Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
File:                     h1_IAkLS5p69DyK148xFdZSukKw.mft (raw, json)
Hash identifier:          NAXoxJM0wlrcMUMElLKfrEtukjkvFQtcreNXCMXqapY=
Subject key identifier:   C9:23:D7:83:14:8F:85:39:EA:80:86:63:C9:91:1D:DD:CC:60:5E:3F
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Certificate issuer:       /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial:       019346A7AD02016488CC069369538A6BFDEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft
Manifest number:          08B1
Signing time:             Tue 19 Nov 2024 23:00:13 +0000
Manifest this update:     Tue 19 Nov 2024 23:00:13 +0000
Manifest next update:     Wed 20 Nov 2024 23:00:13 +0000
Files and hashes:         1: h1_IAkLS5p69DyK148xFdZSukKw.crl (hash: v/n+ylUVuv+YVIMP7yxZobV8u+dViej8OIeiXyBlDuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:46:a7:ad:02:01:64:88:cc:06:93:69:53:8a:6b:fd:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
        Validity
            Not Before: Nov 19 23:00:13 2024 GMT
            Not After : Nov 20 23:00:13 2024 GMT
        Subject: CN=c923d783148f8539ea808663c9911dddcc605e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ab:ae:fa:74:fb:a1:67:bd:05:6a:e4:c4:80:
                    12:71:f1:7d:75:f5:38:c8:d0:7f:67:67:9a:d0:1e:
                    25:a6:d6:2d:d2:9b:8a:2e:a1:9e:d7:78:e9:4a:7b:
                    af:d7:05:a7:fd:74:f0:8c:e3:42:b3:d9:1d:df:99:
                    5b:9b:46:ab:87:59:97:c4:11:8c:43:f1:67:66:ae:
                    89:e4:49:f6:f0:9f:c4:64:25:54:8c:ff:1f:3d:e6:
                    14:ab:46:3e:90:80:48:42:bc:9c:36:f8:ca:b2:3a:
                    fb:e9:d1:72:83:b4:89:8a:6e:b8:a4:aa:5e:34:1e:
                    05:2d:90:8f:f2:3c:48:4f:95:b1:56:15:5d:ad:57:
                    d3:d0:d0:94:ed:cf:39:c2:23:fc:f3:1b:19:62:3b:
                    21:e7:6c:a3:68:b6:20:29:a4:12:83:b8:fa:20:0e:
                    0f:b2:b3:7a:78:9d:2c:51:55:52:56:fc:4a:74:6a:
                    c7:aa:3a:48:37:79:e0:cd:0f:f7:be:45:37:24:85:
                    8f:72:07:cb:76:9f:93:13:4f:13:b6:20:3f:0b:5b:
                    d9:64:d8:e8:1d:41:60:2c:05:67:ce:c6:b4:38:ec:
                    af:c7:16:26:21:a3:c8:dd:71:50:57:14:ed:d3:44:
                    f1:47:f7:54:7e:25:1d:7e:80:3b:53:84:48:f6:31:
                    4b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:23:D7:83:14:8F:85:39:EA:80:86:63:C9:91:1D:DD:CC:60:5E:3F
            X509v3 Authority Key Identifier:
                keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a5:2f:0d:02:db:a3:0e:09:29:1a:d6:d4:9b:79:7d:d6:a4:
         e0:93:7a:79:01:9e:a7:09:24:71:69:a1:c1:b0:23:c2:f4:b0:
         42:15:f0:46:1b:e4:18:72:77:70:fb:7b:36:79:03:4a:61:7c:
         d0:6c:8b:f1:fe:81:34:82:05:a9:37:56:c5:e1:63:6b:51:51:
         8e:8e:cf:01:4c:1b:36:f3:60:c7:dc:ec:64:8c:ab:d6:f7:43:
         a1:1d:9c:a6:28:e0:9d:5d:a0:93:a9:7a:11:ec:60:bf:34:35:
         b0:02:3b:5b:36:9c:64:16:34:e5:44:91:dd:63:61:80:66:17:
         a3:f3:ce:25:c6:5a:9f:0f:eb:c0:df:58:12:89:4a:a7:45:58:
         07:b5:ac:0b:3b:cd:71:d6:91:f8:ea:7c:2a:3e:51:df:ca:11:
         59:e2:43:69:94:35:3f:19:1a:a3:49:df:10:98:86:df:34:40:
         56:3c:1a:70:2f:c5:17:a6:4a:c9:cd:3c:f6:ac:f7:c8:9d:95:
         15:3b:bf:90:a1:d0:8f:13:00:44:76:1b:33:1e:79:0a:f2:e8:
         a0:da:cb:ed:a7:cb:4b:14:ce:72:c7:8a:cd:e6:9d:5f:35:fb:
         64:cf:ba:e2:98:bd:e3:61:e9:df:2c:bb:9d:b3:ed:38:72:02:
         5e:95:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:22:34 2024 by rpki-client on console.sobornost.net