Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.mft
File:                     niu51gx0R47SndDg0Q1oXOt8FXM.mft (raw, json)
Hash identifier:          ekB+kOpMXpoT+Tx8qzG1DSAlder5O/a7K3IpUteodRw=
Subject key identifier:   54:FB:0E:68:BB:A2:5D:79:74:9C:BF:EF:D7:9F:D7:12:00:4A:9B:67
Authority key identifier: 9E:2B:B9:D6:0C:74:47:8E:D2:9D:D0:E0:D1:0D:68:5C:EB:7C:15:73
Certificate issuer:       /CN=9e2bb9d60c74478ed29dd0e0d10d685ceb7c1573
Certificate serial:       0188E3A4114414CAFD7BB3B340C0D704A2F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/niu51gx0R47SndDg0Q1oXOt8FXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.mft
Manifest number:          0DF5
Signing time:             Thu 22 Jun 2023 15:06:00 +0000
Manifest this update:     Thu 22 Jun 2023 15:06:00 +0000
Manifest next update:     Fri 23 Jun 2023 15:06:00 +0000
Files and hashes:         1: eilgaNXmdSdSk5-pmchampZvlus.roa (hash: 5QjV4gTsKfJib0LQbH6f0LRnPezjpoFEuPZCgHEEyZ4=)
                          2: niu51gx0R47SndDg0Q1oXOt8FXM.crl (hash: 0SCea6pSPh0WCnMp7ID/6osLW/asiCXGYBykpP35kR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e3:a4:11:44:14:ca:fd:7b:b3:b3:40:c0:d7:04:a2:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e2bb9d60c74478ed29dd0e0d10d685ceb7c1573
        Validity
            Not Before: Jun 22 15:06:00 2023 GMT
            Not After : Jun 23 15:06:00 2023 GMT
        Subject: CN=54fb0e68bba25d79749cbfefd79fd712004a9b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:c6:f8:7c:88:98:b0:24:48:17:23:dc:06:
                    4f:46:3a:ec:93:33:43:66:ef:19:61:71:8b:03:29:
                    71:96:91:9c:96:f4:8c:4f:60:2f:ba:d7:77:01:a1:
                    de:63:ce:fa:6d:0f:62:2f:56:c4:77:3d:59:c0:c0:
                    0c:fa:b7:a7:cf:b4:14:f9:2b:41:da:ae:90:82:2d:
                    71:7b:69:a3:8b:1b:17:81:8c:83:e4:7c:89:b7:fd:
                    94:49:a3:2c:c1:c4:46:7f:bc:ca:39:8f:5d:ad:b8:
                    08:af:07:60:ea:50:4b:bc:86:1b:b5:83:a1:9a:0e:
                    9a:a6:ca:4a:e1:96:9b:8b:f4:8e:0a:92:bc:e7:f0:
                    75:e7:c9:c8:6c:7f:05:34:f7:b6:b4:9c:a9:37:65:
                    54:98:20:16:d8:cc:a3:fd:35:4e:46:9f:c5:ce:da:
                    be:b7:a3:a0:92:50:7c:05:35:20:5a:f4:ca:54:82:
                    14:ad:c7:ca:d3:00:0a:1c:20:a0:59:5f:c2:4e:8c:
                    fa:66:87:4e:c3:9d:cf:90:be:33:f3:3a:ec:4c:3b:
                    c6:28:28:fa:e9:bd:50:da:85:bb:56:f3:b4:6f:10:
                    d9:d6:19:94:8a:2f:3c:ab:12:a1:36:e5:65:ea:63:
                    94:87:f3:e0:ae:b8:f7:4d:70:a7:8b:ca:bd:7c:6f:
                    a7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FB:0E:68:BB:A2:5D:79:74:9C:BF:EF:D7:9F:D7:12:00:4A:9B:67
            X509v3 Authority Key Identifier:
                keyid:9E:2B:B9:D6:0C:74:47:8E:D2:9D:D0:E0:D1:0D:68:5C:EB:7C:15:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niu51gx0R47SndDg0Q1oXOt8FXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a17a2d-3259-40c2-88fb-54996e58d507/1/niu51gx0R47SndDg0Q1oXOt8FXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:10:3a:1e:52:d7:5a:a5:8a:ba:16:d6:b0:ce:d1:03:67:51:
         cb:81:19:c7:c7:08:2e:4b:c9:6a:6a:c0:c0:9a:b9:60:61:0f:
         32:ba:8c:44:1b:c9:ec:02:85:f2:aa:19:a1:90:a5:a2:b1:e6:
         bf:4d:33:0e:e4:02:16:b3:55:1f:e1:55:ca:fd:eb:cb:83:cd:
         b0:f2:8d:bc:7d:d7:ed:c4:2a:35:46:b2:bb:b6:fd:78:28:6b:
         fb:66:72:32:29:3c:0c:0f:78:00:ac:40:f6:06:05:3d:40:a8:
         28:cc:25:e7:f6:ea:47:4d:81:8b:2c:37:6b:18:e8:dc:c3:a7:
         dc:1c:55:d5:5a:e8:d2:78:01:11:0e:c9:2f:35:06:b6:46:93:
         5f:8a:5a:54:f7:b4:58:54:c1:f1:1a:20:43:ec:34:f2:63:7a:
         d6:21:c3:f7:ad:f2:a3:ec:dd:97:97:b6:f0:5b:52:25:21:18:
         ca:02:d7:3e:af:aa:08:7e:88:b3:a2:9d:48:82:4b:17:8e:bd:
         5a:c5:52:bd:a4:f8:c3:2b:59:6b:6f:d1:27:10:15:40:03:91:
         03:81:f9:e6:81:cd:ba:f6:97:e6:af:32:44:50:e6:e5:bb:10:
         76:12:ee:25:e0:5f:90:35:e1:7f:6b:6e:b5:2b:3e:77:16:48:
         b6:70:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:12 2024 by rpki-client on console-fra.rpki-client.org