Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d01ebf-6314-44ec-a031-daffcaa0ec7f/1/8zD8ljK7mSOtPRa1t7xXzXMommA.mft
File:                     8zD8ljK7mSOtPRa1t7xXzXMommA.mft (raw, json)
Hash identifier:          FRN8mxjlAFFe+9sK7bpv4JbXpdNRZHF8yaH1ANOCWvY=
Subject key identifier:   D3:FF:5C:3D:E0:E3:07:18:15:89:42:6E:C8:DF:E6:3E:39:79:9F:02
Authority key identifier: F3:30:FC:96:32:BB:99:23:AD:3D:16:B5:B7:BC:57:CD:73:28:9A:60
Certificate issuer:       /CN=f330fc9632bb9923ad3d16b5b7bc57cd73289a60
Certificate serial:       01892B728300096ED4CA402D56C1C01FA728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8zD8ljK7mSOtPRa1t7xXzXMommA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/d01ebf-6314-44ec-a031-daffcaa0ec7f/1/8zD8ljK7mSOtPRa1t7xXzXMommA.mft
Manifest number:          3F
Signing time:             Thu 06 Jul 2023 13:44:32 +0000
Manifest this update:     Thu 06 Jul 2023 13:44:32 +0000
Manifest next update:     Fri 07 Jul 2023 13:44:32 +0000
Files and hashes:         1: 8zD8ljK7mSOtPRa1t7xXzXMommA.crl (hash: gGV0ZNzwFuClSYJAolxvjVIRmUSDptuZowvWDidel40=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:2b:72:83:00:09:6e:d4:ca:40:2d:56:c1:c0:1f:a7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f330fc9632bb9923ad3d16b5b7bc57cd73289a60
        Validity
            Not Before: Jul  6 13:44:32 2023 GMT
            Not After : Jul  7 13:44:32 2023 GMT
        Subject: CN=d3ff5c3de0e307181589426ec8dfe63e39799f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:23:22:b7:e0:57:9d:ea:c1:87:9d:34:90:
                    13:2b:ca:75:dc:83:d8:55:44:b3:95:72:c3:f2:f2:
                    d1:b3:95:7d:0b:e5:d9:c7:e3:44:4e:c6:c7:92:f8:
                    4c:9d:b4:2a:bf:b2:4a:0e:7c:e7:3d:42:5b:f1:b8:
                    11:7f:88:3f:08:1d:ea:ae:18:c1:00:05:d7:99:ff:
                    fe:5f:f4:6f:4b:ae:55:f8:6f:0f:b5:a8:ce:22:5f:
                    40:fc:03:ff:aa:e1:62:85:48:f4:8e:f8:82:20:12:
                    02:eb:8a:10:bb:a3:17:68:74:ff:43:7d:81:f6:49:
                    5f:77:58:27:21:cb:8d:df:ca:e0:cb:85:2f:d4:f4:
                    02:15:a4:ae:86:45:21:9b:bd:9c:b0:78:e4:27:0f:
                    7b:bf:62:ef:b6:c8:0c:b6:83:5a:35:e8:08:50:22:
                    14:ef:49:43:be:4f:a5:80:2c:05:9a:07:83:72:67:
                    ee:35:49:02:f2:b8:0c:39:72:e7:b9:1c:5c:0d:36:
                    4d:d9:6e:f1:96:aa:6d:23:1b:32:32:09:91:b7:25:
                    9c:85:b9:6e:ff:ef:20:d1:ac:98:78:e5:6b:f7:7d:
                    41:22:c3:0f:f1:2c:ee:27:12:7f:7a:3c:1d:f7:41:
                    08:f3:38:c2:3c:9a:11:ad:12:80:a7:69:cd:70:d2:
                    02:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FF:5C:3D:E0:E3:07:18:15:89:42:6E:C8:DF:E6:3E:39:79:9F:02
            X509v3 Authority Key Identifier:
                keyid:F3:30:FC:96:32:BB:99:23:AD:3D:16:B5:B7:BC:57:CD:73:28:9A:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zD8ljK7mSOtPRa1t7xXzXMommA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d01ebf-6314-44ec-a031-daffcaa0ec7f/1/8zD8ljK7mSOtPRa1t7xXzXMommA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d01ebf-6314-44ec-a031-daffcaa0ec7f/1/8zD8ljK7mSOtPRa1t7xXzXMommA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:34:69:0c:da:2c:15:04:79:c8:b8:78:6a:c4:f8:7a:2c:26:
         5b:8a:10:1d:b6:de:64:cf:a5:9e:3d:09:7d:db:86:5c:8b:e4:
         1d:61:19:33:56:d9:9c:ee:12:28:1f:b0:ad:35:d4:2d:b0:01:
         8e:9b:50:ee:eb:52:e4:22:cb:30:cf:a3:13:16:a6:91:83:a6:
         62:61:b7:81:93:cf:ac:6e:d3:26:c5:05:fd:a4:16:6b:b3:a0:
         cb:5c:81:23:53:60:4c:3e:9d:74:08:ac:92:c0:5f:8e:86:57:
         19:97:3d:18:93:a1:58:09:78:6d:d1:60:3c:e3:23:0e:f1:2e:
         42:c3:a2:09:90:e4:bf:f0:b2:da:e4:0f:f3:04:f9:53:9e:97:
         e3:23:72:a8:b1:2d:4d:4f:0f:0e:30:31:11:0c:7b:ef:ea:58:
         2c:93:71:4d:ff:c1:05:6e:7a:a4:59:c9:37:dd:7d:bb:9f:00:
         e8:fb:6d:fd:b8:8e:e8:ea:b4:fc:5f:cd:09:97:7c:c9:76:de:
         33:41:01:0b:99:74:49:27:8b:0d:5c:12:39:a6:69:6a:c7:52:
         45:04:2d:34:32:5b:9f:87:f5:88:9a:07:40:69:97:95:a4:c0:
         30:2d:df:4f:4d:5c:c5:26:d5:44:73:69:2a:3d:37:fd:c2:fc:
         d5:74:b6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:46 2024 by rpki-client on console-ams.rpki-client.org