Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.mft
File:                     xCN9vvFqXZRaMsNxzNy00xsna40.mft (raw, json)
Hash identifier:          gZKqgIlsS0qtBgLpG9OBd7iczSb8GqzgrIS9bvwx+d8=
Subject key identifier:   4A:A0:03:C8:C7:BF:45:F2:7A:84:DC:FA:27:2C:05:3B:85:42:2A:DE
Authority key identifier: C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D
Certificate issuer:       /CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
Certificate serial:       0182A0A07282E3BCCA55F1A579B431735760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.mft
Manifest number:          0148
Signing time:             Mon 15 Aug 2022 08:30:45 +0000
Manifest this update:     Mon 15 Aug 2022 08:30:45 +0000
Manifest next update:     Tue 16 Aug 2022 08:30:45 +0000
Files and hashes:         1: 1nTwkrdX0K7sltByQWyTD6W2-YM.roa (hash: kyjG3cK/BC7SZaljpIXeyjLFfXtMpvYahLghNMG6yiY=)
                          2: 48PzRcGNAry6l1HEks85ju79lqU.roa (hash: qnyTXIpd4LZessxYgiocFWC/pVLRGlTnc5sJ2kJlWhk=)
                          3: xCN9vvFqXZRaMsNxzNy00xsna40.crl (hash: 5ljSgpeyysan5QexlEh4mYRsQOMgJlUcrxnEgymBpVE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:a0:a0:72:82:e3:bc:ca:55:f1:a5:79:b4:31:73:57:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4237dbef16a5d945a32c371ccdcb4d31b276b8d
        Validity
            Not Before: Aug 15 08:30:45 2022 GMT
            Not After : Aug 16 08:30:45 2022 GMT
        Subject: CN=4aa003c8c7bf45f27a84dcfa272c053b85422ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:28:06:a8:a0:21:08:5a:e8:cc:15:a2:fe:
                    82:ac:3e:55:01:ba:3e:89:f0:1f:fa:dc:97:ae:f0:
                    48:93:27:89:8a:91:b8:c7:68:f6:fc:6c:af:5b:96:
                    ed:f1:c7:e7:e8:54:2e:9c:a0:51:08:dd:6f:57:c9:
                    22:6c:d8:e1:97:72:23:20:58:1f:98:80:17:a3:65:
                    14:bf:85:37:8a:8d:56:52:36:59:7c:7a:50:07:e6:
                    c0:f0:bd:1f:b3:73:18:d3:58:70:99:56:43:dd:3a:
                    20:8e:10:8a:28:99:55:4a:bf:46:5a:a7:d5:53:7f:
                    78:15:b6:88:7d:78:7c:01:01:f5:14:55:08:85:38:
                    61:3e:3a:a9:4e:2b:c6:46:3f:7c:74:12:55:b7:1a:
                    69:4a:34:34:c9:38:16:c1:4c:f1:5c:94:51:35:fa:
                    fd:7f:eb:53:81:aa:e9:b7:ee:37:19:b3:d0:a3:ef:
                    61:af:bd:f7:5a:16:5f:e8:23:e5:de:e9:32:38:0d:
                    44:54:11:f2:ae:c4:f2:6b:9c:64:b9:42:1c:cf:1e:
                    3e:0b:0f:02:a5:64:b9:15:c6:c8:5a:5b:e9:34:74:
                    47:d8:a3:2e:09:60:53:82:92:58:0e:da:64:37:4d:
                    ee:37:4b:70:a5:b8:a1:ab:bf:26:86:1b:b3:7e:13:
                    c7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A0:03:C8:C7:BF:45:F2:7A:84:DC:FA:27:2C:05:3B:85:42:2A:DE
            X509v3 Authority Key Identifier:
                keyid:C4:23:7D:BE:F1:6A:5D:94:5A:32:C3:71:CC:DC:B4:D3:1B:27:6B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCN9vvFqXZRaMsNxzNy00xsna40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/42c1bd-1e8b-4083-8120-2363ddf6c6d2/1/xCN9vvFqXZRaMsNxzNy00xsna40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:33:89:e6:f7:3d:c6:86:01:85:08:0a:de:81:cc:59:6f:64:
         63:22:cc:28:8a:4d:37:33:10:19:66:9d:4c:f2:e3:66:ef:a2:
         92:86:2b:4f:2f:2e:4c:ef:18:d5:97:d0:2d:3e:3a:76:06:20:
         e8:39:a3:7c:19:62:d4:5b:cc:f0:56:1e:42:58:5d:8b:19:66:
         19:9f:01:14:b5:0a:8b:5b:dd:5e:27:dd:52:27:b8:d9:9a:23:
         04:f1:1b:e2:05:eb:9a:81:31:ee:e4:41:bf:f2:be:81:0d:8d:
         c6:b9:34:78:b9:c5:08:5d:09:de:02:30:55:3b:71:d8:a4:2c:
         9f:7b:24:97:5f:56:7d:d0:70:ab:40:ed:d6:8c:30:b5:43:14:
         65:03:04:22:68:2d:be:cb:c9:34:22:fd:46:38:b8:b8:c3:6b:
         0c:65:5d:7a:f0:cf:f0:a3:20:7e:e8:27:ae:bb:be:74:d1:92:
         1f:4a:94:85:b6:b8:92:f2:ed:bd:7d:c8:56:56:f8:a2:5b:a6:
         88:7f:16:b0:33:67:c0:8f:99:ba:de:11:0b:6f:14:d5:06:d1:
         e6:43:0b:df:72:51:ce:89:55:73:6e:44:35:b7:c7:94:d5:fb:
         20:c8:db:fd:bb:91:03:4a:b4:08:52:fe:0a:b5:64:b6:6f:12:
         68:4d:09:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org