Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.mft
File:                     aQsWl2qVd8-60tBTG-Ov01pxStM.mft (raw, json)
Hash identifier:          sAcVkBgV+lNIXMm86TH9b7JV6l1Qk/BBtn6Z0+ddQ8c=
Subject key identifier:   5C:32:C1:87:A5:72:EC:0D:01:93:03:4E:BF:00:22:98:89:EF:D4:84
Authority key identifier: 69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3
Certificate issuer:       /CN=690b16976a9577cfbad2d0531be3afd35a714ad3
Certificate serial:       018BCE22B6FCA1E2FA40DC57ACCA73FA5E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.mft
Manifest number:          0768
Signing time:             Tue 14 Nov 2023 14:01:03 +0000
Manifest this update:     Tue 14 Nov 2023 14:01:03 +0000
Manifest next update:     Wed 15 Nov 2023 14:01:03 +0000
Files and hashes:         1: aQsWl2qVd8-60tBTG-Ov01pxStM.crl (hash: gvuJjuRx7Z1SzhkIcAJ5pzErIa5C4P9kxpdCuv2eOu0=)
                          2: sgKsk8uOQmOPXotnAUBjHBu100A.roa (hash: XMyqTUEfJNc09Edku0r16/PbporqMZlWO/CVA0/UNBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ce:22:b6:fc:a1:e2:fa:40:dc:57:ac:ca:73:fa:5e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690b16976a9577cfbad2d0531be3afd35a714ad3
        Validity
            Not Before: Nov 14 14:01:03 2023 GMT
            Not After : Nov 15 14:01:03 2023 GMT
        Subject: CN=5c32c187a572ec0d0193034ebf00229889efd484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6f:f9:d8:4e:60:bf:4b:b1:10:a0:84:a3:a5:
                    d0:d3:9f:dc:c0:a0:00:1c:b8:33:19:60:1c:a4:4f:
                    b5:9f:0a:dc:b7:39:46:28:f3:80:e8:c8:f7:93:48:
                    dd:42:f9:18:62:3c:9d:77:89:4f:a3:71:11:fa:d3:
                    c2:25:43:53:32:c3:11:c8:15:a2:94:fc:5e:9f:f8:
                    c6:bd:43:8c:b0:ea:2d:19:93:a4:8c:2e:24:26:03:
                    cc:10:5e:29:73:6f:a4:27:b2:ec:77:e3:53:80:a2:
                    d0:72:7e:b0:7f:fb:c6:50:53:b1:28:db:b6:e9:3a:
                    e7:c1:e4:0a:5f:d6:ae:54:f5:2c:3f:26:cd:d8:17:
                    9f:97:bb:9b:f8:ab:a8:10:2e:a0:4e:1c:ef:d3:32:
                    8b:6c:ca:90:eb:60:ce:bf:66:c6:66:21:c1:40:df:
                    17:49:19:a3:95:eb:1d:e7:46:c7:e5:93:ca:84:45:
                    10:7b:1c:78:02:62:b5:2b:78:54:d0:0d:51:18:a6:
                    18:66:f2:2d:d8:3d:ac:72:e6:20:70:79:bb:57:dd:
                    39:04:63:b6:39:1e:9b:ed:06:4b:36:29:5f:67:eb:
                    08:09:49:20:fa:44:b2:57:b5:62:97:75:a6:a3:18:
                    85:a0:0e:66:0b:7f:07:96:f8:96:90:2e:c1:4d:b9:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:32:C1:87:A5:72:EC:0D:01:93:03:4E:BF:00:22:98:89:EF:D4:84
            X509v3 Authority Key Identifier:
                keyid:69:0B:16:97:6A:95:77:CF:BA:D2:D0:53:1B:E3:AF:D3:5A:71:4A:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQsWl2qVd8-60tBTG-Ov01pxStM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/1f23a3-f18f-4d3f-a2f6-65f4672c370a/1/aQsWl2qVd8-60tBTG-Ov01pxStM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:95:b6:27:2b:9f:c7:f2:84:95:58:c6:3e:1b:0b:99:ed:94:
         6a:1e:06:5e:c9:ed:8a:d0:10:37:84:3a:ab:e8:f7:a3:73:03:
         ff:ee:87:df:26:86:fb:7a:47:bd:4b:05:5b:e7:61:f8:23:04:
         66:0d:cf:3f:5f:37:06:4b:60:c7:02:3c:16:eb:ec:54:5e:30:
         1c:7e:b2:45:60:fb:59:77:b4:ac:ee:dc:2c:c6:09:04:96:23:
         62:b7:f6:2a:73:57:bf:8e:c1:ba:bc:9a:7d:ad:81:41:c9:ba:
         28:11:6d:eb:4a:78:73:92:9e:f7:67:26:38:b8:ec:9b:af:f7:
         8f:29:cc:30:52:66:87:0d:d5:78:d9:83:a4:2f:0a:82:b8:e9:
         fa:92:ea:a1:78:be:17:5c:81:f8:f3:2e:67:fc:a7:8d:09:65:
         a3:5f:82:44:e8:ad:01:50:d8:d6:d3:db:4a:ae:a1:da:0a:c8:
         1d:e5:4f:d7:0b:87:16:f4:8b:c1:12:14:9f:fd:2b:32:47:91:
         8c:f5:8b:6e:d5:24:64:79:f1:1b:ff:bb:bf:d2:05:80:9d:f2:
         9c:49:71:9e:17:cb:4c:e0:60:a1:7c:ed:21:ca:bb:fc:c8:35:
         d6:04:59:7e:cc:34:c4:00:0b:d8:90:99:42:03:f1:e7:fc:71:
         f8:43:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:50 2024 by rpki-client on console-fra.rpki-client.org