Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
File:                     nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft (raw, json)
Hash identifier:          rr5Sz9HbQf2zPQQNDskkTZTN8KtO3gTqnWLQ1cKjmJw=
Subject key identifier:   EC:EF:0D:31:B6:79:6B:8F:9D:EB:FD:B0:A7:3C:AA:3D:27:FD:E9:FF
Authority key identifier: 9D:F6:9F:0B:E6:25:76:80:57:41:B7:30:08:B5:F5:0E:BE:96:CF:FF
Certificate issuer:       /CN=9df69f0be62576805741b73008b5f50ebe96cfff
Certificate serial:       019326419414F9159F9A34C5305DA7FC634D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfafC-YldoBXQbcwCLX1Dr6Wz_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft
Manifest number:          090B
Signing time:             Wed 13 Nov 2024 16:00:51 +0000
Manifest this update:     Wed 13 Nov 2024 16:00:51 +0000
Manifest next update:     Thu 14 Nov 2024 16:00:51 +0000
Files and hashes:         1: nfafC-YldoBXQbcwCLX1Dr6Wz_8.crl (hash: NWKockDeIRRuQvoPdvAqnkxPG7Wgi6LdQs4agOZODaQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:26:41:94:14:f9:15:9f:9a:34:c5:30:5d:a7:fc:63:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df69f0be62576805741b73008b5f50ebe96cfff
        Validity
            Not Before: Nov 13 16:00:51 2024 GMT
            Not After : Nov 14 16:00:51 2024 GMT
        Subject: CN=ecef0d31b6796b8f9debfdb0a73caa3d27fde9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:fc:6c:3b:14:2a:c4:ad:8e:c5:6d:14:a9:
                    8f:fe:f0:d3:50:ca:d6:62:34:90:22:29:43:eb:2e:
                    24:7c:40:c2:2f:6d:d8:b1:5a:a3:cb:4f:23:3b:c7:
                    48:ae:57:0c:23:39:50:52:87:a9:f4:58:ea:27:c4:
                    42:e3:3f:74:96:eb:1b:fb:c6:06:1f:d2:3e:cd:41:
                    0c:87:59:bc:e4:13:56:0a:e4:a9:02:ae:01:c6:cb:
                    31:1f:4c:cf:58:2e:e9:bc:b4:66:bc:9e:38:ab:0e:
                    de:1d:04:fb:1e:14:17:ed:80:11:b5:f9:9b:64:d9:
                    50:db:b5:66:e7:37:47:09:0e:bf:aa:55:92:e8:ab:
                    b7:ec:bd:d1:98:55:4a:f9:8b:4a:2c:7c:71:3d:0f:
                    40:b8:34:8a:50:4c:8a:40:ea:9a:8b:c6:e8:a4:60:
                    84:56:35:8c:12:08:ba:68:a1:37:08:74:6f:68:ee:
                    66:ab:9a:2f:2c:d7:b0:1f:ae:7d:ef:1f:3f:81:9b:
                    23:68:00:cf:c9:11:65:40:ed:f0:56:57:c5:b9:b6:
                    87:a4:19:01:4c:f3:3d:9b:e0:08:7c:79:1b:ef:07:
                    47:ec:91:cb:30:83:16:f1:08:8c:07:bf:39:f7:09:
                    df:f5:b2:a5:63:6c:fd:db:50:18:eb:11:65:6b:c1:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EF:0D:31:B6:79:6B:8F:9D:EB:FD:B0:A7:3C:AA:3D:27:FD:E9:FF
            X509v3 Authority Key Identifier:
                keyid:9D:F6:9F:0B:E6:25:76:80:57:41:B7:30:08:B5:F5:0E:BE:96:CF:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfafC-YldoBXQbcwCLX1Dr6Wz_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/36d69d-40f2-4bdd-8cd7-99984bca9235/1/nfafC-YldoBXQbcwCLX1Dr6Wz_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:68:92:c4:40:a3:9a:86:b0:e5:dd:31:8d:a4:20:10:4b:e9:
         05:47:69:0a:53:f6:64:42:e5:af:3b:da:63:a2:e5:95:1e:1d:
         34:72:91:3d:8d:63:e7:31:8b:78:68:3a:9a:d1:fb:25:14:5b:
         2a:1e:b9:08:10:ee:62:e2:0c:c7:18:67:fc:af:bf:e5:4d:8d:
         71:99:be:16:05:20:96:b4:c5:c9:ca:47:c5:00:70:23:f6:e7:
         1c:3a:df:50:24:4a:19:74:88:09:3b:64:8e:94:c9:e6:8c:99:
         27:be:5b:5c:22:f5:b0:e5:62:1a:6d:4f:aa:bf:c9:12:2b:91:
         3d:6a:af:68:39:88:e4:2e:53:9f:c2:6c:32:f2:35:8a:51:3f:
         1f:55:12:9f:39:c8:4c:c6:be:97:2f:a7:29:db:6e:94:eb:6f:
         42:cd:a8:c0:f9:e5:bf:bc:e3:f5:aa:ab:d1:65:2a:24:46:ec:
         b9:4d:e9:54:68:5b:be:73:eb:75:2b:dd:ca:2f:a7:7e:21:2f:
         27:f3:ac:2e:09:d1:64:59:8c:1d:79:8c:6a:fc:f8:75:fc:a7:
         e1:3c:78:c0:76:fe:3a:de:48:e3:fa:b9:cc:07:7c:14:cc:93:
         60:4e:50:29:c0:99:5e:d7:45:d8:25:63:c0:ff:3d:78:b4:c3:
         ff:8e:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:09:49 2024 by rpki-client on console.sobornost.net