Manifest

$ rpki-client -vvf rpki.co/repo/Mario/0/92591D776FA24CA7C6E2BAA2D0E5B3E80FEA898D.mft
File:                     92591D776FA24CA7C6E2BAA2D0E5B3E80FEA898D.mft (raw, json)
Hash identifier:          lPR2IZDSuDTq073KlUIBxkZoAFjXZlubY2bROPPE+hs=
Subject key identifier:   47:8B:3E:7E:FA:F7:8D:7B:2A:53:C2:33:3E:AB:DE:2C:73:FD:2B:0A
Authority key identifier: 92:59:1D:77:6F:A2:4C:A7:C6:E2:BA:A2:D0:E5:B3:E8:0F:EA:89:8D
Certificate issuer:       /CN=92591d776fa24ca7c6e2baa2d0e5b3e80fea898d
Certificate serial:       4BE232A4685E41AB7155343BBE0725587AC4ABD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klkdd2-iTKfG4rqi0OWz6A_qiY0.cer
Subject info access:      rsync://rpki.co/repo/Mario/0/92591D776FA24CA7C6E2BAA2D0E5B3E80FEA898D.mft
Manifest number:          09
Signing time:             Tue 18 Apr 2023 11:04:06 +0000
Manifest this update:     Tue 18 Apr 2023 10:59:06 +0000
Manifest next update:     Wed 19 Apr 2023 14:52:06 +0000
Files and hashes:         1: 92591D776FA24CA7C6E2BAA2D0E5B3E80FEA898D.crl (hash: TT+hTPlBtL6+zbDDwtEcH5QQBhjsWAt7hUpTxyQI894=)
                          2: AS212294.asa (hash: R5b4cfuh/QZucGqFT83rdedQtZeC4v71Dwidi0vA6sk=)

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e2:32:a4:68:5e:41:ab:71:55:34:3b:be:07:25:58:7a:c4:ab:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92591d776fa24ca7c6e2baa2d0e5b3e80fea898d
        Validity
            Not Before: Apr 18 10:59:06 2023 GMT
            Not After : Apr 19 14:52:06 2023 GMT
        Subject: CN=478B3E7EFAF78D7B2A53C2333EABDE2C73FD2B0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:db:7d:11:dc:23:a4:94:45:c2:30:10:e5:
                    f5:39:06:02:27:d2:5e:ac:fd:60:38:3a:bf:6c:09:
                    a5:d8:1a:83:83:e5:65:ab:5b:bd:ed:72:21:d4:4d:
                    17:a7:cd:4e:9d:6e:d1:28:8c:2d:23:87:ed:c7:7a:
                    c2:a0:17:b0:80:4e:71:42:7b:ea:bf:97:18:f4:a9:
                    ac:d9:c5:48:7d:5b:01:74:6f:a2:44:98:3b:dd:57:
                    47:70:34:c1:37:f5:c2:53:ad:c0:35:a0:87:55:78:
                    d6:55:72:58:1e:74:c5:e3:9e:bf:e3:d7:4e:01:cb:
                    d3:f4:81:da:61:8a:bb:cb:ae:76:9f:ab:15:01:ae:
                    31:8c:2f:8a:ac:90:b3:13:5e:af:05:19:6a:b2:fd:
                    78:5d:c3:58:f2:1a:00:ad:40:2b:44:c2:24:04:63:
                    31:3a:79:c6:95:57:5d:25:33:b1:43:78:2b:08:d6:
                    b5:d8:c6:2d:64:62:49:db:63:e7:10:e3:c8:46:da:
                    93:a0:82:a2:50:3a:43:0c:78:19:27:71:3c:6d:a5:
                    5c:43:6c:f8:cd:5b:b7:40:71:1d:a6:db:45:f4:ef:
                    06:68:05:9c:f1:f7:c1:18:3b:a9:45:91:42:9d:8e:
                    3a:06:50:0c:24:b3:65:73:fc:1a:98:74:5e:08:c7:
                    31:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8B:3E:7E:FA:F7:8D:7B:2A:53:C2:33:3E:AB:DE:2C:73:FD:2B:0A
            X509v3 Authority Key Identifier:
                keyid:92:59:1D:77:6F:A2:4C:A7:C6:E2:BA:A2:D0:E5:B3:E8:0F:EA:89:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Mario/0/92591D776FA24CA7C6E2BAA2D0E5B3E80FEA898D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klkdd2-iTKfG4rqi0OWz6A_qiY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Mario/0/92591D776FA24CA7C6E2BAA2D0E5B3E80FEA898D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:19:ac:cc:4c:0c:65:61:05:94:48:19:05:ae:17:9c:5d:
         02:d1:e3:03:f4:7d:c8:34:68:f2:1b:c0:8c:15:03:ab:11:67:
         d3:8b:99:7b:db:8f:0d:8d:3a:b4:f9:57:02:9a:30:33:3b:33:
         e3:7b:2c:d7:e2:89:c4:cb:75:b6:1e:ff:da:4d:52:74:2d:f0:
         7d:ee:b0:32:92:a7:cd:04:48:b3:29:84:70:ac:cb:e3:8d:39:
         35:b4:21:cb:23:97:43:fd:9c:92:0a:f5:9d:08:c8:07:20:fb:
         8e:02:27:4e:21:fc:4e:88:ca:33:e5:db:2f:42:57:46:27:95:
         88:43:73:ae:0c:05:9c:cd:46:92:da:62:65:31:9d:2a:2f:1f:
         27:f4:be:8d:c8:b0:b9:6c:e9:dc:0d:fc:e7:e7:8f:d0:bb:89:
         60:20:e8:9e:50:47:4e:ef:49:bc:41:de:c4:29:72:17:f2:b2:
         3e:5e:0d:ca:19:2b:d3:93:fc:34:7a:32:4e:68:d6:c7:1e:a7:
         d9:b9:93:cf:98:42:67:a8:0a:93:e8:8e:c8:18:eb:99:a3:11:
         d1:80:41:35:57:ed:73:74:6b:e0:02:ec:b5:00:c1:5d:5f:48:
         90:1a:e9:59:f3:90:2a:73:82:01:1e:4d:d7:6c:d2:47:6e:77:
         1b:18:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----