Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.mft
File:                     9FSFHSYn3IHIlMVPRuIzok-tFgA.mft (raw, json)
Hash identifier:          p1hp38gDVyCPPL9dquYWUlgF6N6xYk2IpfQF3FgsU5c=
Subject key identifier:   37:D4:E4:3B:F9:3F:16:46:EB:FB:D9:14:D2:37:AF:E7:DA:DA:5E:23
Authority key identifier: F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00
Certificate issuer:       /CN=f454851d2627dc81c894c54f46e233a24fad1600
Certificate serial:       018DF29852D657957D0A93DFDD09C5C153C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.mft
Manifest number:          082D
Signing time:             Thu 29 Feb 2024 02:01:25 +0000
Manifest this update:     Thu 29 Feb 2024 02:01:25 +0000
Manifest next update:     Fri 01 Mar 2024 02:01:25 +0000
Files and hashes:         1: 9FSFHSYn3IHIlMVPRuIzok-tFgA.crl (hash: rOcon6rCHV/g6G331VuJoTZGixAkIZ5VRz6JPpA/4m4=)
                          2: vpwbRis3wZO8Ic6fLLVEUn0dY-E.roa (hash: COateVG9Fpod6McGQ5D3yH000V5iASafhN/jxVy4H88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:f2:98:52:d6:57:95:7d:0a:93:df:dd:09:c5:c1:53:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f454851d2627dc81c894c54f46e233a24fad1600
        Validity
            Not Before: Feb 29 02:01:25 2024 GMT
            Not After : Mar  1 02:01:25 2024 GMT
        Subject: CN=37d4e43bf93f1646ebfbd914d237afe7dada5e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:16:59:ce:a1:3e:7f:73:1a:76:dd:1d:02:03:
                    9e:ec:a3:53:2a:53:9e:d2:d4:63:d2:38:41:fc:a7:
                    b4:d4:07:d4:ef:72:84:ad:c1:8f:f7:9e:af:e9:d8:
                    2a:cf:7a:88:41:7d:9c:3a:48:2f:b8:83:a0:6c:c2:
                    14:80:35:1a:51:15:8b:42:36:6b:18:17:0d:e1:4a:
                    6e:1b:d6:9d:de:e2:79:aa:4a:91:a4:65:3d:8a:62:
                    ea:63:db:94:a9:f6:cb:a2:0e:a8:f1:b5:0b:94:a1:
                    92:db:12:0f:7c:29:f4:13:d7:22:bf:95:e9:85:c3:
                    c0:74:46:48:93:aa:fe:c8:15:c5:d5:ee:1f:c9:82:
                    70:62:e4:d5:41:09:b0:33:e8:3c:ec:f7:a8:e2:37:
                    fa:c5:0c:01:d8:0c:45:30:38:e3:ca:62:a3:9e:1b:
                    9e:2c:cc:9a:1f:81:11:c4:96:0d:44:65:b5:b0:b3:
                    c2:be:c0:0e:3b:bb:15:a4:63:af:42:2d:7a:9f:63:
                    ca:e3:72:2a:62:ba:10:c4:97:e3:1c:6c:8c:35:4f:
                    1c:3f:21:c6:f0:14:02:7f:39:90:22:ab:12:bc:2d:
                    be:1a:55:b6:5e:38:de:c2:9d:0f:be:ce:f5:86:34:
                    69:77:ad:9b:b0:a8:01:be:aa:d0:2f:5c:f2:78:db:
                    b3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D4:E4:3B:F9:3F:16:46:EB:FB:D9:14:D2:37:AF:E7:DA:DA:5E:23
            X509v3 Authority Key Identifier:
                keyid:F4:54:85:1D:26:27:DC:81:C8:94:C5:4F:46:E2:33:A2:4F:AD:16:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FSFHSYn3IHIlMVPRuIzok-tFgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/956783-9eb7-4113-bf62-d0d061ff0bab/1/9FSFHSYn3IHIlMVPRuIzok-tFgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:32:50:e4:f2:87:1c:f5:3c:de:ee:a2:da:0f:f8:0e:59:be:
         98:82:20:5e:32:d3:a7:7d:69:66:a1:f3:fa:c4:3b:32:25:f8:
         8a:ce:2a:cd:3e:bc:8c:ea:f6:be:a7:9a:cd:82:d7:3b:ad:83:
         37:1c:9d:38:15:9e:74:90:2d:2e:74:64:02:27:a0:1a:a9:44:
         a5:41:d0:25:55:f7:05:9d:66:74:8e:24:c7:cf:e5:1f:80:0c:
         b9:5e:b0:b7:43:27:af:7e:d7:c9:b4:d2:24:c5:fb:61:c3:1e:
         bc:92:55:88:e1:1a:98:67:04:9b:b8:b3:b1:aa:82:22:b8:89:
         04:a5:41:63:0a:41:49:b7:a9:74:b6:2c:44:00:d8:de:bd:6f:
         20:4d:5a:da:65:1a:16:7b:b5:98:0e:52:89:e0:99:5c:66:a2:
         d8:44:34:b1:05:ff:45:ff:90:c0:8c:04:88:be:67:17:8d:65:
         a5:8a:30:8f:c9:91:78:61:43:76:a9:08:4d:5e:67:0e:51:98:
         ae:93:a7:1f:79:20:42:5d:9d:0a:a8:2c:8d:e0:b5:0b:a0:7f:
         67:43:db:1b:f7:ec:98:f5:32:ef:08:49:eb:1f:3c:7c:0a:de:
         c6:e6:a2:d7:89:c7:9c:ab:8b:84:b7:e3:90:0d:77:1d:17:32:
         7a:c2:59:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:22 2024 by rpki-client on console-ams.rpki-client.org