Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.mft
File:                     rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.mft (raw, json)
Hash identifier:          s0W1sLej1J7BUhTASJpJrxR/JPtsKNrhkal0ieB8csw=
Subject key identifier:   17:1F:CF:47:A6:4C:86:E8:59:25:B7:B8:44:BF:2F:3B:43:44:FA:8E
Authority key identifier: AC:23:77:7E:2A:B0:F7:72:69:7B:92:63:E1:55:5B:5D:FC:DB:75:9D
Certificate issuer:       /CN=ac23777e2ab0f772697b9263e1555b5dfcdb759d
Certificate serial:       0188E436AA1516709483AAAF95679C7ADAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.mft
Manifest number:          0DF1
Signing time:             Thu 22 Jun 2023 17:46:07 +0000
Manifest this update:     Thu 22 Jun 2023 17:46:07 +0000
Manifest next update:     Fri 23 Jun 2023 17:46:07 +0000
Files and hashes:         1: rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.crl (hash: nfKyIGi45bTCG/+FqvGo8jxsBGeUkMqbM+sQgm7r5cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e4:36:aa:15:16:70:94:83:aa:af:95:67:9c:7a:da:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac23777e2ab0f772697b9263e1555b5dfcdb759d
        Validity
            Not Before: Jun 22 17:46:07 2023 GMT
            Not After : Jun 23 17:46:07 2023 GMT
        Subject: CN=171fcf47a64c86e85925b7b844bf2f3b4344fa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:90:10:bb:d4:46:74:75:d5:7c:fa:a0:38:7d:
                    3d:f1:da:30:78:7f:5e:50:f0:5e:9a:07:c6:c3:a2:
                    a9:da:3d:dd:28:ca:41:f5:0e:c0:ee:f5:af:ae:fe:
                    1f:f2:a7:13:48:cd:29:a9:04:6e:ff:ea:c4:14:a7:
                    7b:4f:b4:cd:e1:0f:86:24:d6:fe:64:0d:82:dd:da:
                    34:01:8b:c8:e9:89:06:e8:b6:03:37:a4:f1:16:db:
                    04:99:09:2b:96:39:6f:04:dd:62:0f:cb:ad:de:7d:
                    24:14:9c:5a:05:fb:3b:7d:51:cc:ff:c8:85:9e:4b:
                    70:29:2c:9e:87:69:e4:40:ff:87:7c:16:9d:8a:89:
                    cd:53:6f:93:30:7d:a0:3f:ba:80:ee:52:c1:3f:3a:
                    8f:fa:fb:d8:f9:46:5b:e9:e0:81:2b:68:40:59:d7:
                    4e:87:f4:05:7f:69:47:11:60:a9:6d:9b:50:a4:2d:
                    66:be:91:99:3f:a8:0a:1d:5c:4e:88:8c:aa:13:96:
                    15:3f:19:ee:c9:30:2d:3d:5f:07:0a:80:29:90:a9:
                    43:0b:09:4e:8c:73:d8:cf:63:b5:42:6b:c3:6c:9f:
                    4f:b2:ad:8e:c6:2b:52:a2:0f:38:4a:4e:f1:f8:bb:
                    f9:ac:a2:1f:19:98:6a:c3:07:0e:87:47:c4:1f:17:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1F:CF:47:A6:4C:86:E8:59:25:B7:B8:44:BF:2F:3B:43:44:FA:8E
            X509v3 Authority Key Identifier:
                keyid:AC:23:77:7E:2A:B0:F7:72:69:7B:92:63:E1:55:5B:5D:FC:DB:75:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/bec747-936f-4927-a79d-8ed264ca2457/1/rCN3fiqw93Jpe5Jj4VVbXfzbdZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:10:1d:da:3b:7f:0c:39:97:83:7a:42:c5:0a:a4:7d:e1:34:
         37:96:06:c1:46:09:c6:f4:4b:19:a8:c2:d4:51:c3:c7:99:0e:
         e9:a4:75:61:c8:f1:23:35:71:78:f6:b5:99:10:16:9e:1e:e8:
         ba:49:ef:02:5c:81:b9:e2:51:88:bc:85:ad:f9:b7:6f:2e:3c:
         c2:ef:f2:c0:d5:b2:e6:b5:82:2e:bb:1e:ad:1a:d3:4a:57:4e:
         dc:5a:01:b2:fa:2f:4a:26:7d:f2:ac:e9:e9:ec:dd:13:0c:e3:
         63:b5:a8:04:33:3c:40:e5:cc:35:4e:2b:8d:6e:65:a7:01:37:
         b7:22:f1:80:c4:8f:fb:2c:15:c2:44:07:07:26:0b:de:2e:6b:
         c5:f5:19:b1:e1:4b:ed:d2:5c:52:a6:12:9a:5a:06:13:02:05:
         9b:90:39:5a:b4:7d:4b:b4:9f:26:02:c5:65:74:98:0e:79:f1:
         35:05:b4:df:79:70:23:ce:7d:a8:c1:3c:22:ef:a2:a9:30:a3:
         f3:9b:3d:fb:2f:54:bd:28:e9:64:97:5b:b1:94:b9:f6:c4:4b:
         40:16:e2:d3:40:b0:a0:fb:d3:5c:2f:c0:a7:fa:98:1b:9d:5c:
         84:43:d9:30:c5:7c:f7:da:fe:26:0b:80:40:39:b6:ec:53:f8:
         76:cf:40:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org