Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.mft
File:                     4N9GqDgKhBImdN1gz3fsCSIEi70.mft (raw, json)
Hash identifier:          GdMK+QLh1pblLAzndmA2ibfLu0u/Zl7iGJz7rn3B554=
Subject key identifier:   CB:43:9E:1F:62:00:9D:56:2F:44:B6:D3:8A:D9:0A:B0:73:57:45:F1
Authority key identifier: E0:DF:46:A8:38:0A:84:12:26:74:DD:60:CF:77:EC:09:22:04:8B:BD
Certificate issuer:       /CN=e0df46a8380a84122674dd60cf77ec0922048bbd
Certificate serial:       01930949ACD5C6A82DE6829D909CCE5B8ED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N9GqDgKhBImdN1gz3fsCSIEi70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.mft
Manifest number:          0220
Signing time:             Fri 08 Nov 2024 01:00:43 +0000
Manifest this update:     Fri 08 Nov 2024 01:00:43 +0000
Manifest next update:     Sat 09 Nov 2024 01:00:43 +0000
Files and hashes:         1: 4N9GqDgKhBImdN1gz3fsCSIEi70.crl (hash: +7xFODhnGcw3AChfSkTVDK50lysvPI7yjyrgXjCxThU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:09:49:ac:d5:c6:a8:2d:e6:82:9d:90:9c:ce:5b:8e:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0df46a8380a84122674dd60cf77ec0922048bbd
        Validity
            Not Before: Nov  8 01:00:43 2024 GMT
            Not After : Nov  9 01:00:43 2024 GMT
        Subject: CN=cb439e1f62009d562f44b6d38ad90ab0735745f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:5a:95:7b:9e:47:30:d9:26:be:d6:e2:47:
                    93:d0:a7:bd:e5:ff:30:87:0f:73:5a:de:66:6d:55:
                    01:62:39:4a:70:07:5b:d1:2a:67:6b:20:6b:12:a7:
                    22:2d:31:61:9b:0b:10:25:19:43:6a:73:a5:c4:87:
                    16:63:99:4e:f5:4e:f2:ee:e6:f0:30:ac:2e:5d:91:
                    9a:1e:db:a4:65:a8:c1:b9:c6:98:09:f2:4f:e4:2a:
                    3c:72:36:1f:62:f9:35:ea:bd:7c:2d:80:b1:e3:b4:
                    eb:2a:61:69:bf:a1:0a:b6:31:93:ea:49:12:31:5b:
                    63:82:c3:38:88:e1:a5:bd:2f:e8:b5:ac:97:88:b7:
                    5e:78:65:01:c8:15:92:cb:39:2c:59:98:34:8f:18:
                    a4:1b:00:55:bc:9a:7c:87:ca:34:d9:81:4b:52:02:
                    d1:bd:6a:0c:c7:a5:41:09:88:73:3c:b3:f7:b5:6a:
                    43:df:14:ca:cf:c0:41:dd:04:37:38:4e:7c:bb:9d:
                    f8:71:a6:e1:33:58:34:4f:1a:1b:9a:c9:0b:17:4a:
                    ad:7b:96:a7:bc:2f:ec:26:4a:97:a5:f9:f9:3b:7f:
                    d1:f3:73:94:f5:4e:dd:e5:20:ea:44:89:88:73:0a:
                    35:95:60:68:89:95:50:5b:62:a6:59:75:fd:ed:b1:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:43:9E:1F:62:00:9D:56:2F:44:B6:D3:8A:D9:0A:B0:73:57:45:F1
            X509v3 Authority Key Identifier:
                keyid:E0:DF:46:A8:38:0A:84:12:26:74:DD:60:CF:77:EC:09:22:04:8B:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N9GqDgKhBImdN1gz3fsCSIEi70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/20b85b-d09b-4ff5-988b-b5df5b84d75d/1/4N9GqDgKhBImdN1gz3fsCSIEi70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:8b:b8:9e:c5:9a:5a:34:90:1d:b4:5a:67:7b:b3:51:57:66:
         f7:79:a8:88:d0:de:50:66:c9:b4:c8:63:a5:fe:68:5f:5f:ca:
         e5:8a:31:a8:71:d0:7a:d2:bd:b2:23:e5:9b:58:10:18:d4:83:
         f5:80:3f:6e:eb:dc:6d:ef:3f:43:7a:6b:b2:05:cc:90:a0:82:
         37:b4:08:b3:20:44:21:1c:7b:35:aa:c3:51:e3:00:7a:2b:27:
         69:1c:78:97:73:62:3a:f4:91:a1:13:81:2d:5c:bd:e4:0f:4f:
         d5:5d:96:e2:2f:54:f3:31:c6:1e:41:11:3b:5b:78:65:8f:80:
         9d:74:32:d1:74:85:ae:86:99:9c:51:a7:07:9c:f9:a0:1d:35:
         45:c1:3e:30:0e:33:90:e2:58:25:ce:e5:7f:21:e2:2f:9b:ec:
         d0:46:f8:ac:f4:71:0d:fb:ae:3e:85:bd:f9:97:17:23:0b:24:
         58:03:71:37:2a:33:80:d0:ec:c8:e6:9e:61:aa:e5:bb:b0:31:
         d8:33:5b:b3:51:e7:7a:83:40:15:66:51:3b:6e:21:bf:65:c5:
         f2:bb:15:92:c3:8e:59:62:df:b0:7e:12:2f:75:b8:04:7c:72:
         82:8e:25:15:48:53:da:0f:e9:2c:ad:27:be:0d:ec:11:2f:02:
         f0:ca:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 10:04:19 2024 by rpki-client on console-fra.rpki-client.org