Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.mft
File:                     cvuKvDPRQcSRNwga9ChugqTKzJY.mft (raw, json)
Hash identifier:          ADz+ptqHc0gNqKq5rXLlHZadGVrd/nI3AwNAHZHwHlo=
Subject key identifier:   38:43:B7:1B:AF:FB:E3:4E:CD:2D:5D:9C:83:47:02:B7:EA:E6:51:57
Authority key identifier: 72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96
Certificate issuer:       /CN=72fb8abc33d141c49137081af4286e82a4cacc96
Certificate serial:       018A8756249869B58A5EE3C332F4A42F22EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvuKvDPRQcSRNwga9ChugqTKzJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.mft
Manifest number:          07D2
Signing time:             Tue 12 Sep 2023 03:01:24 +0000
Manifest this update:     Tue 12 Sep 2023 03:01:24 +0000
Manifest next update:     Wed 13 Sep 2023 03:01:24 +0000
Files and hashes:         1: cvuKvDPRQcSRNwga9ChugqTKzJY.crl (hash: q8O51guujqKfY82HGj1pT+CCTav9lNIXpGve1xVAsWg=)
                          2: fEw1pamDmp1kG_EvJIHFRPzKzms.roa (hash: 55/prq3G4jQuG+u2ztHN3FALvt5GkpucBlQ/nzr2q14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:56:24:98:69:b5:8a:5e:e3:c3:32:f4:a4:2f:22:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72fb8abc33d141c49137081af4286e82a4cacc96
        Validity
            Not Before: Sep 12 03:01:24 2023 GMT
            Not After : Sep 13 03:01:24 2023 GMT
        Subject: CN=3843b71baffbe34ecd2d5d9c834702b7eae65157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e8:fc:6e:7e:0f:42:51:b9:d0:ab:e1:36:87:
                    2a:50:b8:0b:58:d3:9d:0a:d9:87:0f:3a:ed:d7:0a:
                    66:51:b5:5f:3c:47:19:bd:60:49:61:16:57:53:c5:
                    43:bf:6a:fd:37:2b:8c:2c:b9:31:29:7d:7a:9f:24:
                    8f:0b:91:a6:2a:48:59:6e:c7:aa:4a:36:c5:b4:a8:
                    d1:4c:db:68:15:61:68:05:d8:c5:04:e7:97:a5:7e:
                    ef:a6:86:4b:b6:21:1a:16:4a:af:3c:0a:ef:9a:d0:
                    cc:d9:1d:94:01:3d:40:c9:93:90:a2:7b:28:0e:cb:
                    ef:61:ca:d5:bd:10:1f:69:c9:93:65:ea:36:91:2d:
                    0e:31:4b:dc:30:1b:db:6e:30:fd:20:75:cc:f3:31:
                    0e:cc:bb:73:1e:38:f7:89:f9:0d:3d:1f:7c:9b:f5:
                    68:e3:e9:0d:88:af:3f:d0:08:51:e9:93:c0:10:47:
                    41:7c:16:1b:b7:0c:ee:6c:ff:87:99:2f:98:4b:cf:
                    16:0a:01:44:6c:e0:6e:0c:e4:c2:a1:d0:0d:98:e5:
                    c5:ea:4f:be:90:e2:e8:b2:4d:c7:53:49:10:c9:a9:
                    45:48:3a:05:d3:58:eb:6c:19:58:7a:e8:95:89:aa:
                    bf:5a:2b:1d:ed:ec:a7:59:8e:14:09:f6:19:c4:e0:
                    f0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:B7:1B:AF:FB:E3:4E:CD:2D:5D:9C:83:47:02:B7:EA:E6:51:57
            X509v3 Authority Key Identifier:
                keyid:72:FB:8A:BC:33:D1:41:C4:91:37:08:1A:F4:28:6E:82:A4:CA:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvuKvDPRQcSRNwga9ChugqTKzJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/822b12-2b8c-45ed-b65f-8904a437ca58/1/cvuKvDPRQcSRNwga9ChugqTKzJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8f:ad:29:d1:f2:ad:7f:87:8c:4a:f6:f1:1d:70:87:45:23:
         6e:dd:61:3e:b9:db:4d:08:58:99:4f:ca:bc:c5:c7:73:75:ba:
         51:f9:8d:eb:4e:93:f2:9c:d4:b8:69:54:6c:2f:fc:7e:24:05:
         b8:c1:7d:4f:2c:2a:86:53:ba:16:05:a5:3d:56:f1:fe:63:3c:
         b7:2f:44:91:31:45:f3:d5:36:26:1a:9e:e8:b3:33:66:8d:5b:
         c6:62:3e:99:d1:1a:47:76:51:d4:a5:6c:97:57:8b:ae:2f:42:
         8f:af:39:35:d0:28:f0:67:d1:25:8b:7e:9a:67:6f:da:17:61:
         93:1c:17:d4:7f:d2:fc:0f:cc:44:5d:30:ea:4e:28:d5:cc:1e:
         00:f6:da:3a:a9:2d:45:cd:96:08:5c:c2:b2:cd:cc:ab:4a:1c:
         74:f7:5a:65:a6:21:fb:12:f9:ce:4a:b9:c3:3f:f4:d4:38:10:
         dc:d7:7d:c5:59:b1:4a:f4:37:2e:55:24:0b:1a:87:5a:f3:19:
         d5:cc:2b:e9:99:a3:93:8f:b6:06:7c:8d:5b:f2:64:47:1f:2f:
         f6:d5:d0:cd:f5:dc:e7:c1:72:b8:3c:19:e9:71:fb:57:25:c4:
         0b:8c:dd:ea:05:88:43:f4:ac:0b:6d:07:2d:4e:cf:d2:11:db:
         2e:0f:86:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:38 2024 by rpki-client on console-ams.rpki-client.org