Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/23ae52-452d-49ab-a472-fed926b79f2b/1/cLowYhXdUxJ-sof9IUH7RTEeDMY.mft
File:                     cLowYhXdUxJ-sof9IUH7RTEeDMY.mft (raw, json)
Hash identifier:          0zGROI2Tw8Xg+U5hxYsabXKYXa54I27fI9lzMKrC2tQ=
Subject key identifier:   6E:E2:CA:EC:3E:BB:09:3E:35:8F:5C:E5:11:4B:0C:30:10:F4:C1:13
Authority key identifier: 70:BA:30:62:15:DD:53:12:7E:B2:87:FD:21:41:FB:45:31:1E:0C:C6
Certificate issuer:       /CN=70ba306215dd53127eb287fd2141fb45311e0cc6
Certificate serial:       018B8F7A2141C48D1398ED20DC68891B819D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLowYhXdUxJ-sof9IUH7RTEeDMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/23ae52-452d-49ab-a472-fed926b79f2b/1/cLowYhXdUxJ-sof9IUH7RTEeDMY.mft
Manifest number:          0854
Signing time:             Thu 02 Nov 2023 10:00:27 +0000
Manifest this update:     Thu 02 Nov 2023 10:00:27 +0000
Manifest next update:     Fri 03 Nov 2023 10:00:27 +0000
Files and hashes:         1: cLowYhXdUxJ-sof9IUH7RTEeDMY.crl (hash: kDt5lcFGH87ED6aaK04s5jebaiNJrcRm127wFRMOYzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:7a:21:41:c4:8d:13:98:ed:20:dc:68:89:1b:81:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70ba306215dd53127eb287fd2141fb45311e0cc6
        Validity
            Not Before: Nov  2 10:00:27 2023 GMT
            Not After : Nov  3 10:00:27 2023 GMT
        Subject: CN=6ee2caec3ebb093e358f5ce5114b0c3010f4c113
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:05:c9:d1:c4:ba:ba:82:4a:7f:7e:e4:bc:
                    b6:bf:6d:38:26:11:ce:bf:8a:b0:cb:e0:46:ef:84:
                    21:ba:1b:6b:ec:c4:0b:19:dd:7c:ec:e4:07:e1:6b:
                    98:47:d5:5d:df:d6:67:f4:84:44:47:20:36:40:9c:
                    e5:40:df:c3:60:9c:b9:ed:37:29:91:4e:df:74:c1:
                    23:77:b1:75:ad:90:42:4d:d6:e0:e5:a5:af:93:b8:
                    33:1c:13:12:5e:4d:ba:24:d4:db:f1:11:57:57:37:
                    71:fd:73:79:2c:d6:a4:b5:f8:de:66:96:3e:2a:04:
                    0b:86:f8:17:c9:69:cd:95:a9:a8:ed:ef:5d:50:63:
                    88:39:21:7c:77:2c:51:ae:30:53:99:3d:a2:15:e3:
                    05:8a:69:f1:c8:7a:3f:25:16:28:eb:e0:7b:0f:46:
                    17:1f:73:c7:b6:0d:67:24:ba:3b:08:9f:9d:17:a3:
                    7a:2d:78:40:da:11:8a:6e:4d:36:33:ad:35:b9:ef:
                    a6:6c:a3:29:29:88:a3:35:49:b3:94:4d:a4:60:9f:
                    a7:d4:98:e6:a1:fe:22:75:3f:36:9c:af:19:e5:81:
                    f6:d3:4e:80:72:17:34:3d:9c:54:01:56:98:31:aa:
                    86:dd:2f:bd:77:55:31:ab:52:86:24:e9:83:ed:22:
                    15:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E2:CA:EC:3E:BB:09:3E:35:8F:5C:E5:11:4B:0C:30:10:F4:C1:13
            X509v3 Authority Key Identifier:
                keyid:70:BA:30:62:15:DD:53:12:7E:B2:87:FD:21:41:FB:45:31:1E:0C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLowYhXdUxJ-sof9IUH7RTEeDMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/23ae52-452d-49ab-a472-fed926b79f2b/1/cLowYhXdUxJ-sof9IUH7RTEeDMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/23ae52-452d-49ab-a472-fed926b79f2b/1/cLowYhXdUxJ-sof9IUH7RTEeDMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:39:2b:47:b0:7b:08:79:06:87:be:5c:80:8b:06:8f:1d:b5:
         56:85:d5:a8:ac:c8:3a:fe:82:aa:c1:d1:eb:18:ce:54:46:e2:
         66:5d:12:da:d6:7c:56:67:43:67:72:89:ab:5a:e1:f3:f9:4c:
         24:05:ed:39:f3:f6:2d:01:db:27:5c:23:63:8e:d6:5b:4d:90:
         e6:ee:77:37:14:54:cd:c0:7d:86:46:15:c8:eb:48:a8:af:35:
         15:71:58:a8:fd:a4:2b:d1:a8:3c:72:fd:87:a0:40:7f:13:85:
         be:6d:f8:d6:6b:dc:8d:87:f7:7f:3a:01:5b:bc:b7:5a:25:36:
         63:8d:46:21:b1:0e:8b:12:d1:24:fb:cc:2e:ad:f0:11:55:9c:
         ee:5f:5b:5a:af:86:49:55:2f:f6:70:3c:10:8b:de:af:f8:00:
         10:80:7e:96:7d:be:02:6f:52:e7:1b:3b:0d:5e:92:ac:c7:b2:
         81:5d:d2:f5:40:d6:d0:26:e2:33:52:25:60:b3:a4:c3:8f:32:
         93:bb:ca:6f:fc:fd:d0:5c:2b:1c:12:8a:dc:36:ee:8b:d3:65:
         4e:36:b0:d7:9f:17:9d:01:a0:6d:5b:1e:ef:36:e3:90:4f:ec:
         5f:33:d2:66:ab:ac:fa:5d:5b:28:f9:b0:b4:c8:a5:0c:b5:d9:
         07:7d:84:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:17 2024 by rpki-client on console-fra.rpki-client.org