Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/EarnIUujRRVHtfxofWCjvj50cXI.mft
File:                     EarnIUujRRVHtfxofWCjvj50cXI.mft (raw, json)
Hash identifier:          Grv4ZOaP9AXOVV1Ix0u65pYFlf9G2xLvhBzvV5PH/90=
Subject key identifier:   35:B6:67:07:30:7C:C0:A6:97:4E:FA:26:37:26:EF:C9:19:9B:C0:07
Authority key identifier: 11:AA:E7:21:4B:A3:45:15:47:B5:FC:68:7D:60:A3:BE:3E:74:71:72
Certificate issuer:       /CN=11aae7214ba3451547b5fc687d60a3be3e747172
Certificate serial:       018735F7303E5C8D12DE7E6EFC25B14AC155
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EarnIUujRRVHtfxofWCjvj50cXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/EarnIUujRRVHtfxofWCjvj50cXI.mft
Manifest number:          0869
Signing time:             Fri 31 Mar 2023 04:40:04 +0000
Manifest this update:     Fri 31 Mar 2023 04:40:04 +0000
Manifest next update:     Sat 01 Apr 2023 04:40:04 +0000
Files and hashes:         1: EarnIUujRRVHtfxofWCjvj50cXI.crl (hash: pdh9VTDc7qu1jKBCRJbcmsm7M9BhIV+OmrAX4iCNj1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:35:f7:30:3e:5c:8d:12:de:7e:6e:fc:25:b1:4a:c1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11aae7214ba3451547b5fc687d60a3be3e747172
        Validity
            Not Before: Mar 31 04:40:04 2023 GMT
            Not After : Apr  1 04:40:04 2023 GMT
        Subject: CN=35b66707307cc0a6974efa263726efc9199bc007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0a:33:28:f6:e6:91:8b:d2:a7:c4:cb:7b:af:
                    79:69:09:90:d9:8d:0d:ac:d9:ec:68:35:22:05:95:
                    57:23:2e:e3:49:c3:74:ef:ce:c3:1b:9b:c9:03:b4:
                    eb:32:1e:f5:b6:d4:11:bd:d8:a7:9b:6e:76:3f:b1:
                    7e:81:a9:94:9d:b4:cf:10:76:ba:2b:64:30:3e:32:
                    93:21:0b:ab:c3:57:5f:61:73:0b:13:df:cf:b0:f2:
                    3e:a0:cb:bf:a3:67:5d:4d:f9:4b:59:64:07:22:28:
                    28:f3:8a:33:22:10:d3:06:d0:88:b0:bd:42:0f:90:
                    5f:26:8e:50:2e:f2:e8:d3:83:85:e0:ed:5b:0e:99:
                    73:2e:36:3c:ec:68:09:61:9b:6f:79:a6:84:45:f6:
                    7f:93:31:21:9b:81:26:63:9b:9d:96:29:c7:ee:3d:
                    33:e2:42:cb:c2:c1:5e:7a:8b:41:3a:98:97:1f:ce:
                    0c:c0:fa:20:dc:0b:87:f8:0a:a0:73:6d:0f:73:6d:
                    9f:cc:a2:60:99:24:a1:ae:33:9d:c2:93:12:74:dd:
                    b9:db:d1:42:e2:7e:df:57:57:91:74:c6:79:06:4c:
                    57:35:6f:a0:37:a6:7a:22:63:c4:8b:48:4b:90:a7:
                    30:fb:cf:a6:d1:34:f2:42:a7:81:b7:65:89:0c:d6:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B6:67:07:30:7C:C0:A6:97:4E:FA:26:37:26:EF:C9:19:9B:C0:07
            X509v3 Authority Key Identifier:
                keyid:11:AA:E7:21:4B:A3:45:15:47:B5:FC:68:7D:60:A3:BE:3E:74:71:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EarnIUujRRVHtfxofWCjvj50cXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/EarnIUujRRVHtfxofWCjvj50cXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3d4a59-9d2f-4d95-b1b8-97c51363d5b5/1/EarnIUujRRVHtfxofWCjvj50cXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:24:80:c4:64:40:71:55:b5:c2:4a:c2:17:c4:fe:34:18:d5:
         3f:ce:25:2e:12:a1:21:3a:ec:0b:06:72:41:de:19:67:09:fe:
         89:ec:24:46:c0:f9:fd:76:b6:2d:e0:01:fc:c2:ac:5b:78:26:
         39:9d:fc:c8:b6:fe:7c:78:d4:6d:43:1f:6d:4b:06:f7:36:74:
         c4:10:37:60:6e:88:7d:04:8d:dd:e7:40:e5:9f:17:c3:d4:ad:
         72:a9:d6:a1:df:5f:6e:de:04:04:b2:d8:52:c0:c0:12:8c:d6:
         43:00:91:8e:6f:2f:ff:4c:4e:c3:59:8d:bb:20:87:21:31:d9:
         53:29:9a:b7:2a:1f:35:7f:84:09:b6:4e:d7:8c:d8:52:50:0d:
         10:e9:42:c5:68:06:51:ab:8c:23:be:97:fa:d6:d6:40:7b:37:
         44:71:7f:c1:85:25:fc:6f:2c:2e:0a:71:40:9d:d3:83:ea:ad:
         b6:a1:44:b0:10:75:95:d2:a5:00:14:54:ac:5c:58:23:54:e8:
         57:4b:68:f1:71:ec:b3:f1:24:db:6b:44:d2:63:2c:15:c8:1a:
         8a:e3:2a:fe:1e:d4:4e:d8:a5:de:39:90:cf:35:48:19:9c:f0:
         ca:b8:e7:e7:e1:12:92:24:da:1a:83:c2:03:d4:56:44:09:16:
         cf:56:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:57 2024 by rpki-client on console-ams.rpki-client.org