Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/kCZsf0jrpwF_jYUREEvNdiQ4K40.mft
File:                     kCZsf0jrpwF_jYUREEvNdiQ4K40.mft (raw, json)
Hash identifier:          ItKfHTUC4t1ZM2AitcokmSV9IwmcbAngRtskWUA4Zck=
Subject key identifier:   0F:73:E5:F5:CC:D1:E1:F1:DF:59:8C:7E:45:B1:D9:FD:7A:4E:C1:27
Authority key identifier: 90:26:6C:7F:48:EB:A7:01:7F:8D:85:11:10:4B:CD:76:24:38:2B:8D
Certificate issuer:       /CN=90266c7f48eba7017f8d8511104bcd7624382b8d
Certificate serial:       01894D6B7C56F30A62B4F3619AC33C3DEFED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kCZsf0jrpwF_jYUREEvNdiQ4K40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/kCZsf0jrpwF_jYUREEvNdiQ4K40.mft
Manifest number:          0D20
Signing time:             Thu 13 Jul 2023 04:03:56 +0000
Manifest this update:     Thu 13 Jul 2023 04:03:56 +0000
Manifest next update:     Fri 14 Jul 2023 04:03:56 +0000
Files and hashes:         1: jcGAMC_IbA51rfE1awbhAjIl6x8.roa (hash: SUHErlefGeA17SXIkVTGs/uEQ0AG4XwSxpmNTf/P47Q=)
                          2: kCZsf0jrpwF_jYUREEvNdiQ4K40.crl (hash: wbvJYcZp5EuIgbmsyaEcZj7EOsTVHbbSNZotGC9frVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4d:6b:7c:56:f3:0a:62:b4:f3:61:9a:c3:3c:3d:ef:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90266c7f48eba7017f8d8511104bcd7624382b8d
        Validity
            Not Before: Jul 13 04:03:56 2023 GMT
            Not After : Jul 14 04:03:56 2023 GMT
        Subject: CN=0f73e5f5ccd1e1f1df598c7e45b1d9fd7a4ec127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:d9:3f:12:d3:66:0c:73:37:03:98:20:7b:
                    de:3a:fc:4a:87:82:1a:62:62:35:6e:c9:26:aa:c5:
                    e5:4c:e3:82:6d:40:6e:d0:cf:d7:e5:f2:50:13:2e:
                    44:87:73:ae:b6:95:89:a1:26:09:31:ac:f3:7b:80:
                    18:e4:54:0c:d7:d5:64:5d:fd:37:cf:64:b1:aa:9e:
                    cb:16:2a:78:58:8b:bd:d5:e5:22:64:3d:ef:fd:a6:
                    bb:a8:df:45:ec:1f:91:b9:7c:02:b5:3b:98:10:ae:
                    be:76:fb:e0:f9:17:07:9a:04:04:ce:6d:de:82:c5:
                    7e:56:5c:41:5f:5b:60:26:25:08:9c:f6:df:b1:8b:
                    a2:ae:c4:a8:7f:3a:99:c9:96:79:ea:85:7d:21:36:
                    60:8f:fc:65:d0:47:ac:80:ef:4d:c5:77:74:8d:f4:
                    76:58:d2:d6:98:07:08:1d:91:91:f2:02:55:1e:70:
                    05:86:43:2e:91:a0:e8:b0:c5:f9:3d:76:89:c0:c4:
                    99:d4:39:61:bf:df:df:1f:1e:be:b2:aa:fc:93:57:
                    2a:b7:2d:90:b3:59:e0:8e:4f:b4:21:b4:f1:0a:63:
                    03:2a:6f:c6:f9:ab:89:39:d3:81:cf:00:2b:3a:56:
                    32:91:af:76:aa:db:62:92:c2:32:04:6c:27:96:18:
                    b2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:E5:F5:CC:D1:E1:F1:DF:59:8C:7E:45:B1:D9:FD:7A:4E:C1:27
            X509v3 Authority Key Identifier:
                keyid:90:26:6C:7F:48:EB:A7:01:7F:8D:85:11:10:4B:CD:76:24:38:2B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCZsf0jrpwF_jYUREEvNdiQ4K40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/kCZsf0jrpwF_jYUREEvNdiQ4K40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/a59505-2a8d-47d0-9ee7-5a9d4fbfb04c/1/kCZsf0jrpwF_jYUREEvNdiQ4K40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c0:ed:40:b0:ef:b7:0a:72:4d:24:88:e9:c1:92:1d:35:60:
         d4:0f:3a:56:f9:c0:0a:fc:89:9c:96:d3:67:39:8d:b3:57:b7:
         07:56:37:83:d2:a4:33:cb:ef:27:f3:14:08:ac:0c:0e:f3:68:
         ba:96:20:4b:ac:bd:31:f3:40:bd:3b:19:9c:65:68:30:c3:f4:
         95:7f:5d:fe:91:04:15:83:e5:17:16:01:ed:71:81:8a:bc:03:
         ad:fe:ee:dd:dd:5c:f5:2f:63:ed:dc:a8:eb:f5:85:a5:9d:3f:
         5b:a1:c3:c8:4f:8b:d6:f0:6e:c7:53:d8:57:ae:af:2b:83:48:
         1d:38:4e:39:c8:2e:7d:28:02:b8:3d:e2:5c:cd:9f:9e:3b:ad:
         b8:2f:84:00:78:60:f8:0d:82:4f:a4:51:1a:d2:3b:e1:e4:d3:
         0f:4e:82:d2:d2:71:52:5a:dc:15:95:17:8a:3a:89:ca:dc:4c:
         53:2b:c7:03:7c:60:21:36:6f:08:7e:22:8b:75:b2:a6:fb:fa:
         74:d9:8c:29:46:30:d9:3f:76:b9:d9:ca:3f:23:c2:5e:35:f0:
         bd:84:71:e9:59:52:2e:1b:05:45:29:40:8c:8f:26:cd:d9:25:
         c3:80:d6:a5:99:86:d5:83:59:6b:e8:9e:18:60:25:3f:3e:cd:
         ad:86:bb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:32 2024 by rpki-client on console-ams.rpki-client.org