Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.mft
File:                     f3eaRA8Zx9cnQBUSJUtcMM0HjjI.mft (raw, json)
Hash identifier:          porPQJ6tX4NRYhnO9wiVVca1q+sJd+PLZDoXFBedQSw=
Subject key identifier:   9F:35:23:C7:7B:EA:BE:6B:72:5C:80:53:A0:99:E6:5F:3B:3E:9E:05
Authority key identifier: 7F:77:9A:44:0F:19:C7:D7:27:40:15:12:25:4B:5C:30:CD:07:8E:32
Certificate issuer:       /CN=7f779a440f19c7d727401512254b5c30cd078e32
Certificate serial:       018AF0133639EE8F8C167B6646D718874769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.mft
Manifest number:          03FA
Signing time:             Mon 02 Oct 2023 11:08:25 +0000
Manifest this update:     Mon 02 Oct 2023 11:08:25 +0000
Manifest next update:     Tue 03 Oct 2023 11:08:25 +0000
Files and hashes:         1: f3eaRA8Zx9cnQBUSJUtcMM0HjjI.crl (hash: NAXHk8etczTGLslfwfuoISxqaGO7KfMWaCWnX5m4/Ig=)
                          2: nTFilz6Vxf3iSJagAcbbFy-JF7s.roa (hash: 7esHHlfaF0ZPKgVLtzKlTLVSbNivXcuA5u+730zFOy8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f0:13:36:39:ee:8f:8c:16:7b:66:46:d7:18:87:47:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f779a440f19c7d727401512254b5c30cd078e32
        Validity
            Not Before: Oct  2 11:08:25 2023 GMT
            Not After : Oct  3 11:08:25 2023 GMT
        Subject: CN=9f3523c77beabe6b725c8053a099e65f3b3e9e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:87:e0:3f:8d:0e:18:b2:c0:a0:1a:f7:84:
                    8f:68:18:cd:55:8c:52:30:d7:cf:71:4e:4e:7f:72:
                    65:8f:55:b6:80:cd:72:d1:71:61:8b:b8:ab:e3:70:
                    64:6c:a0:b4:9d:60:cf:91:c7:9e:dc:f6:5f:e0:47:
                    4d:2a:21:ea:04:a8:9e:0e:79:a4:4d:f7:c8:a3:72:
                    50:fe:5a:7a:8e:0d:48:5b:6e:05:1e:7d:a3:9e:71:
                    f3:08:4c:7c:42:5a:ba:43:ab:58:e2:fc:83:24:71:
                    f8:4a:f9:f1:8a:b5:23:ae:f4:f1:a8:2b:4f:be:9e:
                    39:ea:32:7e:9c:9a:0a:6d:35:28:42:0b:51:43:70:
                    89:e5:88:3c:64:38:96:70:75:2c:0e:3f:d1:12:f3:
                    3b:ab:57:7a:b6:04:26:2a:ca:41:cd:a1:8b:48:96:
                    00:f3:00:2f:8b:63:31:3e:da:b9:e4:1b:b2:17:6b:
                    03:48:73:0c:2f:3f:55:cc:fd:f1:9e:60:18:71:9c:
                    07:10:2a:eb:f4:66:6c:22:09:49:b8:9e:77:a1:50:
                    64:fe:b4:2a:07:a1:7a:06:16:0e:0d:98:9a:57:d6:
                    1b:65:a2:cb:4c:a0:c5:eb:ee:d7:3b:0a:fa:14:bc:
                    fb:b7:f6:33:c2:33:67:ee:13:53:77:79:ac:c0:68:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:35:23:C7:7B:EA:BE:6B:72:5C:80:53:A0:99:E6:5F:3B:3E:9E:05
            X509v3 Authority Key Identifier:
                keyid:7F:77:9A:44:0F:19:C7:D7:27:40:15:12:25:4B:5C:30:CD:07:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/9dcad5-2be4-4181-a7d7-66ac3c489dff/1/f3eaRA8Zx9cnQBUSJUtcMM0HjjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:50:34:04:84:7c:52:f8:f3:c9:e7:c6:87:42:b4:29:25:b1:
         f6:07:39:42:1b:4d:34:9c:c7:54:2e:03:d6:44:0e:54:b3:68:
         c8:af:36:12:9f:75:69:8f:a1:c5:23:dc:6c:a8:96:7d:81:35:
         b0:f2:8d:12:04:d3:3d:48:09:90:87:f4:2e:ae:da:52:80:8f:
         e9:c0:ed:c8:04:ad:5b:30:34:e4:2a:be:45:da:c3:d3:dc:12:
         3b:58:e2:61:72:a7:c8:06:9a:3e:98:82:15:e8:f6:68:23:9d:
         34:96:45:7f:30:cf:2d:b7:ac:4d:01:9a:cc:1d:6e:d0:93:89:
         84:7b:2a:4f:ec:23:bf:58:e7:f0:1e:b0:88:be:5f:5a:f1:4d:
         2b:47:fa:25:5c:7b:f2:ce:09:d6:e0:63:da:52:44:73:27:f7:
         7c:e8:ac:cf:90:b0:07:d6:5e:52:d2:cd:30:1f:b4:3d:75:86:
         a1:29:64:9b:dc:3e:0e:71:b5:fe:90:b0:63:f0:d2:6b:4e:08:
         5e:47:bb:35:13:92:18:80:60:32:6b:e8:f0:de:74:f2:99:56:
         3c:00:10:e4:97:95:c4:3a:ea:6d:b8:82:ad:f7:a5:6a:17:5d:
         ae:33:e9:b5:af:04:05:ff:09:1a:07:bc:ce:ac:bb:b3:98:7e:
         e8:87:56:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:55 2024 by rpki-client on console-ams.rpki-client.org