Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/cJe5pPyPoxR5WmonfQ6F8szK7j8.mft
File:                     cJe5pPyPoxR5WmonfQ6F8szK7j8.mft (raw, json)
Hash identifier:          B8wmXfMk2g/oFteRzYZkcXUTxEDC62dIRgkdBJxm5LA=
Subject key identifier:   3A:3C:6A:80:98:63:CA:4B:2C:0C:39:D3:EA:01:06:13:C6:74:9D:68
Authority key identifier: 70:97:B9:A4:FC:8F:A3:14:79:5A:6A:27:7D:0E:85:F2:CC:CA:EE:3F
Certificate issuer:       /CN=7097b9a4fc8fa314795a6a277d0e85f2cccaee3f
Certificate serial:       01874A3E3251E224ABABAC41387C8B9060CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJe5pPyPoxR5WmonfQ6F8szK7j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/cJe5pPyPoxR5WmonfQ6F8szK7j8.mft
Manifest number:          0D0A
Signing time:             Tue 04 Apr 2023 03:10:02 +0000
Manifest this update:     Tue 04 Apr 2023 03:10:02 +0000
Manifest next update:     Wed 05 Apr 2023 03:10:02 +0000
Files and hashes:         1: 5oaNXyHntqs6dYFeAom-Lpbqu3g.roa (hash: 2plpuabDV6Vzz4BkVKr7d6KaPIRBA/IL7oIjt78U2AA=)
                          2: cJe5pPyPoxR5WmonfQ6F8szK7j8.crl (hash: T0xmUjOcuTUv1M/W5UQuB1zB+GP3O6q/ZHLFdFd1sKM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4a:3e:32:51:e2:24:ab:ab:ac:41:38:7c:8b:90:60:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7097b9a4fc8fa314795a6a277d0e85f2cccaee3f
        Validity
            Not Before: Apr  4 03:10:02 2023 GMT
            Not After : Apr  5 03:10:02 2023 GMT
        Subject: CN=3a3c6a809863ca4b2c0c39d3ea010613c6749d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:14:8d:19:56:0f:f6:0c:50:e9:44:8e:d5:d1:
                    e8:15:29:78:3c:66:f7:37:4d:1a:53:4a:ed:b2:46:
                    51:61:eb:49:db:50:80:33:d8:ef:92:d2:7b:e3:73:
                    bb:e5:a2:17:14:86:14:c2:87:60:ca:2e:6d:fb:24:
                    77:c0:73:17:fc:88:6b:2d:36:fe:fc:42:b6:9d:09:
                    7b:60:3e:10:dc:c2:37:5a:ac:96:8b:e1:8d:59:c3:
                    3b:d7:95:a8:dd:a0:51:8c:33:1b:f1:56:b0:26:dc:
                    c6:01:f4:0b:10:3c:dd:91:15:40:41:2e:b4:4e:12:
                    49:9b:62:e1:a2:02:c1:e6:ff:af:df:ec:00:39:b1:
                    4e:65:cb:84:ed:82:e7:70:78:b8:8b:6d:7a:db:e9:
                    53:f0:c1:84:c0:6a:58:9c:db:47:d1:96:f7:94:05:
                    c3:84:67:22:55:4d:0e:7c:a2:e1:5e:a3:3a:a7:0c:
                    fb:3f:11:8b:9d:3c:90:93:d5:ac:4b:17:e5:95:61:
                    6d:97:bd:a7:7a:f9:ec:2b:dc:72:88:fb:9b:24:e0:
                    0b:1a:56:10:d1:6b:64:5e:be:d4:73:64:52:eb:53:
                    7d:9c:aa:d6:51:76:96:fa:28:05:f4:59:78:36:9a:
                    da:2d:9e:cf:b4:c3:ef:c0:f0:68:18:62:6a:f3:56:
                    ee:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3C:6A:80:98:63:CA:4B:2C:0C:39:D3:EA:01:06:13:C6:74:9D:68
            X509v3 Authority Key Identifier:
                keyid:70:97:B9:A4:FC:8F:A3:14:79:5A:6A:27:7D:0E:85:F2:CC:CA:EE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJe5pPyPoxR5WmonfQ6F8szK7j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/cJe5pPyPoxR5WmonfQ6F8szK7j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/cJe5pPyPoxR5WmonfQ6F8szK7j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:29:13:e4:5a:a0:da:f2:be:52:97:c4:a3:66:e5:a2:72:76:
         49:ef:85:9a:cc:12:d1:77:58:4a:13:84:f2:48:a0:81:42:9d:
         4d:33:ba:34:fd:2c:7d:dc:e1:32:3d:f0:4a:72:b0:05:50:09:
         b8:22:85:74:cd:67:7f:8e:d1:2d:6b:50:db:83:eb:1d:93:5a:
         19:ee:61:47:22:47:54:c2:3f:51:a4:47:46:53:e6:45:a8:69:
         fc:33:97:12:9d:c7:14:da:67:94:b5:3f:e1:7b:25:43:6a:32:
         89:ef:46:bc:ed:69:a4:39:97:2e:cc:fc:f6:1c:8b:92:5e:fe:
         56:c6:2a:6e:8a:63:2a:f5:10:a8:cb:a9:85:36:32:dd:58:55:
         8f:e0:c0:fb:a0:aa:43:3e:b1:88:2d:37:7e:78:57:ab:a5:63:
         3d:6b:9f:f2:9e:cf:f5:f4:99:a1:de:e6:74:1e:a4:ba:dd:f4:
         9b:d4:84:27:35:97:33:0c:19:44:60:c1:68:72:5c:0a:89:20:
         3d:d1:bf:67:95:f4:33:9d:e7:de:bc:85:7b:77:e1:66:8c:25:
         0a:9c:05:c3:98:cb:69:fc:23:1c:46:39:c6:21:0d:e3:a5:6c:
         08:88:36:25:24:8d:b3:2a:54:bb:65:62:c5:11:29:1f:24:66:
         31:14:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:00 2023 by rpki-client on console.sobornost.net