Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft
File:                     3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft (raw, json)
Hash identifier:          9zvN7JFr4jpEhA1nwKtmc4psofwqKMhFFJsk9S0VcCk=
Subject key identifier:   19:7E:ED:1F:78:BE:F4:F9:76:97:1A:BC:AD:12:D1:B4:3C:A8:7C:4B
Authority key identifier: DE:82:52:55:36:7B:38:D1:4E:52:EE:6F:3A:8A:16:5F:84:98:DC:D9
Certificate issuer:       /CN=de825255367b38d14e52ee6f3a8a165f8498dcd9
Certificate serial:       018EDF4754D7A83CB84334CE8A34AE4DC28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft
Manifest number:          1007
Signing time:             Mon 15 Apr 2024 01:02:57 +0000
Manifest this update:     Mon 15 Apr 2024 01:02:57 +0000
Manifest next update:     Tue 16 Apr 2024 01:02:57 +0000
Files and hashes:         1: 3oJSVTZ7ONFOUu5vOooWX4SY3Nk.crl (hash: l0p51ULcjisoOPk3NAMAMTKHvfYgP4chUJuXReJyJsA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:df:47:54:d7:a8:3c:b8:43:34:ce:8a:34:ae:4d:c2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de825255367b38d14e52ee6f3a8a165f8498dcd9
        Validity
            Not Before: Apr 15 01:02:57 2024 GMT
            Not After : Apr 16 01:02:57 2024 GMT
        Subject: CN=197eed1f78bef4f976971abcad12d1b43ca87c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:eb:e0:b5:77:ae:2c:c8:78:9a:a9:4f:52:84:
                    54:2c:7c:1e:4d:55:44:2b:e2:6a:33:e0:a3:52:4b:
                    ae:2e:8d:82:07:cd:30:62:5d:1c:5c:c4:39:4d:18:
                    17:63:b1:b1:ca:e1:78:07:70:2b:3a:e5:61:bd:ac:
                    a1:22:66:89:2d:bf:b6:b8:09:e0:a0:95:9d:4f:38:
                    ae:11:f8:84:bd:da:8f:39:12:80:33:eb:56:a9:63:
                    85:39:a1:21:ee:a1:8a:1f:93:92:a2:f4:59:28:29:
                    6f:25:67:8e:c0:cb:e6:29:20:14:77:8b:c6:02:12:
                    b7:71:e9:91:47:11:65:65:b4:45:47:d4:4e:a4:37:
                    99:8b:b4:cd:68:09:d0:84:78:f1:50:c2:d7:79:58:
                    67:ba:af:6a:bb:69:4f:44:77:3d:fa:1c:56:66:55:
                    7d:4b:25:b6:c9:5e:f3:c1:db:b4:19:a3:72:93:69:
                    de:78:1f:5d:d1:b7:19:94:67:89:8e:12:79:3f:d8:
                    4b:7f:76:42:1c:e5:83:c9:20:89:ae:39:ba:1e:29:
                    9c:6b:f6:97:c3:10:82:3a:b5:71:04:4f:91:87:f7:
                    ca:d4:60:79:3a:af:89:a4:0b:d8:12:09:6f:2f:7e:
                    03:01:66:d3:2a:33:96:62:46:10:cb:a1:84:65:4c:
                    fe:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7E:ED:1F:78:BE:F4:F9:76:97:1A:BC:AD:12:D1:B4:3C:A8:7C:4B
            X509v3 Authority Key Identifier:
                keyid:DE:82:52:55:36:7B:38:D1:4E:52:EE:6F:3A:8A:16:5F:84:98:DC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/57e4e3-a625-4607-82c3-0fb11a5723e6/1/3oJSVTZ7ONFOUu5vOooWX4SY3Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6f:61:ee:b6:b7:9a:f1:a2:88:c6:5f:cc:fd:e3:75:68:bb:
         b6:cc:f4:00:db:a3:47:2c:8d:39:b4:47:90:ba:3c:8b:41:41:
         12:82:4a:c9:6f:e2:d4:c6:c9:75:3e:36:73:5f:59:86:af:e9:
         8a:b9:5e:67:b8:88:be:e1:9d:f5:95:d0:85:64:77:b5:7f:19:
         0d:1a:0c:b0:09:18:0f:84:ae:7d:ef:27:11:65:c4:c7:cd:aa:
         72:90:22:a5:fc:5c:ec:b0:db:4d:f4:9c:f1:f3:ff:0e:04:dd:
         67:d4:0f:5e:4a:49:2e:5e:48:dc:9e:3c:c5:83:6d:04:01:58:
         af:03:a4:3b:68:8c:87:e4:4a:7c:c3:9f:50:dd:6f:38:fb:32:
         54:12:81:a0:d2:28:2e:48:0e:58:cc:8e:92:99:df:75:d5:fc:
         32:25:aa:8c:5e:e6:64:24:87:17:38:5e:e1:a0:30:d5:02:bd:
         a2:ab:19:46:2d:ce:9a:4f:ce:45:8f:ce:b3:ab:a3:cf:a7:64:
         79:b7:fd:04:69:98:fe:27:dc:42:c3:d8:1e:77:e6:4e:29:61:
         8a:3a:eb:cd:33:98:79:ef:c7:ac:f7:ec:7a:85:a1:9e:c7:da:
         0d:23:ad:09:09:e5:4a:d3:6a:0b:90:df:8d:03:d6:40:5a:b5:
         47:f5:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 13:25:28 2024 by rpki-client on console-fra.rpki-client.org