Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.mft
File:                     i207l1ETkCRqrlMy2exzXnKZtBQ.mft (raw, json)
Hash identifier:          OI2UIcAU8yHcjXzp4288EfhXD9NmjTD/ocU03bQq16o=
Subject key identifier:   58:9E:0B:42:4B:9E:36:54:84:C9:0C:A9:7B:7B:FC:A4:71:30:7D:79
Authority key identifier: 8B:6D:3B:97:51:13:90:24:6A:AE:53:32:D9:EC:73:5E:72:99:B4:14
Certificate issuer:       /CN=8b6d3b97511390246aae5332d9ec735e7299b414
Certificate serial:       018CED067077903922D2FDAB38F4201C49B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i207l1ETkCRqrlMy2exzXnKZtBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.mft
Manifest number:          101C
Signing time:             Tue 09 Jan 2024 07:01:11 +0000
Manifest this update:     Tue 09 Jan 2024 07:01:11 +0000
Manifest next update:     Wed 10 Jan 2024 07:01:11 +0000
Files and hashes:         1: i207l1ETkCRqrlMy2exzXnKZtBQ.crl (hash: GxhvsWYPZgEPN91XQXRl0w6AMgQ4pt6Ix6rNi2wgtjI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ed:06:70:77:90:39:22:d2:fd:ab:38:f4:20:1c:49:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6d3b97511390246aae5332d9ec735e7299b414
        Validity
            Not Before: Jan  9 07:01:11 2024 GMT
            Not After : Jan 10 07:01:11 2024 GMT
        Subject: CN=589e0b424b9e365484c90ca97b7bfca471307d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ab:22:b7:76:61:1c:0a:e2:4f:d9:51:e2:6c:
                    52:fb:e6:a4:c0:7f:bd:f9:20:5e:87:29:e1:46:ee:
                    33:0e:61:bc:27:69:1e:07:09:6c:b5:90:62:c4:93:
                    6d:d3:18:57:f2:67:a6:ed:ea:b2:88:92:59:0c:88:
                    1c:d0:17:2d:c2:69:4a:2b:3b:93:3b:11:e9:90:d6:
                    b8:e6:23:88:6f:6e:b2:d4:a9:b9:53:f5:ce:dd:62:
                    47:41:86:23:06:31:4e:bf:ae:b3:dc:56:89:60:55:
                    f3:08:c0:a3:6b:35:bd:2d:91:07:3a:37:ec:3e:5c:
                    d4:a9:0a:af:5d:3c:35:28:ef:97:58:0f:ae:0e:df:
                    69:44:23:0e:17:6a:99:26:4a:1a:84:6b:8b:8d:34:
                    7c:e6:33:33:a3:71:7f:89:b5:c1:53:48:44:3f:0b:
                    d4:79:bc:ca:d1:fc:4a:a9:99:17:12:92:28:2a:d1:
                    8b:d8:72:9a:32:02:64:2a:c1:fd:a7:9c:d8:19:59:
                    75:77:cd:2f:58:a7:d4:40:7b:5b:2d:06:c7:d6:01:
                    48:2a:df:7f:5b:86:7e:29:b4:3a:70:c2:ba:48:82:
                    f6:fa:2f:02:60:c4:3d:75:ba:e8:bd:d9:12:90:59:
                    a8:39:3d:5d:6c:ea:3f:b7:ca:c0:a5:bb:97:84:89:
                    1a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9E:0B:42:4B:9E:36:54:84:C9:0C:A9:7B:7B:FC:A4:71:30:7D:79
            X509v3 Authority Key Identifier:
                keyid:8B:6D:3B:97:51:13:90:24:6A:AE:53:32:D9:EC:73:5E:72:99:B4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i207l1ETkCRqrlMy2exzXnKZtBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/571aeb-beab-4f46-aab2-aa82ad68f7e1/1/i207l1ETkCRqrlMy2exzXnKZtBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:f2:c9:f7:3b:65:82:21:76:f4:d1:bc:70:ee:9c:37:f9:
         66:38:0b:c3:2f:08:d6:e8:50:84:2d:e3:21:a8:72:3d:20:f9:
         bb:60:3b:bd:8d:6d:24:09:00:d1:7b:77:47:71:64:2c:97:99:
         01:ed:3b:d5:b8:a4:f4:82:4b:e3:a8:55:bd:3d:4b:dd:aa:74:
         2d:47:82:39:dd:e2:24:36:86:fd:d0:7b:17:0a:1f:c3:81:b3:
         56:e7:8c:0f:e8:62:87:ae:bc:97:c0:98:ee:b8:da:42:be:45:
         41:b5:82:35:d2:65:05:b2:c5:3e:91:a2:73:7f:e3:7a:bc:4a:
         bc:76:df:5f:a0:8b:4c:f3:a5:e5:b0:f7:c5:68:27:f4:b0:cc:
         f0:4b:61:94:cb:c7:f5:f2:a8:50:e6:5b:a4:b4:86:2f:5a:e3:
         a4:ad:e4:f2:73:33:10:34:a2:67:a9:9c:91:71:79:4c:4f:89:
         ef:21:e7:a4:21:b3:06:24:58:74:96:e1:1f:19:94:4b:10:12:
         b2:78:5a:7e:e3:37:d7:b4:ba:f7:4a:b1:dd:23:35:db:49:42:
         e1:3b:6a:5d:e1:0e:dc:bb:61:12:c7:32:84:2d:12:c3:f9:3a:
         1d:76:5a:be:eb:2a:49:91:fa:fe:74:c7:ba:4f:6f:80:0d:17:
         4b:98:65:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:48 2024 by rpki-client on console.sobornost.net