Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.mft
File:                     Atv3XVA9g429Z-8XXlY1wLANpFY.mft (raw, json)
Hash identifier:          JqcE9N4N7p65rZKJjTs9V+JkYn5ijeGV6fkS54CxX+E=
Subject key identifier:   FD:06:94:D7:3F:A2:4C:C3:50:A4:3B:48:FE:77:E3:EC:61:0A:E9:C4
Authority key identifier: 02:DB:F7:5D:50:3D:83:8D:BD:67:EF:17:5E:56:35:C0:B0:0D:A4:56
Certificate issuer:       /CN=02dbf75d503d838dbd67ef175e5635c0b00da456
Certificate serial:       0191B3E5B6F8F909A2F1484ADADF33A58329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Atv3XVA9g429Z-8XXlY1wLANpFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.mft
Manifest number:          0192
Signing time:             Mon 02 Sep 2024 18:01:01 +0000
Manifest this update:     Mon 02 Sep 2024 18:01:01 +0000
Manifest next update:     Tue 03 Sep 2024 18:01:01 +0000
Files and hashes:         1: Atv3XVA9g429Z-8XXlY1wLANpFY.crl (hash: aG6JNTzgoqpODxZlAn0UWIBhPRtZF6S4GfAVXhujyEk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b3:e5:b6:f8:f9:09:a2:f1:48:4a:da:df:33:a5:83:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02dbf75d503d838dbd67ef175e5635c0b00da456
        Validity
            Not Before: Sep  2 18:01:01 2024 GMT
            Not After : Sep  3 18:01:01 2024 GMT
        Subject: CN=fd0694d73fa24cc350a43b48fe77e3ec610ae9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:90:9d:d3:c8:ad:89:01:b3:d1:2b:ec:ef:
                    00:41:4a:33:c8:1d:a6:65:b9:ed:52:55:10:2f:0d:
                    a1:fc:1b:4b:0b:04:23:0c:06:64:e9:f5:1a:ca:7d:
                    21:25:96:48:7e:c8:d4:54:05:48:86:17:f0:c3:ff:
                    23:44:4c:37:bf:ff:91:3a:7e:19:53:f6:97:5f:2b:
                    22:5e:0b:98:83:25:e3:f3:87:3b:9d:ba:37:c1:5b:
                    33:da:40:73:48:a2:99:0d:6a:d5:88:b8:7a:d9:3d:
                    9e:f4:7d:36:09:f4:14:b7:a4:d0:f5:93:12:cb:35:
                    fc:83:63:77:b1:87:2d:40:ab:9d:dc:0b:e2:a9:ad:
                    92:af:f5:82:68:cd:be:4f:78:b7:df:71:bb:ca:1a:
                    20:a1:ef:51:2f:c4:ea:d4:6a:0b:ed:11:77:c9:5e:
                    d7:3f:2b:43:42:f9:d3:31:a2:c2:93:b0:e6:03:cb:
                    b8:99:aa:41:3a:80:39:aa:da:ee:18:8e:33:7b:14:
                    d5:32:ed:57:dd:68:68:3d:57:7e:da:76:e9:86:d9:
                    46:48:98:b9:35:4e:39:78:6d:61:24:c4:a8:a1:7b:
                    69:b9:08:a4:81:5f:28:76:93:24:29:7f:e7:a4:d7:
                    da:f6:87:e7:b0:f8:8a:df:5e:08:76:d7:c7:f9:9b:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:06:94:D7:3F:A2:4C:C3:50:A4:3B:48:FE:77:E3:EC:61:0A:E9:C4
            X509v3 Authority Key Identifier:
                keyid:02:DB:F7:5D:50:3D:83:8D:BD:67:EF:17:5E:56:35:C0:B0:0D:A4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Atv3XVA9g429Z-8XXlY1wLANpFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a04408-19d8-4363-8db3-28adf8e55bc3/1/Atv3XVA9g429Z-8XXlY1wLANpFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0a:b0:0c:1f:0f:17:99:0b:f7:96:af:f5:94:11:e7:16:14:
         a0:6c:ef:a2:9b:f5:3c:63:7f:da:51:c0:17:18:0b:09:b8:98:
         68:6c:77:76:14:d1:05:57:8a:b0:ce:ad:0d:bf:d9:64:bf:ee:
         e2:3e:44:84:90:d7:1b:88:3e:e8:e6:47:cb:51:1e:c1:21:55:
         9a:61:92:30:25:27:90:6d:45:db:3a:22:7a:ad:12:0c:ad:06:
         ae:23:50:87:3c:a4:3e:d4:7d:c6:9c:02:d7:c5:e6:b7:41:57:
         5d:5e:01:81:5d:6b:ba:3a:88:0b:75:a0:1b:18:a0:67:e6:3c:
         c6:66:97:6b:23:f9:c3:66:13:3f:bb:38:fa:12:b3:41:de:a1:
         2d:31:39:bb:92:57:51:68:28:6e:80:38:fb:49:0c:60:55:0f:
         a2:54:c8:8d:5e:7f:e7:62:6b:dc:2c:75:79:b8:9e:b4:1e:31:
         53:86:5d:7d:a4:9f:cd:d2:69:ee:bf:06:e3:cf:60:82:8e:7c:
         95:a4:08:62:7e:47:dd:f5:74:bc:3d:83:e4:28:84:80:af:9d:
         81:3a:76:f8:11:25:4d:06:a2:87:c0:6b:d1:6b:6f:59:19:6f:
         f5:92:65:2d:b9:79:11:7c:d4:a0:c6:45:b1:59:60:12:ab:5b:
         92:32:d7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 06:09:04 2024 by rpki-client on console.sobornost.net