Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/paclUEsO1-gGupANs5hH7FJ4Wfs.mft
File:                     paclUEsO1-gGupANs5hH7FJ4Wfs.mft (raw, json)
Hash identifier:          VzgpPF6wB+ay8k5FOnpK7RNyoi50j43yaxp0QfHJA78=
Subject key identifier:   20:7B:9E:16:6B:A7:50:B6:70:B7:0C:05:55:4C:98:EE:1B:C1:68:56
Authority key identifier: A5:A7:25:50:4B:0E:D7:E8:06:BA:90:0D:B3:98:47:EC:52:78:59:FB
Certificate issuer:       /CN=a5a725504b0ed7e806ba900db39847ec527859fb
Certificate serial:       01877E4248C9D77CA8D4D43446F522098539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/paclUEsO1-gGupANs5hH7FJ4Wfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/paclUEsO1-gGupANs5hH7FJ4Wfs.mft
Manifest number:          2B
Signing time:             Fri 14 Apr 2023 05:34:45 +0000
Manifest this update:     Fri 14 Apr 2023 05:34:45 +0000
Manifest next update:     Sat 15 Apr 2023 05:34:45 +0000
Files and hashes:         1: paclUEsO1-gGupANs5hH7FJ4Wfs.crl (hash: vo69Cn2ndv67qtcfhnx3lor1NKbP8MA/k4aZjQhS0/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7e:42:48:c9:d7:7c:a8:d4:d4:34:46:f5:22:09:85:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5a725504b0ed7e806ba900db39847ec527859fb
        Validity
            Not Before: Apr 14 05:34:45 2023 GMT
            Not After : Apr 15 05:34:45 2023 GMT
        Subject: CN=207b9e166ba750b670b70c05554c98ee1bc16856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:4c:42:26:ba:a2:ef:cb:f9:1a:57:07:9b:
                    c2:ff:f6:15:3b:39:00:d7:59:b6:88:c5:99:47:7c:
                    4c:05:8d:41:f6:72:64:31:7e:6f:1f:a3:1f:88:19:
                    a1:c6:2c:b8:17:3f:a1:26:b7:00:7a:ca:bd:27:a0:
                    f5:5f:b6:e8:a3:58:f5:f4:b7:b4:04:85:eb:12:6d:
                    e6:d6:96:e7:26:b9:17:ff:3c:4f:1a:f3:fb:1c:18:
                    d2:a7:b7:0b:95:42:74:b9:8f:9a:a1:61:1f:07:c5:
                    31:bf:64:1e:b1:67:ab:d6:e2:27:e8:8d:63:27:92:
                    37:c2:4f:04:2c:6e:4e:0f:5a:03:a3:a5:7a:e8:eb:
                    43:a4:c4:11:2e:89:d0:c9:24:17:35:43:eb:25:f6:
                    e0:5e:96:76:51:4d:ee:a0:a5:57:2b:e5:01:cb:98:
                    11:90:71:0f:86:01:5c:34:d9:e4:56:5e:bb:b0:91:
                    8e:e8:12:68:bf:55:83:34:0a:67:b4:f0:50:9c:f3:
                    c9:83:42:55:e4:b3:e5:42:26:36:5a:f3:b0:aa:b1:
                    9c:bf:b6:19:44:fb:ab:22:7d:cf:e0:73:b6:c1:3c:
                    7c:fd:3c:8d:0a:7d:5f:62:3d:44:ba:6d:5e:1a:35:
                    33:f1:66:ff:fb:73:fe:89:89:45:4e:c3:d7:d0:03:
                    ed:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7B:9E:16:6B:A7:50:B6:70:B7:0C:05:55:4C:98:EE:1B:C1:68:56
            X509v3 Authority Key Identifier:
                keyid:A5:A7:25:50:4B:0E:D7:E8:06:BA:90:0D:B3:98:47:EC:52:78:59:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paclUEsO1-gGupANs5hH7FJ4Wfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/paclUEsO1-gGupANs5hH7FJ4Wfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/c0597c-28ca-46da-bcc3-2698996faa20/1/paclUEsO1-gGupANs5hH7FJ4Wfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:43:73:34:b2:63:71:05:91:26:52:2e:4b:10:a0:30:81:d6:
         b6:93:66:1a:60:25:34:0a:12:5b:c9:a1:51:f8:af:29:a6:71:
         36:61:52:b8:e6:d3:e9:e6:fa:59:c9:f4:fe:29:a7:07:26:bd:
         a6:75:80:0a:7d:5c:13:80:74:5b:74:43:be:2f:60:b7:8b:78:
         79:2c:fd:f4:6e:39:31:60:c0:6a:46:ce:94:41:84:3b:45:42:
         cf:67:38:ff:71:55:f6:8b:1b:50:75:a1:c5:be:29:05:81:5e:
         ac:48:0b:20:42:2a:6e:38:3a:19:47:3f:9e:0b:d8:3f:09:54:
         77:5a:f9:9f:a6:5a:ca:6c:98:eb:21:e6:f9:f9:8d:0a:2b:a5:
         9c:70:12:f7:02:b6:27:83:ab:3b:e0:74:a1:80:1a:4d:e7:02:
         38:81:b8:99:53:f3:0b:85:ac:c5:e8:a0:7a:54:fc:08:12:a2:
         31:47:0b:e3:1a:f8:41:05:cd:e3:04:d8:82:4a:bf:c4:cd:8d:
         d8:3d:19:8b:be:b4:40:8c:0b:af:88:04:3a:0f:bf:84:1e:b1:
         ca:4d:09:c4:bb:15:97:99:16:78:a8:66:77:89:df:04:57:6d:
         54:41:46:73:9b:f8:c9:ee:40:e3:63:e0:47:a6:8f:fb:cc:73:
         63:47:9b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:17 2024 by rpki-client on console-ams.rpki-client.org