Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/295439-3c4f-4fe3-892d-dfac308f6c56/1/1XDqPQ601D1f9Bze3vShIjVY3cg.mft
File:                     1XDqPQ601D1f9Bze3vShIjVY3cg.mft (raw, json)
Hash identifier:          o3O3eMulyJwqRT3c6TJT/qSyB8WooEimpDGNRkOOKBI=
Subject key identifier:   8D:6B:84:EA:9E:26:71:DE:13:77:BE:39:CF:1C:40:64:6A:0D:77:27
Authority key identifier: D5:70:EA:3D:0E:B4:D4:3D:5F:F4:1C:DE:DE:F4:A1:22:35:58:DD:C8
Certificate issuer:       /CN=d570ea3d0eb4d43d5ff41cdedef4a1223558ddc8
Certificate serial:       019323AE42D03BDDEE3065DAE1AC1531D175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1XDqPQ601D1f9Bze3vShIjVY3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/295439-3c4f-4fe3-892d-dfac308f6c56/1/1XDqPQ601D1f9Bze3vShIjVY3cg.mft
Manifest number:          0642
Signing time:             Wed 13 Nov 2024 04:00:42 +0000
Manifest this update:     Wed 13 Nov 2024 04:00:42 +0000
Manifest next update:     Thu 14 Nov 2024 04:00:42 +0000
Files and hashes:         1: 1XDqPQ601D1f9Bze3vShIjVY3cg.crl (hash: 4ccaL02PGMG0FszhdKbOvEFp7aAirIatiVvQ1S91fRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:23:ae:42:d0:3b:dd:ee:30:65:da:e1:ac:15:31:d1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d570ea3d0eb4d43d5ff41cdedef4a1223558ddc8
        Validity
            Not Before: Nov 13 04:00:42 2024 GMT
            Not After : Nov 14 04:00:42 2024 GMT
        Subject: CN=8d6b84ea9e2671de1377be39cf1c40646a0d7727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:89:af:30:a5:00:b6:80:4f:35:7b:98:67:
                    ae:2c:67:a6:61:2a:7c:77:6c:09:8d:f6:10:90:30:
                    70:c4:d5:8a:48:e4:2e:90:65:da:19:35:e1:ea:79:
                    a0:db:ee:05:3a:60:89:17:61:d8:d5:0c:71:83:9e:
                    89:c1:cf:5f:9c:b5:6c:66:e2:e0:ad:cc:2d:01:00:
                    4f:f1:de:f4:fd:38:ee:b7:42:d8:0c:fc:65:eb:7d:
                    83:06:3d:9a:f9:f6:11:68:b1:d8:49:d5:d8:6e:2c:
                    58:c8:20:ba:94:55:4c:bc:61:cc:e0:2b:da:e8:bf:
                    0c:02:a2:aa:b0:42:b5:10:10:86:31:ae:0c:f3:e4:
                    38:d1:7a:f5:c6:b3:cc:a4:b1:02:4a:53:3c:ce:51:
                    02:76:ea:2c:41:02:7f:32:db:3a:24:5e:a8:00:7f:
                    ef:c4:e6:87:e0:e5:37:27:c3:e4:94:eb:b9:7a:8b:
                    28:51:06:51:5f:a4:b6:b6:34:1d:f9:2b:8f:35:b0:
                    84:10:58:7f:43:b0:04:da:5a:ff:a2:83:2a:56:72:
                    a6:84:8f:08:db:36:32:c4:09:1e:71:19:f0:be:ef:
                    cd:43:0c:b8:cb:7f:1e:4c:b5:97:45:20:a2:1a:70:
                    e1:a5:e2:45:ad:a9:d2:bc:60:02:3b:a5:71:18:8d:
                    a6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6B:84:EA:9E:26:71:DE:13:77:BE:39:CF:1C:40:64:6A:0D:77:27
            X509v3 Authority Key Identifier:
                keyid:D5:70:EA:3D:0E:B4:D4:3D:5F:F4:1C:DE:DE:F4:A1:22:35:58:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XDqPQ601D1f9Bze3vShIjVY3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/295439-3c4f-4fe3-892d-dfac308f6c56/1/1XDqPQ601D1f9Bze3vShIjVY3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/295439-3c4f-4fe3-892d-dfac308f6c56/1/1XDqPQ601D1f9Bze3vShIjVY3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:60:66:a0:77:ff:3e:05:92:e2:fa:c8:da:60:00:28:8c:1e:
         1d:60:3f:dc:06:11:33:f8:ea:ad:3f:8d:84:cc:27:28:79:f7:
         75:d1:64:0b:2e:1c:4b:83:85:7f:00:80:80:84:ee:1b:4f:cc:
         43:77:ef:31:ae:21:77:8d:98:c1:21:7b:9c:2a:c2:5f:c3:ef:
         43:2d:e9:45:a4:ab:76:1a:fb:2b:89:f1:b2:7d:99:c6:a4:65:
         d6:e1:0a:c9:21:8a:ee:40:48:56:0d:c2:95:82:2b:60:5c:4a:
         a2:03:63:66:50:36:c7:97:fe:fd:0b:5b:f7:60:0f:af:ff:2d:
         27:4a:0b:82:8a:26:65:11:10:cd:61:c3:24:b6:58:13:9c:b3:
         78:cd:9c:27:9f:bb:fd:b6:49:83:38:48:c6:bc:af:1a:67:05:
         f8:12:e0:1a:02:af:62:8e:41:72:2c:21:c4:09:fd:e3:57:1c:
         f2:39:63:25:df:ca:d4:ef:59:90:18:c2:45:41:fd:e4:3e:54:
         8d:e3:d9:21:dd:6b:c2:db:ec:06:00:a7:64:99:00:5b:66:a9:
         7f:c4:4d:c5:39:5b:8c:c0:f2:4a:ea:19:56:01:af:65:97:72:
         a0:ad:7e:94:8a:ae:30:ef:ff:49:b3:71:f7:45:8e:1c:b1:94:
         6d:6e:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:07 2024 by rpki-client on console-fra.rpki-client.org