Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2eff73-44a0-4855-918d-b6792d74a0f2/1/2qaTBMZHl20y24s53kffQeM7_vQ.mft
File:                     2qaTBMZHl20y24s53kffQeM7_vQ.mft (raw, json)
Hash identifier:          7Xl9xVsLKBTaNd69onDB2VHGEgvq1/JdbRLuUm4Tx1s=
Subject key identifier:   3F:EA:F3:32:C5:12:B4:44:22:B6:4E:80:65:34:39:C1:44:F0:63:47
Authority key identifier: DA:A6:93:04:C6:47:97:6D:32:DB:8B:39:DE:47:DF:41:E3:3B:FE:F4
Certificate issuer:       /CN=daa69304c647976d32db8b39de47df41e33bfef4
Certificate serial:       018F4DC7B2DFC3A54F04BB1B2D0684965142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2qaTBMZHl20y24s53kffQeM7_vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/2eff73-44a0-4855-918d-b6792d74a0f2/1/2qaTBMZHl20y24s53kffQeM7_vQ.mft
Manifest number:          0133
Signing time:             Mon 06 May 2024 12:01:23 +0000
Manifest this update:     Mon 06 May 2024 12:01:23 +0000
Manifest next update:     Tue 07 May 2024 12:01:23 +0000
Files and hashes:         1: 2qaTBMZHl20y24s53kffQeM7_vQ.crl (hash: HPzZvh9D7v+JG8EX0+bDZ8He5fQ2iYq8AKVA4FPC8mY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4d:c7:b2:df:c3:a5:4f:04:bb:1b:2d:06:84:96:51:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa69304c647976d32db8b39de47df41e33bfef4
        Validity
            Not Before: May  6 12:01:23 2024 GMT
            Not After : May  7 12:01:23 2024 GMT
        Subject: CN=3feaf332c512b44422b64e80653439c144f06347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fb:c6:47:d3:f6:0e:e9:f8:d4:c1:28:4a:2f:
                    83:21:0f:89:ef:05:35:2e:98:95:1c:e2:e9:ce:22:
                    2b:9e:85:f3:fe:c7:ff:ce:5f:28:a9:9e:c8:1d:86:
                    61:79:bc:47:d1:0f:6c:0a:ae:14:a4:97:e6:a8:31:
                    29:b0:85:e3:29:b9:b8:c0:45:7c:7c:a2:19:a7:7d:
                    5a:73:44:57:72:6b:39:4e:71:ad:ca:a0:e9:40:8d:
                    a7:db:ef:ad:4a:de:77:c2:05:b5:3b:8b:ee:1f:97:
                    33:17:70:69:a0:7a:72:87:3f:d2:69:4e:d2:6f:ef:
                    f9:95:d7:10:e6:7b:d6:c2:fa:cd:aa:72:53:6c:dc:
                    c5:91:5a:4e:e2:76:f3:80:c8:92:8d:a4:8f:43:26:
                    fa:0d:2d:50:9f:18:5e:cf:7c:8a:9c:e3:5c:1c:ba:
                    0e:dd:f4:5f:89:d5:4b:6a:3e:d7:68:ef:f1:46:9f:
                    3f:bf:76:23:cb:30:ca:4e:08:a1:21:bb:3b:e7:b0:
                    4e:02:32:38:df:3e:85:c5:d7:e7:01:00:2b:01:86:
                    8a:73:41:b5:6d:5f:68:a7:40:3f:f7:01:96:a6:37:
                    0d:ac:4c:50:8a:28:b4:ae:ad:10:75:44:41:37:b2:
                    ae:8b:d8:61:c8:9b:08:5d:17:29:73:32:f3:76:6a:
                    60:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EA:F3:32:C5:12:B4:44:22:B6:4E:80:65:34:39:C1:44:F0:63:47
            X509v3 Authority Key Identifier:
                keyid:DA:A6:93:04:C6:47:97:6D:32:DB:8B:39:DE:47:DF:41:E3:3B:FE:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2qaTBMZHl20y24s53kffQeM7_vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eff73-44a0-4855-918d-b6792d74a0f2/1/2qaTBMZHl20y24s53kffQeM7_vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2eff73-44a0-4855-918d-b6792d74a0f2/1/2qaTBMZHl20y24s53kffQeM7_vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:0f:1b:01:72:f3:29:7f:87:10:f5:a1:8a:8a:7c:8d:c3:2f:
         3f:af:06:d1:65:7c:b1:1f:4b:14:ae:98:0a:13:88:e6:b4:cf:
         44:7d:07:7e:45:6e:bf:28:5f:f4:ca:65:1b:db:37:3f:40:b2:
         c4:91:40:ae:ab:2a:dd:4b:ec:22:a7:45:e4:c2:c7:6b:6f:f9:
         94:8a:88:12:5c:0e:47:98:66:e9:db:8c:67:ca:a7:be:00:6b:
         bd:8f:3f:8d:d7:4a:71:b3:1f:e3:23:27:91:91:77:ce:4e:c8:
         85:69:d7:1e:49:6c:f6:7b:fa:19:ab:58:23:37:eb:2a:21:11:
         1d:ba:65:8f:06:ed:2d:31:26:5d:9a:e0:aa:a3:da:56:a0:95:
         d3:81:ac:9a:ce:2e:5b:a0:5b:9d:3a:00:c2:40:4b:73:f4:68:
         c2:b9:63:80:30:77:33:f2:29:fa:85:07:84:75:8f:17:0c:ed:
         18:b2:0b:09:fa:a1:0a:33:a2:fa:7c:af:2f:37:f6:aa:5c:89:
         f9:07:ed:8c:44:d5:ba:33:08:ef:51:99:e6:9c:19:38:e5:45:
         2e:34:4a:a6:3f:47:41:58:6f:f8:10:ac:89:7c:bd:1b:83:1d:
         45:9e:78:2d:39:2c:fa:22:a3:b1:03:97:26:13:6d:e3:3b:b1:
         68:60:45:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 19:10:20 2024 by rpki-client on console-ams.rpki-client.org