Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.mft
File:                     KK8XwAdXuYYP9qVv_i9H5pCU4vY.mft (raw, json)
Hash identifier:          HQfO8MfCDhKb2xtB7SNHn0ElgAqVzqr32QcLj3tvd2U=
Subject key identifier:   18:3F:63:6E:D9:4E:16:60:A2:4F:1D:81:F1:5E:49:B4:04:42:6F:46
Authority key identifier: 28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6
Certificate issuer:       /CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
Certificate serial:       018E0CC53A2952FACFC6BCBE90CCF5380812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.mft
Manifest number:          098F
Signing time:             Tue 05 Mar 2024 04:00:35 +0000
Manifest this update:     Tue 05 Mar 2024 04:00:35 +0000
Manifest next update:     Wed 06 Mar 2024 04:00:35 +0000
Files and hashes:         1: JhP_bQZYNFYQUv0VT8uS4yxklJY.roa (hash: BNY6hQLIsDwChYznh8L/mvH5qWe/yAbbKWVd8bDqgJU=)
                          2: KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl (hash: 72hQISIzUFkkjfnHU/vf8BkXA15wnS4o3868sigw1g4=)
                          3: Z50cpKbH90GHCLdX1OTjZ-xPcOE.roa (hash: O8Z0/ByBDmOVJf8lr6SsxJCR6Zg4hCe3RKpA7k0aSgM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:0c:c5:3a:29:52:fa:cf:c6:bc:be:90:cc:f5:38:08:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28af17c00757b9860ff6a56ffe2f47e69094e2f6
        Validity
            Not Before: Mar  5 04:00:35 2024 GMT
            Not After : Mar  6 04:00:35 2024 GMT
        Subject: CN=183f636ed94e1660a24f1d81f15e49b404426f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:ec:82:51:58:c4:e0:cc:c5:58:89:96:0d:
                    9b:52:3f:f2:2d:4d:90:b2:20:12:e3:cf:ce:6e:5d:
                    1f:0b:8b:35:64:53:cf:8d:75:3e:ec:27:77:03:1e:
                    52:14:c0:ca:42:15:c3:79:b9:c1:c5:70:90:da:5c:
                    1d:8f:12:49:d9:d1:7c:f7:08:5e:4f:ed:5c:11:34:
                    50:42:03:30:79:cb:95:2e:81:f7:98:c4:e2:c9:1a:
                    18:5a:96:ed:30:54:31:8d:1c:b9:0e:0e:39:58:ef:
                    4c:78:89:6b:72:ef:fd:49:eb:57:85:64:f7:69:6f:
                    4f:a8:d4:ad:1e:a4:7c:c6:25:05:57:7a:14:8d:ab:
                    4b:db:e4:c3:99:80:0e:e7:7f:f9:0e:93:73:a1:64:
                    d6:88:a7:99:76:0b:e6:22:98:c9:5f:c2:17:3b:e7:
                    ea:64:81:e7:ed:a7:ac:34:9b:f1:c4:f1:c7:a2:47:
                    c1:87:6a:91:9e:09:24:30:1e:dc:30:a1:7d:e3:ce:
                    77:53:ee:e3:77:08:15:8d:a1:fb:a8:ac:93:f4:20:
                    da:46:5c:ae:eb:8e:0a:9d:bd:18:e2:0b:38:e1:1d:
                    33:dc:a4:db:b3:cf:63:f6:07:e7:b3:0b:59:97:b0:
                    62:da:c2:72:97:63:1a:c6:5a:5b:be:e1:30:4c:3d:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3F:63:6E:D9:4E:16:60:A2:4F:1D:81:F1:5E:49:B4:04:42:6F:46
            X509v3 Authority Key Identifier:
                keyid:28:AF:17:C0:07:57:B9:86:0F:F6:A5:6F:FE:2F:47:E6:90:94:E2:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KK8XwAdXuYYP9qVv_i9H5pCU4vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dea46a-b58a-4609-9df8-0e037f3d5805/1/KK8XwAdXuYYP9qVv_i9H5pCU4vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:44:64:30:a2:e6:b5:f3:89:c5:d0:fe:3d:0f:86:f8:26:f1:
         6d:30:42:59:56:c0:52:9d:f4:70:a9:80:11:b1:bd:0d:2b:dc:
         74:8e:6c:8f:6d:47:07:f7:07:28:a7:da:b3:a4:68:7b:a3:62:
         d4:78:b8:41:0d:fb:4b:91:80:2f:2f:3e:5e:2d:1e:f1:14:9a:
         1a:a6:89:95:af:21:34:4c:67:c1:ce:aa:9b:6f:66:23:6c:61:
         72:96:23:d3:89:c3:6a:5d:f7:ba:c0:e6:74:17:e3:91:4c:51:
         c0:5c:9b:54:93:00:c2:fb:ef:0a:77:0f:ef:65:b7:2e:d7:c0:
         e5:35:1c:62:35:9b:0b:72:96:66:93:d6:ce:0e:74:13:01:5f:
         ec:13:75:c9:e8:fd:90:cf:74:a3:0c:92:d4:91:fd:61:b9:c7:
         09:1b:9b:bd:ee:a8:dd:d4:75:9e:01:da:db:40:43:0a:57:17:
         0c:c2:6f:42:56:84:bf:4e:b2:b6:b4:6b:99:b5:d7:26:90:39:
         c9:6a:ac:31:aa:60:1d:4a:1b:01:f6:6b:82:66:e2:e4:5f:bf:
         0e:a8:be:e3:5a:75:09:10:41:ea:77:0d:11:7b:1e:60:22:56:
         11:6c:e5:f0:dc:ed:7f:6d:f9:00:b5:c3:db:a3:dd:3a:b0:e3:
         09:d8:4a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 5 15:38:39 2024 by rpki-client on console.sobornost.net