Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/rK3FVAD85bOUIHAIo6JxbLXYIWw.mft
File:                     rK3FVAD85bOUIHAIo6JxbLXYIWw.mft (raw, json)
Hash identifier:          4FizZuYwgsQYW8ihsoTIvxWf7XWhuwtsd8kCPafXXeo=
Subject key identifier:   BD:7C:ED:F1:66:CD:D2:B0:8A:5F:DE:4E:0D:BD:41:F3:AB:48:AB:F1
Authority key identifier: AC:AD:C5:54:00:FC:E5:B3:94:20:70:08:A3:A2:71:6C:B5:D8:21:6C
Certificate issuer:       /CN=acadc55400fce5b394207008a3a2716cb5d8216c
Certificate serial:       018C2FFB03CF3AE3C9374E2C1945CF886B18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rK3FVAD85bOUIHAIo6JxbLXYIWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/rK3FVAD85bOUIHAIo6JxbLXYIWw.mft
Manifest number:          04DD
Signing time:             Sun 03 Dec 2023 14:00:28 +0000
Manifest this update:     Sun 03 Dec 2023 14:00:28 +0000
Manifest next update:     Mon 04 Dec 2023 14:00:28 +0000
Files and hashes:         1: rK3FVAD85bOUIHAIo6JxbLXYIWw.crl (hash: RV0tBLzf5BK1JsreLfqmOESfp7g+6hqJbFcO6koLzyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:2f:fb:03:cf:3a:e3:c9:37:4e:2c:19:45:cf:88:6b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acadc55400fce5b394207008a3a2716cb5d8216c
        Validity
            Not Before: Dec  3 14:00:28 2023 GMT
            Not After : Dec  4 14:00:28 2023 GMT
        Subject: CN=bd7cedf166cdd2b08a5fde4e0dbd41f3ab48abf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:9c:1c:82:0c:e3:60:b1:32:8f:2a:f6:22:2d:
                    cc:1e:61:2e:d1:02:e9:17:64:87:b4:5e:d8:8f:4b:
                    3c:07:e4:e2:f8:f1:2c:90:ad:a7:d7:4c:4b:fe:01:
                    55:f9:5c:32:d3:f2:bc:19:28:53:8d:4a:69:3f:a7:
                    b4:99:59:09:24:78:7b:50:51:44:b7:38:e4:7a:17:
                    1f:f6:6f:86:ca:4b:dd:2a:de:e0:0c:82:85:94:8b:
                    89:4f:c2:af:cf:c7:56:5e:07:f0:03:cb:3d:4f:e6:
                    0a:02:87:dc:e4:92:09:7a:63:8b:e8:84:87:78:22:
                    72:bc:01:bf:9d:46:aa:8b:51:c4:6a:62:6d:73:ee:
                    fe:ed:19:30:c5:c0:84:5c:48:37:7e:64:28:80:f7:
                    30:2e:bd:ac:e8:f8:3b:82:38:8f:6c:e6:e2:41:e6:
                    bc:23:cf:f4:51:95:45:66:69:ed:3e:37:6b:2f:5f:
                    aa:ec:0d:e1:cc:87:c8:74:e4:0d:fa:11:7f:42:06:
                    4a:d6:1a:d5:5e:f1:b4:dd:39:30:29:fa:e7:be:55:
                    e6:bf:ca:2f:22:9f:75:c5:78:1f:a4:5d:32:41:f3:
                    f4:e0:b9:03:aa:a5:cb:3c:ef:22:8b:6c:77:69:fc:
                    ea:b2:1e:84:50:b5:f2:ec:4b:65:f0:0b:14:1a:08:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7C:ED:F1:66:CD:D2:B0:8A:5F:DE:4E:0D:BD:41:F3:AB:48:AB:F1
            X509v3 Authority Key Identifier:
                keyid:AC:AD:C5:54:00:FC:E5:B3:94:20:70:08:A3:A2:71:6C:B5:D8:21:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rK3FVAD85bOUIHAIo6JxbLXYIWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/rK3FVAD85bOUIHAIo6JxbLXYIWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/641178-a0b7-467c-8b1c-63179179a994/1/rK3FVAD85bOUIHAIo6JxbLXYIWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:f7:29:ca:fd:51:34:fb:39:f5:14:0a:31:59:cf:38:3d:
         0c:45:55:fd:36:90:49:59:43:44:a6:ef:af:67:b5:d0:95:b3:
         06:ae:57:04:85:4d:09:2b:bf:d0:a2:e8:ab:3f:8c:77:84:0c:
         cb:6c:e0:3e:76:7f:34:7d:99:80:61:40:5d:bd:ad:b9:b4:e4:
         2f:29:b3:b7:3e:3e:f5:c3:31:32:11:23:a9:19:02:1a:2c:67:
         dc:b9:a7:9e:14:d0:d3:28:32:40:d5:36:23:1a:b0:21:bc:68:
         60:1a:4e:d0:83:90:f3:d1:74:46:de:21:c0:77:60:f3:73:ca:
         44:4a:be:6b:9a:cd:c2:42:34:c5:18:28:e3:1e:14:1c:c4:bf:
         e4:61:24:fa:8b:cb:0c:fd:9a:b0:85:33:e6:fc:ec:f8:c0:f4:
         1b:99:ea:7b:c6:16:49:b2:57:7b:04:fc:01:1d:da:21:f4:4c:
         2f:79:0d:24:6c:47:30:de:5b:1d:c8:7e:46:94:cd:a2:9a:3b:
         30:1f:e8:ba:01:a3:7c:c0:ec:0e:9f:d2:b0:49:7d:0e:90:10:
         c0:ef:55:ea:7e:1f:b7:30:61:5f:5d:55:d2:bf:22:8e:d9:96:
         af:86:f1:56:3a:6b:7f:93:27:e5:a4:ca:73:28:ab:4c:f1:83:
         c4:b5:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:29 2024 by rpki-client on console-ams.rpki-client.org