Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.mft
File:                     Y8CI6txSzG01p_t2UYIICnRG92o.mft (raw, json)
Hash identifier:          qHzQOk70PcPUMVaHXD8H4e4V7jzQdCSbV/2rGIEwK4Q=
Subject key identifier:   10:A3:A1:2E:4C:A8:CA:33:52:F4:EA:DF:37:10:CF:A9:88:6D:B6:ED
Authority key identifier: 63:C0:88:EA:DC:52:CC:6D:35:A7:FB:76:51:82:08:0A:74:46:F7:6A
Certificate issuer:       /CN=63c088eadc52cc6d35a7fb765182080a7446f76a
Certificate serial:       018E1670B6DC3CD6D88B03E266ED8E07998D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y8CI6txSzG01p_t2UYIICnRG92o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.mft
Manifest number:          095E
Signing time:             Thu 07 Mar 2024 01:04:29 +0000
Manifest this update:     Thu 07 Mar 2024 01:04:29 +0000
Manifest next update:     Fri 08 Mar 2024 01:04:29 +0000
Files and hashes:         1: Y8CI6txSzG01p_t2UYIICnRG92o.crl (hash: Lt5sj9IFM6hvFa8lOalXSiKc9079ft4YF88ufsOqSq0=)
                          2: q_SilLDcr3AklFc2zeeBouelwzk.roa (hash: sgyRnqH44pG2IZjuVaVW/KXQIl2KZ586FprTpQj4CU0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:16:70:b6:dc:3c:d6:d8:8b:03:e2:66:ed:8e:07:99:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c088eadc52cc6d35a7fb765182080a7446f76a
        Validity
            Not Before: Mar  7 01:04:29 2024 GMT
            Not After : Mar  8 01:04:29 2024 GMT
        Subject: CN=10a3a12e4ca8ca3352f4eadf3710cfa9886db6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:1e:c3:b6:10:66:0c:87:47:8e:49:86:42:
                    41:2a:86:df:62:f3:ab:2f:84:f2:3f:01:ce:32:3c:
                    21:af:c1:96:9e:aa:31:49:37:ef:1f:27:65:63:44:
                    67:62:f9:60:19:82:67:7d:28:93:40:bf:08:7d:bc:
                    64:9c:3f:7d:40:a5:a6:38:98:bf:0d:72:13:d3:0b:
                    f8:b7:eb:5b:f1:29:e5:45:b1:7b:7a:fb:5e:70:12:
                    6b:5a:0e:74:52:82:80:a2:14:d6:4e:50:ec:1c:d6:
                    b4:8e:1c:9b:18:6e:47:db:40:fa:b9:fa:58:a7:88:
                    95:25:d1:d2:17:13:24:00:b7:01:e1:89:14:e1:63:
                    48:a8:cb:2f:69:ca:b5:8d:de:f4:54:f0:ec:13:ac:
                    a3:87:a9:a0:74:38:f5:0e:5a:8c:62:8a:22:6f:51:
                    b3:d3:52:c7:d8:2c:ad:77:3f:97:83:46:1f:c9:2f:
                    e1:04:2f:08:92:92:b6:1d:4c:19:1f:14:bd:10:28:
                    90:cf:3d:06:2a:53:87:55:89:00:2b:30:00:2c:55:
                    bf:e3:fc:01:7f:21:5d:e0:9f:94:b6:ac:9d:57:3a:
                    e8:90:32:9e:b9:2c:2a:55:a5:e4:6b:00:1c:35:6d:
                    34:a0:29:53:08:b8:10:af:e5:ac:cb:fe:ff:ae:ea:
                    fc:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A3:A1:2E:4C:A8:CA:33:52:F4:EA:DF:37:10:CF:A9:88:6D:B6:ED
            X509v3 Authority Key Identifier:
                keyid:63:C0:88:EA:DC:52:CC:6D:35:A7:FB:76:51:82:08:0A:74:46:F7:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y8CI6txSzG01p_t2UYIICnRG92o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/951c4a-b053-4b73-986e-141faeeca25b/1/Y8CI6txSzG01p_t2UYIICnRG92o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:87:54:fb:fe:16:86:db:91:b4:d9:2c:e4:b6:81:c0:ce:5a:
         aa:89:a7:f1:93:e5:15:b4:73:e6:89:65:82:a3:5a:95:4c:b3:
         b7:d2:f3:5d:72:cc:e4:65:9a:f6:03:8b:09:61:4b:8f:a0:22:
         3e:24:6a:d2:dd:76:e9:c5:6d:5d:7c:06:2d:21:fc:1e:1c:7f:
         14:34:2c:c9:6e:b5:eb:d8:96:4b:0f:ac:0c:0e:ab:b0:cd:2b:
         5e:72:e5:f9:99:8e:54:c9:35:fa:2c:62:cc:72:39:5b:8c:cb:
         f8:0d:2c:f8:d6:0f:e7:25:3e:a3:85:8c:ad:b8:8b:94:0c:1f:
         06:f7:6c:db:0c:b2:0c:a9:52:2b:aa:c1:f6:db:77:a1:7d:44:
         b1:cf:3b:c6:e7:ae:c0:93:6e:e2:8f:53:96:c6:ca:38:2d:34:
         3e:46:da:24:82:40:c6:16:a4:4c:0b:3c:55:69:56:50:18:60:
         e1:c3:03:4a:6f:55:5a:7f:4f:41:c6:1a:32:a8:47:3d:50:72:
         b2:4c:c5:e1:f7:1c:64:b4:4c:d8:f7:d7:27:88:ed:a6:1a:34:
         9c:c7:a4:d7:5c:c7:88:28:23:1d:4d:b6:92:08:72:b5:56:64:
         6c:cc:67:2a:19:09:55:72:05:44:01:a5:e0:6b:10:17:4c:47:
         db:97:87:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 16:22:35 2024 by rpki-client on console.sobornost.net