Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/iOqNgCiO3alNlbYwi_FZpSbGN0U.mft
File:                     iOqNgCiO3alNlbYwi_FZpSbGN0U.mft (raw, json)
Hash identifier:          ig4DQyFcIRSRz8QggOohr98DAaHaep2VxGz69vwS6tc=
Subject key identifier:   5D:35:28:31:3D:C3:D6:D3:0A:A6:D1:6C:BB:EB:28:DE:5D:D0:D5:0A
Authority key identifier: 88:EA:8D:80:28:8E:DD:A9:4D:95:B6:30:8B:F1:59:A5:26:C6:37:45
Certificate issuer:       /CN=88ea8d80288edda94d95b6308bf159a526c63745
Certificate serial:       018BD7260E63BB0537464863716164EC451D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOqNgCiO3alNlbYwi_FZpSbGN0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/iOqNgCiO3alNlbYwi_FZpSbGN0U.mft
Manifest number:          088A
Signing time:             Thu 16 Nov 2023 08:01:17 +0000
Manifest this update:     Thu 16 Nov 2023 08:01:17 +0000
Manifest next update:     Fri 17 Nov 2023 08:01:17 +0000
Files and hashes:         1: iOqNgCiO3alNlbYwi_FZpSbGN0U.crl (hash: iLBC0vS/QsNgfJkj8EOosXHMGMqy5i8WXoYF0+4CEqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d7:26:0e:63:bb:05:37:46:48:63:71:61:64:ec:45:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ea8d80288edda94d95b6308bf159a526c63745
        Validity
            Not Before: Nov 16 08:01:17 2023 GMT
            Not After : Nov 17 08:01:17 2023 GMT
        Subject: CN=5d3528313dc3d6d30aa6d16cbbeb28de5dd0d50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1f:06:77:50:b4:37:39:7e:d9:10:d0:ae:ea:
                    59:45:a8:46:07:71:9f:ad:d9:34:f7:dd:3a:b8:92:
                    5b:fd:d0:ea:ea:bb:ee:d5:39:9d:72:3d:cb:fc:f0:
                    17:27:3d:fb:ab:00:98:6a:d9:7e:61:6d:7e:44:8b:
                    21:56:dd:c1:f9:6a:bf:d9:58:f4:fa:fd:b3:13:70:
                    19:a8:5e:00:d9:39:1d:fc:f4:82:28:a1:17:09:05:
                    da:65:3f:7b:7a:85:e4:dc:a5:d1:60:2c:a2:42:59:
                    0d:15:a1:6e:3e:62:35:a0:86:82:0a:30:2e:a6:6e:
                    c9:51:11:1d:ee:d1:79:42:82:14:75:fa:07:d4:38:
                    b9:db:e2:6c:30:20:34:be:18:92:fe:2d:04:f8:9e:
                    af:1c:35:3d:53:78:c7:be:77:d9:57:66:8d:e8:54:
                    25:66:a6:ac:4e:12:7c:26:51:58:ca:df:07:f7:0e:
                    54:26:76:15:0d:9b:fd:bc:50:e7:27:2b:2e:29:7a:
                    cc:cd:8d:f5:ee:23:e8:26:5b:30:cb:09:9a:aa:e5:
                    9f:9f:34:d7:7e:ae:89:56:2a:55:11:a8:fc:16:13:
                    3c:26:a3:e5:8f:3b:4d:52:e9:47:bb:29:20:2c:cd:
                    53:e4:88:65:ff:b1:c7:9c:4f:1e:52:8a:0d:9b:73:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:35:28:31:3D:C3:D6:D3:0A:A6:D1:6C:BB:EB:28:DE:5D:D0:D5:0A
            X509v3 Authority Key Identifier:
                keyid:88:EA:8D:80:28:8E:DD:A9:4D:95:B6:30:8B:F1:59:A5:26:C6:37:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOqNgCiO3alNlbYwi_FZpSbGN0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/iOqNgCiO3alNlbYwi_FZpSbGN0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3bf92d-1c59-474b-8865-bbe4cf13583f/1/iOqNgCiO3alNlbYwi_FZpSbGN0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:24:ee:50:15:71:b9:ff:c1:08:86:14:05:41:1a:68:55:
         b0:f3:c9:09:56:3c:ef:6f:42:c4:7e:ca:24:6c:f1:36:04:61:
         57:6a:a7:1e:23:cd:e0:cb:27:0c:59:40:9f:e9:77:f4:6f:b8:
         d7:15:57:ef:a5:d3:c3:d8:db:fe:17:1c:dc:03:06:25:8d:fa:
         6b:7f:88:51:75:c6:63:0d:e3:6f:c0:c8:91:c5:23:e5:4a:a7:
         8d:7a:48:af:e0:24:af:79:f1:73:f5:1d:8e:20:6e:5d:44:3c:
         55:0c:c6:96:e6:e0:e9:62:f0:01:34:3b:16:63:d1:fb:10:ec:
         51:67:cd:2f:df:35:7f:96:cd:79:de:8c:16:9b:fb:af:76:85:
         54:fe:01:50:93:42:d9:8d:6c:7b:d8:91:03:da:60:bd:bb:b8:
         25:0a:1a:fd:18:fe:72:14:26:22:a9:b9:07:1e:68:3e:eb:3f:
         e1:45:e8:98:ae:a4:ab:64:22:6c:85:1f:81:fb:82:64:8c:6d:
         5f:15:4c:b6:6c:35:65:9b:db:35:0c:c4:73:42:54:cd:02:69:
         12:f3:0f:b7:e9:9a:e1:cd:e8:6c:cc:d1:85:33:62:41:7f:44:
         a2:6a:f9:8f:49:3d:86:f5:1e:18:dd:18:09:41:53:60:5d:c9:
         f8:fe:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:00 2024 by rpki-client on console-fra.rpki-client.org