Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.mft
File:                     FHztiKQGEkyMTfFmxXQFCeZBXSo.mft (raw, json)
Hash identifier:          GkL4mXKkEyMXhaa9Byf3AmJcz8DLNV5YyWof8BDHIPY=
Subject key identifier:   EB:6B:BB:87:AC:6D:2A:73:2C:9C:F1:B3:27:10:6A:5C:14:5B:45:F4
Authority key identifier: 14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A
Certificate issuer:       /CN=147ced88a406124c8c4df166c5740509e6415d2a
Certificate serial:       018BC70E32E7EA64435CA57FD5C6AC6B3D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.mft
Manifest number:          08F3
Signing time:             Mon 13 Nov 2023 05:01:18 +0000
Manifest this update:     Mon 13 Nov 2023 05:01:18 +0000
Manifest next update:     Tue 14 Nov 2023 05:01:18 +0000
Files and hashes:         1: FHztiKQGEkyMTfFmxXQFCeZBXSo.crl (hash: GEKLliunLNnYUeAHKVYtftqXPicb/S0hixztedijOWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c7:0e:32:e7:ea:64:43:5c:a5:7f:d5:c6:ac:6b:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147ced88a406124c8c4df166c5740509e6415d2a
        Validity
            Not Before: Nov 13 05:01:18 2023 GMT
            Not After : Nov 14 05:01:18 2023 GMT
        Subject: CN=eb6bbb87ac6d2a732c9cf1b327106a5c145b45f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:4e:76:e5:41:63:67:5c:9d:bd:ce:e4:fe:80:
                    44:08:5b:87:8d:37:cb:86:b6:e6:32:0a:0d:07:bc:
                    16:23:4b:e7:58:7b:01:46:a4:8c:90:42:38:49:48:
                    57:e5:9b:95:20:97:35:7d:8e:94:3a:ca:3f:cf:5c:
                    7c:ff:e8:a2:fd:7d:6a:ea:63:cc:d9:cb:4a:05:a3:
                    4f:3a:89:5e:53:00:21:06:49:eb:04:a4:55:b5:d5:
                    b8:0a:04:74:41:3d:85:a0:9a:89:2b:1e:1a:58:e6:
                    2b:6c:69:63:a2:83:21:40:b3:9c:57:b7:d2:52:2d:
                    40:89:06:90:ab:3e:6e:21:06:2c:6f:1a:1e:99:4a:
                    2a:f2:36:a1:da:df:bb:5f:ef:98:db:17:38:6f:3c:
                    ba:9a:ae:93:0f:d8:35:e8:ec:60:2a:b0:9c:38:0e:
                    12:ff:97:4c:61:3f:bf:83:ef:21:47:fa:4d:08:3b:
                    8a:ae:6e:8f:09:12:d5:dd:9f:06:1d:b3:7c:42:6e:
                    8d:2d:94:8d:7e:99:6d:2a:7b:d3:bd:a3:42:49:3b:
                    de:5f:d1:c4:dc:bb:52:c0:d0:3f:2b:97:89:8c:02:
                    84:1f:47:9b:ea:50:d1:b5:54:55:2d:cb:c8:7a:f5:
                    7f:31:64:90:59:f0:c2:df:b6:7f:c4:e8:1a:f7:5b:
                    ed:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6B:BB:87:AC:6D:2A:73:2C:9C:F1:B3:27:10:6A:5C:14:5B:45:F4
            X509v3 Authority Key Identifier:
                keyid:14:7C:ED:88:A4:06:12:4C:8C:4D:F1:66:C5:74:05:09:E6:41:5D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHztiKQGEkyMTfFmxXQFCeZBXSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a4d3f6-1e46-47d3-a5d0-ff89917d40d0/1/FHztiKQGEkyMTfFmxXQFCeZBXSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:90:52:f2:fb:24:46:2c:4d:17:59:4c:f5:18:be:f6:87:
         b2:9a:18:be:33:3c:62:ed:f4:b6:dd:64:1a:72:60:fa:c8:13:
         f2:24:da:2b:ba:92:4c:0c:04:64:29:57:d8:a1:b3:ed:b4:04:
         87:d5:a5:3f:5f:f3:a7:0a:e3:c1:1a:21:a3:1b:2b:91:a3:cf:
         ed:e0:25:70:ed:4a:69:db:0c:45:64:e6:29:7b:e0:f9:d1:09:
         3c:ee:8a:9f:54:ec:8d:31:51:10:5c:f2:8c:9e:c4:3f:87:96:
         95:57:49:87:db:17:fd:88:c3:39:5b:83:23:e4:fc:fc:5b:52:
         c6:7c:51:77:0d:b7:b5:ad:62:2f:df:12:8d:5e:1e:39:ec:b2:
         5c:93:30:34:f4:a7:9a:56:1a:ce:b7:f7:42:d1:96:b0:ec:99:
         4b:d1:4f:c8:a5:e3:ee:11:a7:97:ae:76:f6:51:56:1f:18:c9:
         2f:50:b0:3d:62:80:de:62:2e:62:53:15:f4:7a:a6:c0:52:d8:
         74:3b:93:28:22:87:60:d7:c8:2c:fc:91:9f:48:9d:b2:4c:d2:
         59:63:71:64:56:d8:fe:e1:e6:f0:2a:75:ba:f6:78:2e:82:53:
         33:04:9c:02:5e:a1:96:d9:9d:69:c9:ec:13:e0:7f:94:c5:de:
         56:74:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org