Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.mft
File:                     xzveH4rbIxfNv0wMGMz72jEJBvo.mft (raw, json)
Hash identifier:          ZJxWbH4x09OCSrKi4fcASte49VPmFhM/WHLfVlPbCy8=
Subject key identifier:   A6:ED:38:07:42:BB:80:D9:F8:67:F0:0E:59:89:D3:1B:87:E7:08:46
Authority key identifier: C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA
Certificate issuer:       /CN=c73bde1f8adb2317cdbf4c0c18ccfbda310906fa
Certificate serial:       018C6A8F803329B978B338755F599E7CFBC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xzveH4rbIxfNv0wMGMz72jEJBvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.mft
Manifest number:          0DB0
Signing time:             Thu 14 Dec 2023 23:00:38 +0000
Manifest this update:     Thu 14 Dec 2023 23:00:38 +0000
Manifest next update:     Fri 15 Dec 2023 23:00:38 +0000
Files and hashes:         1: xzveH4rbIxfNv0wMGMz72jEJBvo.crl (hash: +w5vh4Id031KVDCSNDzY5/uIgB7a3yByJklxXzx9WXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:6a:8f:80:33:29:b9:78:b3:38:75:5f:59:9e:7c:fb:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c73bde1f8adb2317cdbf4c0c18ccfbda310906fa
        Validity
            Not Before: Dec 14 23:00:38 2023 GMT
            Not After : Dec 15 23:00:38 2023 GMT
        Subject: CN=a6ed380742bb80d9f867f00e5989d31b87e70846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:78:d2:27:e2:13:b6:51:e2:f6:9c:50:ad:
                    58:66:8a:5d:d3:5e:cb:94:18:91:79:19:0d:d4:66:
                    35:80:41:1c:29:0f:38:d5:b4:27:6a:7a:1f:7b:bc:
                    86:72:c8:fb:b3:fd:3e:67:b1:d2:ac:3c:ff:6d:90:
                    22:a1:81:d2:ff:5f:04:41:7c:3b:ab:bd:6d:23:23:
                    ed:f9:7e:d1:29:b7:4b:d3:2a:df:79:6e:38:09:c7:
                    37:9d:4f:7b:6a:ab:ce:41:f9:59:a4:5b:6b:41:dc:
                    02:97:23:53:19:7a:73:ac:67:4d:32:93:48:ce:f3:
                    38:bb:c3:e4:97:16:2d:6e:e8:f6:d9:c0:f6:37:70:
                    90:5a:3c:96:1f:52:9f:68:51:fd:c3:34:2e:3d:c6:
                    c7:71:29:0d:8b:95:47:34:38:fe:d7:e8:b8:0a:f5:
                    3e:bd:04:f6:32:2e:47:17:0c:2e:66:55:45:9a:98:
                    cd:6a:73:35:b8:fc:1c:56:a7:14:b3:88:cc:87:7d:
                    d4:e9:8f:1e:40:8a:6b:f1:99:40:2b:7c:b2:db:c9:
                    ff:24:90:c0:41:a8:0f:c1:9c:35:ce:ea:9c:fa:37:
                    73:7e:50:74:ec:a9:b0:17:03:fd:fa:c3:9f:9f:35:
                    5c:ca:16:79:5c:e4:27:c2:22:a6:6e:76:cb:27:39:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:ED:38:07:42:BB:80:D9:F8:67:F0:0E:59:89:D3:1B:87:E7:08:46
            X509v3 Authority Key Identifier:
                keyid:C7:3B:DE:1F:8A:DB:23:17:CD:BF:4C:0C:18:CC:FB:DA:31:09:06:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xzveH4rbIxfNv0wMGMz72jEJBvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b56b5f-3229-4b32-9c03-e38079bba49a/1/xzveH4rbIxfNv0wMGMz72jEJBvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:c8:87:14:31:8a:87:49:39:13:5e:68:2c:4b:af:d6:bc:
         8c:1c:1e:40:51:29:2b:6e:e3:e5:2f:f0:c5:07:15:cd:c9:27:
         fd:f5:b0:56:4f:ac:8a:d3:79:12:6c:08:d4:76:3b:e0:4c:59:
         63:88:6d:dd:9e:0a:e6:0a:3b:e9:ac:8b:20:8a:e6:06:99:68:
         cc:95:67:61:57:1a:3d:82:37:a2:37:36:e0:f2:21:a7:69:c8:
         54:69:64:42:5a:c5:b2:26:2c:67:b2:b1:8c:b2:6d:cc:33:bc:
         dc:bb:2f:b6:d5:78:33:d0:b9:c9:37:9a:42:6c:6a:28:21:60:
         e9:cc:0c:43:26:ee:78:44:df:fc:80:43:db:f1:27:82:98:c2:
         41:87:d1:68:35:d6:51:f1:82:95:1f:4b:42:b6:77:35:7d:16:
         85:84:c8:09:61:41:41:37:5e:2e:d2:62:ff:38:77:9c:b0:30:
         f0:fa:8e:b0:99:94:44:cc:f7:36:83:a5:19:30:11:97:3c:52:
         04:18:2d:c4:70:e5:b4:2f:88:6d:10:d6:fc:34:62:f2:d5:0f:
         29:b7:26:36:1b:2e:fd:53:4c:3b:71:a8:bc:ac:8f:bf:36:c7:
         58:cf:43:ef:0a:e6:06:da:ca:16:cc:35:fb:3c:0e:aa:c8:77:
         00:76:44:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org