Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.mft
File:                     fdK4oZYDROH2C7HrQDizNWK46hw.mft (raw, json)
Hash identifier:          0wEmJ0S4pWRNhcG0XVEvSJl4BGWX0q8Mg7RgtIqly/E=
Subject key identifier:   3E:0C:AD:FE:1D:40:36:D1:61:69:6C:35:76:90:87:13:EB:5E:29:70
Authority key identifier: 7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C
Certificate issuer:       /CN=7dd2b8a1960344e1f60bb1eb4038b33562b8ea1c
Certificate serial:       018AF90F79A25304433CDB74E386646953DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fdK4oZYDROH2C7HrQDizNWK46hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.mft
Manifest number:          0F1C
Signing time:             Wed 04 Oct 2023 05:00:55 +0000
Manifest this update:     Wed 04 Oct 2023 05:00:55 +0000
Manifest next update:     Thu 05 Oct 2023 05:00:55 +0000
Files and hashes:         1: Jm1xwB41d1YuTAfL4pmJNVG0kLY.roa (hash: kRomnKnEeVDY0bEkidjoGX7sAm5OuqXWTJ+OxLR8hHQ=)
                          2: fdK4oZYDROH2C7HrQDizNWK46hw.crl (hash: bwWj7PejpCmROLwygEpebBv75zfyU+33GwUJrCsKA/g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f9:0f:79:a2:53:04:43:3c:db:74:e3:86:64:69:53:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dd2b8a1960344e1f60bb1eb4038b33562b8ea1c
        Validity
            Not Before: Oct  4 05:00:55 2023 GMT
            Not After : Oct  5 05:00:55 2023 GMT
        Subject: CN=3e0cadfe1d4036d161696c3576908713eb5e2970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:8d:dd:97:27:50:68:b6:73:f1:87:a7:05:
                    5a:49:05:9b:35:d3:95:4d:03:d9:3e:16:f9:ab:82:
                    75:23:ce:d9:21:cf:ef:21:b4:29:0a:41:5e:a1:b1:
                    fa:ea:85:9b:19:c4:cb:0c:ed:14:c2:1d:db:88:ed:
                    2f:97:b0:5f:a0:c4:a7:46:b8:db:bc:e1:f8:dc:4b:
                    5c:83:79:5a:b5:b7:de:f1:97:26:c5:ca:e9:4d:ee:
                    d7:5e:f4:82:5b:5c:a3:c6:53:91:4f:7f:28:dd:eb:
                    4b:c1:55:6c:3a:92:78:ce:c3:d9:f6:de:9b:28:54:
                    d7:86:ba:2a:a9:2c:a4:20:24:b9:87:c1:7d:b6:08:
                    d6:98:8f:50:3b:d4:8e:3d:3a:c6:e7:84:1e:36:54:
                    53:bd:96:39:43:c7:ff:65:0b:a1:c2:b6:81:e8:cc:
                    b3:62:cf:e1:50:1a:3b:d7:3f:96:fb:ef:23:9d:eb:
                    b3:22:92:a9:3a:71:4a:7a:22:6a:69:30:05:7b:0e:
                    ed:af:41:71:1e:3c:e1:14:96:da:8d:ec:29:f9:d6:
                    4f:72:13:10:d4:db:16:bd:c4:24:7a:15:26:71:41:
                    48:3d:81:f1:34:2f:e0:f7:56:6a:64:17:a1:98:a6:
                    17:9f:85:31:2a:13:cc:38:fa:35:f2:71:07:ab:1a:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:0C:AD:FE:1D:40:36:D1:61:69:6C:35:76:90:87:13:EB:5E:29:70
            X509v3 Authority Key Identifier:
                keyid:7D:D2:B8:A1:96:03:44:E1:F6:0B:B1:EB:40:38:B3:35:62:B8:EA:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdK4oZYDROH2C7HrQDizNWK46hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/901c48-0f36-4f8d-9bad-274499e1bc0b/1/fdK4oZYDROH2C7HrQDizNWK46hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ef:96:45:42:cc:f3:56:50:e1:43:6e:20:c0:93:de:bd:5a:
         3a:d5:cf:9d:46:4a:07:e8:db:bd:66:f9:df:b4:a1:09:c5:7b:
         1d:90:37:ea:e9:0f:1f:88:11:93:5f:0b:37:df:73:12:54:62:
         07:6a:87:e0:84:47:2d:fa:96:04:f8:01:e7:c9:0e:b9:27:37:
         43:ab:60:9f:89:77:2b:40:52:6f:72:04:4f:25:3b:81:70:d4:
         f5:17:de:58:17:6c:8f:80:b1:54:28:4f:b2:4d:61:96:23:d2:
         57:2e:a2:27:2e:cb:1a:33:41:ae:b0:f8:39:05:af:86:f4:f5:
         ff:48:22:ef:d7:c4:07:63:3c:f6:b2:94:02:9d:5b:30:c3:a7:
         2d:2e:65:e3:0e:ee:51:6a:36:ca:27:7f:23:c7:a2:64:7c:af:
         a7:ca:41:24:22:aa:d5:a2:e3:af:9c:ba:80:05:4e:76:63:b5:
         e8:dc:4b:88:db:88:25:40:c0:9a:0f:fd:f2:83:3f:dd:52:a2:
         a5:66:ca:a8:f5:6b:8f:09:66:5c:82:29:06:fd:1c:ca:da:3d:
         4b:98:09:87:31:b1:da:6a:76:0e:f9:9e:ea:d9:19:5d:25:9d:
         b4:7b:94:42:01:13:45:0c:48:1e:e3:bf:21:d6:4c:a1:a3:6c:
         cc:47:cf:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org