Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.mft
File:                     DTw4Oy05UWIxSwNIcbjpTJI4ThM.mft (raw, json)
Hash identifier:          RDQcwodUJ51BwbrSUQslIDKYEPAg6EJhMB0sjIt8vr4=
Subject key identifier:   C3:BC:10:AE:F3:0F:B1:92:07:98:B4:BA:BD:82:B3:44:2E:80:35:4D
Authority key identifier: 0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13
Certificate issuer:       /CN=0d3c383b2d395162314b034871b8e94c92384e13
Certificate serial:       018EA7459EF7137BE6F49863FC91AC936760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.mft
Manifest number:          0A30
Signing time:             Thu 04 Apr 2024 04:02:21 +0000
Manifest this update:     Thu 04 Apr 2024 04:02:21 +0000
Manifest next update:     Fri 05 Apr 2024 04:02:21 +0000
Files and hashes:         1: DTw4Oy05UWIxSwNIcbjpTJI4ThM.crl (hash: Z6zRtAfmPKJx0+kp3K0KSLSF+tUmhKG3yWx4BooVMxE=)
                          2: KVRv651pyHQ8dVr_l4tymesDCSw.roa (hash: JvVbBoCatKnXO8BpzlopCYV9sbf/iWW1JhRwCYvkFIM=)
                          3: VMelXeeOhHwOdbj5eBdGI3KKT_E.roa (hash: SQtdtgBETXY+2kjWjTjIgFwS16aPZGW5ex/YTXj+YAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a7:45:9e:f7:13:7b:e6:f4:98:63:fc:91:ac:93:67:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3c383b2d395162314b034871b8e94c92384e13
        Validity
            Not Before: Apr  4 04:02:21 2024 GMT
            Not After : Apr  5 04:02:21 2024 GMT
        Subject: CN=c3bc10aef30fb1920798b4babd82b3442e80354d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b7:d9:5f:90:71:99:5b:bb:79:69:ef:75:fe:
                    49:93:8e:70:47:35:13:b9:9f:ec:3b:1d:e3:5d:23:
                    61:3c:b8:c6:49:10:83:6a:e6:92:10:de:d4:a1:9f:
                    04:a0:01:9f:a6:ff:55:59:17:00:0f:58:e3:d9:7b:
                    3f:ed:e3:65:46:c7:49:f3:48:dc:80:f4:be:ef:9b:
                    c7:f3:54:86:a6:2c:48:9d:c2:7f:40:55:0f:3e:f8:
                    7d:b4:de:4f:7e:e7:ea:2c:78:8e:aa:49:3f:81:81:
                    b0:75:3f:cf:ec:5c:c5:87:3d:53:7b:bf:b4:9d:61:
                    49:b3:cd:ea:e1:1b:10:b7:18:7d:cd:02:54:9b:be:
                    10:ce:f3:f9:df:aa:2c:7e:e8:e3:03:03:01:e0:c2:
                    c9:06:b9:6c:01:bd:5e:81:5a:e1:b8:fc:d2:87:9e:
                    88:04:d3:70:34:39:ad:d1:4e:40:3c:fd:bc:1e:a9:
                    22:e2:f0:1b:65:90:d1:d2:85:c2:30:d5:de:dc:80:
                    1f:f0:8a:2e:70:69:24:78:dc:a4:a7:77:e9:73:13:
                    ba:4c:70:c3:f7:37:48:30:86:95:54:54:3b:99:c7:
                    da:b3:a4:65:e5:be:99:71:1c:0d:93:e7:68:ff:58:
                    ea:80:75:0c:20:1b:4e:88:fc:81:0c:89:88:97:a3:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BC:10:AE:F3:0F:B1:92:07:98:B4:BA:BD:82:B3:44:2E:80:35:4D
            X509v3 Authority Key Identifier:
                keyid:0D:3C:38:3B:2D:39:51:62:31:4B:03:48:71:B8:E9:4C:92:38:4E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTw4Oy05UWIxSwNIcbjpTJI4ThM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/ca7ed3-0273-4fe4-a052-1c5201293a7d/1/DTw4Oy05UWIxSwNIcbjpTJI4ThM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9c:2e:1b:0b:37:c2:4a:9f:85:4c:a9:d8:dc:c2:7d:f7:59:
         89:b1:dd:d2:62:c2:86:17:6a:4a:44:90:91:28:0d:08:1d:8e:
         47:04:75:b2:cc:12:3a:52:bf:86:4a:05:da:d4:56:2e:63:63:
         55:88:de:fa:2a:eb:a3:60:3a:4a:9b:e2:2f:c3:2c:6b:75:c2:
         f9:91:be:17:63:ae:b8:e1:e9:6f:86:c5:7e:94:ba:aa:4d:ee:
         7d:b2:42:36:68:6e:06:f7:e1:fd:74:42:9d:32:8b:58:a1:9b:
         c0:d2:f2:21:43:fe:14:d7:b9:a1:c8:cf:84:e5:83:5e:16:95:
         17:53:47:ab:56:4f:e5:d0:af:09:7b:c0:da:1c:3b:2c:5a:89:
         cd:21:cc:4b:9a:d9:93:b7:ba:48:0f:e5:c0:01:05:34:16:1c:
         c3:c1:3f:88:b0:7e:77:7e:5e:73:57:4c:7b:e1:ed:12:1a:5b:
         78:b2:35:4c:da:b9:71:95:75:f5:f5:f0:8f:76:5c:6f:7f:99:
         ff:18:56:85:47:36:4e:f2:0f:6b:ec:ea:dc:ce:61:1b:92:69:
         61:5c:cc:be:4a:ca:fa:38:38:b1:93:98:49:e2:5c:32:8c:fe:
         91:7c:13:4d:ce:e3:89:16:77:bb:d4:d5:6a:14:e9:2b:c7:5e:
         3e:77:b7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:16 2024 by rpki-client on console-ams.rpki-client.org