Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2f273c-8705-4acf-a9b0-033882b5a929/1/AIjzwO7ex3MDATsjTqes32uuORU.mft
File:                     AIjzwO7ex3MDATsjTqes32uuORU.mft (raw, json)
Hash identifier:          c+L4DKJ5NSGH4kNz/NyppgLI4guKN6cvUnZ1+lHp5Mo=
Subject key identifier:   D5:D3:3F:BE:5D:7E:C1:82:EB:C4:CA:E6:F9:59:F7:68:C1:08:D7:54
Authority key identifier: 00:88:F3:C0:EE:DE:C7:73:03:01:3B:23:4E:A7:AC:DF:6B:AE:39:15
Certificate issuer:       /CN=0088f3c0eedec77303013b234ea7acdf6bae3915
Certificate serial:       018735C41E675B3BF62A01160A39ADCD3176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIjzwO7ex3MDATsjTqes32uuORU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/2f273c-8705-4acf-a9b0-033882b5a929/1/AIjzwO7ex3MDATsjTqes32uuORU.mft
Manifest number:          0CFF
Signing time:             Fri 31 Mar 2023 03:44:17 +0000
Manifest this update:     Fri 31 Mar 2023 03:44:17 +0000
Manifest next update:     Sat 01 Apr 2023 03:44:17 +0000
Files and hashes:         1: AIjzwO7ex3MDATsjTqes32uuORU.crl (hash: LqeGWG22aAXOF0zm7jaSSTfFxPdLDB+U2qY5X4CKF8M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:35:c4:1e:67:5b:3b:f6:2a:01:16:0a:39:ad:cd:31:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0088f3c0eedec77303013b234ea7acdf6bae3915
        Validity
            Not Before: Mar 31 03:44:17 2023 GMT
            Not After : Apr  1 03:44:17 2023 GMT
        Subject: CN=d5d33fbe5d7ec182ebc4cae6f959f768c108d754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:6b:d1:d8:11:df:62:37:32:78:53:df:26:
                    41:32:c9:aa:65:c8:f4:e9:30:49:c4:0e:ef:78:f2:
                    19:90:70:09:ca:c0:f4:ee:71:90:b9:80:86:b0:7a:
                    27:d5:61:8b:ee:c4:8e:87:dc:82:f2:5d:f7:ef:44:
                    8b:7e:84:1e:94:b6:87:1e:17:6c:95:a4:90:fd:10:
                    51:11:d4:a6:43:d6:b5:51:34:d6:81:a9:cc:ac:02:
                    2a:9b:51:fa:6c:a0:f4:ef:4b:4d:fd:1b:47:be:6f:
                    ee:8a:d3:d2:66:89:dc:33:83:11:4e:55:63:9b:82:
                    48:a5:21:5b:42:10:a0:7c:af:0b:c7:d9:53:4e:cb:
                    b9:fc:8b:27:59:1f:fa:0d:2a:4d:72:26:4d:b7:74:
                    1d:15:3b:c1:33:c9:72:93:8d:d3:a0:8c:8b:7d:f5:
                    a9:63:2e:70:8e:94:15:c6:6d:9e:41:f7:8b:a5:8e:
                    55:4a:c0:99:4b:cd:48:76:ce:b6:66:47:ac:e9:79:
                    d0:e9:87:42:33:1f:d5:57:a3:f6:95:cb:d1:73:9a:
                    fe:33:97:dc:06:3d:fa:6b:1e:7d:b0:25:af:5a:12:
                    55:04:bf:9d:bc:a2:31:75:32:6a:37:a7:ec:70:f6:
                    a7:ca:f3:c8:4a:e7:a7:3b:53:c3:ba:39:16:f5:ef:
                    53:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:3F:BE:5D:7E:C1:82:EB:C4:CA:E6:F9:59:F7:68:C1:08:D7:54
            X509v3 Authority Key Identifier:
                keyid:00:88:F3:C0:EE:DE:C7:73:03:01:3B:23:4E:A7:AC:DF:6B:AE:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIjzwO7ex3MDATsjTqes32uuORU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f273c-8705-4acf-a9b0-033882b5a929/1/AIjzwO7ex3MDATsjTqes32uuORU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f273c-8705-4acf-a9b0-033882b5a929/1/AIjzwO7ex3MDATsjTqes32uuORU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:8f:77:b4:10:f3:a8:38:6b:d6:63:3e:e2:2f:cc:69:56:
         75:87:12:82:17:b4:e4:1b:f8:18:2e:da:db:e9:8c:83:d1:ae:
         43:64:96:7c:4c:8d:f4:5d:58:8a:6d:8e:b4:eb:e5:99:1b:5a:
         22:81:73:81:ac:f9:61:9f:30:d7:33:32:56:e8:fa:ae:68:13:
         65:41:c5:72:96:8e:76:c8:62:d6:50:d7:ba:25:dd:67:fe:54:
         ff:55:71:dd:82:34:ea:32:19:53:28:33:cb:92:26:59:ab:7b:
         7c:cc:a6:82:bd:68:56:23:82:fd:12:29:4c:4d:3e:38:48:b1:
         98:1c:02:f0:7a:85:b6:61:8d:09:f8:2b:6e:5d:ff:dd:17:95:
         ae:8f:e2:d7:48:9e:3d:f0:6f:3e:c8:57:01:bf:d1:58:6d:30:
         7a:87:e2:e1:f1:d8:14:8a:29:5c:b2:e2:08:c7:48:f5:fc:2e:
         e8:ab:6c:1f:75:09:d0:67:18:2d:b6:c3:98:d6:76:fa:da:77:
         31:93:7d:ca:01:59:dc:aa:ab:c8:7d:58:21:9c:1a:88:05:4c:
         03:69:d4:a0:ee:76:2e:c8:1d:0f:1a:2c:86:0c:b1:47:1a:ee:
         5f:80:76:80:03:95:76:f6:5a:27:82:a9:05:30:ab:7e:87:52:
         06:a4:e2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:13 2024 by rpki-client on console-fra.rpki-client.org