54:ee:3f:d8:e1:0b:91:
         c7:17:4d:fe:c2:f9:1f:df:16:c7:5c:2a:46:53:df:98:12:a3:
         6b:68:f2:fe:ed:0b:dc:23:d4:50:e9:35:f5:d3:d7:75:54:55:
         15:06:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 19:15:30 2024 by rpki-client on console-fra.rpki-client.org