Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/nmEMIctE1jhbf0RcZVgK3X_s-OA.mft
File:                     nmEMIctE1jhbf0RcZVgK3X_s-OA.mft (raw, json)
Hash identifier:          Ytqy5NfKiHCE/xYOGn1CF5WBsZjc1gQMCFyq6K0Y6+o=
Subject key identifier:   A1:53:0D:89:61:E5:91:0A:13:C6:A2:0F:47:3F:46:46:D7:44:7C:4A
Authority key identifier: 9E:61:0C:21:CB:44:D6:38:5B:7F:44:5C:65:58:0A:DD:7F:EC:F8:E0
Certificate issuer:       /CN=9e610c21cb44d6385b7f445c65580add7fecf8e0
Certificate serial:       018D63781694062EE4216831C67DA5117711
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nmEMIctE1jhbf0RcZVgK3X_s-OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/nmEMIctE1jhbf0RcZVgK3X_s-OA.mft
Manifest number:          084E
Signing time:             Thu 01 Feb 2024 07:00:30 +0000
Manifest this update:     Thu 01 Feb 2024 07:00:30 +0000
Manifest next update:     Fri 02 Feb 2024 07:00:30 +0000
Files and hashes:         1: nmEMIctE1jhbf0RcZVgK3X_s-OA.crl (hash: Cu3mwrKjxvTkmPiDln/a1swfBVxtj7qLHVRzuFZmMxI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:63:78:16:94:06:2e:e4:21:68:31:c6:7d:a5:11:77:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e610c21cb44d6385b7f445c65580add7fecf8e0
        Validity
            Not Before: Feb  1 07:00:30 2024 GMT
            Not After : Feb  2 07:00:30 2024 GMT
        Subject: CN=a1530d8961e5910a13c6a20f473f4646d7447c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:4b:0f:72:75:e5:d3:61:2f:83:65:2e:31:
                    c1:c7:87:9b:76:62:ce:e4:9c:d9:66:9f:7d:88:d9:
                    81:a6:f8:09:c3:14:ba:d7:44:8d:98:57:33:41:82:
                    62:04:ec:7f:54:4a:75:0e:b6:be:67:30:af:0e:17:
                    1b:38:f7:b8:82:91:c2:aa:e5:2f:5a:e8:c3:6f:1b:
                    f7:1f:25:de:78:71:17:16:7d:1e:28:94:bc:4c:ce:
                    44:0a:be:34:dd:64:42:e3:7b:90:93:f9:f8:06:24:
                    1e:25:dd:a1:bf:11:fd:df:9a:8e:13:cc:c4:58:94:
                    aa:fd:91:50:c0:ba:b4:79:e2:8e:72:81:07:5a:a4:
                    af:a7:5f:94:e2:d8:af:90:2c:2a:b5:83:50:78:a1:
                    9d:e4:aa:8f:32:d4:a9:09:0a:76:5b:eb:9f:f0:5f:
                    7b:af:3b:d1:a4:d6:d7:0e:44:00:a9:c0:45:4c:3f:
                    23:2d:87:d5:26:db:d6:5b:58:28:98:3d:22:d2:34:
                    f9:fc:03:6b:9f:87:8f:c0:cf:bb:43:eb:08:22:8b:
                    fb:3d:8f:98:cb:97:8a:38:a7:bb:d5:3a:a6:6d:3c:
                    fa:9a:a3:49:52:5c:07:b3:35:ed:f5:04:b8:71:4a:
                    b5:ac:ea:1e:56:88:e9:27:16:02:e0:be:8f:80:23:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:53:0D:89:61:E5:91:0A:13:C6:A2:0F:47:3F:46:46:D7:44:7C:4A
            X509v3 Authority Key Identifier:
                keyid:9E:61:0C:21:CB:44:D6:38:5B:7F:44:5C:65:58:0A:DD:7F:EC:F8:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nmEMIctE1jhbf0RcZVgK3X_s-OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/nmEMIctE1jhbf0RcZVgK3X_s-OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e8e0cb-2798-4062-88de-7d5de8936211/1/nmEMIctE1jhbf0RcZVgK3X_s-OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:04:29:38:56:fb:2d:78:02:f4:c0:89:bd:7a:3d:b5:7d:86:
         24:6b:97:23:50:5c:1e:7f:ad:fd:c0:63:78:7e:26:7e:fe:00:
         15:9d:84:fc:1d:6a:85:fe:2c:fd:b3:e0:59:0d:07:3f:60:29:
         14:ba:73:42:3e:db:48:4a:1d:bd:27:fb:58:98:3f:0c:03:19:
         d4:13:9c:21:65:16:62:66:e9:76:73:b9:5f:57:81:8d:e0:3a:
         e3:e8:2b:5d:d4:a8:39:a9:9d:be:d8:0c:f6:f4:85:f6:43:57:
         d4:e0:8f:94:ec:3f:2b:69:12:b9:4d:2a:d4:10:a8:fb:75:16:
         5b:49:8c:17:89:7c:f2:2f:9d:82:76:d2:d5:9c:70:20:76:8a:
         8d:f9:e1:f2:dc:57:b6:22:d1:eb:36:7e:39:2b:c5:48:9d:15:
         45:50:b3:89:9f:21:d7:8b:1a:50:34:1b:91:a8:9e:a3:eb:77:
         ff:94:e6:69:a1:d8:48:fa:60:46:3a:65:a0:2f:88:3f:3b:d8:
         97:86:80:08:b2:4d:52:09:3a:a7:ab:7c:d2:87:30:1e:70:fc:
         21:c4:08:b4:10:36:e0:6d:ae:dc:f9:23:6f:12:82:b9:87:a4:
         01:f4:bd:b9:b5:6a:40:c5:5c:44:3e:f7:74:d9:06:89:49:10:
         94:e0:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org