Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/FClFdvDZFK5CohVCCvy9vNe0rO0.mft
File:                     FClFdvDZFK5CohVCCvy9vNe0rO0.mft (raw, json)
Hash identifier:          yQmANHueU3Y/OB724ew00u4zw2eO7gaS5WvbBqMKkUk=
Subject key identifier:   74:06:13:64:90:64:2A:8B:41:E2:77:74:37:CC:A0:2A:0F:E0:5D:BC
Authority key identifier: 14:29:45:76:F0:D9:14:AE:42:A2:15:42:0A:FC:BD:BC:D7:B4:AC:ED
Certificate issuer:       /CN=14294576f0d914ae42a215420afcbdbcd7b4aced
Certificate serial:       018571A7C854AE6AD9FC40E8080CDBA7EA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FClFdvDZFK5CohVCCvy9vNe0rO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/FClFdvDZFK5CohVCCvy9vNe0rO0.mft
Manifest number:          0291
Signing time:             Mon 02 Jan 2023 08:44:59 +0000
Manifest this update:     Mon 02 Jan 2023 08:44:59 +0000
Manifest next update:     Tue 03 Jan 2023 08:44:59 +0000
Files and hashes:         1: FClFdvDZFK5CohVCCvy9vNe0rO0.crl (hash: npqZU4WV1xzUmfZCalN88ouiyQXxeNRg2F5uHgIP4Gg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:a7:c8:54:ae:6a:d9:fc:40:e8:08:0c:db:a7:ea:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14294576f0d914ae42a215420afcbdbcd7b4aced
        Validity
            Not Before: Jan  2 08:44:59 2023 GMT
            Not After : Jan  3 08:44:59 2023 GMT
        Subject: CN=7406136490642a8b41e2777437cca02a0fe05dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:75:ab:35:d2:a1:c3:78:a1:74:90:fb:a9:ff:
                    f5:b1:dd:e6:f5:35:c4:69:e3:76:60:9f:dd:35:3e:
                    b4:ef:5d:9f:35:42:7d:b9:91:f4:5d:c8:0e:ef:a6:
                    ad:28:09:e6:23:ff:73:08:11:03:97:1c:bd:6f:2c:
                    3e:c5:ca:d4:8b:dc:d9:f3:38:07:e8:0b:4d:53:8f:
                    6e:91:81:1a:1f:a8:19:19:a1:c0:04:8f:8e:52:ff:
                    d1:1b:dc:3a:2b:d6:71:0d:50:52:9a:5c:54:fa:89:
                    dc:87:20:96:05:10:fa:bf:58:ed:c6:83:41:ec:a4:
                    1e:8f:30:1c:0b:b5:d1:bb:85:5c:64:70:c0:18:10:
                    2a:34:f5:b4:a8:c3:3e:34:de:30:11:9b:e6:d1:ae:
                    08:b1:d8:0c:c4:f3:c9:32:c1:f5:4b:b0:fc:40:32:
                    cc:32:02:f3:c7:ca:f0:8f:22:1d:02:cf:d2:78:8a:
                    00:f7:e7:a8:f2:18:11:a6:0e:3a:cd:d0:c8:4f:ca:
                    91:8a:cb:00:ee:aa:19:93:36:08:f2:c3:7e:74:ad:
                    6f:06:ea:f6:29:4c:ee:5b:81:35:0a:39:f3:ff:4a:
                    4d:95:a6:61:8a:d6:6f:ba:3a:ec:8a:e0:26:03:75:
                    81:50:6c:fa:fa:71:f4:6f:31:66:f4:b6:5b:e4:46:
                    c0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:06:13:64:90:64:2A:8B:41:E2:77:74:37:CC:A0:2A:0F:E0:5D:BC
            X509v3 Authority Key Identifier:
                keyid:14:29:45:76:F0:D9:14:AE:42:A2:15:42:0A:FC:BD:BC:D7:B4:AC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FClFdvDZFK5CohVCCvy9vNe0rO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/FClFdvDZFK5CohVCCvy9vNe0rO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d79948-7849-4aba-87c1-521cfc535785/1/FClFdvDZFK5CohVCCvy9vNe0rO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:49:bb:8f:ff:9c:46:ed:85:c6:29:12:18:1e:f0:22:4a:b8:
         27:f5:78:fd:bc:0e:49:30:72:f6:ec:68:2e:c3:82:fb:b5:93:
         f3:99:05:7b:4f:51:d7:ee:f0:d3:fc:2b:29:03:2e:65:65:e7:
         8b:5d:c2:81:a4:17:cb:ab:2e:02:19:8f:42:0d:2c:3f:f5:92:
         4e:ab:92:ba:95:8a:90:6c:ac:1c:37:46:96:b1:46:44:bb:5c:
         80:26:d9:0e:a4:b0:b9:42:08:3d:c6:7d:1b:64:cb:49:1d:87:
         39:9b:77:b3:aa:10:c2:11:67:69:fd:91:ac:0e:42:4c:03:81:
         04:c2:71:4e:c0:d8:e7:7a:e2:db:7b:e7:38:27:3f:1f:e3:5e:
         f5:06:f7:dd:11:4f:aa:0b:7e:fa:61:82:43:53:b9:f2:8d:19:
         ba:51:07:ba:e2:37:c2:42:85:57:ca:e2:11:56:df:72:5a:b9:
         4b:7b:f5:e5:28:b7:8b:4b:f7:55:91:1c:3e:ad:48:0f:1a:20:
         0f:af:6d:a3:af:e5:79:a8:bd:c9:9f:c2:30:76:8f:00:c9:d6:
         c9:d7:bf:7d:d3:60:bf:67:03:72:3f:38:9f:6d:bc:11:9e:4f:
         a0:7a:8f:99:4c:ed:d4:04:7b:39:0f:01:a6:85:1f:ab:ab:54:
         6b:72:e4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:10 2024 by rpki-client on console-fra.rpki-client.org