Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/tzbOIPenxVstS-bKSvzDPKi79BQ.mft
File:                     tzbOIPenxVstS-bKSvzDPKi79BQ.mft (raw, json)
Hash identifier:          g0hBpolbMdhXpJQFO4Yj3RhRYzC2qHEk1oh0K+HC9BI=
Subject key identifier:   FB:04:37:C8:86:FF:03:4E:26:F7:85:A0:CB:1E:2C:35:4C:B9:28:03
Authority key identifier: B7:36:CE:20:F7:A7:C5:5B:2D:4B:E6:CA:4A:FC:C3:3C:A8:BB:F4:14
Certificate issuer:       /CN=b736ce20f7a7c55b2d4be6ca4afcc33ca8bbf414
Certificate serial:       01889B44E3002991394E96B1DFFB8CE0288A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzbOIPenxVstS-bKSvzDPKi79BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/tzbOIPenxVstS-bKSvzDPKi79BQ.mft
Manifest number:          03
Signing time:             Thu 08 Jun 2023 13:49:22 +0000
Manifest this update:     Thu 08 Jun 2023 13:49:22 +0000
Manifest next update:     Fri 09 Jun 2023 13:49:22 +0000
Files and hashes:         1: tzbOIPenxVstS-bKSvzDPKi79BQ.crl (hash: 10dNJWyI73XDNk3EyAwgWavjEwT/GWJ871+xPkV+MYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:9b:44:e3:00:29:91:39:4e:96:b1:df:fb:8c:e0:28:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b736ce20f7a7c55b2d4be6ca4afcc33ca8bbf414
        Validity
            Not Before: Jun  8 13:49:22 2023 GMT
            Not After : Jun  9 13:49:22 2023 GMT
        Subject: CN=fb0437c886ff034e26f785a0cb1e2c354cb92803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4d:12:eb:d4:8a:92:1c:32:25:30:48:f0:cf:
                    ff:3d:05:d8:2c:fb:72:0a:c2:86:6c:4f:a1:9e:2e:
                    f0:ed:2f:26:51:a4:df:03:be:17:9c:90:50:21:45:
                    e9:a9:d2:2c:68:fd:8f:71:66:9c:44:78:dd:fe:e2:
                    74:38:14:65:6a:28:12:f8:2d:65:4d:60:c5:ed:4c:
                    8e:7e:a0:5c:d0:2b:fd:62:aa:03:57:2c:14:cd:c1:
                    1b:1e:aa:62:d9:d1:42:4a:23:2e:1a:2f:70:f1:08:
                    ae:03:e4:74:17:e1:89:9a:66:12:99:20:fd:12:65:
                    75:96:92:c6:95:91:fb:b4:02:03:d5:cc:11:1c:56:
                    b6:ba:bf:ea:01:71:af:55:a2:0e:02:7a:46:dd:73:
                    75:b8:cd:97:be:96:cc:68:b5:75:b0:e9:c5:c1:cd:
                    0e:cf:30:1d:bc:d0:31:03:99:d3:5e:8b:d0:2f:45:
                    c4:bf:29:dc:72:dd:47:54:67:5e:28:45:f6:89:a1:
                    c0:f0:76:48:72:ce:bd:c0:12:d4:30:59:7d:b5:c3:
                    cf:3e:21:24:f0:a2:e7:d5:b7:49:7d:92:65:9e:70:
                    ee:89:3b:61:dd:5c:c0:54:45:11:49:e4:d5:6b:b3:
                    b9:83:46:79:35:2a:ee:7a:a6:3e:3f:10:e9:6a:da:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:04:37:C8:86:FF:03:4E:26:F7:85:A0:CB:1E:2C:35:4C:B9:28:03
            X509v3 Authority Key Identifier:
                keyid:B7:36:CE:20:F7:A7:C5:5B:2D:4B:E6:CA:4A:FC:C3:3C:A8:BB:F4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzbOIPenxVstS-bKSvzDPKi79BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/tzbOIPenxVstS-bKSvzDPKi79BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/d1ec71-997d-4212-8058-133a9df16aeb/1/tzbOIPenxVstS-bKSvzDPKi79BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:33:a1:4d:73:85:f3:7b:59:19:85:db:d2:c5:66:4a:55:
         4f:ee:6a:ce:96:a8:82:e9:8c:51:85:38:65:ad:3b:62:b9:f6:
         b8:65:f8:2b:d6:24:9e:1b:3e:8a:ea:00:b8:cf:1e:ab:3f:47:
         73:b3:cb:d7:8c:48:ff:03:d6:6c:dd:bd:e2:b4:5b:ed:f4:e5:
         c0:37:e5:1e:6e:d5:f9:fc:a1:c5:c3:a9:1e:5a:e9:23:3c:6e:
         a7:dd:95:b6:a9:d1:c0:07:dd:5a:4f:0f:5a:4c:61:d3:38:c0:
         cc:83:1e:29:51:2c:f2:b5:7f:99:c3:33:90:2c:00:eb:89:25:
         66:16:50:eb:29:2a:42:ff:62:c1:8c:f4:08:31:d4:17:ba:cf:
         35:c9:30:6d:91:64:c7:44:31:80:85:5e:46:d4:7c:a3:0f:2b:
         1e:2e:ce:9f:d5:ba:7d:49:98:74:d5:c7:a9:ab:79:8e:ab:34:
         1c:c8:5b:8c:70:ba:06:d1:98:75:f7:38:fd:d1:c8:5e:f7:ed:
         4c:70:62:f5:2d:71:89:a0:09:7d:f2:c7:53:80:15:eb:a7:da:
         13:ce:68:0d:83:7f:5c:90:96:0a:8a:6f:fe:97:ee:fa:77:2d:
         e3:85:84:ac:97:7d:8a:7b:5b:f7:7f:4e:d6:f7:84:95:5b:a6:
         d3:b8:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:31 2023 by rpki-client on console.sobornost.net