Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/Y2OvmufUdL6nSEsTGnefS3QEe7g.mft
File:                     Y2OvmufUdL6nSEsTGnefS3QEe7g.mft (raw, json)
Hash identifier:          aYtt9wHJ0PWWmH71BDWhNWqshEJg6Y08PxK+9WbhO88=
Subject key identifier:   56:C5:88:1A:0C:0B:87:81:4E:F9:5A:86:D1:B9:2B:A3:D4:49:EF:A2
Authority key identifier: 63:63:AF:9A:E7:D4:74:BE:A7:48:4B:13:1A:77:9F:4B:74:04:7B:B8
Certificate issuer:       /CN=6363af9ae7d474bea7484b131a779f4b74047bb8
Certificate serial:       0187BC707FB95E95500D79DA3207B4631749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y2OvmufUdL6nSEsTGnefS3QEe7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/Y2OvmufUdL6nSEsTGnefS3QEe7g.mft
Manifest number:          0909
Signing time:             Wed 26 Apr 2023 07:21:41 +0000
Manifest this update:     Wed 26 Apr 2023 07:21:41 +0000
Manifest next update:     Thu 27 Apr 2023 07:21:41 +0000
Files and hashes:         1: Y2OvmufUdL6nSEsTGnefS3QEe7g.crl (hash: r9ECRuRMXyzjpgY//X1+ZARtQBueE1W/4zeDJOyzDp4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:bc:70:7f:b9:5e:95:50:0d:79:da:32:07:b4:63:17:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6363af9ae7d474bea7484b131a779f4b74047bb8
        Validity
            Not Before: Apr 26 07:21:41 2023 GMT
            Not After : Apr 27 07:21:41 2023 GMT
        Subject: CN=56c5881a0c0b87814ef95a86d1b92ba3d449efa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:6f:65:3f:30:a1:38:ba:44:b8:e1:e8:54:
                    e7:d3:e5:b4:77:e3:fe:1d:cb:85:69:b5:79:77:27:
                    6e:3d:87:ce:3a:01:d5:9a:47:90:d4:3a:64:34:28:
                    15:67:b5:c0:a5:a1:71:63:76:9f:e6:4f:f9:fb:26:
                    44:46:7d:3a:39:05:0c:e3:52:c3:ad:c7:8d:05:5c:
                    60:78:ca:bb:62:c3:a9:6b:be:7d:99:f1:1a:7e:a0:
                    2c:35:31:ae:c5:1b:59:3d:a3:2c:ac:8b:7b:dd:f8:
                    6d:03:88:0a:10:21:fd:74:1f:46:fc:50:df:46:ff:
                    1a:24:2d:c8:86:f4:c8:72:46:0c:fc:43:88:4a:3a:
                    ec:53:19:7a:c3:ed:7a:63:02:de:41:c9:92:7f:84:
                    be:d4:50:a3:45:03:cc:83:08:0f:3d:f7:56:13:ae:
                    90:58:14:bb:97:52:29:ab:36:c9:c7:c4:86:b0:45:
                    60:11:ed:12:0e:12:60:39:08:62:21:b3:5e:63:45:
                    02:36:b1:70:62:96:70:40:20:b1:2a:0c:ed:f8:5f:
                    bd:35:27:28:a4:7d:99:13:56:49:0e:10:0e:0a:8b:
                    b6:e4:3c:23:6e:ee:72:0b:bd:62:ea:4c:01:fb:7d:
                    10:5a:34:8c:fc:7c:7c:ef:2a:29:d5:3f:9e:3b:34:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:88:1A:0C:0B:87:81:4E:F9:5A:86:D1:B9:2B:A3:D4:49:EF:A2
            X509v3 Authority Key Identifier:
                keyid:63:63:AF:9A:E7:D4:74:BE:A7:48:4B:13:1A:77:9F:4B:74:04:7B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2OvmufUdL6nSEsTGnefS3QEe7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/Y2OvmufUdL6nSEsTGnefS3QEe7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f0faaf-a25d-4c05-b95a-052e4fce991c/1/Y2OvmufUdL6nSEsTGnefS3QEe7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:02:c8:7c:11:f4:8e:7d:a1:57:35:99:9e:41:e1:e5:6d:4d:
         42:11:d1:19:53:22:43:fd:e5:a3:9a:c5:9f:12:56:4c:eb:33:
         98:16:48:5c:df:b3:a8:7b:55:6e:d5:73:63:0d:59:41:e4:db:
         f0:93:c1:d9:16:b1:37:2d:50:65:f7:bd:8c:75:5d:fd:df:ed:
         fb:c9:f7:89:3a:35:22:de:a3:35:b5:e3:b7:8f:bb:75:7a:3c:
         6b:41:c4:4c:2a:b7:5a:5f:bb:44:d3:b4:a7:ce:4a:99:e5:0c:
         23:92:b9:de:1d:eb:81:10:76:98:41:6c:cf:85:70:47:61:a1:
         ab:77:4a:8c:f1:f4:04:f7:9f:fc:ad:30:ff:bb:ea:08:43:26:
         cb:38:02:17:2b:ba:dd:96:60:0d:74:ad:87:57:a1:d2:af:58:
         fe:dc:2e:a5:ca:53:cb:12:bb:01:69:ce:74:5d:bf:b1:76:e5:
         86:fe:f3:4e:f8:3c:ce:fe:2d:c6:4b:51:44:bb:7b:07:1d:3e:
         75:c0:fa:96:27:4a:40:bc:60:15:38:e2:a9:44:74:c6:3d:9a:
         02:ce:bd:0c:ad:5e:47:6d:c4:9c:ef:fb:33:ee:b7:ed:e6:82:
         43:4b:ea:69:63:13:61:74:3e:09:3e:4d:b1:c4:58:a9:eb:49:
         46:08:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:23 2024 by rpki-client on console-fra.rpki-client.org