Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.mft
File:                     ofVGkGqaWEA4a2Tek7Gxz4f34Sg.mft (raw, json)
Hash identifier:          6lgjt8ODOKHgoWE/HScNnOZO2T5DxTxCGd+yUelkiQA=
Subject key identifier:   52:56:F7:AB:00:20:5D:BC:30:8D:0F:F6:AE:89:FF:1B:7A:ED:7B:84
Authority key identifier: A1:F5:46:90:6A:9A:58:40:38:6B:64:DE:93:B1:B1:CF:87:F7:E1:28
Certificate issuer:       /CN=a1f546906a9a5840386b64de93b1b1cf87f7e128
Certificate serial:       0181D64E1CAB3991FC3E5549CC17D499B3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.mft
Manifest number:          09EF
Signing time:             Thu 07 Jul 2022 01:37:32 +0000
Manifest this update:     Thu 07 Jul 2022 01:37:32 +0000
Manifest next update:     Fri 08 Jul 2022 01:37:32 +0000
Files and hashes:         1: CXf5XoAqH_b-o5xwVg9vfitvInA.roa (hash: 5MFIJq8l8CNYHtEFUPJTRgndDq0baZVZdHtXWk9hszU=)
                          2: ofVGkGqaWEA4a2Tek7Gxz4f34Sg.crl (hash: v7p0ImQBRCMd2KrsiIPUJl1AmaHv64fkWq22kK64+/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:d6:4e:1c:ab:39:91:fc:3e:55:49:cc:17:d4:99:b3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f546906a9a5840386b64de93b1b1cf87f7e128
        Validity
            Not Before: Jul  7 01:37:32 2022 GMT
            Not After : Jul  8 01:37:32 2022 GMT
        Subject: CN=5256f7ab00205dbc308d0ff6ae89ff1b7aed7b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:32:7b:de:b3:bb:8e:58:8c:25:9e:c3:3a:a9:
                    25:15:71:3d:6b:e6:99:08:a0:55:4a:4d:6d:ae:59:
                    9e:ff:a9:fc:ae:48:e2:8c:2f:fc:98:39:27:99:0b:
                    a5:02:ce:7c:9e:97:2d:d1:7d:11:ce:29:31:66:e6:
                    89:03:52:80:34:a4:c9:02:97:96:92:c0:e7:ee:29:
                    29:39:80:60:1d:3b:29:b9:3d:78:f7:2e:f6:9d:a5:
                    31:06:e5:01:d3:60:8e:b9:77:9c:52:57:e4:34:9d:
                    2a:c6:17:19:7e:d3:06:e4:fa:e2:0d:d6:fe:f1:a3:
                    45:2c:7a:e9:e0:a6:be:db:3d:d9:fb:16:2e:98:c7:
                    ce:d5:b2:13:3c:fa:dc:00:42:2f:19:4d:83:bb:fe:
                    80:9a:62:83:a8:92:a1:07:3a:91:fe:fe:1e:1e:ec:
                    67:4d:43:65:4b:eb:a7:81:39:8a:f5:6a:17:0f:e9:
                    03:c6:75:02:fb:cb:83:ab:de:8b:7d:b0:c8:d1:8a:
                    5a:58:07:df:c7:eb:29:1b:82:cd:ba:34:5d:17:af:
                    e7:1c:91:0d:ed:4e:2c:1d:6f:4c:94:06:0f:24:38:
                    f5:86:fb:da:a3:75:6a:1f:51:92:97:70:3f:0f:ec:
                    08:65:5d:13:97:d7:0d:2c:8b:f8:b1:7f:c7:85:a2:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:56:F7:AB:00:20:5D:BC:30:8D:0F:F6:AE:89:FF:1B:7A:ED:7B:84
            X509v3 Authority Key Identifier:
                keyid:A1:F5:46:90:6A:9A:58:40:38:6B:64:DE:93:B1:B1:CF:87:F7:E1:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cbafac-9873-4490-9a69-4a6c5cbd2050/1/ofVGkGqaWEA4a2Tek7Gxz4f34Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3e:d1:95:92:cf:6d:b5:8b:8c:ce:d6:a4:d1:08:d6:ab:1f:
         79:48:d2:1d:b0:2c:3c:36:fe:9e:64:d8:bf:30:28:d2:2b:9d:
         d1:c9:18:17:9e:75:97:6f:2a:27:17:e1:25:c6:ed:3a:9e:d2:
         57:88:d7:3e:37:ae:73:7c:de:84:0b:99:ea:81:8a:76:79:f0:
         f4:96:57:a3:fe:c8:dc:c9:93:4d:11:26:fa:b9:23:9e:ac:ba:
         6d:c6:5e:7b:96:04:c2:40:b6:67:d5:8d:55:0a:d7:a7:50:7a:
         70:5c:7c:b9:7b:24:be:bd:2b:67:b0:5a:93:0f:56:a7:4f:5f:
         d1:3b:c3:23:f4:f7:b7:cd:e2:a1:48:5b:f6:6a:67:c1:89:21:
         7c:b5:f0:4d:30:fe:0b:8a:69:6b:a1:44:53:7e:31:10:6c:ea:
         90:65:ae:ca:56:7e:5c:c8:fc:f8:24:0e:56:b8:22:70:e7:28:
         0e:b5:22:e0:58:de:7e:fc:fe:b8:83:d0:43:f3:ef:73:21:4d:
         41:d9:a6:7e:82:83:62:ce:eb:aa:1c:ca:e9:26:a1:18:c5:19:
         d5:74:e7:7f:b1:95:df:3b:68:2e:4f:a8:5c:0b:a3:aa:6c:ee:
         72:f6:93:ca:e4:f2:1c:49:3a:0c:54:c8:88:ba:95:d8:6e:5c:
         59:46:c3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:00 2024 by rpki-client on console-fra.rpki-client.org