Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.mft
File:                     Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.mft (raw, json)
Hash identifier:          kR+5UTmHjhtcBZPAeWtDUXVHRuj8+olfNuEQBTb1kXc=
Subject key identifier:   7D:49:0B:72:D8:72:4F:E7:C6:66:BF:02:DB:78:2E:5F:98:DA:42:6A
Authority key identifier: 23:1D:90:96:EF:96:EC:16:CB:0A:E6:8A:A3:96:71:05:1F:4F:28:5A
Certificate issuer:       /CN=231d9096ef96ec16cb0ae68aa39671051f4f285a
Certificate serial:       018A8868F5111A7F4D3FD6436AC25079AF90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.mft
Manifest number:          0868
Signing time:             Tue 12 Sep 2023 08:01:34 +0000
Manifest this update:     Tue 12 Sep 2023 08:01:34 +0000
Manifest next update:     Wed 13 Sep 2023 08:01:34 +0000
Files and hashes:         1: Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.crl (hash: gHxzlAoRALr4Clhqb8arKFs6wA26XPeaame0TSqtTsc=)
                          2: dj4-jxaqa75u-rqzZr5KnV0Ywls.roa (hash: MJ8M2jR94kx9fiRpgNa4bl+kezgizOEgwXFT63mTXV4=)
                          3: wi3fVXZxIlBJC7YnXnCdKpo6Toc.roa (hash: gFszIth84qgPA2A+TifcLfxk/v8LijFZpvyNy8j+caM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:88:68:f5:11:1a:7f:4d:3f:d6:43:6a:c2:50:79:af:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=231d9096ef96ec16cb0ae68aa39671051f4f285a
        Validity
            Not Before: Sep 12 08:01:34 2023 GMT
            Not After : Sep 13 08:01:34 2023 GMT
        Subject: CN=7d490b72d8724fe7c666bf02db782e5f98da426a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:b1:38:67:cf:a5:1e:fc:b0:f8:8c:c6:ee:
                    42:a0:dd:ee:d2:1a:fb:b7:ea:bb:33:44:46:c0:b0:
                    42:fe:6e:ce:75:d4:cf:af:2d:49:76:66:c7:d8:15:
                    75:4d:aa:cd:d0:43:6a:76:b8:1a:79:84:eb:f7:91:
                    0c:7b:3e:98:5d:19:96:1a:77:58:d3:27:9d:b2:e7:
                    48:84:09:b6:46:2a:09:ef:5a:5c:d7:e8:67:70:a9:
                    17:b5:ec:cd:d5:6c:a5:72:f8:a3:d0:2f:e4:9d:94:
                    7d:97:93:44:e1:5b:7b:7e:30:8b:8c:61:87:14:ea:
                    94:83:16:9d:6f:2d:13:ef:2c:2c:1b:17:9f:b2:e3:
                    94:73:f0:da:32:0c:85:ed:19:6e:28:f4:51:a0:43:
                    8b:21:e0:85:f0:7c:5a:50:15:dc:95:55:3d:07:90:
                    fa:5a:74:35:47:61:17:4b:2d:9f:d3:6a:17:8b:d8:
                    72:06:22:28:20:61:12:18:04:86:da:91:16:a9:7d:
                    96:e2:f6:0a:1f:8d:e3:6d:db:c7:7e:06:9f:50:3e:
                    a9:fc:f2:f7:05:cc:14:f0:0f:c9:ac:cb:0c:b3:4f:
                    33:5d:53:8f:c1:91:b6:21:2f:f9:70:62:f7:56:b5:
                    16:cc:27:9a:e9:e4:aa:11:2f:95:f2:82:a1:78:a1:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:49:0B:72:D8:72:4F:E7:C6:66:BF:02:DB:78:2E:5F:98:DA:42:6A
            X509v3 Authority Key Identifier:
                keyid:23:1D:90:96:EF:96:EC:16:CB:0A:E6:8A:A3:96:71:05:1F:4F:28:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/90f022-2efd-459d-8e22-cee4437961be/1/Ix2Qlu-W7BbLCuaKo5ZxBR9PKFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:f9:14:7a:1f:d5:78:3a:c0:f8:fa:6b:07:22:21:a1:47:6a:
         84:63:70:9d:2d:be:79:62:86:fa:f5:c8:fc:90:f0:2e:7e:ba:
         b4:0c:3b:05:b5:9b:05:61:60:6a:6d:7e:e0:aa:8a:6f:2e:71:
         eb:27:81:83:b3:72:69:c2:66:c6:69:e2:cf:08:eb:9e:0a:d3:
         c0:ad:8c:54:bf:23:bf:6b:c0:35:3c:f7:1a:58:b4:d0:c9:19:
         fd:3a:ca:d3:5f:6a:6b:c2:ae:ae:00:28:44:ac:7f:cd:21:bb:
         bc:65:fd:51:b2:80:ed:5f:9f:03:8c:f5:fb:d4:2d:1f:25:00:
         6b:3c:67:80:bd:7f:e9:c1:2b:0c:32:f6:6a:f0:a2:a0:e1:1a:
         9c:15:bd:9b:6d:1f:2a:c9:44:fb:47:77:85:ad:ff:ba:d7:67:
         ca:f1:b5:c1:e4:ce:6f:c7:1b:1d:14:5f:8a:7b:9e:f1:40:87:
         46:b0:ad:1d:2a:80:22:8b:20:fe:4f:82:86:b2:8f:c8:5f:d7:
         81:6b:8a:a9:62:27:62:9d:f1:3b:1b:2a:3d:49:09:36:2b:49:
         6c:47:b3:ad:61:70:25:d9:a0:ed:cc:54:cd:7f:62:9d:ed:e9:
         e4:31:7e:fa:bc:54:b6:04:d3:80:77:0e:8f:9e:82:6a:b9:63:
         ef:80:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:55 2024 by rpki-client on console-ams.rpki-client.org