Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.mft
File:                     kzK2bz7mtuy_i4hPEmFwp3Zr77k.mft (raw, json)
Hash identifier:          6YjI7uJkJ3mwmefBdp+I5WMcNZwmi8+WF4f5dCCQ/Es=
Subject key identifier:   E6:97:22:2A:C9:2F:7C:3B:D9:23:2B:67:88:7D:E3:C5:50:F5:9C:22
Authority key identifier: 93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9
Certificate issuer:       /CN=9332b66f3ee6b6ecbf8b884f126170a7766befb9
Certificate serial:       0185718C0F560EEF94C45459E76C79663F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.mft
Manifest number:          0427
Signing time:             Mon 02 Jan 2023 08:14:42 +0000
Manifest this update:     Mon 02 Jan 2023 08:14:42 +0000
Manifest next update:     Tue 03 Jan 2023 08:14:42 +0000
Files and hashes:         1: kzK2bz7mtuy_i4hPEmFwp3Zr77k.crl (hash: IbCaNqCk//ok+GppxelM8IoraA56C9dknn8qxMfZcqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:8c:0f:56:0e:ef:94:c4:54:59:e7:6c:79:66:3f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9332b66f3ee6b6ecbf8b884f126170a7766befb9
        Validity
            Not Before: Jan  2 08:14:42 2023 GMT
            Not After : Jan  3 08:14:42 2023 GMT
        Subject: CN=e697222ac92f7c3bd9232b67887de3c550f59c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7f:8a:32:f7:22:07:b2:ed:09:af:fb:2b:15:
                    31:e8:43:06:0d:c2:4c:fd:79:ef:fd:47:b4:fc:85:
                    6f:f3:13:42:4f:9e:a3:2b:c5:46:d5:0f:52:66:21:
                    0a:84:d8:46:76:4e:9a:31:33:d3:6f:2b:8e:d1:33:
                    5c:7a:d7:b5:a4:b4:e6:00:f6:aa:ec:f7:ce:37:01:
                    6f:47:03:24:dd:af:46:0f:91:43:b2:e0:77:63:48:
                    b3:23:67:35:47:44:08:7c:6a:3d:2c:b0:36:72:0c:
                    36:0f:56:e1:c4:bd:1c:07:6e:ee:41:bc:00:4c:dc:
                    11:2a:61:3f:01:0e:e1:7e:37:b2:f0:bf:00:33:58:
                    af:aa:4d:c9:c4:97:9d:9e:86:50:7a:0d:35:b7:3e:
                    5c:d6:4a:25:c2:a7:e2:50:15:c4:07:e1:32:08:78:
                    5f:97:60:4a:cc:99:34:f1:03:ee:fd:fe:d4:ae:62:
                    1d:15:ea:a2:9e:a1:19:7e:53:89:50:8e:0c:c9:6f:
                    e6:63:19:ca:72:60:de:be:fd:e9:24:05:6e:86:4b:
                    8d:a4:84:91:5a:3e:b3:c3:aa:51:70:47:f1:64:4d:
                    02:02:e0:fe:df:58:40:f4:cf:59:f7:35:fc:b6:b8:
                    df:33:12:fb:20:6e:88:21:c9:9a:55:e6:87:dc:58:
                    1a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:97:22:2A:C9:2F:7C:3B:D9:23:2B:67:88:7D:E3:C5:50:F5:9C:22
            X509v3 Authority Key Identifier:
                keyid:93:32:B6:6F:3E:E6:B6:EC:BF:8B:88:4F:12:61:70:A7:76:6B:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzK2bz7mtuy_i4hPEmFwp3Zr77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f41904-9f7e-46a7-9616-453949b19e00/1/kzK2bz7mtuy_i4hPEmFwp3Zr77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d0:ae:ff:a1:e3:a7:a7:ad:fe:8f:1d:da:29:51:0d:ea:7b:
         75:2f:a6:5b:23:2a:33:e7:2a:c9:cb:f3:9d:a4:40:d0:ab:ab:
         46:fa:d6:df:af:6c:f5:a3:12:c4:ed:98:3c:85:10:4a:87:c7:
         40:88:37:9c:35:b7:0f:2e:64:78:66:f5:a0:ee:7d:98:87:05:
         ab:23:19:92:65:c8:36:71:82:43:61:03:51:01:d6:53:8d:63:
         4e:06:c8:df:c1:f3:4a:80:88:44:b0:03:82:19:f9:7a:ce:1b:
         5c:ad:53:e5:13:44:01:e8:fd:c9:98:0f:37:56:b1:b1:e2:79:
         32:17:a1:aa:b7:79:2d:97:9c:48:23:81:45:12:68:46:d5:8d:
         8d:b0:9f:19:52:99:c9:64:a2:dc:79:65:7f:1a:bc:a5:59:d3:
         28:42:03:d4:b2:41:d9:6c:1b:26:0d:a9:fa:05:34:44:11:57:
         85:d5:84:08:a7:a8:ab:fd:cc:04:68:9c:e3:17:0b:a3:68:05:
         0d:ae:57:fe:cd:c9:5d:48:62:71:fa:4f:75:64:1a:c1:9c:90:
         96:ef:84:83:0e:58:8b:4a:03:07:8c:71:5e:89:41:bd:29:b7:
         7f:d1:38:52:69:0c:58:e3:7f:b4:08:cb:64:4c:ed:71:fe:fd:
         13:f0:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:35 2024 by rpki-client on console-fra.rpki-client.org