Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.mft
File:                     h_4pq03kqiaPfsSKHEpA5fPqIq8.mft (raw, json)
Hash identifier:          sK/LqM4O//Rovv8k+Ggh1Y8Nl3LNtLvMQPD4t5Ju4oo=
Subject key identifier:   DE:D5:CF:35:E2:70:43:85:76:D3:9B:E4:89:6F:32:D3:FE:5D:A3:E2
Authority key identifier: 87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF
Certificate issuer:       /CN=87fe29ab4de4aa268f7ec48a1c4a40e5f3ea22af
Certificate serial:       0187DC9272EAB23BBB75F7DCD989EA04AEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h_4pq03kqiaPfsSKHEpA5fPqIq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.mft
Manifest number:          0D5E
Signing time:             Tue 02 May 2023 13:06:37 +0000
Manifest this update:     Tue 02 May 2023 13:06:37 +0000
Manifest next update:     Wed 03 May 2023 13:06:37 +0000
Files and hashes:         1: Wu1KqVOO9ucoWih-q704ZYJTZ5Y.roa (hash: qritznDIdUj3gW47UVglx+5+PwRD+uYNwuSKJI+59MQ=)
                          2: h_4pq03kqiaPfsSKHEpA5fPqIq8.crl (hash: pN7NBFiZaI+42T0Am6dQRknXnrcR9h/9g5z2TIGR+i8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:dc:92:72:ea:b2:3b:bb:75:f7:dc:d9:89:ea:04:ae:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87fe29ab4de4aa268f7ec48a1c4a40e5f3ea22af
        Validity
            Not Before: May  2 13:06:37 2023 GMT
            Not After : May  3 13:06:37 2023 GMT
        Subject: CN=ded5cf35e270438576d39be4896f32d3fe5da3e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a3:6d:2c:da:0e:37:6a:9f:de:70:07:1f:28:
                    6a:f8:08:1e:e4:d2:5e:c3:fb:b5:22:f1:9a:c5:47:
                    61:fe:32:ad:51:ac:a6:e3:6c:4a:b4:d3:b2:0b:d3:
                    da:04:95:e0:8c:57:53:0a:10:e2:40:c9:92:7c:ba:
                    50:ac:61:1f:dd:69:e4:00:a5:01:c6:6a:c3:b1:f0:
                    7f:e5:3a:ef:20:7a:f7:1d:83:fb:82:cc:68:d0:0a:
                    ad:2f:bb:ad:c8:f4:01:0b:2e:3f:b2:a1:3f:32:52:
                    1c:bd:98:c2:43:b8:1e:67:aa:c2:f8:f5:dd:d4:fe:
                    42:9b:88:08:5b:a5:5a:c2:4a:36:d4:98:38:43:fb:
                    a1:03:8c:5d:4f:e4:19:41:27:8f:8e:fe:9d:cb:62:
                    c7:a1:88:4f:e3:66:9b:86:ce:34:ad:1f:5c:85:1c:
                    98:fc:25:8c:da:33:55:80:aa:90:3e:0d:84:73:83:
                    eb:5b:6d:f7:d3:b8:c4:54:ee:5b:6c:64:a2:86:d1:
                    03:c9:2c:e0:0b:a3:76:a9:fa:80:0c:21:e9:d7:71:
                    fa:3d:d1:4f:75:43:b5:fc:16:2c:a8:a5:fa:dd:09:
                    df:ad:13:cf:b0:f5:4e:56:99:4d:16:04:06:1d:c9:
                    b7:4f:86:6b:a7:09:cc:c3:89:8e:fa:98:9e:4b:bf:
                    25:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D5:CF:35:E2:70:43:85:76:D3:9B:E4:89:6F:32:D3:FE:5D:A3:E2
            X509v3 Authority Key Identifier:
                keyid:87:FE:29:AB:4D:E4:AA:26:8F:7E:C4:8A:1C:4A:40:E5:F3:EA:22:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_4pq03kqiaPfsSKHEpA5fPqIq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1374b1-02f2-4e7e-8cf0-d926cf74aacc/1/h_4pq03kqiaPfsSKHEpA5fPqIq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:db:97:21:10:22:2b:c4:08:40:64:5e:22:e1:c6:99:43:ba:
         d8:b2:15:f2:c9:2d:2d:27:d2:e5:60:82:6c:c8:47:7f:71:76:
         9e:07:7e:eb:d3:56:5c:e9:51:12:2b:f7:72:50:d9:47:8b:73:
         dc:6a:bc:8f:c5:f4:31:fe:89:43:20:b9:17:b5:86:46:31:a8:
         2b:e1:5a:3e:0b:a1:35:c4:52:b0:af:84:71:63:7e:94:b5:77:
         0f:23:cc:39:df:74:5d:bd:4f:90:4b:f4:33:9c:56:ec:4e:83:
         92:da:2c:1b:e0:cb:e6:20:b3:d3:f2:28:b2:bd:1e:b4:28:32:
         18:06:8c:c1:e2:97:45:a6:c7:93:55:98:e4:4e:ef:a2:94:57:
         e1:a5:71:62:af:95:b0:86:2e:6e:71:05:45:45:2e:ab:77:15:
         e7:c9:9f:8f:ae:aa:dc:e4:0c:68:92:e5:2f:37:cb:0c:59:a8:
         3d:78:89:bf:91:47:9a:05:85:d9:53:d1:b9:af:13:c4:84:f5:
         8a:a1:94:93:b2:ca:d3:a8:07:7e:f7:38:d2:e6:21:35:a7:93:
         7e:07:74:f3:9d:39:b5:70:b1:06:b9:11:ea:d3:98:a0:7e:7e:
         d9:f5:2b:84:5b:91:8d:fe:b8:8d:fc:24:94:70:cf:fb:81:87:
         53:3b:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:03 2024 by rpki-client on console-fra.rpki-client.org