Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/6022b7-7405-411b-b8aa-16ee03446bc0/1/4oYlk5RG0y45YVmwFLVFRPW50n4.mft
File:                     4oYlk5RG0y45YVmwFLVFRPW50n4.mft (raw, json)
Hash identifier:          PB/1yyGvGryB0qiFbnI7+QcB2CgfgAsLHnxK5GlihBE=
Subject key identifier:   1B:A5:DC:2F:D5:1E:4F:7C:C7:1C:35:0A:B2:4A:27:9F:40:8A:50:10
Authority key identifier: E2:86:25:93:94:46:D3:2E:39:61:59:B0:14:B5:45:44:F5:B9:D2:7E
Certificate issuer:       /CN=e28625939446d32e396159b014b54544f5b9d27e
Certificate serial:       018CD346DDBFA41A4D52922192B654086512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oYlk5RG0y45YVmwFLVFRPW50n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/6022b7-7405-411b-b8aa-16ee03446bc0/1/4oYlk5RG0y45YVmwFLVFRPW50n4.mft
Manifest number:          06E5
Signing time:             Thu 04 Jan 2024 07:01:25 +0000
Manifest this update:     Thu 04 Jan 2024 07:01:25 +0000
Manifest next update:     Fri 05 Jan 2024 07:01:25 +0000
Files and hashes:         1: 4oYlk5RG0y45YVmwFLVFRPW50n4.crl (hash: rCfSKUmIvK5Zh5z3OxI8r2e8KyfSSGs+mQZQxTKf6hs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:d3:46:dd:bf:a4:1a:4d:52:92:21:92:b6:54:08:65:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e28625939446d32e396159b014b54544f5b9d27e
        Validity
            Not Before: Jan  4 07:01:25 2024 GMT
            Not After : Jan  5 07:01:25 2024 GMT
        Subject: CN=1ba5dc2fd51e4f7cc71c350ab24a279f408a5010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:84:b8:28:00:8b:ea:e8:53:4a:60:67:d1:
                    06:72:3a:eb:2b:75:e0:de:33:c0:92:6a:cc:b6:7e:
                    58:18:ff:a2:33:dd:ac:9e:ab:62:8d:33:e3:e8:d8:
                    c8:99:56:6e:df:b9:70:4c:e1:7c:36:5a:f9:e0:cc:
                    63:29:70:00:cf:21:fd:42:cd:1f:0e:d3:c6:c5:d6:
                    e8:17:06:46:08:04:d1:95:d3:6d:e2:5c:1e:4b:14:
                    6a:7a:b4:5f:be:a5:e3:4b:40:e3:6a:7a:60:bd:77:
                    0a:7e:7e:17:17:c6:f4:b4:80:b6:0e:6c:b4:db:cf:
                    dc:e0:d7:1d:45:27:29:66:5c:bb:0e:8a:69:9a:68:
                    d5:f2:ae:19:82:26:16:1a:de:dc:d5:e6:7b:a1:1c:
                    87:db:9b:7a:6b:70:d5:97:16:e3:18:ac:de:42:d1:
                    cd:64:7e:2e:13:b9:7a:d8:f6:42:11:d0:d9:9e:05:
                    49:7a:3c:b5:38:a7:45:43:50:16:e0:50:0e:11:d7:
                    0e:62:de:da:a2:c9:ac:68:db:3d:bf:5f:56:df:79:
                    3a:7d:c6:1b:76:c6:f7:6b:51:18:d0:b5:41:6d:fb:
                    e7:f6:43:95:e5:ba:c2:fd:b2:25:87:20:ca:f0:64:
                    9e:7f:75:e8:67:16:28:77:c3:f2:c8:bb:64:72:24:
                    16:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:DC:2F:D5:1E:4F:7C:C7:1C:35:0A:B2:4A:27:9F:40:8A:50:10
            X509v3 Authority Key Identifier:
                keyid:E2:86:25:93:94:46:D3:2E:39:61:59:B0:14:B5:45:44:F5:B9:D2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oYlk5RG0y45YVmwFLVFRPW50n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6022b7-7405-411b-b8aa-16ee03446bc0/1/4oYlk5RG0y45YVmwFLVFRPW50n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6022b7-7405-411b-b8aa-16ee03446bc0/1/4oYlk5RG0y45YVmwFLVFRPW50n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:d1:a7:2f:1f:0c:ea:c2:b2:6d:08:a7:4c:4c:45:bc:35:
         a2:14:07:80:63:c4:98:6d:80:4d:21:cc:a4:ac:70:7d:21:f9:
         8e:38:e4:95:3a:89:73:6b:09:79:6e:10:78:e6:fe:ee:ce:cb:
         5c:6e:0c:c5:e2:43:d3:3d:4c:99:7f:5f:95:ab:36:aa:05:a3:
         cf:a4:4a:0f:e2:83:d5:fe:98:6f:da:cf:6c:c2:ba:1c:15:00:
         a7:2e:58:07:21:15:c5:0d:70:be:97:ef:f9:c0:2a:51:09:37:
         c6:d8:e9:de:14:7c:a3:9c:6e:dc:f6:22:6e:9a:d6:1a:18:af:
         4f:17:e1:3c:68:a4:15:8e:20:22:f0:8e:ac:49:4c:74:3f:41:
         ad:26:44:4c:d9:50:cc:cc:7a:2b:d1:95:0b:dd:b0:ad:33:26:
         53:03:3e:79:60:0f:22:ed:9d:c5:a7:3c:aa:01:bb:24:0e:65:
         95:13:78:61:45:b1:20:b0:c0:09:ed:b7:fe:a3:7f:2c:7f:48:
         03:dd:db:76:10:ea:76:c2:bb:78:1c:84:b8:fc:61:e8:4e:b9:
         28:48:7a:e5:ca:78:8b:39:3b:d9:ee:f3:65:a5:23:1c:f7:30:
         6d:a0:c2:c3:d5:a3:68:3b:a4:e1:9e:7a:51:ad:ec:a0:26:c3:
         ff:76:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 15:47:22 2024 by rpki-client on console-fra.rpki-client.org