Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/041cdd-1925-4516-92b2-4d01d507bb87/1/nYO77Pz-5qxydX0EiIdTRXb0NmQ.mft
File:                     nYO77Pz-5qxydX0EiIdTRXb0NmQ.mft (raw, json)
Hash identifier:          cBvbh9OryDnRavMIq9wgUA6ASEZtzsOz8F8Zo8oGk74=
Subject key identifier:   F6:4B:07:DA:E8:D9:61:C0:FE:F0:FE:68:17:B8:35:97:37:4E:D0:EE
Authority key identifier: 9D:83:BB:EC:FC:FE:E6:AC:72:75:7D:04:88:87:53:45:76:F4:36:64
Certificate issuer:       /CN=9d83bbecfcfee6ac72757d048887534576f43664
Certificate serial:       0187A7694C31BF4CB09D6E66176394511E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nYO77Pz-5qxydX0EiIdTRXb0NmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/041cdd-1925-4516-92b2-4d01d507bb87/1/nYO77Pz-5qxydX0EiIdTRXb0NmQ.mft
Manifest number:          017D
Signing time:             Sat 22 Apr 2023 05:21:48 +0000
Manifest this update:     Sat 22 Apr 2023 05:21:48 +0000
Manifest next update:     Sun 23 Apr 2023 05:21:48 +0000
Files and hashes:         1: nYO77Pz-5qxydX0EiIdTRXb0NmQ.crl (hash: mO87IarUB/xtphlneMipMij5v1O7pvuRwTmFr/SSyJ4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a7:69:4c:31:bf:4c:b0:9d:6e:66:17:63:94:51:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d83bbecfcfee6ac72757d048887534576f43664
        Validity
            Not Before: Apr 22 05:21:48 2023 GMT
            Not After : Apr 23 05:21:48 2023 GMT
        Subject: CN=f64b07dae8d961c0fef0fe6817b83597374ed0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ce:39:b7:aa:8d:56:88:26:40:15:ed:7b:72:
                    9a:13:1e:f3:c5:fd:f9:62:33:2a:51:6e:ed:07:9a:
                    5e:bd:15:35:ba:e0:13:97:a1:2a:f4:d7:b4:2f:66:
                    79:45:c7:77:a3:f2:74:62:31:e3:65:aa:eb:7c:e8:
                    db:e5:31:e9:a0:d6:f0:c3:dd:f5:98:a2:c6:80:5b:
                    05:14:fb:49:ff:02:c5:ab:11:b8:26:71:8c:9c:ca:
                    cb:21:7e:5b:48:65:82:53:3a:9d:cd:bd:cd:cf:de:
                    ed:28:a6:8b:4c:42:a8:e8:4a:8d:9d:6c:1a:3b:9b:
                    19:08:75:7e:65:fb:47:fc:f8:7a:6e:03:84:3a:3b:
                    eb:bd:fe:1c:90:a5:64:b0:51:4f:62:b7:c5:7a:6f:
                    a7:83:85:71:10:43:24:d3:c3:29:7b:29:51:56:0d:
                    81:95:8e:c8:1a:99:eb:f9:4e:e1:cd:43:f8:ca:c6:
                    bd:0f:d8:f9:af:66:f6:c9:76:c2:f8:c0:7f:f3:e6:
                    32:a9:7e:95:89:6e:d8:87:0b:36:d5:43:c0:ba:80:
                    60:d2:77:4d:af:dc:0c:fe:90:7e:1e:e4:62:36:ee:
                    45:79:c8:b5:8f:20:a8:02:e2:c1:ed:6a:ff:48:3e:
                    aa:d5:3d:7b:c0:0d:49:60:69:a4:dc:5f:f3:4e:c4:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4B:07:DA:E8:D9:61:C0:FE:F0:FE:68:17:B8:35:97:37:4E:D0:EE
            X509v3 Authority Key Identifier:
                keyid:9D:83:BB:EC:FC:FE:E6:AC:72:75:7D:04:88:87:53:45:76:F4:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYO77Pz-5qxydX0EiIdTRXb0NmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/041cdd-1925-4516-92b2-4d01d507bb87/1/nYO77Pz-5qxydX0EiIdTRXb0NmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/041cdd-1925-4516-92b2-4d01d507bb87/1/nYO77Pz-5qxydX0EiIdTRXb0NmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e9:2b:52:ed:0f:df:d6:19:73:a0:8c:1b:e1:27:12:85:30:
         0c:0f:b9:ae:e5:53:53:6d:b8:75:d5:42:0f:ee:a5:18:a0:9c:
         87:6e:0a:59:4d:6c:db:df:ce:51:70:6d:3e:6a:66:3b:cb:0f:
         01:9b:57:91:28:43:5c:41:0f:23:21:a9:17:ad:99:58:d4:76:
         9c:fc:9b:87:99:ff:f5:b3:ef:18:24:ec:76:b7:f1:cb:e7:e3:
         76:8e:cc:3e:4a:5a:dc:13:53:89:f4:c5:b6:cf:a0:3a:92:20:
         02:c2:c8:f2:f9:6f:58:ca:fc:99:35:d3:ed:8c:be:dc:4b:17:
         7b:72:2f:40:15:3f:08:bd:0b:8e:d2:d0:f9:95:e8:2a:1d:a8:
         e2:ca:7f:14:43:78:3c:b9:6e:95:d2:e9:b0:e5:11:d3:15:a5:
         49:e1:69:be:ac:8b:4b:9f:b4:05:92:44:6c:10:35:2d:5d:b2:
         df:02:d9:e9:19:5f:bf:36:28:6b:d0:f5:b5:13:71:98:f0:ff:
         01:bf:3e:28:bd:3f:52:22:4a:27:7a:fb:49:0d:08:f5:2b:c8:
         64:e9:e7:3f:a5:13:70:4d:2c:b1:b1:7c:9a:10:9f:22:18:3a:
         f4:c9:bb:9a:73:ee:48:44:d8:dd:69:56:75:24:5a:ca:d7:54:
         85:6d:6f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:17 2024 by rpki-client on console-fra.rpki-client.org