Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/QBlWYyRT7gAeDFM4CnCXlDT1q0M.mft
File:                     QBlWYyRT7gAeDFM4CnCXlDT1q0M.mft (raw, json)
Hash identifier:          nwx2PJ7/H2AFNdf0txNWXNRnKnSnXrK8Ozhck4wnOKU=
Subject key identifier:   43:A7:E3:19:A1:C6:81:90:B2:D4:F3:FF:22:01:9E:17:7F:02:37:5C
Authority key identifier: 40:19:56:63:24:53:EE:00:1E:0C:53:38:0A:70:97:94:34:F5:AB:43
Certificate issuer:       /CN=401956632453ee001e0c53380a70979434f5ab43
Certificate serial:       018C3822FE50D5CC3AEE7EB7D0D5B737C374
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QBlWYyRT7gAeDFM4CnCXlDT1q0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/QBlWYyRT7gAeDFM4CnCXlDT1q0M.mft
Manifest number:          08AB
Signing time:             Tue 05 Dec 2023 04:01:06 +0000
Manifest this update:     Tue 05 Dec 2023 04:01:06 +0000
Manifest next update:     Wed 06 Dec 2023 04:01:06 +0000
Files and hashes:         1: QBlWYyRT7gAeDFM4CnCXlDT1q0M.crl (hash: fIvHM1Pg7yCKHeYelcyBWb9pTc6JeetppFIuPf5OtaU=)
                          2: evyQ0-CFsMXwdrHhTwzIj0_Tf6Q.roa (hash: ySrnp63KLwGO21qZ2onfq+plS1RwOoQlrJhlm1OL6t0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:38:22:fe:50:d5:cc:3a:ee:7e:b7:d0:d5:b7:37:c3:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401956632453ee001e0c53380a70979434f5ab43
        Validity
            Not Before: Dec  5 04:01:06 2023 GMT
            Not After : Dec  6 04:01:06 2023 GMT
        Subject: CN=43a7e319a1c68190b2d4f3ff22019e177f02375c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:ce:e7:89:44:ee:92:ac:83:82:42:c1:98:
                    e7:0e:ac:b7:24:bf:9b:7d:84:bb:fe:51:10:d1:10:
                    12:bd:56:23:83:81:19:0e:27:07:b5:ba:81:e3:76:
                    fb:f8:73:e6:75:98:5a:25:eb:df:de:e8:62:80:8c:
                    a9:c0:b3:e1:c7:68:bc:0a:b3:83:32:18:f3:91:88:
                    38:9c:6c:63:e8:f1:85:97:dd:d6:52:62:09:5c:8f:
                    3c:05:a7:8d:f2:6b:05:07:3e:2c:67:12:92:74:2c:
                    6e:17:1b:31:2f:e8:c5:09:ef:5a:58:77:9f:2c:bc:
                    2d:db:16:94:85:a8:98:42:3b:fb:79:00:fc:9c:2c:
                    64:51:e8:04:6b:83:9a:e4:7d:e6:85:10:44:04:0b:
                    f8:07:09:2e:a0:6d:e6:7b:cd:6b:37:27:07:02:bd:
                    55:39:c0:a8:ef:6d:26:67:0e:f5:dc:d9:24:5a:a5:
                    b1:c0:15:8a:c4:62:4d:8f:d8:2c:b1:f8:e6:bf:57:
                    6f:03:39:0f:9a:ac:7d:4b:6d:f1:c8:6b:bd:3e:0f:
                    ee:48:ef:bd:8e:21:ff:f7:25:10:5a:ae:75:2b:26:
                    fb:98:61:e2:19:5f:a1:bd:c0:a5:14:af:87:f4:53:
                    3f:06:cb:9a:8f:28:7b:8d:38:8e:56:1e:8c:3f:55:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:E3:19:A1:C6:81:90:B2:D4:F3:FF:22:01:9E:17:7F:02:37:5C
            X509v3 Authority Key Identifier:
                keyid:40:19:56:63:24:53:EE:00:1E:0C:53:38:0A:70:97:94:34:F5:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBlWYyRT7gAeDFM4CnCXlDT1q0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/QBlWYyRT7gAeDFM4CnCXlDT1q0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7be08b-32a5-47e6-955b-c255ddaeb436/1/QBlWYyRT7gAeDFM4CnCXlDT1q0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:1d:9e:f6:ad:03:fd:6f:5b:dc:a9:7b:0c:4b:7f:47:ab:
         98:bf:48:52:24:48:d8:a6:7f:70:c3:1e:3f:36:ca:eb:7d:d3:
         86:b1:89:c1:d9:f1:6a:28:3a:24:91:9e:96:d8:ac:75:b5:99:
         a5:bb:22:ca:21:87:a6:26:8a:a5:6a:aa:da:2a:85:cd:42:84:
         03:55:91:58:5e:e4:b5:3c:f3:fe:71:8a:a6:86:64:b1:fd:42:
         53:fd:cb:ec:e1:3d:3c:64:13:a1:8f:70:25:0f:d5:82:0b:8b:
         70:cb:f2:5b:d5:e9:fe:62:0a:34:80:e4:ee:20:a0:91:bc:9c:
         84:fd:93:10:82:6b:fb:92:89:4d:16:5b:dd:38:ce:32:5a:4b:
         0a:80:4a:de:c0:4e:9a:f1:83:08:2d:18:45:50:99:21:7c:2b:
         bf:82:b6:6e:4b:5f:3e:b9:72:2a:e2:df:e6:32:cf:f3:c1:3c:
         e3:55:c3:86:78:39:cd:1b:ef:76:41:71:25:5b:91:b0:31:41:
         e4:13:c3:a1:db:c4:28:b6:02:ea:c5:37:46:2a:9b:6c:ac:93:
         5b:e2:4b:6a:10:b4:1d:a7:aa:32:98:70:25:0a:3b:4c:16:ff:
         35:14:3c:a2:4d:ac:60:b3:bb:48:18:5f:28:e6:fc:01:fb:9d:
         73:87:89:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:12 2024 by rpki-client on console-ams.rpki-client.org