Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/dFT0OUwYpsKGuaCymu6L5y-Cy7A.mft
File:                     dFT0OUwYpsKGuaCymu6L5y-Cy7A.mft (raw, json)
Hash identifier:          ryVMg6xNN9LPKG9GUS8VN8YczaiScyL40jFcPvsZb0o=
Subject key identifier:   71:76:F1:89:9F:5A:2C:08:C2:C4:2D:DF:54:64:E1:06:D2:5F:95:CC
Authority key identifier: 74:54:F4:39:4C:18:A6:C2:86:B9:A0:B2:9A:EE:8B:E7:2F:82:CB:B0
Certificate issuer:       /CN=7454f4394c18a6c286b9a0b29aee8be72f82cbb0
Certificate serial:       018C39A362A5149BA218646A3BEDEDED8532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFT0OUwYpsKGuaCymu6L5y-Cy7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/dFT0OUwYpsKGuaCymu6L5y-Cy7A.mft
Manifest number:          0881
Signing time:             Tue 05 Dec 2023 11:00:57 +0000
Manifest this update:     Tue 05 Dec 2023 11:00:57 +0000
Manifest next update:     Wed 06 Dec 2023 11:00:57 +0000
Files and hashes:         1: dFT0OUwYpsKGuaCymu6L5y-Cy7A.crl (hash: 4BlE4qBhOlhgM1SzyQQ7dybI21BK4OtRLfOMrOBpT4o=)
                          2: imP1vXCH92kCxoSAp91mByVdUKU.roa (hash: fG+Z+ZaH/f/jUuKEECsViAMi9L8tJGn6EEleUXPuYpY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:39:a3:62:a5:14:9b:a2:18:64:6a:3b:ed:ed:ed:85:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7454f4394c18a6c286b9a0b29aee8be72f82cbb0
        Validity
            Not Before: Dec  5 11:00:57 2023 GMT
            Not After : Dec  6 11:00:57 2023 GMT
        Subject: CN=7176f1899f5a2c08c2c42ddf5464e106d25f95cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:95:87:82:d3:f7:8d:61:76:39:2d:5d:38:c7:
                    0f:b7:0a:64:11:84:d8:40:f6:1f:fc:11:25:46:ca:
                    9b:43:8d:df:54:ae:cd:f9:ac:42:a3:84:e9:e9:d6:
                    9e:b6:44:4b:67:70:c5:75:de:ea:ae:3d:69:47:11:
                    0b:00:11:4e:f6:01:83:3e:38:7d:61:b4:64:fc:48:
                    60:97:e0:cc:93:c7:5a:03:e7:a5:e0:78:b5:4c:89:
                    32:e4:6d:9a:35:55:54:c6:86:2b:42:24:1c:09:f9:
                    3e:f2:c4:4b:b8:ee:e5:c6:21:12:2c:cd:fb:3b:25:
                    40:96:cd:23:4b:88:a6:5d:be:08:7c:a3:e1:58:71:
                    67:da:85:dc:e1:bc:8e:a7:fb:ab:db:83:37:04:d5:
                    2d:5c:ac:3e:49:2c:b8:67:7c:b6:fa:94:c7:5c:52:
                    09:6d:09:e1:24:ac:70:1f:7b:94:cc:b5:48:59:a7:
                    51:e7:34:a9:c1:a7:e9:cb:29:2f:96:4f:03:4c:5f:
                    7d:9a:3d:c3:b4:e9:9e:e6:f5:7d:b5:0b:06:5e:d8:
                    7d:04:45:6d:e7:59:11:86:a9:82:06:e0:a7:66:b7:
                    e1:12:90:dd:fe:38:2a:66:5c:7b:bd:d2:56:32:0b:
                    60:c2:d1:df:d1:91:a5:d7:a4:d1:af:6b:06:23:41:
                    bb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:76:F1:89:9F:5A:2C:08:C2:C4:2D:DF:54:64:E1:06:D2:5F:95:CC
            X509v3 Authority Key Identifier:
                keyid:74:54:F4:39:4C:18:A6:C2:86:B9:A0:B2:9A:EE:8B:E7:2F:82:CB:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFT0OUwYpsKGuaCymu6L5y-Cy7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/dFT0OUwYpsKGuaCymu6L5y-Cy7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/401215-341e-49ab-9c33-05a822f92d64/1/dFT0OUwYpsKGuaCymu6L5y-Cy7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:75:66:99:1d:3c:99:b6:53:fe:a6:f3:3e:fa:67:08:8f:
         c0:b6:31:07:70:09:86:2c:f1:db:a8:a1:9a:68:fc:42:c8:64:
         6f:7d:af:87:29:43:15:d9:aa:bd:c5:40:06:58:98:e0:ca:ad:
         e0:c6:6c:b9:c3:6b:dc:b8:96:72:5a:2a:a8:cf:2c:16:d0:65:
         1e:e1:4e:b9:c7:ec:5d:1e:d0:b4:bd:1a:b3:1f:e0:b9:b9:b8:
         21:56:58:75:4a:dd:00:e7:ce:82:66:45:b7:1a:39:6f:5c:47:
         f8:df:c6:07:f9:aa:29:f7:ec:e3:1b:44:26:88:71:98:fc:06:
         4d:1e:ab:80:40:76:b4:0e:3a:40:89:55:7d:84:9b:7e:15:bd:
         53:16:00:08:4c:ad:29:c8:f3:ea:38:28:f5:e9:5b:fb:d5:b4:
         63:9d:0b:d2:8e:3f:f2:4a:3b:f1:51:70:bc:4c:52:81:e0:f5:
         64:1a:48:ec:27:f6:82:7a:bb:8f:98:d3:5a:ee:97:d7:9b:a1:
         da:81:59:71:e6:33:18:48:8b:7d:d4:97:30:4d:b9:10:11:97:
         72:61:d8:bd:61:16:8f:de:d0:ac:5b:c7:bb:42:14:2a:9d:fe:
         06:f5:4c:15:7f:36:a1:14:42:3c:8f:56:f3:97:86:a8:20:14:
         04:c6:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:52 2024 by rpki-client on console-ams.rpki-client.org