Manifest

$ rpki-client -vvf rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
File:                     Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft (raw, json)
Hash identifier:          jMN9qlBCvP+dm0m4D8kjPXk80tyVu7eD6S2uiPTsDLk=
Subject key identifier:   EC:29:9C:C3:C1:85:56:42:89:5F:CC:55:EF:29:E7:8D:BD:A7:19:71
Authority key identifier: 2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13
Certificate issuer:       /CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
Certificate serial:       018DD0E79BE7B014E49F26B3F26C44762218
Authority info access:    rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
Subject info access:      rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
Manifest number:          1D1E
Signing time:             Thu 22 Feb 2024 13:00:49 +0000
Manifest this update:     Thu 22 Feb 2024 13:00:49 +0000
Manifest next update:     Fri 23 Feb 2024 13:00:49 +0000
Files and hashes:         1: Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl (hash: P38bg/wvhlzYuO1BCtewMWPOWIJVxovw163SgsD8sj0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:d0:e7:9b:e7:b0:14:e4:9f:26:b3:f2:6c:44:76:22:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
        Validity
            Not Before: Feb 22 13:00:49 2024 GMT
            Not After : Feb 23 13:00:49 2024 GMT
        Subject: CN=ec299cc3c1855642895fcc55ef29e78dbda71971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:8e:b2:51:fa:0b:6b:25:e2:de:72:4d:e0:
                    fe:55:09:bb:20:39:75:f2:13:a1:90:6a:88:b2:66:
                    58:d2:91:58:07:11:5e:be:64:a3:05:08:f5:29:42:
                    60:6a:e1:8d:82:ec:04:de:0c:b0:0a:e4:8e:cf:98:
                    8d:e8:23:6a:80:74:30:3c:2d:5a:d6:e9:4c:77:0c:
                    68:af:9c:0c:59:b3:63:61:48:99:1c:c7:e1:27:c6:
                    91:f0:fe:df:96:bb:58:b6:dd:40:3a:35:bb:a7:0d:
                    a1:43:ad:e5:1b:66:3d:cc:79:28:35:0e:42:4c:bd:
                    73:3e:5d:35:e6:13:a2:23:fd:bb:85:df:67:4c:f5:
                    5d:ae:5f:37:20:aa:bc:31:e9:03:28:79:13:2d:b0:
                    e8:ca:9e:0f:27:ac:4a:53:64:b3:95:4b:aa:60:7d:
                    45:9e:38:df:f1:6d:75:39:e2:11:31:2b:4a:bb:1c:
                    56:c1:a5:63:a1:03:18:0e:c3:b5:13:4e:76:48:53:
                    b4:57:9c:85:50:3f:b4:60:e1:2f:54:c0:6c:d7:e5:
                    29:69:ad:34:f9:e4:60:fd:15:a7:76:a4:84:45:a0:
                    1c:bd:30:66:7d:fa:4a:bf:e2:18:f1:f6:dd:79:38:
                    e2:ae:4d:0b:c6:05:3e:99:97:dd:72:e4:9c:03:21:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:29:9C:C3:C1:85:56:42:89:5F:CC:55:EF:29:E7:8D:BD:A7:19:71
            X509v3 Authority Key Identifier:
                keyid:2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:de:ab:7e:55:70:f2:f9:6e:58:cb:8b:0a:bb:6d:fe:38:0a:
         e0:91:3f:d5:db:19:ec:37:0d:75:be:e4:da:14:b3:5e:8f:a8:
         66:59:7e:42:ce:88:22:47:4b:07:bf:f0:3e:1f:be:9b:d5:84:
         bc:87:3d:82:7e:59:1b:a6:23:08:bd:72:c6:42:8e:55:91:6d:
         87:77:89:02:81:48:11:ef:f4:d4:a5:e0:58:87:2b:97:5c:4c:
         bd:86:b3:05:6e:25:68:29:aa:df:db:30:b5:43:85:c3:6d:3e:
         82:36:2c:1b:60:90:aa:5b:50:de:99:00:a4:98:96:d5:b7:b8:
         e3:fa:49:ec:ce:c2:56:e7:ed:b6:4e:12:f4:94:1d:27:66:7e:
         40:3c:77:d6:ae:13:0b:9e:4f:e4:7a:d2:1d:58:c5:54:7a:b7:
         a0:ee:31:d7:f2:d5:06:7d:46:35:df:81:c1:70:00:f5:3d:d7:
         d6:fa:31:a4:3d:f2:6b:2e:a6:6f:c0:9d:89:1a:cb:23:b3:3b:
         72:f5:28:49:a3:cd:70:91:4d:3c:53:7a:c1:87:50:dc:0d:cd:
         34:5d:c1:73:af:05:a1:af:e3:9a:e5:55:d6:25:b6:0b:f9:c7:
         6d:07:ab:5c:c4:b0:e3:1e:c6:28:66:7f:8c:c9:20:e9:38:5e:
         83:9f:2d:3c
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgISAY3Q55vnsBTknyaz8mxEdiIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RkMWQ3ODdkNzkzZTRjOGFmNTZlMTk3ZDRlZWQ5MmFm
NmJhMTMwHhcNMjQwMjIyMTMwMDQ5WhcNMjQwMjIzMTMwMDQ5WjAzMTEwLwYDVQQD
EyhlYzI5OWNjM2MxODU1NjQyODk1ZmNjNTVlZjI5ZTc4ZGJkYTcxOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoreOslH6C2sl4t5yTeD+VQm7IDl1
8hOhkGqIsmZY0pFYBxFevmSjBQj1KUJgauGNguwE3gywCuSOz5iN6CNqgHQwPC1a
1ulMdwxor5wMWbNjYUiZHMfhJ8aR8P7flrtYtt1AOjW7pw2hQ63lG2Y9zHkoNQ5C
TL1zPl015hOiI/27hd9nTPVdrl83IKq8MekDKHkTLbDoyp4PJ6xKU2SzlUuqYH1F
njjf8W11OeIRMStKuxxWwaVjoQMYDsO1E052SFO0V5yFUD+0YOEvVMBs1+Upaa00
+eRg/RWndqSERaAcvTBmffpKv+IY8fbdeTjirk0LxgU+mZfdcuScAyHwrQIDAQAB
o4IBzDCCAcgwHQYDVR0OBBYEFOwpnMPBhVZCiV/MVe8p5429pxlxMB8GA1UdIwQY
MBaAFCp90deH15PkyK9W4ZfU7tkq9roTMA4GA1UdDwEB/wQEAwIHgDBpBggrBgEF
BQcBAQRdMFswWQYIKwYBBQUHMAKGTXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5LzJhN2RkMWQ3ODdkNzkzZTRjOGFmNTZlMTk3ZDRlZWQ5MmFmNmJhMTMu
Y2VyMGAGCCsGAQUFBwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvYWNhL0tuM1IxNGZYay1USXIxYmhsOVR1MlNyMnVo
TS5tZnQwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3Jl
cG9zaXRvcnkvYWNhL0tuM1IxNGZYay1USXIxYmhsOVR1MlNyMnVoTS5jcmwwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQAD
ggEBAJneq35VcPL5bljLiwq7bf44CuCRP9XbGew3DXW+5NoUs16PqGZZfkLOiCJH
Swe/8D4fvpvVhLyHPYJ+WRumIwi9csZCjlWRbYd3iQKBSBHv9NSl4FiHK5dcTL2G
swVuJWgpqt/bMLVDhcNtPoI2LBtgkKpbUN6ZAKSYltW3uOP6SezOwlbn7bZOEvSU
HSdmfkA8d9auEwueT+R60h1YxVR6t6DuMdfy1QZ9RjXfgcFwAPU919b6MaQ98msu
pm/AnYkayyOzO3L1KEmjzXCRTTxTesGHUNwNzTRdwXOvBaGv45rlVdYltgv5x20H
q1zEsOMexihmf4zJIOk4XoOfLTw=
Generated at Thu Feb 22 18:56:49 2024 by rpki-client on console-ams.rpki-client.org