Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/cD1IZTtCt0ZHJokms8Skl_nveb0.mft
File:                     cD1IZTtCt0ZHJokms8Skl_nveb0.mft (raw, json)
Hash identifier:          1X/C6I8oStmdmwDhtL3Y7hhfh8E2W5MtNbJ2dM88ZuA=
Subject key identifier:   EE:4F:40:B8:27:3E:CD:06:07:27:C0:4E:7D:A0:F1:75:E1:24:4B:F1
Authority key identifier: 70:3D:48:65:3B:42:B7:46:47:26:89:26:B3:C4:A4:97:F9:EF:79:BD
Certificate issuer:       /CN=703d48653b42b74647268926b3c4a497f9ef79bd
Certificate serial:       018B6A245AEBFA9836FED1978868EAB8FC28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cD1IZTtCt0ZHJokms8Skl_nveb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/cD1IZTtCt0ZHJokms8Skl_nveb0.mft
Manifest number:          086D
Signing time:             Thu 26 Oct 2023 04:00:49 +0000
Manifest this update:     Thu 26 Oct 2023 04:00:49 +0000
Manifest next update:     Fri 27 Oct 2023 04:00:49 +0000
Files and hashes:         1: 3R0nQ4cheiHTEFltB92BU1OiX7U.roa (hash: P78Er0+6bSBNdgJwf6KQcQdsBmyF0Es42m8qKzMTLKo=)
                          2: cD1IZTtCt0ZHJokms8Skl_nveb0.crl (hash: OhEle/cur5OUKmZpQ37mohV+60FVV2tMg3mvlu/YIvw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6a:24:5a:eb:fa:98:36:fe:d1:97:88:68:ea:b8:fc:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703d48653b42b74647268926b3c4a497f9ef79bd
        Validity
            Not Before: Oct 26 04:00:49 2023 GMT
            Not After : Oct 27 04:00:49 2023 GMT
        Subject: CN=ee4f40b8273ecd060727c04e7da0f175e1244bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:ea:68:31:bd:2e:49:36:2c:88:17:17:09:
                    25:c9:c1:35:dd:0e:77:ab:62:6b:cc:13:c5:a4:ca:
                    1f:3e:cb:b5:dd:8d:c4:be:d4:b9:a8:7b:8d:65:c9:
                    fb:82:d1:25:07:2a:ff:f7:0b:6a:e2:fe:0c:33:03:
                    56:b2:73:12:46:48:6e:83:7e:c7:d9:c9:c1:87:3e:
                    b6:bc:aa:5e:2e:6a:ab:5e:ab:20:e6:15:e3:a9:59:
                    35:d7:eb:ca:67:7a:bf:96:86:90:d6:91:b8:a4:f8:
                    3f:ba:35:c4:8a:b7:aa:bd:e3:01:7a:b8:9a:be:24:
                    85:cf:88:82:8b:d5:e9:9f:b9:6e:a2:02:75:b5:37:
                    a3:1b:97:f5:8f:e1:e1:a8:df:49:05:db:bd:0f:46:
                    fd:35:60:45:6d:d1:3f:fa:3e:2e:6e:12:d2:19:21:
                    f7:f3:85:a7:ed:98:c6:82:30:13:3a:4b:46:fc:20:
                    ae:66:f5:a1:b3:57:75:8c:9d:57:71:f9:60:49:57:
                    d1:c7:5c:ce:1f:da:8b:46:ed:b0:f2:85:d8:07:28:
                    40:be:77:ba:10:3d:93:f4:81:6a:80:a2:21:46:28:
                    d9:07:9d:67:6d:7a:c3:1d:f3:69:c8:41:f8:f6:3a:
                    16:df:1d:02:a3:6d:f2:4d:fa:37:01:c9:99:eb:a0:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:40:B8:27:3E:CD:06:07:27:C0:4E:7D:A0:F1:75:E1:24:4B:F1
            X509v3 Authority Key Identifier:
                keyid:70:3D:48:65:3B:42:B7:46:47:26:89:26:B3:C4:A4:97:F9:EF:79:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD1IZTtCt0ZHJokms8Skl_nveb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/cD1IZTtCt0ZHJokms8Skl_nveb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7a4094-5e3e-404a-9906-e70ea6332365/1/cD1IZTtCt0ZHJokms8Skl_nveb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:07:98:a5:a3:ff:7a:ef:bd:3d:26:14:65:50:a5:bf:b7:81:
         98:9a:2f:6e:22:06:9b:3a:8d:c5:50:d0:b7:8a:c0:0f:97:e6:
         b9:3b:b6:88:e8:bc:69:cf:86:cc:ab:b7:92:27:51:da:6d:64:
         0c:da:d2:2b:d1:f7:bc:bf:6e:81:61:fc:31:81:8b:e6:23:12:
         5a:64:fa:f4:2f:fc:2b:dd:43:6f:f2:7f:f6:0c:32:f5:e1:d1:
         89:6f:07:04:de:63:97:41:10:95:16:e4:02:24:5a:fd:62:f6:
         20:fc:e8:38:f7:11:f8:45:a9:a3:26:4c:3a:48:37:28:51:37:
         d7:a5:c4:10:bd:9f:8f:32:b6:91:d2:e2:17:19:94:c7:47:04:
         83:21:ad:74:7b:22:f8:29:50:cd:d0:a8:1b:b3:e2:04:70:6e:
         73:6b:32:ea:ab:53:fc:fc:23:30:3a:4e:46:e7:18:dd:e4:54:
         63:e7:fc:61:d3:35:4c:bc:0d:33:dc:8f:16:ae:76:11:f1:13:
         c1:3a:01:a8:d5:bc:51:d5:ca:5d:62:f0:45:0d:75:79:32:18:
         92:e9:28:41:d3:ee:06:c7:d5:c8:b1:f5:98:a1:81:cc:e0:28:
         7b:74:84:bb:b4:c3:e2:dc:75:b1:6a:c1:86:2c:15:37:0b:bc:
         4b:1b:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:54 2024 by rpki-client on console-ams.rpki-client.org