Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft
File:                     QJVm2b91OLcBz1bzqFyZUrvHQaY.mft (raw, json)
Hash identifier:          0T2cPM11INZLx2bJJN7QnErssIJoxYiGGQJ5VDI3Kz4=
Subject key identifier:   55:5C:D3:76:31:A1:4D:9C:81:51:7D:3A:F9:12:C9:0D:47:60:A4:0F
Authority key identifier: 40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6
Certificate issuer:       /CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
Certificate serial:       0193252F004234065AB604A7F1EE82C623F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft
Manifest number:          056C
Signing time:             Wed 13 Nov 2024 11:00:57 +0000
Manifest this update:     Wed 13 Nov 2024 11:00:57 +0000
Manifest next update:     Thu 14 Nov 2024 11:00:57 +0000
Files and hashes:         1: FRVbaZuu2CxXDWb4t5_55-nF5Nw.roa (hash: DJxFJRuAFOSA41xK5vCLKgFu0Dy9jhdcYa2OYdAi0s0=)
                          2: QJVm2b91OLcBz1bzqFyZUrvHQaY.crl (hash: jWzHe8M4ZoiUZeAFJ88+FKKCAyQctGALyK57q/ThIxU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:25:2f:00:42:34:06:5a:b6:04:a7:f1:ee:82:c6:23:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=409566d9bf7538b701cf56f3a85c9952bbc741a6
        Validity
            Not Before: Nov 13 11:00:57 2024 GMT
            Not After : Nov 14 11:00:57 2024 GMT
        Subject: CN=555cd37631a14d9c81517d3af912c90d4760a40f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:df:28:68:e5:1e:42:d6:29:41:e1:a3:de:4f:
                    a1:c8:55:85:91:23:69:93:f1:47:2b:8c:9a:bf:4a:
                    3a:25:ae:4a:de:3e:40:ad:88:11:5c:35:ac:de:c5:
                    de:6f:f0:76:70:ae:e8:d5:16:6a:97:50:35:8f:52:
                    f9:2a:09:55:bc:da:e2:10:24:9d:05:a8:5d:cb:00:
                    1b:e9:a8:39:d0:f1:21:e0:94:aa:ee:72:da:3d:ea:
                    9a:de:1e:63:c0:b5:1d:71:bb:e9:29:aa:53:d4:74:
                    dd:d1:37:c0:6e:51:ce:54:12:e5:49:f5:71:8e:65:
                    20:c6:37:48:c7:6e:62:33:7c:53:8b:69:3b:ed:36:
                    6f:75:a3:cc:71:9b:68:46:73:69:ff:25:be:38:8f:
                    b7:d5:33:43:d3:75:5d:88:9a:48:32:be:83:89:c0:
                    32:1b:71:3a:b1:87:f0:c4:93:38:e2:c9:25:0c:c1:
                    9c:0e:10:cf:ad:dc:32:47:0f:05:14:ae:c4:3e:86:
                    d6:b2:2e:8a:b0:22:ad:8f:ce:af:95:08:ca:f2:ae:
                    bc:94:95:eb:6f:a4:63:77:60:16:b3:67:81:c9:3a:
                    6a:67:41:bf:fb:84:c3:84:59:18:fd:a2:6e:22:1c:
                    ae:cf:8d:34:d3:b9:5f:ea:24:bd:91:68:3a:d9:07:
                    d5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5C:D3:76:31:A1:4D:9C:81:51:7D:3A:F9:12:C9:0D:47:60:A4:0F
            X509v3 Authority Key Identifier:
                keyid:40:95:66:D9:BF:75:38:B7:01:CF:56:F3:A8:5C:99:52:BB:C7:41:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJVm2b91OLcBz1bzqFyZUrvHQaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dfbd26-7970-4435-8def-0ed30ffcad3e/1/QJVm2b91OLcBz1bzqFyZUrvHQaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:d4:7a:30:39:19:6e:f6:03:dc:28:6c:fe:da:0c:37:52:65:
         da:fd:50:b1:68:0f:ec:85:f1:55:b2:6a:c4:c6:c2:85:b2:1a:
         6c:62:49:64:3b:73:47:d7:dc:ff:f7:48:dd:e0:1d:d7:2a:6f:
         d7:94:e4:44:91:9c:f0:19:70:37:ec:3a:14:5e:af:3d:99:86:
         58:76:dc:9a:97:e4:48:01:50:24:96:e4:b3:a6:1e:19:cc:93:
         e3:6b:5b:ab:93:79:e7:cd:c6:b1:50:cf:0a:2b:7a:91:66:cd:
         51:f8:eb:95:24:c5:86:07:0c:f3:2c:d6:5b:62:7f:36:5d:b8:
         8a:cc:8b:54:0d:28:e7:2b:ca:e5:f1:25:42:38:7d:42:8d:fa:
         fa:71:f0:8f:1d:69:19:d0:41:95:cb:50:34:e8:20:4b:44:18:
         81:9e:2b:79:fe:79:49:fb:32:ba:0c:0d:8d:a8:f8:37:7d:4a:
         2c:26:60:b6:54:1c:3a:aa:b3:e0:59:dd:0c:ca:e6:96:8b:f4:
         89:ff:c0:81:ac:13:f8:6c:ca:ae:da:f7:fc:c4:46:8b:b8:ce:
         83:91:e5:e1:d5:3f:a6:29:e4:39:16:c4:23:1d:c9:26:b2:8f:
         15:39:eb:67:f7:3f:62:35:b3:e2:f0:72:e0:9f:63:31:0a:96:
         3b:cc:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 16:24:59 2024 by rpki-client on console.sobornost.net