Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft
File:                     ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft (raw, json)
Hash identifier:          F4SFdqFDIIWRaatxeKkpDyxfEQ779R6iETpplJXFCDc=
Subject key identifier:   02:DC:7E:55:EE:E1:C3:02:BA:18:7D:B7:FF:F3:1D:4C:EA:4C:85:C7
Authority key identifier: 65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB
Certificate issuer:       /CN=651a242bb12c6770add6a8bd691702ca628955ab
Certificate serial:       018CC8557A6B619D40BFA3B1F985F494F782
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft
Manifest number:          043A
Signing time:             Tue 02 Jan 2024 04:01:34 +0000
Manifest this update:     Tue 02 Jan 2024 04:01:34 +0000
Manifest next update:     Wed 03 Jan 2024 04:01:34 +0000
Files and hashes:         1: ZRokK7EsZ3Ct1qi9aRcCymKJVas.crl (hash: uCjoVGfHA6GWvGVIWYbWix495wugqtn/S9cDqIK2YgU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:55:7a:6b:61:9d:40:bf:a3:b1:f9:85:f4:94:f7:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651a242bb12c6770add6a8bd691702ca628955ab
        Validity
            Not Before: Jan  2 04:01:34 2024 GMT
            Not After : Jan  3 04:01:34 2024 GMT
        Subject: CN=02dc7e55eee1c302ba187db7fff31d4cea4c85c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:b8:0d:8a:f0:03:0e:0b:bb:b6:f2:5d:6d:
                    5e:05:07:53:34:2d:34:23:57:79:36:8a:6f:d6:21:
                    34:3a:59:79:af:16:5a:9f:ab:62:7a:27:68:10:ed:
                    2b:3b:a5:a9:77:8c:85:98:e4:97:a2:64:52:6f:22:
                    8f:2b:c6:74:7c:ee:1f:10:2c:57:29:80:9c:35:68:
                    54:fe:82:b6:01:1c:62:05:2b:aa:e0:c1:c1:27:0e:
                    38:76:f6:26:bc:2d:ea:7b:bd:bc:8a:99:76:94:0c:
                    e0:9a:9b:56:a5:5f:7f:0b:69:5a:91:cb:fb:c4:b2:
                    df:0c:80:0d:9d:2a:f1:b8:5d:8f:00:87:ae:71:04:
                    ea:4a:1c:3b:4b:22:f1:a5:56:5c:92:94:57:e6:f8:
                    83:0c:4f:8a:58:a3:06:92:25:f4:00:ac:47:3f:7d:
                    e0:48:fb:3e:4f:47:2e:b3:0d:c8:95:5f:43:8d:ca:
                    ad:d5:d7:32:0b:39:50:e6:69:75:2a:46:a6:43:d5:
                    e1:25:2e:dd:33:6c:74:83:af:83:95:78:e2:c7:08:
                    a5:45:48:20:48:52:9a:9e:03:ff:87:a5:52:eb:74:
                    e4:2a:35:90:43:64:df:8a:85:10:de:67:0d:f5:e5:
                    ad:a8:4c:c3:5c:b3:2e:39:be:eb:53:f2:38:ff:11:
                    e9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DC:7E:55:EE:E1:C3:02:BA:18:7D:B7:FF:F3:1D:4C:EA:4C:85:C7
            X509v3 Authority Key Identifier:
                keyid:65:1A:24:2B:B1:2C:67:70:AD:D6:A8:BD:69:17:02:CA:62:89:55:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRokK7EsZ3Ct1qi9aRcCymKJVas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ec17ff-3368-4830-a55c-63ed8ace7bbd/1/ZRokK7EsZ3Ct1qi9aRcCymKJVas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:10:3b:10:af:20:75:b1:2e:4a:7f:fc:8e:81:24:e6:d1:0b:
         ed:48:1d:de:29:39:21:56:2d:52:cd:97:6a:e9:14:1f:a5:6a:
         b0:38:2b:e5:f5:8a:ab:f6:74:07:07:59:e8:bc:c8:63:e2:bb:
         00:35:31:31:6f:7e:56:aa:6a:a4:f3:00:0a:45:2b:8c:ad:1f:
         1c:ac:8d:38:58:88:9e:fe:07:aa:32:1d:85:79:67:da:31:44:
         69:38:fe:9c:df:12:87:84:83:bc:4d:9c:dd:21:6d:ab:97:c7:
         b8:f3:5a:36:66:93:d6:d8:45:18:ed:33:fa:6f:24:3e:22:fd:
         02:0f:50:56:15:7a:43:a5:eb:d9:ce:2f:49:29:92:48:36:3a:
         26:92:17:cb:3a:37:a2:25:1d:84:c2:1c:35:52:fe:68:95:de:
         fb:3a:b8:9a:f5:7a:ec:8e:be:d1:fb:35:1b:85:a1:64:60:f0:
         04:db:a5:c8:18:c6:7a:c6:18:86:19:e3:96:18:8e:01:01:d6:
         15:87:98:46:8a:75:74:35:b4:32:be:70:1f:05:1f:29:8a:f9:
         14:4a:70:2a:c5:e3:46:1d:fb:e2:54:04:b8:07:b2:34:73:f5:
         9b:d5:d0:f4:43:29:c8:46:1d:c8:97:2b:da:26:0f:b7:6b:8c:
         84:0d:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:41 2024 by rpki-client on console-fra.rpki-client.org