Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/nr3_4KBkGxCWM3pj-Wz9T9OLihk.mft
File:                     nr3_4KBkGxCWM3pj-Wz9T9OLihk.mft (raw, json)
Hash identifier:          GyhYJbwFUug4drvNDTy2GO4qi2FCOnCgcBhYie8iy0w=
Subject key identifier:   AB:3E:E4:02:60:03:79:C0:42:00:72:B5:A4:22:47:E4:09:87:CC:89
Authority key identifier: 9E:BD:FF:E0:A0:64:1B:10:96:33:7A:63:F9:6C:FD:4F:D3:8B:8A:19
Certificate issuer:       /CN=9ebdffe0a0641b1096337a63f96cfd4fd38b8a19
Certificate serial:       018CA9A621DB3DF2FF5CB6268EEE588A18F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nr3_4KBkGxCWM3pj-Wz9T9OLihk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/nr3_4KBkGxCWM3pj-Wz9T9OLihk.mft
Manifest number:          0B4F
Signing time:             Wed 27 Dec 2023 05:01:26 +0000
Manifest this update:     Wed 27 Dec 2023 05:01:26 +0000
Manifest next update:     Thu 28 Dec 2023 05:01:26 +0000
Files and hashes:         1: Ja-T_hEPyyK8X1P731CoKMvV6XE.roa (hash: I8/D2xb73GmKeIPt5mtq2LAG9NZROZeeuJo0rpom2bA=)
                          2: nr3_4KBkGxCWM3pj-Wz9T9OLihk.crl (hash: dSj0JCeFwvH7zKtWxE3Q7qgBKO1ahAWYVgcRa5BNq4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:a9:a6:21:db:3d:f2:ff:5c:b6:26:8e:ee:58:8a:18:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ebdffe0a0641b1096337a63f96cfd4fd38b8a19
        Validity
            Not Before: Dec 27 05:01:26 2023 GMT
            Not After : Dec 28 05:01:26 2023 GMT
        Subject: CN=ab3ee402600379c0420072b5a42247e40987cc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:85:e2:b0:ee:44:3d:08:42:02:c8:fc:a0:ee:
                    26:0a:e9:f9:65:b6:66:08:10:ee:04:67:ae:0d:8c:
                    6b:48:f1:4f:e4:45:ab:87:be:49:ae:2e:61:55:34:
                    4a:71:c5:74:c3:8e:64:0a:c7:a9:d8:e7:10:2a:9d:
                    a7:2a:fe:df:a3:f0:36:4a:cd:85:bd:cf:83:86:e8:
                    bb:c3:69:90:d9:ca:e1:85:68:dd:5f:81:58:c3:22:
                    b6:da:53:04:38:96:6a:24:f4:cf:b3:62:1e:7e:b3:
                    9a:8c:0f:3c:e4:32:a0:ff:86:06:f5:b1:e6:68:6b:
                    f7:3e:8c:5b:35:48:30:d6:8e:cb:1f:34:43:4c:b7:
                    e3:4b:88:44:16:86:ef:be:2c:5d:bd:fa:f4:5e:85:
                    9e:63:88:08:82:64:be:0f:b4:24:37:ad:1e:b6:01:
                    51:53:43:89:20:fe:e6:68:6e:2e:86:1f:54:a2:73:
                    fa:86:14:a2:cb:04:37:25:57:fc:92:48:6b:7e:f6:
                    13:78:ef:01:35:80:80:0a:ae:dd:ce:52:35:b8:2b:
                    c0:09:60:30:85:da:74:89:31:a0:7d:1a:e7:55:b2:
                    66:79:0b:26:67:c7:5a:35:b9:14:d5:dc:3a:4e:c6:
                    83:e3:3f:c2:5f:57:1b:57:06:72:85:8b:a1:f4:ba:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3E:E4:02:60:03:79:C0:42:00:72:B5:A4:22:47:E4:09:87:CC:89
            X509v3 Authority Key Identifier:
                keyid:9E:BD:FF:E0:A0:64:1B:10:96:33:7A:63:F9:6C:FD:4F:D3:8B:8A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nr3_4KBkGxCWM3pj-Wz9T9OLihk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/nr3_4KBkGxCWM3pj-Wz9T9OLihk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/89e33b-cd90-41e3-a5be-84f22603499f/1/nr3_4KBkGxCWM3pj-Wz9T9OLihk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:21:16:ec:26:e5:f3:d6:b9:f6:5d:19:12:5c:a1:03:cf:9c:
         16:b0:37:9a:32:ed:28:73:b3:2d:d0:30:7f:4d:a7:40:ea:e4:
         0a:ce:e3:c9:27:57:ee:ee:61:eb:d6:ce:92:b8:9b:4e:49:a7:
         aa:f1:2e:0d:65:a9:d7:7e:0a:fb:ea:cf:6d:cb:2f:ad:78:47:
         fd:74:02:12:ea:e4:9e:91:59:f4:79:d2:af:9b:2a:80:30:1f:
         37:b0:29:e5:11:4b:16:f9:43:4e:e9:ec:97:cd:e7:32:ec:d8:
         a4:00:30:1d:12:94:b5:31:d4:53:32:a9:da:0c:25:6c:8f:f0:
         9c:eb:a8:cd:6d:31:20:8d:d6:c7:94:85:db:98:73:0a:5f:ce:
         76:74:00:92:9f:5b:9e:88:49:d9:92:64:a6:97:40:e5:5e:0d:
         85:88:fd:31:09:f8:8f:90:c7:75:cd:e4:27:4c:c1:8e:7e:6e:
         d6:75:32:20:a9:b2:50:9a:fb:89:c4:03:30:a8:e7:ba:90:2c:
         2b:2a:5f:b5:55:25:c4:a2:23:fa:6c:56:f3:49:af:36:d5:f2:
         a9:58:67:21:2c:8f:44:3b:e6:26:e5:6d:8c:e6:c9:df:40:5e:
         69:ac:ee:c0:6e:2d:e7:37:9a:a9:ab:9b:23:1d:ab:e1:83:1e:
         03:be:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:31 2024 by rpki-client on console-ams.rpki-client.org