Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/8h3lTpKeYnlKVovSzIkMSUbJ9fE.mft
File:                     8h3lTpKeYnlKVovSzIkMSUbJ9fE.mft (raw, json)
Hash identifier:          pG5k8JuMhGUpICV1YXZzC6+tjYRR2inb1K6+khaKstg=
Subject key identifier:   D2:DD:6E:02:9E:62:4D:F9:75:C6:1A:DB:D0:6E:18:1A:D7:FA:CD:31
Authority key identifier: F2:1D:E5:4E:92:9E:62:79:4A:56:8B:D2:CC:89:0C:49:46:C9:F5:F1
Certificate issuer:       /CN=f21de54e929e62794a568bd2cc890c4946c9f5f1
Certificate serial:       01889539A6F331B940CDB842BFD15C5ED571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8h3lTpKeYnlKVovSzIkMSUbJ9fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/8h3lTpKeYnlKVovSzIkMSUbJ9fE.mft
Manifest number:          08
Signing time:             Wed 07 Jun 2023 09:39:23 +0000
Manifest this update:     Wed 07 Jun 2023 09:39:23 +0000
Manifest next update:     Thu 08 Jun 2023 09:39:23 +0000
Files and hashes:         1: 8h3lTpKeYnlKVovSzIkMSUbJ9fE.crl (hash: LtfxW9I6h/U0d3t8nXuvByIDClMM1/h3iaQIeELVKzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:95:39:a6:f3:31:b9:40:cd:b8:42:bf:d1:5c:5e:d5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f21de54e929e62794a568bd2cc890c4946c9f5f1
        Validity
            Not Before: Jun  7 09:39:23 2023 GMT
            Not After : Jun  8 09:39:23 2023 GMT
        Subject: CN=d2dd6e029e624df975c61adbd06e181ad7facd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:34:4e:71:21:61:61:42:a6:c3:07:74:eb:
                    78:99:e5:9e:61:6e:97:41:ff:a2:b9:50:fc:e7:a5:
                    ad:cd:9d:9a:ea:4e:e3:51:36:b5:6b:d3:e0:6e:52:
                    0b:4a:3f:16:fc:59:7f:0b:86:2b:9d:46:e2:11:82:
                    4e:2d:ef:0b:5e:1c:c5:c6:51:e4:15:c1:b4:4a:f9:
                    dc:03:0c:ca:a8:72:03:5f:e2:55:b5:5c:c5:85:ed:
                    82:89:79:85:4b:36:00:a5:8c:06:b2:48:e1:d6:fe:
                    9d:b9:89:b6:b2:65:76:08:b9:78:9d:8d:43:fc:c8:
                    64:44:62:e6:b6:ae:05:cb:e7:9f:34:b6:10:92:0c:
                    fb:d2:04:c2:c5:b5:41:23:2e:bc:7a:48:d4:fe:ba:
                    2f:bc:8c:39:d1:21:d9:74:c9:96:75:f6:c5:4b:8b:
                    8d:8d:24:2e:19:92:78:c4:b1:55:1e:25:9d:9f:12:
                    89:ad:a6:f6:ea:41:f2:b2:56:e9:0c:c4:7d:ac:b9:
                    99:be:a0:09:4a:73:0d:95:ac:d1:94:8b:c3:85:19:
                    fb:2d:3b:59:de:68:8c:f7:e2:bf:8c:99:43:53:e4:
                    74:57:b0:ec:ae:46:d3:5f:14:3a:9e:89:d5:7f:71:
                    67:7c:b6:f1:7e:41:9b:96:05:4b:e4:ca:22:25:ef:
                    4c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DD:6E:02:9E:62:4D:F9:75:C6:1A:DB:D0:6E:18:1A:D7:FA:CD:31
            X509v3 Authority Key Identifier:
                keyid:F2:1D:E5:4E:92:9E:62:79:4A:56:8B:D2:CC:89:0C:49:46:C9:F5:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8h3lTpKeYnlKVovSzIkMSUbJ9fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/8h3lTpKeYnlKVovSzIkMSUbJ9fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/aa3e6b-0cd4-4f78-bd98-c656d6617d90/1/8h3lTpKeYnlKVovSzIkMSUbJ9fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:3e:89:82:88:3e:30:ea:51:75:62:67:50:f8:7b:ce:15:
         ef:cd:c3:e9:32:cb:20:0d:e6:1f:9c:47:5c:e9:72:7d:4c:c6:
         0d:39:e8:7b:bd:1d:ef:05:f6:72:cb:c6:29:80:08:2b:a2:7e:
         55:6d:63:9d:05:fa:9e:7e:9d:65:48:b4:80:b6:c7:1f:05:f5:
         24:c3:36:77:d0:10:e6:83:dc:6c:12:a6:de:77:5c:44:0a:10:
         12:99:64:58:06:1c:32:d1:3e:d5:4a:16:82:4d:f6:be:8b:aa:
         14:81:e8:b5:23:0a:cc:72:71:d5:01:2f:60:94:a2:39:14:95:
         f8:74:0a:97:ba:d4:fe:c4:32:75:c2:82:03:52:7c:88:41:fd:
         db:ca:6c:23:64:8c:5d:eb:ab:38:74:3b:d5:ad:00:24:c1:3c:
         ee:6b:9c:5a:0f:73:76:6a:90:2d:df:9f:2c:51:fa:8c:aa:65:
         3a:26:35:7c:95:74:68:0e:e6:84:ea:56:9f:39:c2:63:63:2e:
         fd:0a:5a:f6:e3:62:aa:a0:f1:9f:69:4e:70:4f:d2:6c:68:8c:
         b0:c1:7e:4d:43:c4:6f:ee:81:c8:60:a6:50:e7:db:34:2b:8d:
         b9:78:83:1c:7f:28:2c:dc:29:59:ee:3c:c8:d0:88:79:b2:26:
         b2:ac:85:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYiVOabzMblAzbhCv9FcXtVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMWRlNTRlOTI5ZTYyNzk0YTU2OGJkMmNjODkwYzQ5NDZj
OWY1ZjEwHhcNMjMwNjA3MDkzOTIzWhcNMjMwNjA4MDkzOTIzWjAzMTEwLwYDVQQD
EyhkMmRkNmUwMjllNjI0ZGY5NzVjNjFhZGJkMDZlMTgxYWQ3ZmFjZDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGo0TnEhYWFCpsMHdOt4meWeYW6X
Qf+iuVD856WtzZ2a6k7jUTa1a9PgblILSj8W/Fl/C4YrnUbiEYJOLe8LXhzFxlHk
FcG0SvncAwzKqHIDX+JVtVzFhe2CiXmFSzYApYwGskjh1v6duYm2smV2CLl4nY1D
/MhkRGLmtq4Fy+efNLYQkgz70gTCxbVBIy68ekjU/rovvIw50SHZdMmWdfbFS4uN
jSQuGZJ4xLFVHiWdnxKJrab26kHyslbpDMR9rLmZvqAJSnMNlazRlIvDhRn7LTtZ
3miM9+K/jJlDU+R0V7DsrkbTXxQ6nonVf3FnfLbxfkGblgVL5MoiJe9MsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLdbgKeYk35dcYa29BuGBrX+s0xMB8GA1UdIwQY
MBaAFPId5U6SnmJ5SlaL0syJDElGyfXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGgzbFRwS2VZbmxLVm92U3pJa01TVWJKOWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hYTNlNmItMGNkNC00Zjc4LWJkOTgt
YzY1NmQ2NjE3ZDkwLzEvOGgzbFRwS2VZbmxLVm92U3pJa01TVWJKOWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9hYTNlNmItMGNkNC00Zjc4LWJkOTgtYzY1NmQ2NjE3ZDkw
LzEvOGgzbFRwS2VZbmxLVm92U3pJa01TVWJKOWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEw+iYKI
PjDqUXViZ1D4e84V783D6TLLIA3mH5xHXOlyfUzGDTnoe70d7wX2csvGKYAIK6J+
VW1jnQX6nn6dZUi0gLbHHwX1JMM2d9AQ5oPcbBKm3ndcRAoQEplkWAYcMtE+1UoW
gk32vouqFIHotSMKzHJx1QEvYJSiORSV+HQKl7rU/sQydcKCA1J8iEH928psI2SM
XeurOHQ71a0AJME87mucWg9zdmqQLd+fLFH6jKplOiY1fJV0aA7mhOpWnznCY2Mu
/Qpa9uNiqqDxn2lOcE/SbGiMsMF+TUPEb+6ByGCmUOfbNCuNuXiDHH8oLNwpWe48
yNCIebImsqyF9Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:49 2024 by rpki-client on console-ams.rpki-client.org