Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.mft
File:                     srDs1Dw7wdjOQ6p7vKyFwhYNqZs.mft (raw, json)
Hash identifier:          V/H+rXBYhh0eiqfzlVaUgDUOvRH23B9yLJ4Wkmsj1vg=
Subject key identifier:   AA:6D:2D:6D:03:F2:98:EB:61:EC:07:97:F8:75:03:FE:A5:4D:39:5C
Authority key identifier: B2:B0:EC:D4:3C:3B:C1:D8:CE:43:AA:7B:BC:AC:85:C2:16:0D:A9:9B
Certificate issuer:       /CN=b2b0ecd43c3bc1d8ce43aa7bbcac85c2160da99b
Certificate serial:       018C618C65C79649655C2F19603A14F50C7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.mft
Manifest number:          07CA
Signing time:             Wed 13 Dec 2023 05:00:40 +0000
Manifest this update:     Wed 13 Dec 2023 05:00:40 +0000
Manifest next update:     Thu 14 Dec 2023 05:00:40 +0000
Files and hashes:         1: srDs1Dw7wdjOQ6p7vKyFwhYNqZs.crl (hash: nDNN51nJxdyBnB10MDc/Xx0i5aOUNPS1T/l7B3ea/ec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:61:8c:65:c7:96:49:65:5c:2f:19:60:3a:14:f5:0c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b0ecd43c3bc1d8ce43aa7bbcac85c2160da99b
        Validity
            Not Before: Dec 13 05:00:40 2023 GMT
            Not After : Dec 14 05:00:40 2023 GMT
        Subject: CN=aa6d2d6d03f298eb61ec0797f87503fea54d395c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:a5:83:0a:9b:c6:9f:50:4f:b3:af:f1:db:
                    92:f4:d2:be:2e:c3:01:ba:47:10:0d:7d:5b:50:ea:
                    e4:52:33:b2:08:e7:da:51:18:06:79:33:8e:5d:6f:
                    60:5b:5f:e6:4f:6b:74:25:98:ab:77:93:ee:f3:47:
                    33:7f:29:5b:38:c8:bd:f9:f6:53:fe:32:eb:18:22:
                    77:99:11:3d:9b:23:f5:7e:28:53:43:e0:ba:6b:59:
                    3f:b7:eb:7e:c0:9a:c2:f5:84:a2:d3:59:f3:0b:78:
                    d2:72:7e:a6:16:f7:b1:73:8d:5b:7a:c5:fb:c1:91:
                    16:e4:4e:29:24:cd:dd:cc:fb:0a:4a:a3:c8:22:ee:
                    a3:15:2a:f0:dd:6d:a9:f0:d0:d4:d7:6e:c0:82:b9:
                    3b:56:99:3e:65:25:26:e0:dd:b9:e1:eb:07:10:ea:
                    25:07:da:5c:41:b6:c2:12:a8:2b:2a:cf:3c:e8:8c:
                    39:a7:c0:d4:d6:2a:d6:dc:20:be:dd:70:d4:13:f3:
                    8a:be:ec:3c:ff:8e:b4:b4:94:c9:41:92:a8:39:12:
                    c6:fb:56:4e:99:d4:96:a6:a0:9c:c4:e0:90:29:7e:
                    e5:20:cf:01:be:48:2d:4f:c5:8c:c3:28:19:38:8f:
                    fa:a4:cf:4c:c1:ac:de:97:19:0f:00:9c:7c:ac:84:
                    8e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6D:2D:6D:03:F2:98:EB:61:EC:07:97:F8:75:03:FE:A5:4D:39:5C
            X509v3 Authority Key Identifier:
                keyid:B2:B0:EC:D4:3C:3B:C1:D8:CE:43:AA:7B:BC:AC:85:C2:16:0D:A9:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/2fd031-da16-4cbd-8c8c-9043feba7ee4/1/srDs1Dw7wdjOQ6p7vKyFwhYNqZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:7d:ae:f5:78:eb:a7:7c:56:eb:68:ac:61:f6:73:7b:85:
         8b:89:ea:93:c7:af:5e:e5:76:d0:b6:3c:e7:99:6c:df:b1:78:
         b5:3e:f9:ee:02:36:42:a5:ef:60:20:2a:a9:28:b0:6b:6f:22:
         68:e6:95:b9:c0:c0:6f:ed:30:ec:69:bb:66:29:9d:90:3e:bf:
         7b:29:30:4f:99:64:42:3a:74:7d:71:9f:57:be:36:9b:68:03:
         a2:0f:06:0f:c9:d3:44:05:bf:25:ea:ec:5e:59:94:93:0a:fd:
         b5:86:f1:95:41:dd:95:7c:1b:9b:bc:ef:1b:d1:ae:31:b7:a6:
         42:5f:32:b3:b6:15:80:13:8e:d8:23:fb:da:bd:35:9b:d5:45:
         a2:77:17:b1:6c:56:03:b3:94:f3:6d:ed:49:74:ea:02:86:0e:
         f8:aa:51:f7:27:07:a7:55:76:a3:06:8b:69:a7:d6:9f:1e:e1:
         48:95:ee:57:d2:ee:6c:bf:8b:ea:f6:29:2a:da:a7:c7:20:4a:
         b3:7d:11:85:6a:8f:8d:13:32:66:c9:62:0f:8e:a5:be:31:f2:
         f1:60:d3:ce:c5:fe:ab:12:b0:03:88:03:ac:57:35:9c:10:58:
         f1:67:48:cc:c1:d9:8b:99:69:db:83:56:34:82:ea:ce:a9:63:
         52:df:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:36 2024 by rpki-client on console-fra.rpki-client.org