Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9dd14a-8d12-47be-a9f8-adc9bfcb77d5/1/fcS5yWawIqcklQQGVTL3xUJgoNw.mft
File:                     fcS5yWawIqcklQQGVTL3xUJgoNw.mft (raw, json)
Hash identifier:          f1UyWeBWLUhL7D6sEuiMke8Hg7i763u6nwJVT6rCP5A=
Subject key identifier:   13:C0:C7:EE:49:48:84:1E:E9:A7:7B:13:CD:6A:24:B5:35:B1:A5:80
Authority key identifier: 7D:C4:B9:C9:66:B0:22:A7:24:95:04:06:55:32:F7:C5:42:60:A0:DC
Certificate issuer:       /CN=7dc4b9c966b022a7249504065532f7c54260a0dc
Certificate serial:       018A506743A1DCAB8886340FF9AF4EEB2E09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcS5yWawIqcklQQGVTL3xUJgoNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/9dd14a-8d12-47be-a9f8-adc9bfcb77d5/1/fcS5yWawIqcklQQGVTL3xUJgoNw.mft
Manifest number:          04AA
Signing time:             Fri 01 Sep 2023 11:00:59 +0000
Manifest this update:     Fri 01 Sep 2023 11:00:59 +0000
Manifest next update:     Sat 02 Sep 2023 11:00:59 +0000
Files and hashes:         1: fcS5yWawIqcklQQGVTL3xUJgoNw.crl (hash: tcP5mhogP1DZmPD1KdemU4MhqH6neEjii+wq+9VpWfA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:50:67:43:a1:dc:ab:88:86:34:0f:f9:af:4e:eb:2e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4b9c966b022a7249504065532f7c54260a0dc
        Validity
            Not Before: Sep  1 11:00:59 2023 GMT
            Not After : Sep  2 11:00:59 2023 GMT
        Subject: CN=13c0c7ee4948841ee9a77b13cd6a24b535b1a580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:46:33:eb:5d:ea:c2:53:7a:83:d2:45:c8:30:
                    70:83:c1:4a:18:5e:1d:e3:ab:00:54:1a:64:4e:0e:
                    a1:95:cf:ac:87:04:8a:8f:07:3e:75:97:85:36:46:
                    3e:9a:0c:3d:59:83:f5:09:1e:a7:aa:b2:33:26:2d:
                    78:eb:61:29:d0:59:66:46:e9:70:b9:b8:73:4c:ad:
                    78:ce:e7:1e:19:a5:c8:07:60:71:48:14:b6:3d:ba:
                    08:57:a0:d1:d0:97:42:fb:f7:b0:8d:8e:8c:e9:fe:
                    69:18:c8:f1:58:8c:dc:4f:24:1e:82:ae:ac:be:fa:
                    63:9f:52:89:f7:7d:d8:8d:05:93:c3:3b:43:bd:7d:
                    61:70:8d:64:ac:bd:5f:22:d1:5b:2f:c6:28:e1:02:
                    67:9f:69:ba:ce:2d:ab:38:5a:29:96:a3:e0:76:e0:
                    8b:47:e7:fe:a9:b9:ad:42:2b:58:ba:7d:f6:16:dd:
                    c5:cc:2e:9d:ea:44:1b:9d:4a:24:f4:3d:b0:bf:17:
                    5f:ca:44:07:01:44:bb:cd:52:b4:c6:89:70:f4:4d:
                    43:b5:aa:dc:a6:e8:5d:e4:e2:ca:80:c4:75:66:3a:
                    3b:7e:81:f8:05:ff:9b:10:55:6d:d9:15:a3:5c:41:
                    59:fe:f8:83:6c:25:b8:cc:04:32:81:a2:a1:fd:bb:
                    f7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C0:C7:EE:49:48:84:1E:E9:A7:7B:13:CD:6A:24:B5:35:B1:A5:80
            X509v3 Authority Key Identifier:
                keyid:7D:C4:B9:C9:66:B0:22:A7:24:95:04:06:55:32:F7:C5:42:60:A0:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcS5yWawIqcklQQGVTL3xUJgoNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9dd14a-8d12-47be-a9f8-adc9bfcb77d5/1/fcS5yWawIqcklQQGVTL3xUJgoNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9dd14a-8d12-47be-a9f8-adc9bfcb77d5/1/fcS5yWawIqcklQQGVTL3xUJgoNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d0:db:83:7a:6c:b5:21:78:c1:e6:21:a0:67:96:79:a8:c3:
         74:e1:b3:31:72:66:99:bc:16:0a:c1:c9:50:f6:91:39:12:f0:
         90:bb:27:56:c8:74:ac:c7:72:f5:8f:58:58:1d:b1:0b:70:d1:
         5f:79:5d:25:d9:3f:f2:20:57:10:00:92:1b:4e:b4:ca:d3:24:
         c0:b1:07:47:ac:ca:bf:c2:d5:aa:72:56:0e:1f:e6:5d:a3:6a:
         ca:f3:e7:5b:de:55:d9:f4:44:10:c2:7e:e8:d5:04:be:e6:72:
         88:cd:9e:bc:3f:30:29:42:42:4e:54:cc:fc:de:c6:34:16:7d:
         95:69:38:d0:17:b0:32:4c:48:79:3d:36:ae:82:22:d1:d4:44:
         4d:85:da:1b:b3:b7:ed:8a:fc:3e:ad:46:15:42:19:63:0a:e5:
         ee:fc:10:91:19:ba:6e:f4:2f:f4:b3:0d:06:c2:ad:07:06:0f:
         c9:b2:8a:d7:5c:98:4d:71:26:f0:b1:1e:7a:a7:62:33:9c:7f:
         4c:3e:83:47:25:ed:c6:e7:3e:8f:3e:68:80:b3:32:cf:5e:2d:
         b5:10:c3:5f:63:c0:83:57:de:c9:09:45:40:e0:98:9b:c6:e7:
         2f:eb:28:f7:ce:07:eb:41:52:f0:78:62:df:af:77:5a:27:e4:
         27:f9:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:52 2024 by rpki-client on console-fra.rpki-client.org