Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
File:                     h_cYJqExaaYp5xqJ264QhzCiqgY.mft (raw, json)
Hash identifier:          cTeBG6AfG3PRG8zMoMDszYRwSvKAKeLGV3jypErtYM0=
Subject key identifier:   BC:09:C4:EA:0E:83:9B:78:FC:83:1F:4A:36:85:A3:C2:F9:F2:9D:67
Authority key identifier: 87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06
Certificate issuer:       /CN=87f71826a13169a629e71a89dbae108730a2aa06
Certificate serial:       018F24CCF63E464FB1AAEDF94606F8F9E588
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft
Manifest number:          023B
Signing time:             Sun 28 Apr 2024 13:02:42 +0000
Manifest this update:     Sun 28 Apr 2024 13:02:42 +0000
Manifest next update:     Mon 29 Apr 2024 13:02:42 +0000
Files and hashes:         1: 9t8eN8zBNTvQp_gLSFvGtooKX00.roa (hash: b0TzIM063+oZdZILpd+m3hPGt9hsA8p4crGvy+ZmGJk=)
                          2: h_cYJqExaaYp5xqJ264QhzCiqgY.crl (hash: ZfC7FWQZ5vxFuN0tnDJk2NTzgYkFtMD8H7vlB33JtEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:24:cc:f6:3e:46:4f:b1:aa:ed:f9:46:06:f8:f9:e5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87f71826a13169a629e71a89dbae108730a2aa06
        Validity
            Not Before: Apr 28 13:02:42 2024 GMT
            Not After : Apr 29 13:02:42 2024 GMT
        Subject: CN=bc09c4ea0e839b78fc831f4a3685a3c2f9f29d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c2:38:fd:94:09:35:21:63:d3:72:d9:87:02:
                    d5:ed:d1:71:e4:46:96:fa:3b:33:9c:77:52:ea:fb:
                    f2:38:59:b5:19:4c:7b:af:17:8f:54:33:1d:a0:e0:
                    0c:b0:df:c8:a9:4d:0f:ca:ce:e1:26:0f:5d:8d:b7:
                    02:ea:00:6a:26:41:6f:4b:46:49:83:c3:3b:7b:d3:
                    b2:5c:26:c9:be:b3:86:92:8e:69:69:3e:6e:88:e9:
                    a3:92:a5:63:d9:d1:6d:ff:7d:e7:44:59:de:55:64:
                    60:54:fa:11:9c:6a:98:1b:62:60:15:04:e4:5d:7d:
                    4b:82:17:86:90:ee:74:88:27:ec:6e:0f:43:70:a8:
                    a7:c6:1d:42:47:c7:33:48:3b:da:c8:6e:74:d3:8d:
                    49:26:0a:c2:6f:e9:b7:21:73:78:fc:f6:ef:78:64:
                    06:9c:d4:e3:ca:a0:8b:4d:a3:4f:17:ed:76:13:42:
                    99:ba:38:a0:8f:87:3a:31:6e:e8:12:9e:26:4d:d9:
                    9e:4d:2f:6b:5c:ee:e2:ee:50:33:dc:00:6c:2d:69:
                    8e:fd:c4:c6:97:19:18:d1:80:59:ca:4d:4b:83:1e:
                    4e:63:ab:d1:d7:b7:9e:67:02:2c:8c:44:0d:ac:44:
                    be:18:0c:06:6f:c7:05:1f:20:d9:db:be:f9:c8:05:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:09:C4:EA:0E:83:9B:78:FC:83:1F:4A:36:85:A3:C2:F9:F2:9D:67
            X509v3 Authority Key Identifier:
                keyid:87:F7:18:26:A1:31:69:A6:29:E7:1A:89:DB:AE:10:87:30:A2:AA:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_cYJqExaaYp5xqJ264QhzCiqgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f1347c-9fde-40eb-b3a8-2d5321e50059/1/h_cYJqExaaYp5xqJ264QhzCiqgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:10:48:88:7e:97:dc:33:61:bb:cc:14:0d:2b:f3:26:51:
         1d:12:cf:13:20:6a:92:29:84:cd:4f:46:57:88:5b:71:8e:6b:
         ec:f3:8f:0b:73:58:6d:26:43:47:4c:68:de:48:1f:a6:03:0a:
         dd:4d:e4:1d:3f:35:d6:b4:33:03:02:3a:0c:68:5e:0e:27:0f:
         b8:21:d8:97:71:fc:ac:1a:1c:da:1f:58:32:e4:16:ae:cd:89:
         11:74:2a:02:5a:e7:65:b0:5e:21:9f:46:39:0c:58:99:45:31:
         5e:cc:de:8d:cb:ee:84:26:19:fa:5b:ea:75:cd:78:1f:24:c2:
         e3:cb:d9:f3:d5:16:25:2b:72:c4:3e:7d:dd:b8:3b:f5:76:ff:
         3f:11:70:ea:d2:8d:8f:ec:6c:7b:4e:26:10:d4:95:29:3f:d6:
         8a:12:b3:b0:ba:14:36:79:b6:79:92:b7:1f:ab:0f:31:db:28:
         4e:50:07:ed:d6:58:fa:17:c2:80:88:9b:93:e5:6a:8b:5b:8b:
         a0:4c:57:0f:5a:aa:ad:af:0e:83:9f:9c:53:fa:fa:49:9e:b6:
         d1:5d:71:77:d1:f9:be:74:a2:af:92:f9:ce:4d:3a:9f:b0:73:
         57:57:8e:0f:66:fe:97:39:93:1f:6a:6e:34:31:61:44:2c:70:
         d3:d8:70:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 19:13:44 2024 by rpki-client on console.sobornost.net