Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.mft
File:                     nfynmPn2WMzxH4zlFV9EHa7-Maw.mft (raw, json)
Hash identifier:          v7IRwrOA3yHmhYDwUL7xoBuO6MQmNnCSis5Ccj7Iwt8=
Subject key identifier:   8B:B8:2D:D9:D5:17:B2:85:57:ED:72:23:6A:34:35:0D:5B:EA:BD:E3
Authority key identifier: 9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC
Certificate issuer:       /CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
Certificate serial:       018B4AD0411121C4604EB971CB39715EF96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.mft
Manifest number:          0882
Signing time:             Fri 20 Oct 2023 02:00:43 +0000
Manifest this update:     Fri 20 Oct 2023 02:00:43 +0000
Manifest next update:     Sat 21 Oct 2023 02:00:43 +0000
Files and hashes:         1: HPZL8h8HZdWqtMqkOYzWs3Qn3uk.roa (hash: KRtBI6mGPly8HfipWXre4CbZgyWl/LdHFg40clJLlno=)
                          2: gDw11zMaRR5FDoT55jnAlBXZCNM.roa (hash: LXkLE8jZt8rY4TC3g0xt5QPPLUvUK6SL5Mg6GsWGsZU=)
                          3: nfynmPn2WMzxH4zlFV9EHa7-Maw.crl (hash: 6LbIkV3/n0YD/CiipfTdG/rPmy9fLIoBGEeapdATHXg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4a:d0:41:11:21:c4:60:4e:b9:71:cb:39:71:5e:f9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dfca798f9f658ccf11f8ce5155f441daefe31ac
        Validity
            Not Before: Oct 20 02:00:43 2023 GMT
            Not After : Oct 21 02:00:43 2023 GMT
        Subject: CN=8bb82dd9d517b28557ed72236a34350d5beabde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:e7:f0:95:47:d3:90:91:0a:10:be:32:a3:
                    54:aa:d9:d9:15:29:c8:af:27:23:35:c7:1b:76:d8:
                    2d:e7:37:7f:5b:00:b3:48:19:88:c2:e9:ee:e7:48:
                    de:0c:6d:7b:45:22:0f:de:e5:e1:ce:28:01:6a:cd:
                    e2:d0:96:64:6c:98:e4:54:bd:49:94:b5:47:3a:aa:
                    e5:b0:19:e5:d7:24:7c:c2:6b:af:1e:fb:c6:8d:5b:
                    af:82:6a:ca:05:29:a4:75:6c:fd:1d:2b:0f:ce:d8:
                    47:ef:21:bf:65:b1:c3:e1:13:6a:89:56:e5:68:d0:
                    9d:b3:30:dc:9f:72:89:b1:2e:37:79:59:c2:cc:33:
                    ac:8e:64:7a:a7:f7:72:6a:9f:11:e2:e2:dc:17:1b:
                    c3:01:9b:6b:a0:5a:40:c4:a1:65:8c:79:9c:07:08:
                    3f:b7:38:d5:05:41:b3:97:69:bd:b4:2c:ce:59:06:
                    ef:27:cb:95:0e:86:a6:d5:83:2d:4c:00:62:4a:e0:
                    7f:38:b3:23:7d:1a:cc:f5:1c:22:ee:c2:c8:1f:59:
                    7d:3b:e5:d3:b1:9b:05:d8:b4:82:46:a2:bb:0e:8e:
                    d0:e0:26:b0:15:76:ba:c7:78:dc:ca:13:89:09:55:
                    a2:20:0b:db:28:80:34:46:04:c9:64:c9:64:f5:39:
                    ac:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B8:2D:D9:D5:17:B2:85:57:ED:72:23:6A:34:35:0D:5B:EA:BD:E3
            X509v3 Authority Key Identifier:
                keyid:9D:FC:A7:98:F9:F6:58:CC:F1:1F:8C:E5:15:5F:44:1D:AE:FE:31:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfynmPn2WMzxH4zlFV9EHa7-Maw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f6dec7-573f-46de-ac11-787787a75091/1/nfynmPn2WMzxH4zlFV9EHa7-Maw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:8b:f7:fe:06:b5:1f:55:b8:b7:2a:81:18:09:d0:83:7b:db:
         ec:12:2b:60:43:4f:77:f0:5c:73:f2:4a:26:8a:02:55:06:96:
         90:09:c7:a1:11:dc:87:3d:ff:71:fb:b5:30:4c:5d:c8:52:70:
         52:18:f2:80:0e:09:01:5f:d0:80:f2:c2:54:e8:f7:d5:fa:0b:
         72:61:af:21:24:3b:96:4d:55:4a:5e:62:d7:8d:eb:5f:2f:82:
         f7:51:e8:39:25:e2:67:9c:c6:d4:3e:ec:7e:5f:5c:0f:e1:1e:
         19:40:a6:81:b1:50:85:b0:20:0e:81:d1:7f:05:9f:b3:6d:ec:
         a6:23:3f:d1:3c:8d:e8:c4:d2:a7:bc:ba:94:60:bd:f2:86:ac:
         36:c3:ca:5a:83:34:02:4c:bb:6e:4d:d8:0e:54:18:30:d0:89:
         c3:ad:f5:f2:c9:4e:74:28:ae:c6:ca:26:a3:69:ce:54:03:46:
         e3:f4:88:01:cb:db:81:e9:fd:b2:0a:02:41:c0:79:fc:90:a5:
         f3:86:09:29:68:35:1c:dd:92:6a:d5:e0:4e:90:07:f1:2d:73:
         c5:9a:d3:04:ba:23:3a:71:7a:3a:70:5e:21:3f:ba:9c:0d:8b:
         06:09:02:74:59:68:db:01:9a:56:51:f9:1a:50:c1:0b:d1:a4:
         c7:89:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:22 2024 by rpki-client on console-ams.rpki-client.org