Manifest

$ rpki-client -vvf rpki.co/repo/AS208328/0/4DB9041929B705C822B389CA07E1062482395B5A.mft
File:                     4DB9041929B705C822B389CA07E1062482395B5A.mft (raw, json)
Hash identifier:          aKKgxhuNqgUPGxgD1NGTW3WzPdmvFbHuIm+7pDsXOro=
Subject key identifier:   93:22:84:FC:01:55:AC:50:EC:91:60:31:F1:DC:30:A8:61:8C:18:DF
Authority key identifier: 4D:B9:04:19:29:B7:05:C8:22:B3:89:CA:07:E1:06:24:82:39:5B:5A
Certificate issuer:       /CN=4db9041929b705c822b389ca07e1062482395b5a
Certificate serial:       48C812DAD14EBEDB9BAEC8C4C23C56495F71C791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbkEGSm3Bcgis4nKB-EGJII5W1o.cer
Subject info access:      rsync://rpki.co/repo/AS208328/0/4DB9041929B705C822B389CA07E1062482395B5A.mft
Manifest number:          D2
Signing time:             Tue 28 Nov 2023 05:44:04 +0000
Manifest this update:     Tue 28 Nov 2023 05:39:04 +0000
Manifest next update:     Wed 29 Nov 2023 08:16:04 +0000
Files and hashes:         1: 4DB9041929B705C822B389CA07E1062482395B5A.crl (hash: BfMVVb36iE5L0xAo9uA/fE+TNb0AV23YUP3d4NJg2sY=)
                          2: AS208328.asa (hash: /+feOS5FWhgKuD+BFXesEZGJciUbVU0Cllzhdyxsp08=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c8:12:da:d1:4e:be:db:9b:ae:c8:c4:c2:3c:56:49:5f:71:c7:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db9041929b705c822b389ca07e1062482395b5a
        Validity
            Not Before: Nov 28 05:39:04 2023 GMT
            Not After : Nov 29 08:16:04 2023 GMT
        Subject: CN=932284FC0155AC50EC916031F1DC30A8618C18DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:31:04:24:ae:d1:af:92:3e:bc:42:f9:8b:
                    e3:5d:13:e0:db:9d:fe:90:46:46:5e:e4:92:3f:a6:
                    5e:77:81:f1:90:fb:4e:94:fd:7d:fc:4a:1b:80:00:
                    e3:8f:16:b3:53:3d:91:c6:1b:d0:cd:17:53:eb:9b:
                    9a:27:89:c2:75:8a:80:ea:ed:29:51:7a:67:55:92:
                    28:22:f5:7c:63:19:f7:02:93:86:9a:2c:81:8c:bb:
                    04:d4:a2:64:64:6d:5a:82:7e:22:86:80:b0:57:fe:
                    d3:8f:74:a8:53:16:07:17:08:b0:81:22:9b:fa:da:
                    1f:27:b3:d4:95:5c:4d:97:92:8f:0f:76:27:98:fe:
                    f1:34:f7:9b:37:1b:c6:66:41:87:11:64:ea:bf:74:
                    5c:06:de:d9:68:bf:52:bb:1b:37:22:e5:1a:f0:40:
                    8e:52:33:30:ea:4f:63:52:59:65:a4:4f:5b:2e:ca:
                    bc:99:8f:28:42:25:f6:38:7d:7f:35:20:72:4e:0b:
                    13:2e:22:f4:2c:e8:a4:70:3b:d7:cd:a2:3a:3e:f7:
                    fd:e3:43:7f:03:68:0c:19:3e:76:57:3a:50:24:ae:
                    93:b6:6d:6f:5e:35:2f:fd:2d:00:aa:9e:7d:85:7a:
                    93:4c:8e:f1:c7:9a:2c:93:b3:df:8f:8f:01:ca:8c:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:22:84:FC:01:55:AC:50:EC:91:60:31:F1:DC:30:A8:61:8C:18:DF
            X509v3 Authority Key Identifier:
                keyid:4D:B9:04:19:29:B7:05:C8:22:B3:89:CA:07:E1:06:24:82:39:5B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS208328/0/4DB9041929B705C822B389CA07E1062482395B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbkEGSm3Bcgis4nKB-EGJII5W1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS208328/0/4DB9041929B705C822B389CA07E1062482395B5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:43:b3:40:1d:eb:91:37:54:96:9d:7f:34:57:7b:2e:e7:2e:
         13:10:c0:a1:2b:fc:1e:58:99:8b:31:a5:c4:52:bb:56:c9:c7:
         16:c4:b8:e0:e3:d3:0f:7f:dc:11:c4:48:8e:86:12:20:8e:f2:
         05:11:6c:72:e4:3d:6c:7f:bc:8a:57:5c:2c:0e:c9:51:1c:98:
         7d:f6:d5:1f:40:f5:12:dc:bb:98:61:29:e3:2f:c1:2b:de:a7:
         16:b7:c7:5d:a0:70:cb:6d:0e:91:62:bd:85:e1:56:e6:e0:92:
         0a:0a:4c:0c:42:31:b1:aa:72:8c:fa:b0:08:8a:0f:b6:a6:67:
         26:6c:b0:35:09:b8:a9:e4:2f:7a:ea:ed:2b:32:a9:86:e2:88:
         2f:0e:aa:3e:39:8b:6c:b7:c7:53:53:5f:91:1a:b4:3c:2c:f6:
         67:17:6b:a4:77:c8:05:b2:d3:e0:96:4b:5f:3a:61:51:1c:85:
         10:60:3b:12:5a:80:c9:4c:3e:11:35:a8:99:90:8d:dd:26:87:
         ff:ff:38:38:63:22:f2:22:46:49:53:22:5f:e2:7e:e2:14:28:
         65:61:5d:ee:24:2e:ec:8a:f3:e9:f5:01:2e:74:c8:67:fc:b5:
         bc:98:a0:27:9f:9f:f3:33:c3:a9:1e:89:bf:2f:5e:27:66:e3:
         a5:e4:09:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----