Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft
File:                     cV35qvnRzRfKQMlSrY9x8KNDK7c.mft (raw, json)
Hash identifier:          doFlNrKdUX6Ix5Wjg5FZhzi6cSByejhc5PTwj9U1tpU=
Subject key identifier:   08:81:A0:24:8F:54:10:87:1D:BD:02:B9:21:1E:BB:EC:53:6F:6A:90
Authority key identifier: 71:5D:F9:AA:F9:D1:CD:17:CA:40:C9:52:AD:8F:71:F0:A3:43:2B:B7
Certificate issuer:       /CN=715df9aaf9d1cd17ca40c952ad8f71f0a3432bb7
Certificate serial:       019346DEBB328A49DD52AA468BC235C7972B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cV35qvnRzRfKQMlSrY9x8KNDK7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft
Manifest number:          136B
Signing time:             Wed 20 Nov 2024 00:00:22 +0000
Manifest this update:     Wed 20 Nov 2024 00:00:22 +0000
Manifest next update:     Thu 21 Nov 2024 00:00:22 +0000
Files and hashes:         1: FfhQiam0ORAtBXuGVuevyjgRNHI.roa (hash: D0+zwDDRmGWhfykGCDXAXAZSEjPw9sSshAdk+zUh8H0=)
                          2: cV35qvnRzRfKQMlSrY9x8KNDK7c.crl (hash: 0JbNvzgfd2eNnZJSZakwX2b7ema7aI3tWA6SlP8qQn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:de:bb:32:8a:49:dd:52:aa:46:8b:c2:35:c7:97:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=715df9aaf9d1cd17ca40c952ad8f71f0a3432bb7
        Validity
            Not Before: Nov 20 00:00:22 2024 GMT
            Not After : Nov 21 00:00:22 2024 GMT
        Subject: CN=0881a0248f5410871dbd02b9211ebbec536f6a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:42:53:7b:53:f7:76:5f:2d:5a:8d:0c:ae:
                    b2:0b:1f:7a:80:82:8c:80:19:24:ed:3a:c3:68:8b:
                    b3:42:1d:71:92:96:e0:16:30:79:17:bb:cd:93:a6:
                    db:56:6a:43:c8:06:bf:8c:f3:87:73:c9:ac:7f:90:
                    17:4c:53:6e:c3:75:65:5f:04:9d:0a:79:27:97:bf:
                    59:3d:4d:52:03:9f:0d:de:1f:35:e4:ca:1b:64:f9:
                    f3:81:46:d4:8f:24:08:ae:38:a4:ec:1c:bf:21:cc:
                    3f:74:59:1f:16:a3:04:54:5a:23:3b:f8:63:e9:d6:
                    8a:f1:84:c6:e8:72:f9:ed:16:03:e1:fc:53:c0:be:
                    29:28:b5:40:6a:77:c2:e8:1b:6b:cf:98:9e:e9:d9:
                    0b:15:76:6a:33:ba:cd:23:85:ab:45:46:34:c9:1e:
                    3a:a3:e8:15:0a:aa:2a:c7:49:4b:0f:89:5e:e3:16:
                    cd:29:a3:56:be:57:38:75:90:26:50:8e:b4:88:ac:
                    9b:b9:91:1b:d0:9a:15:32:26:8e:7c:69:d0:ab:e1:
                    86:53:1f:14:ba:b6:e7:05:86:ff:49:7e:26:06:54:
                    7d:cf:0d:31:ed:da:19:83:2c:91:9a:2e:57:fc:45:
                    3e:30:53:da:71:04:5c:39:96:ae:07:93:1d:8e:82:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:81:A0:24:8F:54:10:87:1D:BD:02:B9:21:1E:BB:EC:53:6F:6A:90
            X509v3 Authority Key Identifier:
                keyid:71:5D:F9:AA:F9:D1:CD:17:CA:40:C9:52:AD:8F:71:F0:A3:43:2B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV35qvnRzRfKQMlSrY9x8KNDK7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/023b06-5b1e-44e9-98d8-781be598bf58/1/cV35qvnRzRfKQMlSrY9x8KNDK7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:6d:56:33:1e:63:d9:d9:49:7e:3a:ba:47:e8:02:81:21:
         c9:6c:fa:37:d6:d8:50:10:12:b8:39:93:7d:6f:c8:49:1b:ed:
         be:07:a4:d0:cb:d8:75:2a:a3:22:d3:4d:f2:7c:05:c7:a3:0f:
         62:a1:ab:47:c2:81:56:a5:ca:73:09:0e:8c:63:83:2f:82:00:
         22:d7:45:aa:49:51:da:89:3d:92:e4:24:a4:b9:c7:85:b2:4a:
         5f:08:03:41:b5:64:27:16:a8:4f:f0:93:af:fe:aa:ff:ff:4c:
         68:44:90:ed:88:af:25:1d:de:82:ff:72:39:76:cc:5d:88:74:
         d5:fa:10:c9:1a:d2:ea:cf:9a:16:0e:df:84:37:f2:c6:ce:42:
         01:ca:80:37:38:b6:54:11:95:d9:40:86:8c:95:9f:4a:d9:fb:
         15:a4:68:ca:09:fc:a5:21:c3:4b:08:a7:73:d6:46:e5:1a:b3:
         31:bd:0e:65:93:ad:d6:f8:cd:cb:2c:09:9c:d2:e5:ac:3f:b8:
         6c:81:1b:db:c1:23:47:96:26:51:90:a0:7b:69:4a:39:02:6a:
         79:bc:65:7c:e0:c7:96:9e:45:30:d8:d6:5c:6a:23:ae:6b:e4:
         b7:93:ed:89:52:0b:3c:cd:0b:3c:df:e3:d6:a0:58:00:32:54:
         95:3a:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:15:20 2024 by rpki-client on console.sobornost.net