Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/008371-1589-4465-a656-d05dd1f3943d/1/M9GL0RDCq-0kfkKxrZOdb62Bd0M.mft
File:                     M9GL0RDCq-0kfkKxrZOdb62Bd0M.mft (raw, json)
Hash identifier:          e1LN2bdnxKa8oCJWnwu0+qIlaSq+mKmDnE+i/LWLJfQ=
Subject key identifier:   DC:48:94:1D:18:97:DA:A2:8D:08:FB:5F:EB:AA:FA:54:B8:D8:25:1A
Authority key identifier: 33:D1:8B:D1:10:C2:AB:ED:24:7E:42:B1:AD:93:9D:6F:AD:81:77:43
Certificate issuer:       /CN=33d18bd110c2abed247e42b1ad939d6fad817743
Certificate serial:       018A2C53FB543DBCBA4975DEA5BBDFD90842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M9GL0RDCq-0kfkKxrZOdb62Bd0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/008371-1589-4465-a656-d05dd1f3943d/1/M9GL0RDCq-0kfkKxrZOdb62Bd0M.mft
Manifest number:          0845
Signing time:             Fri 25 Aug 2023 10:53:35 +0000
Manifest this update:     Fri 25 Aug 2023 10:53:35 +0000
Manifest next update:     Sat 26 Aug 2023 10:53:35 +0000
Files and hashes:         1: M9GL0RDCq-0kfkKxrZOdb62Bd0M.crl (hash: yXJdrjrJTJ4pNTvwqIBZVsZOTMB+1FJ/NvK+E8+rqrA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:2c:53:fb:54:3d:bc:ba:49:75:de:a5:bb:df:d9:08:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d18bd110c2abed247e42b1ad939d6fad817743
        Validity
            Not Before: Aug 25 10:53:35 2023 GMT
            Not After : Aug 26 10:53:35 2023 GMT
        Subject: CN=dc48941d1897daa28d08fb5febaafa54b8d8251a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:37:17:51:19:ea:2d:3b:f0:5d:9a:bb:79:
                    f7:b9:5c:fb:18:cf:63:44:c1:39:65:37:0c:23:ba:
                    5c:18:5b:73:dc:cc:99:4c:49:86:ae:f2:1e:48:a6:
                    f8:05:de:2b:7b:ec:1f:cb:04:bd:7d:c3:b1:cb:b3:
                    04:87:98:71:5a:bd:f7:e7:3f:da:c7:04:a9:91:67:
                    b2:9f:f5:73:34:38:3c:61:cb:15:6e:c3:9d:91:9f:
                    c6:ea:59:16:07:d7:4a:7a:33:02:6d:3b:64:6e:95:
                    8f:bf:b1:63:79:77:88:06:da:cb:01:f3:63:72:d5:
                    01:83:65:36:7a:dc:d3:87:a7:b7:64:2d:9e:69:86:
                    56:62:a0:7c:55:e4:b5:eb:56:90:8d:08:72:c7:74:
                    3a:31:b9:38:82:48:08:0a:1a:ef:da:38:fe:54:c6:
                    17:34:1e:b3:00:c5:40:2f:44:96:e7:8f:21:1d:fa:
                    1f:8b:9e:d7:8f:c7:a8:9c:cc:35:79:c6:08:c3:09:
                    f1:db:05:70:ef:83:42:fe:9b:2e:c2:6d:b2:21:e9:
                    22:0f:34:52:40:88:1e:d4:9a:fc:cd:c1:ff:d9:f3:
                    d0:e6:87:4d:0d:c9:97:28:44:83:d8:b2:d7:23:d7:
                    2a:9c:b5:7a:f1:3c:be:09:ac:4f:21:00:d7:be:37:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:48:94:1D:18:97:DA:A2:8D:08:FB:5F:EB:AA:FA:54:B8:D8:25:1A
            X509v3 Authority Key Identifier:
                keyid:33:D1:8B:D1:10:C2:AB:ED:24:7E:42:B1:AD:93:9D:6F:AD:81:77:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M9GL0RDCq-0kfkKxrZOdb62Bd0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/008371-1589-4465-a656-d05dd1f3943d/1/M9GL0RDCq-0kfkKxrZOdb62Bd0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/008371-1589-4465-a656-d05dd1f3943d/1/M9GL0RDCq-0kfkKxrZOdb62Bd0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d2:53:6f:6a:7a:ff:9e:4f:2b:f1:fd:b9:ce:de:dd:e1:2a:
         ff:ce:0e:4f:12:4a:97:c3:e9:62:62:b5:31:d3:64:ef:72:28:
         6e:05:88:e8:d7:fd:31:bf:a7:ef:a4:8b:fb:43:aa:66:24:9c:
         cf:1b:65:d8:ee:de:ee:a2:dd:f1:a1:1f:4a:ba:d0:97:57:a3:
         d4:88:d2:b3:62:d0:3b:f3:cb:32:82:7e:28:6b:a0:39:36:ba:
         ee:e0:ca:c7:e6:5a:16:58:a2:e5:36:b1:7f:16:73:40:37:82:
         f0:d0:1e:98:cb:22:cc:41:64:97:5b:a6:bb:fa:30:95:ac:f6:
         97:e2:b6:30:08:31:a7:3c:b1:aa:bb:d0:cb:55:47:07:57:4b:
         18:5a:ba:cf:e0:e0:15:0c:b4:70:c0:bc:8d:96:2e:92:00:c0:
         63:4c:c6:77:8f:30:92:ab:af:70:30:6b:63:33:3a:fc:e4:4a:
         1f:01:2e:db:48:b2:eb:83:15:fe:fd:88:2b:3e:a1:c3:87:91:
         17:48:ae:e2:61:a9:0f:d5:c4:ad:1b:3b:9c:92:02:9a:55:83:
         1d:f2:6b:b1:a0:cc:82:54:ef:a9:7f:9f:d4:4e:0c:a2:c2:09:
         ce:d2:12:ca:44:11:ae:2e:c0:4c:ea:68:b7:8b:23:6f:07:5e:
         48:2a:e7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 13:30:17 2023 by rpki-client on console-ams.rpki-client.org