Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/0OcjfcTRclbCQs432nHgPHDdeXE.mft
File:                     0OcjfcTRclbCQs432nHgPHDdeXE.mft (raw, json)
Hash identifier:          IiJj2wgcx96Kpack7aeFkd34vH+7foDCpig/dwDso2g=
Subject key identifier:   39:D8:2B:49:43:36:F5:20:EC:D1:E8:29:00:08:62:D0:C3:77:20:07
Authority key identifier: D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71
Certificate issuer:       /CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
Certificate serial:       018BC7E9DE65C0C6E878749B2D40FA5C5B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/0OcjfcTRclbCQs432nHgPHDdeXE.mft
Manifest number:          032A
Signing time:             Mon 13 Nov 2023 09:01:14 +0000
Manifest this update:     Mon 13 Nov 2023 09:01:14 +0000
Manifest next update:     Tue 14 Nov 2023 09:01:14 +0000
Files and hashes:         1: 0OcjfcTRclbCQs432nHgPHDdeXE.crl (hash: MtUFhW0RCCSCqvphzuhhaGEGYkPRcl96adxHQK/NNBY=)
                          2: R2Pkki6ZeEDeDhyBXJpDvzrNXkk.roa (hash: bcD1hFwD0XSPTIXHOyeJvk7x9mBSejBW2joKFWlrhOY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c7:e9:de:65:c0:c6:e8:78:74:9b:2d:40:fa:5c:5b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e7237dc4d17256c242ce37da71e03c70dd7971
        Validity
            Not Before: Nov 13 09:01:14 2023 GMT
            Not After : Nov 14 09:01:14 2023 GMT
        Subject: CN=39d82b494336f520ecd1e829000862d0c3772007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e2:89:d4:a6:6b:09:13:b7:0c:50:36:74:76:
                    d8:76:67:f5:db:00:e8:19:fd:02:24:fc:5c:58:73:
                    eb:05:38:a6:40:c4:af:ae:2f:f4:56:14:0b:82:58:
                    56:6d:36:6a:a2:3a:3f:67:81:22:59:d4:dc:9a:f9:
                    4f:af:ac:e8:8a:a0:51:7f:41:f2:99:af:b6:45:5c:
                    b5:c5:57:b9:83:98:26:25:66:b4:46:af:89:2e:59:
                    33:dc:ff:03:a3:70:7c:8f:67:ed:e4:07:bb:88:d0:
                    29:9c:05:3b:68:83:ea:6a:53:49:89:df:dc:5e:55:
                    7e:c1:de:25:f5:10:93:a0:4d:a8:f8:39:16:17:79:
                    ca:2e:c8:ef:61:5b:de:31:af:57:63:a2:4d:46:d6:
                    18:7a:70:0b:a7:9b:37:7f:58:0a:36:2d:48:86:f4:
                    a0:e3:28:75:2e:d5:45:f5:71:df:22:12:4b:ba:0c:
                    dc:f1:8c:c3:7b:77:05:c8:78:d5:f4:01:f5:64:3a:
                    cf:c2:ac:2d:03:d2:83:c5:c5:ec:3e:b3:8a:67:14:
                    ed:8c:4b:d7:cf:2e:a9:17:4a:ec:41:85:ad:5f:f9:
                    bf:1e:97:dc:33:b5:72:33:8a:ea:f2:0f:0f:a1:98:
                    59:e5:b6:18:0a:b7:43:9a:56:cf:8a:7e:b0:70:fc:
                    aa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D8:2B:49:43:36:F5:20:EC:D1:E8:29:00:08:62:D0:C3:77:20:07
            X509v3 Authority Key Identifier:
                keyid:D0:E7:23:7D:C4:D1:72:56:C2:42:CE:37:DA:71:E0:3C:70:DD:79:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OcjfcTRclbCQs432nHgPHDdeXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/0OcjfcTRclbCQs432nHgPHDdeXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/3e50bb-513c-4bc8-9f22-cafbb60b3d56/1/0OcjfcTRclbCQs432nHgPHDdeXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:82:31:1c:d8:46:d9:45:a6:94:7f:ad:98:50:e6:f0:b5:9a:
         f5:be:37:38:a6:7e:74:87:27:2e:df:78:f6:cc:e4:27:01:38:
         ba:39:8d:1c:8e:16:9b:10:96:4d:4d:90:56:04:ef:2c:81:c5:
         54:f5:2f:50:c9:ff:de:02:99:72:08:66:e3:5c:93:5f:d0:4e:
         1a:93:15:ee:07:4a:f5:c3:b9:41:25:26:11:0e:e1:2d:14:0a:
         ba:30:30:1f:27:14:82:3d:b5:cd:7b:25:bf:05:ce:35:c9:b6:
         de:dd:b4:4c:9e:6e:a6:9c:03:57:9d:27:84:6b:00:4b:a6:fe:
         f1:0d:e3:ef:f3:74:f2:2a:0e:4f:d0:64:9d:27:a9:2e:ff:26:
         6c:44:66:55:46:c1:c4:b0:97:40:90:5a:9b:10:bc:e6:52:c2:
         0e:45:95:9c:4e:89:b8:77:c8:28:b7:58:50:8f:fc:ee:49:1c:
         ec:39:3c:0a:c0:66:09:85:63:62:96:2f:9c:7d:cd:6f:3e:ee:
         76:51:d4:ad:06:d3:62:fe:8f:9c:bb:76:4e:88:c5:99:f9:c3:
         5e:f5:ce:80:d9:d1:15:87:fd:0f:2c:86:c9:fc:bf:c0:57:49:
         a0:4d:f9:ce:39:e5:09:aa:53:78:56:7b:1f:cc:73:6b:1f:77:
         7c:cc:cf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:35 2024 by rpki-client on console-fra.rpki-client.org