Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/ukWrgYqb75WcFEMYRsYj0xhxpx0.mft
File:                     ukWrgYqb75WcFEMYRsYj0xhxpx0.mft (raw, json)
Hash identifier:          5Ww8OdXsC5wSd63XtRNv3xrM8sOuyKtzsvvdcnWGmGY=
Subject key identifier:   35:87:FF:69:45:71:80:46:4E:37:47:0A:6A:5E:D0:D0:63:CB:D6:14
Authority key identifier: BA:45:AB:81:8A:9B:EF:95:9C:14:43:18:46:C6:23:D3:18:71:A7:1D
Certificate issuer:       /CN=ba45ab818a9bef959c14431846c623d31871a71d
Certificate serial:       0189194C02F32A7E302D63CC7E041017BB49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ukWrgYqb75WcFEMYRsYj0xhxpx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/ukWrgYqb75WcFEMYRsYj0xhxpx0.mft
Manifest number:          0309
Signing time:             Mon 03 Jul 2023 01:09:18 +0000
Manifest this update:     Mon 03 Jul 2023 01:09:18 +0000
Manifest next update:     Tue 04 Jul 2023 01:09:18 +0000
Files and hashes:         1: ukWrgYqb75WcFEMYRsYj0xhxpx0.crl (hash: 04B5yureyGdvE9mIfninD3s9GekSxDoP+3b9ULz8m3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:19:4c:02:f3:2a:7e:30:2d:63:cc:7e:04:10:17:bb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba45ab818a9bef959c14431846c623d31871a71d
        Validity
            Not Before: Jul  3 01:09:18 2023 GMT
            Not After : Jul  4 01:09:18 2023 GMT
        Subject: CN=3587ff69457180464e37470a6a5ed0d063cbd614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:15:74:57:43:20:e5:5e:ca:b0:d3:e7:a8:5c:
                    80:86:f5:fd:27:7d:89:41:44:ba:e5:f7:b2:6b:92:
                    b0:ea:b6:1a:4c:8e:1a:ce:e7:0b:b9:34:1c:6f:07:
                    5a:f7:f6:78:c7:5e:40:19:9e:64:ef:45:33:da:c7:
                    1f:33:51:0d:99:46:11:6c:22:af:b6:3f:95:c9:db:
                    9b:36:8f:7f:e4:c4:87:48:c9:33:e8:1e:4f:00:f6:
                    b6:b3:15:43:32:2d:a4:5a:d3:e3:0a:3b:a1:c2:08:
                    1e:22:b8:74:46:55:d7:6d:4a:9b:dc:6e:32:4e:a0:
                    1b:34:67:9d:ab:41:09:80:8d:76:ea:9f:d6:10:a1:
                    51:3a:5e:62:dd:ec:f2:de:c5:11:db:ae:78:a2:af:
                    60:f6:2d:1c:83:82:08:50:3c:58:30:74:44:59:e5:
                    2f:ee:d5:42:78:57:d4:b1:25:c6:8b:cd:ef:f1:f7:
                    93:c2:b6:4d:19:c5:99:6c:b0:0b:d9:dc:fb:f9:53:
                    86:3b:3c:6a:04:28:58:0a:5c:6a:4e:0d:b9:dc:1e:
                    ea:96:ce:2f:c2:40:77:78:d0:27:be:7a:92:45:71:
                    88:ae:54:15:cb:1b:0c:ee:8d:ec:8e:ec:a7:37:3c:
                    b7:fc:6c:0b:9a:af:97:d8:17:8a:bd:9f:d6:90:0e:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:87:FF:69:45:71:80:46:4E:37:47:0A:6A:5E:D0:D0:63:CB:D6:14
            X509v3 Authority Key Identifier:
                keyid:BA:45:AB:81:8A:9B:EF:95:9C:14:43:18:46:C6:23:D3:18:71:A7:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ukWrgYqb75WcFEMYRsYj0xhxpx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/ukWrgYqb75WcFEMYRsYj0xhxpx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/f44889-976d-41f3-a89b-e7e3ac231d41/1/ukWrgYqb75WcFEMYRsYj0xhxpx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:93:02:35:d2:a3:ca:99:c0:6c:d7:0b:8a:2a:0f:a3:80:6e:
         39:2b:03:af:6e:23:74:f1:0a:aa:32:af:44:da:4e:98:6e:51:
         57:c9:da:52:15:04:ec:1e:9b:36:42:7f:79:c1:14:c7:92:57:
         51:65:d0:f8:ff:b8:24:59:76:fa:67:63:1e:15:c7:34:39:d5:
         48:57:42:49:27:fd:4c:c7:a6:d3:44:16:21:07:87:e6:d6:cb:
         34:f4:b1:63:c5:0f:c9:19:f5:0c:fb:2c:2e:ed:52:05:87:77:
         09:73:51:e2:bd:37:57:2b:66:41:5b:92:3e:6f:7a:ee:e5:97:
         56:f6:ca:05:12:55:0c:47:4a:05:58:9e:01:e4:76:a4:f5:0e:
         5e:28:79:f8:1b:03:d2:9a:9d:a5:fa:a0:0b:8b:81:1b:df:d1:
         b6:c4:29:e4:89:73:cc:31:5b:40:46:26:73:ac:cd:d0:bf:12:
         9c:b5:08:97:9b:e9:f0:a7:33:e9:a7:90:a9:ef:57:28:79:10:
         c1:51:12:74:eb:5e:10:05:58:d6:6d:77:a3:15:6f:e1:6a:1a:
         e6:ed:6f:42:8a:72:60:ed:fb:d4:47:d7:46:3d:b0:db:f4:0f:
         78:a1:c1:39:3d:d6:35:94:33:1e:00:e5:45:7b:f8:6d:31:91:
         b9:c0:e2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:15 2024 by rpki-client on console-ams.rpki-client.org