Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/853einOu6vkH0X_zfnrm46M9RZ8.mft
File:                     853einOu6vkH0X_zfnrm46M9RZ8.mft (raw, json)
Hash identifier:          S8KSxamK5rpwBucTfsJPR4FEXAJvoH0QcAiXa6PJ08Q=
Subject key identifier:   CB:02:7C:E2:70:4E:97:88:9E:0D:47:2D:8B:2C:A1:6E:8B:7C:D4:87
Authority key identifier: F3:9D:DE:8A:73:AE:EA:F9:07:D1:7F:F3:7E:7A:E6:E3:A3:3D:45:9F
Certificate issuer:       /CN=f39dde8a73aeeaf907d17ff37e7ae6e3a33d459f
Certificate serial:       018846BE7DF50BC71C46239D47BC9C9039C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/853einOu6vkH0X_zfnrm46M9RZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/853einOu6vkH0X_zfnrm46M9RZ8.mft
Manifest number:          0CDD
Signing time:             Tue 23 May 2023 03:54:29 +0000
Manifest this update:     Tue 23 May 2023 03:54:29 +0000
Manifest next update:     Wed 24 May 2023 03:54:29 +0000
Files and hashes:         1: 853einOu6vkH0X_zfnrm46M9RZ8.crl (hash: L3Luk0jDBrXSwtdtzCWZUmNyPIeTuo/f5etwHet66EU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:46:be:7d:f5:0b:c7:1c:46:23:9d:47:bc:9c:90:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f39dde8a73aeeaf907d17ff37e7ae6e3a33d459f
        Validity
            Not Before: May 23 03:54:29 2023 GMT
            Not After : May 24 03:54:29 2023 GMT
        Subject: CN=cb027ce2704e97889e0d472d8b2ca16e8b7cd487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:eb:0c:21:40:44:34:d1:e6:4d:d3:c8:c8:
                    63:cf:a4:4a:20:b6:80:e3:1c:c7:62:1d:1c:4f:35:
                    0b:e4:c0:f2:5e:55:78:c5:08:3a:c2:79:1c:6c:d4:
                    35:a9:a4:c5:e5:7d:26:61:42:28:c9:3c:3d:53:84:
                    13:97:bb:11:32:74:b0:f4:05:dd:33:7b:1a:cd:56:
                    a9:46:cd:ce:48:6f:c9:45:d0:93:0d:e4:25:c8:e0:
                    de:5f:4f:ae:62:8b:22:b4:b0:28:59:75:82:34:7b:
                    6f:bf:4b:d2:d7:bf:00:c8:da:9e:c5:1b:1a:3e:c3:
                    42:c6:3e:5b:7d:99:35:66:69:5a:6d:64:71:e1:31:
                    d2:c3:57:3a:7d:30:7d:05:8d:e6:16:47:30:91:76:
                    db:cb:11:1f:92:1c:47:53:13:98:f9:b6:a3:55:d7:
                    26:78:85:8b:0f:7e:9a:36:5e:f5:ce:15:2d:d5:97:
                    8e:03:82:44:b3:67:64:46:6f:03:d8:6a:2f:a5:0a:
                    c2:c8:94:97:dc:6d:94:14:38:c3:93:70:a5:1a:8c:
                    bf:20:35:0a:24:29:50:f4:38:67:97:6c:ed:36:1e:
                    80:30:90:f0:64:d9:7f:20:6d:eb:7a:66:ea:66:c5:
                    21:f1:65:ea:2b:0b:e8:f5:91:ab:ea:a7:30:07:f4:
                    f4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:02:7C:E2:70:4E:97:88:9E:0D:47:2D:8B:2C:A1:6E:8B:7C:D4:87
            X509v3 Authority Key Identifier:
                keyid:F3:9D:DE:8A:73:AE:EA:F9:07:D1:7F:F3:7E:7A:E6:E3:A3:3D:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/853einOu6vkH0X_zfnrm46M9RZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/853einOu6vkH0X_zfnrm46M9RZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/be8d55-1060-4874-830a-271bf4ef5273/1/853einOu6vkH0X_zfnrm46M9RZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d5:40:16:3f:e8:51:bb:bc:1d:3d:78:c6:3b:de:67:1e:e3:
         d6:21:1e:81:bd:4f:1b:87:20:d2:e7:4d:09:79:51:7a:3d:6e:
         04:97:e6:d9:5f:d4:67:4b:d5:a4:da:8f:00:0e:de:0e:25:8a:
         3d:72:da:10:ee:a2:8c:b5:2b:0d:91:70:fc:ba:b0:0c:5b:0f:
         1d:e9:41:ff:b5:36:6f:ed:37:0e:1f:14:2e:e9:fd:52:68:ec:
         35:44:e1:ce:af:71:44:0d:e2:e3:fc:99:65:0a:fe:48:0e:28:
         0c:4b:45:b0:09:9e:6f:9c:9e:94:7f:fa:e9:31:c3:f6:27:2c:
         b4:67:88:ea:56:39:6b:71:b0:93:16:f9:74:cf:56:f4:6f:74:
         0a:1e:89:10:e7:a1:fe:06:04:fc:c5:64:8c:e0:ae:59:a0:90:
         4d:2c:25:8e:c6:c7:4f:70:d6:08:a2:fe:0c:6c:df:b5:be:65:
         c9:d6:0a:06:4d:29:05:00:3a:d0:c1:ab:51:8d:a2:8d:46:49:
         aa:c8:77:3f:fd:58:59:ec:cf:e7:52:8e:2b:4a:54:0a:85:6f:
         0c:e7:22:d9:1d:6a:e5:e1:76:39:36:ee:ac:20:a0:2c:fd:56:
         6f:23:98:7e:e0:77:20:b3:0e:ec:f3:a3:ee:17:84:9c:d3:98:
         a1:67:a3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:57 2024 by rpki-client on console-fra.rpki-client.org