Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/85936a-6792-48f5-bffc-c19d2713ed0c/1/SJd9DAqAtOL2Yqfao3hk7_PTNZU.mft
File:                     SJd9DAqAtOL2Yqfao3hk7_PTNZU.mft (raw, json)
Hash identifier:          55a5HJ9jvnyTwPg+97XR91LU1Kbux1gU2Z07tNnHLMA=
Subject key identifier:   B7:83:C2:A8:1F:C3:54:B3:CE:E2:EB:6A:59:70:3C:36:D3:6C:EF:65
Authority key identifier: 48:97:7D:0C:0A:80:B4:E2:F6:62:A7:DA:A3:78:64:EF:F3:D3:35:95
Certificate issuer:       /CN=48977d0c0a80b4e2f662a7daa37864eff3d33595
Certificate serial:       018818651981D687AE2BB10731FA6266B2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SJd9DAqAtOL2Yqfao3hk7_PTNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/85936a-6792-48f5-bffc-c19d2713ed0c/1/SJd9DAqAtOL2Yqfao3hk7_PTNZU.mft
Manifest number:          04
Signing time:             Sun 14 May 2023 03:54:18 +0000
Manifest this update:     Sun 14 May 2023 03:54:18 +0000
Manifest next update:     Mon 15 May 2023 03:54:18 +0000
Files and hashes:         1: SJd9DAqAtOL2Yqfao3hk7_PTNZU.crl (hash: u8SUlC77Hp1hnBIm5Xhx/2CbocplLCcLx6DPYhzKDDI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:18:65:19:81:d6:87:ae:2b:b1:07:31:fa:62:66:b2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48977d0c0a80b4e2f662a7daa37864eff3d33595
        Validity
            Not Before: May 14 03:54:18 2023 GMT
            Not After : May 15 03:54:18 2023 GMT
        Subject: CN=b783c2a81fc354b3cee2eb6a59703c36d36cef65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:6a:6f:5f:59:37:55:61:fb:58:30:e9:87:
                    a2:c1:eb:37:15:21:d9:6c:72:ce:bd:94:25:25:90:
                    ad:9b:34:da:33:12:9c:8c:f6:35:40:ec:b7:fb:e4:
                    e7:e1:61:bf:09:0e:ec:9b:3c:2e:d8:db:0e:6b:00:
                    f3:dd:9e:70:35:c2:12:5f:4d:e8:a1:8e:f6:f6:c6:
                    fa:45:58:7c:e3:ee:e9:77:0e:e0:dd:9c:fa:d4:d1:
                    14:1e:ac:1f:54:12:04:c4:95:20:25:b6:43:88:26:
                    37:a7:21:64:52:51:08:03:4a:d2:d4:01:db:a7:40:
                    e6:23:97:11:92:bb:3c:2a:a5:d1:e7:65:ca:3f:79:
                    bc:32:7d:02:9c:1f:38:38:a3:f3:8b:b4:4e:36:4c:
                    31:ba:45:8a:7b:11:ea:48:af:ae:42:ab:4d:5b:69:
                    ed:cd:c8:f2:6c:6e:ca:ff:04:57:b9:4f:9a:09:5b:
                    2e:ba:b9:4c:eb:81:d7:88:d0:0a:db:61:9e:41:35:
                    ec:e3:d4:75:f6:f1:c3:b0:28:cd:1d:0e:21:8d:a0:
                    65:ac:5b:74:4e:f5:7b:f7:91:92:56:69:51:1b:bd:
                    1a:33:e1:37:b2:44:fe:d0:2f:75:71:64:64:9d:89:
                    72:1c:aa:7d:12:38:d9:7c:4d:7a:7d:15:2a:5f:fd:
                    b6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:C2:A8:1F:C3:54:B3:CE:E2:EB:6A:59:70:3C:36:D3:6C:EF:65
            X509v3 Authority Key Identifier:
                keyid:48:97:7D:0C:0A:80:B4:E2:F6:62:A7:DA:A3:78:64:EF:F3:D3:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SJd9DAqAtOL2Yqfao3hk7_PTNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/85936a-6792-48f5-bffc-c19d2713ed0c/1/SJd9DAqAtOL2Yqfao3hk7_PTNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/85936a-6792-48f5-bffc-c19d2713ed0c/1/SJd9DAqAtOL2Yqfao3hk7_PTNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:08:fd:e7:e5:8a:04:f9:49:ae:05:7c:e3:63:3e:33:5c:3b:
         2b:f4:1a:ad:7a:69:56:26:bf:24:86:ec:73:d8:c6:46:a3:ad:
         65:0c:30:24:b4:a0:bd:f4:8f:a6:db:67:5c:2f:fa:da:ed:2a:
         63:29:22:f6:7d:ad:af:5b:fa:50:8a:b7:d8:59:47:4a:17:33:
         e0:74:96:c2:b3:bc:3d:63:10:6e:5b:b1:d0:d9:8f:9f:cd:dc:
         5f:58:df:b9:37:32:aa:89:67:0b:dd:e2:ed:61:04:a2:9f:73:
         d6:ae:5c:18:c4:bb:8b:05:f8:79:10:b7:37:2a:8d:c4:30:85:
         4c:ab:d3:7b:33:0e:f1:23:b7:88:47:a1:40:3d:de:e8:19:6c:
         c4:dd:7b:54:d2:40:9c:63:70:39:01:4d:7a:8a:f8:8f:62:8f:
         6d:97:7c:16:f8:ce:27:14:a9:e5:16:19:75:52:ce:30:3b:57:
         1e:5d:ee:0d:41:fa:3e:e4:e9:5f:83:de:34:8b:3e:6d:d9:31:
         a6:72:8a:ea:f0:4c:35:02:46:3a:91:2e:c7:af:13:a5:1b:2c:
         bb:8e:8a:ba:77:ed:43:dd:69:4f:b9:20:b8:48:fb:79:4b:5d:
         15:84:e0:0e:8f:b9:c6:d6:19:96:a5:41:96:77:37:5a:54:18:
         bb:dd:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:07 2024 by rpki-client on console-ams.rpki-client.org