Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.mft
File:                     2-jMj1rx5zYtRU892RqClSkZ22E.mft (raw, json)
Hash identifier:          tLN8uYsMwasr6jZ/YwwTqX5GivHTub5yby60Py4aS1k=
Subject key identifier:   C3:87:58:A7:4A:6B:8C:F7:F0:F9:49:40:00:1B:BC:51:FD:25:35:A1
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Certificate issuer:       /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial:       018FE4A018D3189F9994C4E230F944A55E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.mft
Manifest number:          0D72
Signing time:             Tue 04 Jun 2024 19:00:48 +0000
Manifest this update:     Tue 04 Jun 2024 19:00:48 +0000
Manifest next update:     Wed 05 Jun 2024 19:00:48 +0000
Files and hashes:         1: 2-jMj1rx5zYtRU892RqClSkZ22E.crl (hash: SG/+o4ohVj5FCKNCj+QWYV9yf/It0v+GJ4TjXg7PQm8=)
                          2: HJf34rDfTUPIcPv-xQaRTGMIQAU.roa (hash: xEI3eXaqU5BE25qwCMBQhlmLI6zoK7B8LGcYOpoY7PQ=)
                          3: KkHO8EEeZBOm7_l5HOIZAS3NulY.roa (hash: RzjK6AcZX2b5y/bRXqcCT15lqpVsguGvpbBBd8QAuKo=)
                          4: WO8CC1bQiYKRTUh2PpE1oH0WSMQ.roa (hash: nMViXqwOYG1R0zYLbB3RNt6Y4a4tnW0J8OdzxZQ/asY=)
                          5: mTOTn6xbfDVzbAEOZSlOf02Gmso.roa (hash: w7dLY983INfrPczn5+OQy8tGgqoq2Wl4iZAGdiE46Zk=)
                          6: mgnkQPYfCAaXo_1xD3KJigBG04U.roa (hash: UAnLhZ555HepM7qFGpXLv4X/Cx7tGXivBReJ/+TqODg=)
                          7: rRW9xPQZDkqOlNXa085P5WtR5KM.roa (hash: d0qzJqTnvy3Akcll0NnoL5Lj6hvhdYGIroUd8W59W+4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e4:a0:18:d3:18:9f:99:94:c4:e2:30:f9:44:a5:5e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
        Validity
            Not Before: Jun  4 19:00:48 2024 GMT
            Not After : Jun  5 19:00:48 2024 GMT
        Subject: CN=c38758a74a6b8cf7f0f94940001bbc51fd2535a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:f9:75:ac:be:3a:90:7e:bc:53:27:c4:13:
                    3a:33:72:6a:98:2b:a7:f2:fd:f0:a1:86:ab:6d:69:
                    1d:b6:2e:0b:7c:15:f8:bd:0a:42:ea:4a:a7:01:ef:
                    67:c2:04:5c:fc:73:91:e3:58:b3:0a:6a:1e:e3:53:
                    d9:29:dd:6f:ae:78:4b:1f:bf:76:e7:ba:cc:ad:09:
                    66:6b:dd:3b:aa:2e:ea:c6:15:0d:33:c3:c6:4d:b8:
                    f8:03:b9:f5:6f:2b:d3:c2:90:d7:4b:3c:a0:e3:10:
                    2d:0e:f1:c5:5f:74:ca:db:f0:0e:16:a0:4e:96:97:
                    1c:26:e7:3a:53:ca:26:b7:f9:f0:55:3f:fb:07:4f:
                    4c:37:55:12:21:51:e4:c1:e6:8f:fb:0e:09:5d:cf:
                    9f:0a:87:23:4c:d7:30:35:11:ce:4f:88:de:82:77:
                    a8:99:35:c4:6b:34:69:af:57:66:b7:34:57:f0:8f:
                    5b:8e:da:c4:d9:6b:06:41:1b:d4:24:de:11:98:45:
                    77:3e:de:04:87:40:32:d0:55:04:1a:0f:08:49:fe:
                    21:38:47:ed:30:ca:4e:58:c0:d8:69:13:93:57:dc:
                    fb:c3:57:96:c2:b1:87:e1:ff:67:87:62:e6:c1:d0:
                    79:fc:94:9e:b7:61:14:9d:5a:af:53:be:1d:ec:90:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:87:58:A7:4A:6B:8C:F7:F0:F9:49:40:00:1B:BC:51:FD:25:35:A1
            X509v3 Authority Key Identifier:
                keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4d:f8:44:b4:3f:ec:3d:21:ce:ec:3c:26:6a:ce:fe:79:d4:
         05:6a:6d:28:cc:54:89:b3:e9:6c:4d:23:59:6d:50:7b:47:23:
         8e:c8:da:78:8e:40:ce:16:55:ef:07:92:af:19:78:c0:6a:80:
         44:77:1e:80:e0:97:63:f4:a5:e0:f1:4f:09:d0:8e:32:fe:a3:
         15:6b:cf:04:8b:55:47:85:38:0b:dd:34:b9:45:60:e1:8f:15:
         92:f2:d8:ba:51:67:19:05:da:29:e6:1b:2f:9b:2e:e3:b2:a6:
         50:75:1c:d4:c7:8e:e8:88:0e:8d:bb:ef:c0:31:e3:1b:65:8e:
         a1:e2:f1:a8:15:52:f9:cf:77:95:76:f9:58:0c:88:38:ac:07:
         f5:0e:8b:d5:57:69:78:df:ae:d1:a4:cc:7f:c8:51:94:9a:f1:
         6e:aa:d3:3a:32:00:74:7c:05:26:03:e1:9f:44:cf:8a:8a:05:
         f9:6a:61:1f:63:cd:da:36:7d:c7:89:ef:1a:1c:b7:25:72:76:
         cf:1b:7f:04:3b:df:eb:a5:f1:1a:28:b8:b5:36:93:29:53:3f:
         97:3b:0d:28:9c:38:f1:db:1e:9c:61:63:52:70:d0:f8:4b:42:
         df:a8:f8:94:27:54:dd:5b:21:98:f7:e8:05:40:c3:e1:6a:29:
         88:da:1a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:41:46 2024 by rpki-client on console.sobornost.net