Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/r0ToVaZU7BVaaGiQemuPwXQW1qQ.mft
File:                     r0ToVaZU7BVaaGiQemuPwXQW1qQ.mft (raw, json)
Hash identifier:          +R2Tc1bAz/OkaOi8PS3H6YmIZ98t7o4OQ5qYTGB7JS4=
Subject key identifier:   03:61:1C:3E:5E:FD:79:AF:D8:80:8F:41:09:7D:95:E7:8D:4E:1F:EF
Authority key identifier: AF:44:E8:55:A6:54:EC:15:5A:68:68:90:7A:6B:8F:C1:74:16:D6:A4
Certificate issuer:       /CN=af44e855a654ec155a6868907a6b8fc17416d6a4
Certificate serial:       0182EB96587090F49991D82C4FA5B4962179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r0ToVaZU7BVaaGiQemuPwXQW1qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/r0ToVaZU7BVaaGiQemuPwXQW1qQ.mft
Manifest number:          0A8F
Signing time:             Mon 29 Aug 2022 21:51:14 +0000
Manifest this update:     Mon 29 Aug 2022 21:51:14 +0000
Manifest next update:     Tue 30 Aug 2022 21:51:14 +0000
Files and hashes:         1: mG3g7YZYNBINRjYA7wchMD9f_Sg.roa (hash: itA+xqDj9r1RNg+ADq/lIDfho3+iEKhVGjDUAibBnfQ=)
                          2: r0ToVaZU7BVaaGiQemuPwXQW1qQ.crl (hash: UPhtEqbHMcZJqb5VKvPP9y6M2qCcluENkMSR28Gs1rk=)
                          3: xNxoa2xOHubLlIYDwifnSLe5WBU.roa (hash: xxRGZJHacEZgkwYYKoOjfxoTS1DcN3+bcLBO/SKYkXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:eb:96:58:70:90:f4:99:91:d8:2c:4f:a5:b4:96:21:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af44e855a654ec155a6868907a6b8fc17416d6a4
        Validity
            Not Before: Aug 29 21:51:14 2022 GMT
            Not After : Aug 30 21:51:14 2022 GMT
        Subject: CN=03611c3e5efd79afd8808f41097d95e78d4e1fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e3:5a:d3:b3:33:cb:be:96:99:a2:8b:c8:94:
                    95:db:f8:05:32:6c:a5:c2:5f:18:64:94:88:42:ff:
                    ce:5f:62:52:98:7d:03:90:17:dd:75:21:e3:0f:18:
                    b5:d4:2d:f1:d4:3c:39:0f:2f:92:ab:b1:18:13:74:
                    dd:31:9d:06:f7:83:24:d7:0c:34:f1:df:9d:b8:fd:
                    70:66:99:b7:68:ee:62:fc:35:05:d5:96:b5:96:10:
                    ac:ce:94:6f:fa:44:60:1c:51:1d:6c:b1:ca:6b:30:
                    54:62:8f:39:36:af:ae:76:c8:d2:1e:f8:02:1e:05:
                    ba:41:b6:b7:60:f2:35:36:e1:86:3d:28:df:37:28:
                    df:de:5d:db:b0:e9:9d:20:d1:8d:3e:18:3f:67:a5:
                    ac:3e:68:0f:59:c5:62:0b:5e:54:9f:dd:a9:dc:7a:
                    02:03:06:e0:a0:a4:a8:44:ca:25:ac:d2:2e:5f:7a:
                    50:b2:23:59:d8:ec:6d:d5:b4:8a:80:94:af:0c:38:
                    5c:82:c8:a3:28:6f:1f:40:d4:bb:c5:d7:37:c6:43:
                    47:ba:b2:f1:20:52:f4:a7:7f:e4:46:e2:7c:a7:15:
                    17:50:d9:ed:3f:68:9a:eb:87:b4:6e:33:5f:aa:0d:
                    1f:86:b9:a1:df:43:65:3b:60:5b:ae:91:b2:70:84:
                    ab:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:61:1C:3E:5E:FD:79:AF:D8:80:8F:41:09:7D:95:E7:8D:4E:1F:EF
            X509v3 Authority Key Identifier:
                keyid:AF:44:E8:55:A6:54:EC:15:5A:68:68:90:7A:6B:8F:C1:74:16:D6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r0ToVaZU7BVaaGiQemuPwXQW1qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/r0ToVaZU7BVaaGiQemuPwXQW1qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d98f5d-a276-425a-963f-ec5e23660fbc/1/r0ToVaZU7BVaaGiQemuPwXQW1qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:c6:18:44:fc:ef:c2:7a:50:04:a2:29:10:f8:12:44:a4:
         73:8c:78:00:b3:0d:b4:e2:a0:9b:fc:8e:4f:1d:10:f8:02:14:
         3f:31:37:54:57:f6:59:58:50:75:d7:d8:04:ce:1b:f4:4d:cb:
         bd:f2:e7:d6:ed:94:3b:be:40:78:eb:73:94:c4:0a:0b:ac:c3:
         84:d7:72:fc:06:27:03:d4:ea:71:d7:5b:dc:01:af:12:a3:32:
         fd:d0:93:c3:1e:21:12:34:e1:9b:42:35:30:a6:47:cb:11:1b:
         27:60:71:8f:ed:08:a5:f6:81:4c:d9:29:24:1a:6a:cf:72:b7:
         bd:b1:19:4b:d4:90:c2:a7:a0:d0:5c:01:e9:76:04:a2:32:7d:
         55:03:4a:90:5e:f2:d5:6b:1c:14:f8:55:af:e7:bf:49:14:15:
         9b:fd:b2:b7:37:dc:76:49:33:29:08:bd:9b:00:0e:b5:42:09:
         cf:fa:91:59:7c:05:60:4b:72:d9:c0:1c:b6:59:7c:f2:a9:77:
         b0:47:d8:05:90:52:f1:c1:7d:61:e5:fa:5c:2f:cc:67:9d:cb:
         ef:a9:27:68:ad:4b:71:85:15:bb:4a:46:a1:7d:35:9e:08:c3:
         13:b0:63:77:87:dd:7c:3f:fc:42:12:6f:c5:f9:8a:df:1b:0d:
         a6:7c:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:44 2024 by rpki-client on console-fra.rpki-client.org