Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft
File:                     8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft (raw, json)
Hash identifier:          ctkO6m4GsDU2ctZG+m85agmX7TH4jTSUw2W/0xrYmEw=
Subject key identifier:   C2:2C:66:FE:E7:EB:CF:E5:63:F4:C1:B6:0A:6E:9E:5F:E8:06:B3:37
Authority key identifier: F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42
Certificate issuer:       /CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
Certificate serial:       018EF1B985A8CFB0F904358516C2ED245E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft
Manifest number:          0CFD
Signing time:             Thu 18 Apr 2024 15:00:51 +0000
Manifest this update:     Thu 18 Apr 2024 15:00:51 +0000
Manifest next update:     Fri 19 Apr 2024 15:00:51 +0000
Files and hashes:         1: 1-_PY-FxmScnLUEveE-aHYFEuFk0.roa (hash: Py40Qkp7+oZdR+5SnPGkIDmvcMgl62Xe5r9p5XSxq5o=)
                          2: 8mzg9G-7vi3TgbNTKJnDHcQMGkI.crl (hash: znpnVLyHkfoKY8FE5G7RkOgC/GQ/SfcAPCIx7LiXmnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:f1:b9:85:a8:cf:b0:f9:04:35:85:16:c2:ed:24:5e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26ce0f46fbbbe2dd381b3532899c31dc40c1a42
        Validity
            Not Before: Apr 18 15:00:51 2024 GMT
            Not After : Apr 19 15:00:51 2024 GMT
        Subject: CN=c22c66fee7ebcfe563f4c1b60a6e9e5fe806b337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bc:b7:de:e0:45:06:cc:a8:70:05:0a:f3:0a:
                    84:db:ef:09:a0:91:9a:4e:58:a2:84:65:fb:fe:c1:
                    6b:13:a2:95:ec:2f:5f:ed:02:bc:bc:5f:65:40:e4:
                    a2:62:aa:e3:ee:e3:44:f0:ea:e3:da:19:58:2a:28:
                    c9:08:e4:7c:87:3b:d1:e2:45:b6:1c:b5:cd:18:44:
                    1d:be:fe:c6:d8:4f:cc:25:54:63:3c:8b:75:a4:94:
                    41:08:a4:11:08:59:b1:55:3d:ff:a0:28:c6:5e:a5:
                    9d:05:2b:3d:54:dc:d9:7c:0f:ce:f1:a5:7e:10:29:
                    07:5f:dd:84:2a:b8:29:8e:da:ad:56:7a:39:9a:4c:
                    26:3e:1a:7d:fa:68:51:cd:10:0d:73:10:fd:c1:ab:
                    cf:d6:8e:80:11:ba:04:2c:bf:02:6a:30:08:ec:f0:
                    de:86:37:71:af:a0:25:c0:d4:ec:d2:20:a7:5f:49:
                    8c:f2:33:2a:c5:42:da:2f:91:fc:75:ca:35:41:72:
                    84:46:f1:5e:2a:a9:46:29:b9:a4:e7:5c:b7:a4:f1:
                    3e:35:23:61:09:d5:5f:27:d2:1d:0a:84:86:71:cf:
                    45:fc:fb:52:80:6b:fd:4a:67:17:3b:02:d7:23:ef:
                    62:4e:99:f3:3d:5d:d1:ec:0d:36:13:94:63:c4:5f:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2C:66:FE:E7:EB:CF:E5:63:F4:C1:B6:0A:6E:9E:5F:E8:06:B3:37
            X509v3 Authority Key Identifier:
                keyid:F2:6C:E0:F4:6F:BB:BE:2D:D3:81:B3:53:28:99:C3:1D:C4:0C:1A:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mzg9G-7vi3TgbNTKJnDHcQMGkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/416cb0-2e35-4ee0-abc6-859ca701b354/1/8mzg9G-7vi3TgbNTKJnDHcQMGkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:70:a8:36:e9:b0:6a:3b:7d:6d:97:cc:59:71:64:21:60:
         4b:c4:85:3f:5e:cd:af:9d:43:9a:81:fc:8e:9f:43:59:c7:ca:
         ca:13:d3:c8:50:16:7f:e5:31:53:84:e7:79:b5:63:4e:48:58:
         ab:60:78:0d:a5:33:3f:48:5f:00:5e:5a:67:c3:74:30:6e:86:
         16:65:30:b8:0e:b4:43:15:ff:ca:32:f3:71:5a:c9:1c:09:58:
         56:d4:89:1d:fe:04:f2:2e:a5:9f:83:94:c6:2b:c1:ef:42:ea:
         af:04:b0:53:cb:72:ae:eb:e1:c8:73:3c:9f:a5:60:bf:8e:72:
         fe:cd:3c:7b:96:cf:5b:17:07:35:8f:8f:48:1e:77:22:35:35:
         1d:8f:05:f8:40:28:b2:bf:2d:d3:ea:cf:08:7d:8b:2a:94:f4:
         eb:82:b6:26:e0:96:c4:ce:58:83:24:d4:14:0c:b9:6a:53:88:
         42:2c:fe:d1:f7:9b:5b:b5:8b:23:57:ad:df:50:c9:73:d0:9b:
         bd:98:27:1e:db:b2:92:e3:17:2a:7f:51:d2:dc:84:33:f8:77:
         86:a8:82:cc:29:50:96:57:a4:1c:db:cb:89:27:49:c7:1f:9a:
         8e:c7:f1:99:f9:57:5d:e0:81:f4:60:4c:26:7f:49:02:bc:41:
         fb:c6:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 15:14:18 2024 by rpki-client on console.sobornost.net