Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/FxYPkzZw5CzS-WYcxD4X2nOV2RI.mft
File:                     FxYPkzZw5CzS-WYcxD4X2nOV2RI.mft (raw, json)
Hash identifier:          GEfGUE7gokvcXoXMh2uvGfcqTP7tRyM1w6bKbGn1D3o=
Subject key identifier:   B5:A4:66:0D:62:AF:BE:F1:3B:29:16:99:D6:CF:3C:83:78:12:E0:83
Authority key identifier: 17:16:0F:93:36:70:E4:2C:D2:F9:66:1C:C4:3E:17:DA:73:95:D9:12
Certificate issuer:       /CN=17160f933670e42cd2f9661cc43e17da7395d912
Certificate serial:       091BD1A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxYPkzZw5CzS-WYcxD4X2nOV2RI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/FxYPkzZw5CzS-WYcxD4X2nOV2RI.mft
Manifest number:          08DE
Signing time:             Wed 06 Apr 2022 03:29:36 +0000
Manifest this update:     Wed 06 Apr 2022 03:29:36 +0000
Manifest next update:     Thu 07 Apr 2022 03:29:36 +0000
Files and hashes:         1: FxYPkzZw5CzS-WYcxD4X2nOV2RI.crl (hash: h2HPsy7VZc/qDamq5znDsFdVRTXTAbx0RkBa9ZU7Y1k=)
                          2: cEvK8l76loyC0dcM8i9PeEaRKIg.roa (hash: diwlIHLI0nkp7oBbwOWdqgOBmYnQZfCjIavdP1/ed5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152818088 (0x91bd1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17160f933670e42cd2f9661cc43e17da7395d912
        Validity
            Not Before: Apr  6 03:29:36 2022 GMT
            Not After : Apr  7 03:29:36 2022 GMT
        Subject: CN=b5a4660d62afbef13b291699d6cf3c837812e083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:37:be:5e:23:9a:d3:ba:15:c6:de:d5:70:e7:
                    5a:2b:fe:eb:b0:1a:b0:c1:4a:2f:59:ea:76:f8:07:
                    8e:c1:7e:0e:8c:8a:4f:77:09:fc:9d:d6:ca:dd:70:
                    09:b0:d1:67:3e:fe:d1:66:ca:20:8e:58:ca:b7:42:
                    35:ff:57:d9:17:1f:c0:e9:7f:3f:95:5a:47:35:99:
                    55:fc:76:70:58:db:bb:c4:1c:7d:fe:fe:b3:85:f2:
                    b2:b3:2a:ce:bd:1f:54:b6:ab:9a:0f:b9:0f:77:54:
                    cc:3a:8e:63:b9:38:e1:73:32:bd:de:ae:e1:99:ec:
                    fd:a4:8a:b3:e7:22:cd:e9:93:54:f0:6a:c4:12:7d:
                    19:d0:e2:2a:37:73:18:0f:a7:28:00:de:2c:dc:79:
                    26:c9:18:99:8b:11:bb:68:42:3f:dc:17:26:ea:62:
                    8f:83:b5:db:71:18:c7:cc:00:25:78:bc:8c:83:82:
                    b0:fb:c1:c6:db:ea:d8:02:85:96:fc:f4:59:c6:6c:
                    61:3a:00:c6:4a:ac:ca:db:cc:33:41:69:15:99:ff:
                    c5:59:77:db:cb:e6:e1:39:64:bf:0a:50:aa:cb:cb:
                    92:f4:07:80:ab:9a:7f:c3:89:e4:24:10:90:34:65:
                    dc:fd:4b:64:d0:72:7c:7d:b9:54:6c:48:63:45:f9:
                    01:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A4:66:0D:62:AF:BE:F1:3B:29:16:99:D6:CF:3C:83:78:12:E0:83
            X509v3 Authority Key Identifier:
                keyid:17:16:0F:93:36:70:E4:2C:D2:F9:66:1C:C4:3E:17:DA:73:95:D9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxYPkzZw5CzS-WYcxD4X2nOV2RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/FxYPkzZw5CzS-WYcxD4X2nOV2RI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/FxYPkzZw5CzS-WYcxD4X2nOV2RI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:c2:a9:ce:c3:06:6d:24:df:de:e4:73:d4:df:95:4e:c8:
         62:a7:a0:ad:95:c6:56:b5:4f:51:08:ca:f3:83:40:f5:1f:5e:
         99:64:ae:85:80:a7:23:01:27:5a:1b:18:09:63:3d:06:69:e3:
         b5:ca:8f:f2:04:39:61:54:3a:09:9e:e0:4f:2e:2d:cd:e2:d5:
         72:4b:3d:75:34:90:9f:f8:82:5e:1c:64:73:11:92:bf:d8:05:
         17:fc:99:db:0b:f5:60:48:02:8e:a7:16:12:84:e9:f1:e4:57:
         8e:75:3b:d7:dc:ba:3b:4c:51:67:0b:c1:13:fa:04:cb:41:61:
         2b:cd:35:22:fc:59:7e:e3:e7:31:c3:88:16:c5:c2:e2:11:d5:
         47:37:4b:36:a4:0b:31:34:03:91:bc:f5:ad:c0:f4:50:eb:a8:
         16:ce:00:36:6e:8f:23:bc:1f:f2:39:01:e0:59:26:b9:7b:a6:
         dc:30:8e:0e:46:fe:94:11:69:6a:23:d7:86:6d:9b:a8:3f:12:
         f1:6c:c8:1f:35:0a:03:33:77:24:5b:75:a1:8e:13:d9:4f:02:
         0e:ea:a7:36:fd:eb:6d:7a:b3:ab:05:68:db:30:e2:f9:c9:ce:
         ba:19:51:57:78:d4:81:86:f8:d3:c3:28:68:0f:dc:5d:70:a1:
         21:d6:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:24 2023 by rpki-client on console.sobornost.net