Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft
File:                     CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft (raw, json)
Hash identifier:          N758WQ+lS/CZMzz/wGpTfbq57Y2w5xg+rbwmWAoTkeU=
Subject key identifier:   A3:33:E0:7D:6D:44:B3:3E:54:E0:F9:8F:7B:E4:D2:0E:73:5F:18:18
Authority key identifier: 09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C
Certificate issuer:       /CN=09660852bd09ad2213da02bd15bbf1837695734c
Certificate serial:       0187A1E76C62EDD4F1D6ABB644BB9FB0CC98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft
Manifest number:          0D3D
Signing time:             Fri 21 Apr 2023 03:41:50 +0000
Manifest this update:     Fri 21 Apr 2023 03:41:50 +0000
Manifest next update:     Sat 22 Apr 2023 03:41:50 +0000
Files and hashes:         1: 0Xf6-vilfia24A7NEN-1UNpf3TQ.roa (hash: hlCPws79TRjoG/wJl4XIBqwLzlhcryMiUyk2ApIcBwY=)
                          2: CWYIUr0JrSIT2gK9Fbvxg3aVc0w.crl (hash: fEncY0nqvfRC1XlRitOZk3wLuZ5lo1cKFlOULvOJfDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a1:e7:6c:62:ed:d4:f1:d6:ab:b6:44:bb:9f:b0:cc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09660852bd09ad2213da02bd15bbf1837695734c
        Validity
            Not Before: Apr 21 03:41:50 2023 GMT
            Not After : Apr 22 03:41:50 2023 GMT
        Subject: CN=a333e07d6d44b33e54e0f98f7be4d20e735f1818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6c:99:90:64:0b:25:e2:07:04:f6:14:e9:f1:
                    e6:c4:30:bc:f2:43:20:6c:69:a3:21:f8:d4:1d:55:
                    b0:83:d2:04:6f:03:e7:d7:8b:b9:6f:12:a0:4e:d9:
                    96:64:26:df:0e:45:96:6d:13:b4:e3:0e:2f:2e:c7:
                    df:33:5a:a8:f4:e5:1b:14:91:b2:20:39:de:cb:0b:
                    9c:af:27:17:62:54:d6:33:d4:13:c5:58:1e:1c:e4:
                    9a:b6:28:20:c3:d1:75:70:01:ba:08:37:a6:c7:3f:
                    f3:0c:2b:cf:79:de:ff:44:0e:2a:97:c2:72:d8:96:
                    88:4e:7f:bd:d9:d9:b1:52:ee:98:a3:db:b7:04:c0:
                    30:b8:5c:61:dd:97:05:0c:ce:b2:bf:2d:67:8d:bc:
                    2d:9f:eb:08:38:87:69:78:23:25:b2:6a:bc:ab:f7:
                    6c:33:5c:18:c7:50:cf:4f:ac:08:98:d1:d0:aa:0b:
                    69:b3:fb:c2:45:ec:5c:10:b5:cb:d4:c4:e3:60:38:
                    c7:ff:6f:13:2f:6a:d8:70:12:e1:5f:23:31:e2:53:
                    99:bf:8d:5b:f2:90:c1:93:d4:4d:39:ae:b0:66:5a:
                    6b:eb:64:f4:78:a2:dc:c6:1f:b8:41:b2:32:70:cf:
                    b0:81:63:af:1d:12:60:af:95:e4:f0:66:d7:1e:53:
                    f1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:33:E0:7D:6D:44:B3:3E:54:E0:F9:8F:7B:E4:D2:0E:73:5F:18:18
            X509v3 Authority Key Identifier:
                keyid:09:66:08:52:BD:09:AD:22:13:DA:02:BD:15:BB:F1:83:76:95:73:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/48e10b-34b6-49eb-a4e7-f3db0b236098/1/CWYIUr0JrSIT2gK9Fbvxg3aVc0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:25:86:0b:1f:ea:12:78:e5:c3:0e:87:d2:3a:ed:2f:7b:8c:
         38:13:a1:45:a7:c7:57:a1:d7:09:d2:b9:f9:29:75:6c:73:d9:
         3f:a7:7c:98:c4:c6:70:58:7b:8f:3e:02:4e:f8:9a:10:06:88:
         d9:17:76:d5:e9:4f:fd:ab:30:85:22:41:1b:27:d8:c6:53:b3:
         9d:23:e1:4a:ed:d6:8c:cc:18:d3:6b:44:c0:94:2a:55:57:04:
         3f:06:13:93:d2:e5:ff:af:ac:b1:f5:37:7a:aa:4e:f8:b9:cd:
         71:0b:9e:74:83:b0:b2:50:a2:ad:53:88:ff:b7:01:03:f7:81:
         e1:15:92:d2:d2:2a:9d:50:56:3a:44:78:7f:27:ae:db:cb:e6:
         50:e6:12:ec:01:31:2d:b5:b7:1b:07:a5:6f:3e:5f:5d:b8:99:
         fb:a8:97:97:b9:f3:68:11:4b:56:7f:af:0f:b7:76:7c:24:9b:
         78:58:e9:71:db:a5:53:37:80:53:4d:e9:ae:fd:8e:6f:ff:60:
         25:8c:72:3a:b6:6c:65:c8:aa:58:ca:46:20:49:a4:a0:3f:a4:
         25:2a:bc:71:1c:6e:7a:be:76:2e:27:c6:b2:b3:37:64:d3:2a:
         bf:60:25:a8:a7:dd:cf:db:aa:dd:a9:00:cf:94:25:00:37:45:
         fc:f6:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org