Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/MF1pmKR-PH4ZJcrwkwe6CpkWku0.mft
File:                     MF1pmKR-PH4ZJcrwkwe6CpkWku0.mft (raw, json)
Hash identifier:          RAXboOT0nOAbLHRkMerOJ+H+sfFVc3/DKQ5+1zdtqXM=
Subject key identifier:   0A:4D:48:2C:11:96:CE:FE:2F:C7:66:E9:91:4A:DE:A0:B6:DA:77:00
Authority key identifier: 30:5D:69:98:A4:7E:3C:7E:19:25:CA:F0:93:07:BA:0A:99:16:92:ED
Certificate issuer:       /CN=305d6998a47e3c7e1925caf09307ba0a991692ed
Certificate serial:       01888B5AC5CB45257FB502A90C979463E2C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MF1pmKR-PH4ZJcrwkwe6CpkWku0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/MF1pmKR-PH4ZJcrwkwe6CpkWku0.mft
Manifest number:          0DAB
Signing time:             Mon 05 Jun 2023 11:39:21 +0000
Manifest this update:     Mon 05 Jun 2023 11:39:21 +0000
Manifest next update:     Tue 06 Jun 2023 11:39:21 +0000
Files and hashes:         1: MF1pmKR-PH4ZJcrwkwe6CpkWku0.crl (hash: Qy6s8cPCodK5dNc3uxjWlUfT09XOPJ5cRuuUEbJ5w8U=)
                          2: e3rlLBKzH8TIAvwp-_uLet8A8l4.roa (hash: k1QugkLGEV1wXWhnoOhvXEJ+MrESfYNY9MRqnvLSm3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8b:5a:c5:cb:45:25:7f:b5:02:a9:0c:97:94:63:e2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305d6998a47e3c7e1925caf09307ba0a991692ed
        Validity
            Not Before: Jun  5 11:39:21 2023 GMT
            Not After : Jun  6 11:39:21 2023 GMT
        Subject: CN=0a4d482c1196cefe2fc766e9914adea0b6da7700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:0c:14:d7:cb:53:ce:5d:31:3b:a8:28:bc:
                    6e:35:7d:b7:06:b0:e4:41:82:0d:a8:fc:7e:03:ab:
                    5f:e0:bf:eb:85:22:f1:04:e5:9b:3f:65:fe:b0:6b:
                    98:99:3e:8f:8f:58:1d:76:f8:f0:82:0e:c9:c6:02:
                    74:c3:07:8b:85:4b:b1:7f:5b:c4:c3:d3:f5:8c:ed:
                    33:d2:ef:3d:e2:95:30:fa:40:e0:a8:80:72:5a:04:
                    f1:63:fb:2d:85:2e:94:99:76:71:6f:da:26:41:53:
                    17:d9:81:9c:36:a5:bf:08:55:ef:5b:f9:d2:71:3f:
                    7c:b6:41:2c:8c:15:bc:7d:3d:08:92:35:92:0b:92:
                    65:6c:0c:48:81:61:92:71:44:86:cc:bf:25:3c:ca:
                    b9:40:95:3b:97:cf:d4:7e:f6:57:97:8a:18:71:e5:
                    42:44:ec:5a:60:ed:4a:74:a1:e4:8e:58:02:34:06:
                    80:17:8e:c9:f3:52:3c:41:1e:31:1a:b6:56:7f:b2:
                    38:6b:18:bb:98:23:5e:0d:0f:a1:12:ea:ed:20:bd:
                    2c:b2:a2:54:e9:1f:ec:41:b9:d6:82:5b:24:e4:7a:
                    1b:cf:8b:af:d2:0f:77:de:85:5a:ce:60:99:af:bb:
                    8e:c4:03:72:80:52:cc:89:91:40:2e:e5:5f:0a:a8:
                    d4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4D:48:2C:11:96:CE:FE:2F:C7:66:E9:91:4A:DE:A0:B6:DA:77:00
            X509v3 Authority Key Identifier:
                keyid:30:5D:69:98:A4:7E:3C:7E:19:25:CA:F0:93:07:BA:0A:99:16:92:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF1pmKR-PH4ZJcrwkwe6CpkWku0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/MF1pmKR-PH4ZJcrwkwe6CpkWku0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/480f65-f662-459f-ac27-8090832194fd/1/MF1pmKR-PH4ZJcrwkwe6CpkWku0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:81:56:a2:d7:49:ad:d1:f2:d3:dc:84:c9:e3:7d:bf:b8:9b:
         f2:68:95:60:ed:34:72:6b:f2:d0:57:13:fb:24:02:f9:4d:85:
         7a:f6:14:2d:5f:1f:5d:7c:ce:c2:3a:78:67:14:f8:dc:3d:b3:
         6a:f9:a0:b0:32:b6:0b:6a:f6:fe:31:b5:e8:81:ab:92:af:22:
         21:55:76:76:46:76:7a:8f:54:a9:3f:c7:b1:80:e0:bd:66:41:
         74:c2:48:02:76:af:2f:ef:cb:9b:8e:57:36:dd:f0:6e:f2:c8:
         2f:ee:f2:ac:0e:bc:a5:92:cf:f9:d1:a8:30:f3:ff:fb:a4:16:
         3b:d9:b0:f3:56:00:a6:c6:dc:1f:24:42:a4:14:5b:31:38:86:
         03:0f:de:5d:70:4f:8b:83:37:ce:11:30:16:e7:b2:c1:8d:af:
         1b:e0:73:f0:29:80:6c:90:94:f1:eb:5e:39:e4:46:96:7e:5a:
         70:50:ea:a1:8c:f0:44:3d:c4:a0:e8:1c:c2:9b:66:a9:2f:50:
         d9:28:30:4f:8c:84:bb:a7:e4:47:9e:0a:cd:ea:cb:68:db:51:
         35:6e:22:1a:c6:cc:2d:81:6a:37:2d:2f:88:ca:fa:c2:9e:2b:
         29:4a:cd:83:bf:1b:95:f8:cf:72:a3:79:95:7d:84:f5:1f:2f:
         ed:43:56:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:22 2024 by rpki-client on console-fra.rpki-client.org