Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7b1ef8-a377-4e59-a55c-19b2fbeaea4c/1/KD3APywuc5A6UD53rM99PHUr6XE.mft
File:                     KD3APywuc5A6UD53rM99PHUr6XE.mft (raw, json)
Hash identifier:          RE6w/QtfsEzDZF9oLeDHvnbhNLWPhJ9uO78SKR/P6YE=
Subject key identifier:   FE:F3:67:FB:92:66:C9:9C:DF:11:51:B9:F2:6B:73:61:1F:E8:43:AF
Authority key identifier: 28:3D:C0:3F:2C:2E:73:90:3A:50:3E:77:AC:CF:7D:3C:75:2B:E9:71
Certificate issuer:       /CN=283dc03f2c2e73903a503e77accf7d3c752be971
Certificate serial:       019329424B7D0FEE0352BEDE7191C0463D48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KD3APywuc5A6UD53rM99PHUr6XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7b1ef8-a377-4e59-a55c-19b2fbeaea4c/1/KD3APywuc5A6UD53rM99PHUr6XE.mft
Manifest number:          1082
Signing time:             Thu 14 Nov 2024 06:00:30 +0000
Manifest this update:     Thu 14 Nov 2024 06:00:30 +0000
Manifest next update:     Fri 15 Nov 2024 06:00:30 +0000
Files and hashes:         1: KD3APywuc5A6UD53rM99PHUr6XE.crl (hash: oI5gbC6gBjtdulWee3CPuuspTQfbqp5ZdhIiR9zX2QQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:29:42:4b:7d:0f:ee:03:52:be:de:71:91:c0:46:3d:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=283dc03f2c2e73903a503e77accf7d3c752be971
        Validity
            Not Before: Nov 14 06:00:30 2024 GMT
            Not After : Nov 15 06:00:30 2024 GMT
        Subject: CN=fef367fb9266c99cdf1151b9f26b73611fe843af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:02:61:29:62:90:80:a7:28:eb:8a:22:0f:a8:
                    ba:fa:e1:c5:af:38:1e:8c:b2:11:03:15:06:f8:2a:
                    77:01:c2:db:27:4c:fc:93:dd:0b:af:4b:20:65:d4:
                    f7:7d:bc:de:a4:48:da:23:a7:c7:21:4c:64:d3:b1:
                    bd:48:56:b1:47:1f:77:50:9b:27:a4:7a:74:9b:5e:
                    d5:55:c0:bf:a7:df:78:cb:d8:75:d3:d1:7f:3b:76:
                    d4:1a:81:cb:18:c7:4a:13:33:5c:dd:0d:08:44:d0:
                    9a:46:5b:57:e0:f5:f4:f4:be:a2:c0:fc:41:ea:0d:
                    7f:ee:25:4b:6d:a3:db:c0:3d:13:3d:c9:f2:61:00:
                    f0:15:25:58:c8:ce:17:23:75:e7:35:d1:bc:b9:20:
                    59:ef:b3:7f:a8:63:42:6b:bb:84:8d:fb:c1:6b:88:
                    0c:a4:8b:48:28:1f:96:2d:91:a2:f5:a7:e1:9b:77:
                    c9:eb:51:c7:50:90:2b:66:e5:91:65:f5:f3:53:a0:
                    d3:94:45:2d:b6:cd:3a:bc:b7:1b:70:e6:9d:a2:6a:
                    05:fd:71:63:37:40:52:33:3a:cb:82:13:bb:4b:f7:
                    c7:72:42:ed:42:0a:d2:9c:d7:27:9a:97:8b:1e:11:
                    05:d5:96:1a:d9:0c:af:43:7f:43:7c:ae:32:fa:10:
                    1a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F3:67:FB:92:66:C9:9C:DF:11:51:B9:F2:6B:73:61:1F:E8:43:AF
            X509v3 Authority Key Identifier:
                keyid:28:3D:C0:3F:2C:2E:73:90:3A:50:3E:77:AC:CF:7D:3C:75:2B:E9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3APywuc5A6UD53rM99PHUr6XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7b1ef8-a377-4e59-a55c-19b2fbeaea4c/1/KD3APywuc5A6UD53rM99PHUr6XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7b1ef8-a377-4e59-a55c-19b2fbeaea4c/1/KD3APywuc5A6UD53rM99PHUr6XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7c:88:22:cd:cd:81:08:63:2e:46:5e:01:bd:00:12:c2:a2:
         fb:60:61:5a:23:6a:a5:8d:52:8c:83:47:30:98:0c:49:40:4b:
         72:66:80:dd:80:44:32:c9:df:d2:d4:ab:5d:89:41:cd:3a:33:
         7b:35:2f:e6:86:f9:a5:62:81:b6:2d:f3:cd:1b:1e:2e:e5:64:
         42:d8:b5:c6:f8:38:93:ec:39:ce:54:4b:dc:d9:18:13:a7:92:
         34:07:62:f9:e0:f0:08:89:3e:dc:94:1e:60:d2:df:f5:b0:9f:
         7f:19:01:30:78:d7:1f:92:90:e7:34:e7:2b:98:fa:34:b5:dd:
         ef:b9:ed:9f:67:5d:76:4f:b1:fb:e0:4a:c0:73:d5:c0:0d:16:
         44:af:47:36:6a:84:51:af:bf:65:b0:09:b7:c1:c9:56:87:45:
         2a:80:ed:5e:21:05:b5:df:ca:23:3a:d7:10:17:95:0e:ec:93:
         c9:ef:a4:10:2e:4d:bf:93:7e:d5:cd:fc:06:48:d8:c5:d3:50:
         76:65:13:1d:08:96:35:83:17:33:bf:8b:14:bc:f6:62:5e:66:
         09:53:14:2a:62:46:dc:dc:1b:d3:25:b2:92:9a:1a:0d:23:02:
         52:a8:5e:d8:e6:e3:f1:15:4e:0e:48:97:39:65:ab:5b:04:76:
         98:5d:fd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 15:01:10 2024 by rpki-client on console-ams.rpki-client.org