Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
File:                     IgOiQWJTsPPH-8Knz9AvgkleLC0.mft (raw, json)
Hash identifier:          4jwRvPLwtUeF3SUsDjmwNVORUkm3DiVb4SoGhBcQu/w=
Subject key identifier:   38:E5:21:04:9D:34:9C:3D:3D:2B:86:80:44:22:44:51:5D:0B:32:C7
Authority key identifier: 22:03:A2:41:62:53:B0:F3:C7:FB:C2:A7:CF:D0:2F:82:49:5E:2C:2D
Certificate issuer:       /CN=2203a2416253b0f3c7fbc2a7cfd02f82495e2c2d
Certificate serial:       019134DDD40FF7B48C0DBDEC458EA34BB8CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IgOiQWJTsPPH-8Knz9AvgkleLC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft
Manifest number:          0EFE
Signing time:             Fri 09 Aug 2024 02:00:38 +0000
Manifest this update:     Fri 09 Aug 2024 02:00:38 +0000
Manifest next update:     Sat 10 Aug 2024 02:00:38 +0000
Files and hashes:         1: IgOiQWJTsPPH-8Knz9AvgkleLC0.crl (hash: bFoAQDhdhQ77wlD6Yg8VsRs5KRAuJrlA03qF4jP63Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:34:dd:d4:0f:f7:b4:8c:0d:bd:ec:45:8e:a3:4b:b8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2203a2416253b0f3c7fbc2a7cfd02f82495e2c2d
        Validity
            Not Before: Aug  9 02:00:38 2024 GMT
            Not After : Aug 10 02:00:38 2024 GMT
        Subject: CN=38e521049d349c3d3d2b8680442244515d0b32c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a8:e3:0d:7d:26:7a:bc:9f:35:f3:a5:59:c8:
                    27:83:80:c1:d8:46:21:de:40:eb:3c:2a:ff:d4:00:
                    8f:ff:c1:2f:83:2d:b9:95:7f:3c:5a:26:91:a8:94:
                    46:f1:08:a3:ca:2d:13:c4:90:bc:2c:d7:4e:a6:62:
                    39:3c:0d:57:c1:fe:b6:81:96:6b:76:b0:fc:6f:a2:
                    40:90:8f:79:38:65:be:15:38:37:3d:8f:f4:fe:36:
                    cd:ea:c5:ce:d2:7f:f9:ec:68:11:a8:81:99:19:ca:
                    b1:4c:bd:8a:6f:6a:49:4c:f0:fb:dc:0b:50:a5:60:
                    76:df:d0:bd:ec:22:c1:8a:27:60:0d:cb:28:2e:a5:
                    87:a0:c6:4c:10:22:83:ba:43:f2:8d:9e:70:ae:fb:
                    69:c0:93:7e:1d:7c:5c:08:62:85:1c:09:09:a7:d7:
                    fd:62:c7:9d:5c:57:01:70:37:c6:fd:a5:ab:8d:cf:
                    ea:2e:41:26:12:b8:ad:95:98:9a:93:28:6d:f3:34:
                    d0:17:ad:75:f4:da:9c:73:79:66:db:8c:8b:fd:30:
                    e6:d3:61:86:3c:6d:a1:bd:43:b4:49:fa:f1:4b:da:
                    f6:e5:de:ed:72:30:27:96:c9:98:d3:46:c9:e6:8c:
                    c1:22:5c:17:6c:1e:3f:0b:7b:ec:a9:98:91:ad:7c:
                    93:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E5:21:04:9D:34:9C:3D:3D:2B:86:80:44:22:44:51:5D:0B:32:C7
            X509v3 Authority Key Identifier:
                keyid:22:03:A2:41:62:53:B0:F3:C7:FB:C2:A7:CF:D0:2F:82:49:5E:2C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IgOiQWJTsPPH-8Knz9AvgkleLC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/9c8200-7f5a-40a7-8739-94503d22a771/1/IgOiQWJTsPPH-8Knz9AvgkleLC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1c:9f:51:23:c6:a8:6f:e0:48:91:9a:09:3d:d9:43:cd:08:
         30:12:e5:73:be:86:cc:d9:48:59:4e:e2:e7:bf:e0:42:87:b6:
         d8:48:63:bb:22:0c:18:6f:18:6f:2c:e3:d9:d6:9d:1c:f8:ea:
         a7:0e:34:66:86:56:10:8a:51:a6:54:45:9e:f6:3d:df:67:b3:
         69:b0:25:b4:45:d4:47:4b:4c:19:6e:e9:03:e1:da:a4:bb:f3:
         b3:52:6b:52:d8:bc:65:ae:9e:ce:b8:56:1a:27:f9:b5:41:11:
         9d:9b:f0:dd:db:2b:bd:8d:bb:33:c4:4b:39:6a:01:42:1f:c4:
         cb:ce:0b:47:bf:bc:00:37:1c:0b:de:ca:a2:f5:69:7f:6c:c4:
         e3:26:e9:1d:33:80:42:51:87:bc:97:3d:07:91:8c:e9:c4:1f:
         a9:df:30:73:56:c0:9b:63:f3:e7:a7:d7:b0:5b:f1:eb:d4:c4:
         72:18:f2:fc:67:a1:49:df:86:c4:77:69:66:11:57:4c:d4:6b:
         31:0e:e5:06:96:b7:b3:1d:c9:e2:88:81:27:04:da:a7:9f:49:
         c2:3a:56:59:f6:c9:b8:a8:5f:40:69:d2:87:3e:fb:b7:f2:0b:
         d0:22:2d:f8:32:3f:a5:27:69:c9:9a:0e:4c:e4:8f:56:96:9d:
         56:a0:b8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 13:17:21 2024 by rpki-client on console-ams.rpki-client.org