Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.mft
File:                     0fXVWhuwCdGBmS4kGFHV-ZOSN8w.mft (raw, json)
Hash identifier:          vzTLDTmD7OhP9OfW4pvwkl7k8T/nIH37xTvvHq2YTF0=
Subject key identifier:   5E:1F:87:75:8F:07:D9:79:63:F5:B0:BD:2B:C9:98:A6:46:4D:0C:60
Authority key identifier: D1:F5:D5:5A:1B:B0:09:D1:81:99:2E:24:18:51:D5:F9:93:92:37:CC
Certificate issuer:       /CN=d1f5d55a1bb009d181992e241851d5f9939237cc
Certificate serial:       018E080D50C3535625B3138ED6E100319F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.mft
Manifest number:          10B3
Signing time:             Mon 04 Mar 2024 06:01:14 +0000
Manifest this update:     Mon 04 Mar 2024 06:01:14 +0000
Manifest next update:     Tue 05 Mar 2024 06:01:14 +0000
Files and hashes:         1: 0fXVWhuwCdGBmS4kGFHV-ZOSN8w.crl (hash: yXIi0lbWwMTJqFMabxhUYHd/ADp8IQtQLHAkcFALt+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:08:0d:50:c3:53:56:25:b3:13:8e:d6:e1:00:31:9f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f5d55a1bb009d181992e241851d5f9939237cc
        Validity
            Not Before: Mar  4 06:01:14 2024 GMT
            Not After : Mar  5 06:01:14 2024 GMT
        Subject: CN=5e1f87758f07d97963f5b0bd2bc998a6464d0c60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bd:2d:93:55:26:dd:9f:6b:f9:5f:99:59:a5:
                    1f:31:4c:75:fd:4e:0f:6c:87:e4:0c:13:c6:74:8c:
                    4f:cc:d3:47:28:2d:bb:41:cd:6a:6d:66:52:29:ca:
                    3e:a4:0e:72:48:b6:6b:35:70:e6:38:84:88:b1:63:
                    35:1f:72:c8:39:3f:7d:fa:ef:b9:bc:dc:bd:60:ea:
                    19:81:d7:35:0a:70:21:99:1b:40:f7:81:19:89:f9:
                    55:81:3c:c8:d9:04:11:12:b9:50:d1:ac:31:b7:21:
                    ba:5a:94:32:17:9a:97:3b:5a:ae:ce:10:a0:de:6e:
                    9b:57:3f:c4:3b:4f:29:32:be:6e:85:d2:ac:77:99:
                    e8:c0:9c:cc:5f:c6:1f:fd:03:84:a5:72:fb:63:d4:
                    e8:27:78:e5:dd:a5:a0:c4:85:f4:4c:e6:90:27:2f:
                    56:ee:5b:7e:fd:56:7b:06:8f:bc:86:e8:a0:c7:b0:
                    a6:19:63:85:d9:2b:11:65:3e:5c:20:a8:e3:77:a8:
                    de:d4:db:96:02:c0:6c:fa:f4:02:ad:21:04:83:f5:
                    2b:46:b2:ca:5f:a1:5b:fb:2a:46:a9:80:e5:57:e9:
                    47:be:00:fd:89:3b:1e:08:ad:7d:03:23:4c:1a:ec:
                    04:2c:ab:c5:cb:63:c8:44:2b:5f:80:a9:92:0e:64:
                    d9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1F:87:75:8F:07:D9:79:63:F5:B0:BD:2B:C9:98:A6:46:4D:0C:60
            X509v3 Authority Key Identifier:
                keyid:D1:F5:D5:5A:1B:B0:09:D1:81:99:2E:24:18:51:D5:F9:93:92:37:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b8c851-16ec-476f-9918-a62473abaa91/1/0fXVWhuwCdGBmS4kGFHV-ZOSN8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:2a:70:2c:0d:5c:9c:87:96:5d:bc:4d:19:7c:45:1c:af:d3:
         a1:df:ef:31:bd:f8:da:3b:7a:81:4b:97:b5:17:4b:3c:a9:45:
         82:1f:a3:6d:04:a6:67:b3:27:b6:01:33:4b:38:c0:8e:d5:a7:
         c1:ae:77:c5:a3:90:48:bb:08:ee:a0:17:ef:6d:62:9b:e8:9b:
         d2:8a:d9:a9:4a:8d:9b:18:bb:9f:25:53:9b:79:ba:a7:26:e5:
         b4:4c:46:fc:e7:1f:3d:8b:79:54:6c:5d:04:7a:fd:0a:c9:36:
         79:e6:b6:53:17:a5:8f:85:22:ee:7c:fd:df:bc:25:4a:8e:10:
         38:ed:4b:80:f7:02:bc:23:bf:97:cf:69:ca:c1:42:cc:65:72:
         41:f8:1b:eb:43:0d:05:1a:30:a2:f8:12:83:d5:8b:8f:c5:23:
         bf:d4:05:c7:90:eb:ba:22:ff:75:f5:52:45:90:4f:1c:64:06:
         60:20:d8:37:30:db:80:4a:ed:5b:a0:f5:98:84:88:6c:02:ca:
         84:f2:e3:c1:36:be:4e:c8:dd:76:e0:27:46:bf:c6:b6:15:2b:
         fa:13:54:f1:fc:97:f0:e5:aa:47:be:b8:17:df:e4:e8:86:78:
         72:11:f9:c0:c1:fe:08:31:7b:d0:50:9b:e9:aa:4d:c3:99:9d:
         8f:20:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 14:29:33 2024 by rpki-client on console-fra.rpki-client.org