Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.mft
File:                     U3s3ZWzRTUiKcFEpIYdXF6DZELY.mft (raw, json)
Hash identifier:          2R6CJfssdr9gyvzDmJVvNp9grbsVY+CpXJSZbhV2st4=
Subject key identifier:   94:F5:D1:E0:25:24:C9:09:B6:71:BF:B4:38:A4:45:C4:63:B7:40:EB
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
Certificate issuer:       /CN=537b37656cd14d488a70512921875717a0d910b6
Certificate serial:       0187FEC0A4EB5A446180A2AE03878203504F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.mft
Manifest number:          0D73
Signing time:             Tue 09 May 2023 04:24:10 +0000
Manifest this update:     Tue 09 May 2023 04:24:10 +0000
Manifest next update:     Wed 10 May 2023 04:24:10 +0000
Files and hashes:         1: U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl (hash: DI/rwfwm9GwUtBqrNkj0xcTETs59IKHp2L6jCjIDV58=)
                          2: krFkvUEOsvo872M5nISiehhf7cc.roa (hash: FDTpTDSwrKSsoGMp8G06YoWOIyriaJcLfYrU6nnw9jY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fe:c0:a4:eb:5a:44:61:80:a2:ae:03:87:82:03:50:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
        Validity
            Not Before: May  9 04:24:10 2023 GMT
            Not After : May 10 04:24:10 2023 GMT
        Subject: CN=94f5d1e02524c909b671bfb438a445c463b740eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:90:75:00:0e:22:61:44:29:d9:2a:00:d7:
                    33:02:a6:35:74:c6:cc:97:8e:83:e6:d8:a3:46:79:
                    e2:c5:b0:5f:0f:2a:9e:71:b2:56:89:86:18:a1:7f:
                    27:3d:a7:5e:ea:62:1b:43:82:c7:80:af:97:cb:8c:
                    c1:7d:bc:1c:c0:6d:a4:2e:da:1b:8b:46:3a:bb:3f:
                    63:13:7d:95:2f:fb:cf:80:f6:32:42:51:51:8e:88:
                    81:2b:3e:95:ff:bd:b9:2d:44:50:02:61:ad:8d:be:
                    e1:0a:ec:0b:eb:e8:ea:00:b4:ff:28:e7:e7:d4:86:
                    e3:81:a4:9f:8d:6d:07:34:ab:a3:3c:a5:27:7a:0d:
                    c7:9f:b0:c2:e3:c3:b4:2d:28:cb:17:22:2a:00:3b:
                    07:a5:36:00:43:79:86:5e:18:d9:ee:2a:39:a7:31:
                    fd:be:2a:ab:4b:f4:68:39:5d:36:c3:d6:ab:0c:c4:
                    72:4f:b3:65:2b:ad:89:df:f2:3f:f1:b9:29:d7:04:
                    b6:a1:1c:06:87:a4:0b:97:f3:ab:32:7b:33:82:67:
                    68:04:00:35:ce:cc:cb:73:ca:a4:07:0e:ec:c8:84:
                    38:6b:41:43:99:a9:c4:94:a3:7f:94:8d:fb:87:c5:
                    af:30:04:54:50:04:6e:fb:d2:cf:e4:1b:90:1a:f0:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F5:D1:E0:25:24:C9:09:B6:71:BF:B4:38:A4:45:C4:63:B7:40:EB
            X509v3 Authority Key Identifier:
                keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:14:c3:de:37:59:41:35:16:a3:ef:b9:78:30:f3:5a:c5:
         11:af:7d:e6:99:ea:96:78:90:e0:d9:67:76:68:47:ab:be:f6:
         1e:70:20:cf:c6:7c:e9:e8:cc:94:cd:85:71:7b:b9:fb:b6:08:
         ed:d0:38:36:82:fd:e3:8e:50:da:38:fd:87:c5:34:52:a3:fe:
         fb:c8:f2:04:fe:74:62:69:e0:d4:a9:a3:2f:69:48:46:1a:67:
         e9:c0:67:91:92:2f:28:c5:94:09:bd:49:f4:f2:e6:b7:e1:d9:
         5a:dd:fe:62:59:3c:2e:5d:b3:2d:72:0c:55:7a:1a:ad:57:1e:
         02:26:bd:c7:95:ae:5d:72:bf:ad:f2:00:61:bb:7d:df:b4:eb:
         80:38:74:2d:4f:08:7b:0b:ef:bf:2b:af:46:f8:d9:27:9d:0b:
         b3:ae:0b:b5:f3:84:c3:25:49:33:1d:15:c2:e6:e4:a7:9f:bd:
         90:36:57:92:c6:f9:5a:b1:03:27:83:c0:eb:7e:4e:ee:01:74:
         91:99:37:18:ba:47:6e:80:5e:43:c4:79:7e:d9:28:9d:a8:65:
         1d:72:af:dd:86:07:f7:fe:dd:05:e2:41:54:06:32:f0:cc:8d:
         62:f1:f1:60:8a:1b:54:5f:b9:7d:dc:48:b4:7b:72:0a:97:0a:
         f3:2d:04:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:57 2024 by rpki-client on console-ams.rpki-client.org