Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft
File:                     eqGomGyJZ2Gvx_j4gevDBCDodms.mft (raw, json)
Hash identifier:          aEdYdw4rIzsUwBrpyojTAjopV4FsOvtQPcqQ4RaAmcg=
Subject key identifier:   FA:3A:E0:7D:3C:5E:65:7E:44:C3:05:33:C2:87:E2:EA:37:68:76:3B
Authority key identifier: 7A:A1:A8:98:6C:89:67:61:AF:C7:F8:F8:81:EB:C3:04:20:E8:76:6B
Certificate issuer:       /CN=7aa1a8986c896761afc7f8f881ebc30420e8766b
Certificate serial:       018CECCFD5E523C61C44131788DA1E021AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqGomGyJZ2Gvx_j4gevDBCDodms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft
Manifest number:          0FAD
Signing time:             Tue 09 Jan 2024 06:01:32 +0000
Manifest this update:     Tue 09 Jan 2024 06:01:32 +0000
Manifest next update:     Wed 10 Jan 2024 06:01:32 +0000
Files and hashes:         1: eqGomGyJZ2Gvx_j4gevDBCDodms.crl (hash: HuGwtKnbY/5hI6tkIrqDm7DZAtixCC3d7e1MpZ1V8ec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:ec:cf:d5:e5:23:c6:1c:44:13:17:88:da:1e:02:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa1a8986c896761afc7f8f881ebc30420e8766b
        Validity
            Not Before: Jan  9 06:01:32 2024 GMT
            Not After : Jan 10 06:01:32 2024 GMT
        Subject: CN=fa3ae07d3c5e657e44c30533c287e2ea3768763b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:51:d9:6d:7f:d4:67:5f:03:d9:e6:0f:e9:c0:
                    39:aa:61:5e:44:e8:d3:f4:da:90:30:ef:1b:05:2b:
                    4c:86:61:0b:05:ad:a8:49:34:63:36:de:eb:58:5e:
                    e7:70:89:9c:ea:3b:1f:87:02:9d:a2:68:55:88:da:
                    1b:23:f8:5e:d2:5c:9f:10:20:45:79:3c:a7:cd:52:
                    00:b3:f5:d8:b0:bd:e9:90:be:b2:d9:44:0c:c8:78:
                    88:05:7d:ba:96:46:a9:94:e2:57:c5:aa:9b:79:56:
                    44:8a:e2:6a:be:f3:c0:47:77:7b:7e:e0:f7:45:18:
                    d0:af:3c:cf:70:5c:56:6b:8d:1d:7c:69:14:37:57:
                    c4:54:ea:2d:08:18:08:57:98:e5:61:ab:09:01:5e:
                    90:ca:15:ef:a9:41:cc:57:81:53:fd:1f:92:08:41:
                    c6:e4:61:d8:61:a9:77:35:5b:d1:78:d1:f5:c8:41:
                    ce:dc:76:d1:4e:dc:d3:b4:af:7f:d1:a4:95:d1:c9:
                    19:30:69:a0:f0:7f:fc:3e:17:96:7d:c8:ad:40:9d:
                    61:ef:da:5b:20:85:e0:90:9e:3b:ea:7c:93:55:47:
                    d9:4c:19:ba:1d:3f:28:e6:60:54:95:c6:fc:0a:9b:
                    ae:86:0d:ec:38:a8:ef:41:c7:7c:a6:36:46:97:73:
                    1e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:E0:7D:3C:5E:65:7E:44:C3:05:33:C2:87:E2:EA:37:68:76:3B
            X509v3 Authority Key Identifier:
                keyid:7A:A1:A8:98:6C:89:67:61:AF:C7:F8:F8:81:EB:C3:04:20:E8:76:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqGomGyJZ2Gvx_j4gevDBCDodms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/616d53-abaf-4b37-a211-11d2eb65adbe/1/eqGomGyJZ2Gvx_j4gevDBCDodms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:cf:2c:72:fb:60:25:93:f9:a0:25:5e:38:2a:93:03:4a:
         88:bc:c6:9f:7e:e3:e1:56:94:ec:b3:3a:db:72:a0:79:be:7d:
         95:b2:d5:49:4c:b9:af:f7:8d:15:17:f5:53:b5:20:aa:00:b1:
         41:8b:9e:00:f0:7a:2e:3c:03:57:1e:39:61:93:cb:f7:df:37:
         86:15:43:d8:bc:43:be:ef:d8:42:b5:cc:4c:bb:81:f7:c1:27:
         91:30:c1:76:ee:5b:fa:57:f8:73:45:8c:24:35:a7:3a:36:2c:
         db:44:d3:0b:9b:f8:0e:0f:cf:5e:8f:a6:de:74:7a:f2:08:e5:
         96:28:8d:e1:94:3f:d6:4a:37:aa:dd:29:6b:58:e9:21:fd:eb:
         3e:43:34:5e:74:7b:22:1a:b8:a5:a7:d2:31:b9:33:9f:3e:b6:
         1e:69:f4:ee:a9:99:ab:c7:c2:3b:a7:25:88:a4:f1:98:20:6c:
         ec:10:fe:bf:43:6a:85:fa:c5:08:da:13:78:5a:d4:d7:e3:8a:
         2e:bb:cd:1e:ff:9d:e3:d5:dc:c9:8e:27:a1:a7:53:a2:19:83:
         3b:10:77:6c:f8:a4:2b:57:c9:d9:0c:c5:81:a5:a5:e4:2b:96:
         89:ec:d7:0d:60:2d:71:36:49:73:76:c5:ae:9f:db:61:a2:7c:
         91:71:80:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 00:58:58 2024 by rpki-client on console.sobornost.net