Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/b41e71-c167-4d29-87f6-10b8807d64f1/1/kFHyKtfRG6id2vML0ai4myrewoI.mft
File:                     kFHyKtfRG6id2vML0ai4myrewoI.mft (raw, json)
Hash identifier:          pRjJDwPla5lq/l36Lo8kfO3jXYCNTTtKxAIynxkm1fE=
Subject key identifier:   15:57:22:BC:CF:AB:47:EF:7A:27:93:B2:87:C0:9A:46:EB:D1:C7:B7
Authority key identifier: 90:51:F2:2A:D7:D1:1B:A8:9D:DA:F3:0B:D1:A8:B8:9B:2A:DE:C2:82
Certificate issuer:       /CN=9051f22ad7d11ba89ddaf30bd1a8b89b2adec282
Certificate serial:       01894D5021B778DEE4035594082C9FD2AF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kFHyKtfRG6id2vML0ai4myrewoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/b41e71-c167-4d29-87f6-10b8807d64f1/1/kFHyKtfRG6id2vML0ai4myrewoI.mft
Manifest number:          0E32
Signing time:             Thu 13 Jul 2023 03:34:04 +0000
Manifest this update:     Thu 13 Jul 2023 03:34:04 +0000
Manifest next update:     Fri 14 Jul 2023 03:34:04 +0000
Files and hashes:         1: kFHyKtfRG6id2vML0ai4myrewoI.crl (hash: gYsYKAR552Hxd43ivy0JLbGK5g8wbaml/XsAPtKoL7Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:4d:50:21:b7:78:de:e4:03:55:94:08:2c:9f:d2:af:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9051f22ad7d11ba89ddaf30bd1a8b89b2adec282
        Validity
            Not Before: Jul 13 03:34:04 2023 GMT
            Not After : Jul 14 03:34:04 2023 GMT
        Subject: CN=155722bccfab47ef7a2793b287c09a46ebd1c7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:a2:f0:68:0b:88:dd:55:88:11:bd:97:76:
                    1a:ad:6b:58:2a:ed:04:13:30:d6:a6:f8:92:46:85:
                    6a:c1:21:2b:9f:6d:d9:7a:c6:de:d9:77:8e:cf:ad:
                    36:15:66:f0:35:4e:0a:1e:b9:97:0a:59:65:bb:c7:
                    49:ec:4d:de:0e:d9:bf:b6:22:ea:b5:00:79:bc:6d:
                    1b:ac:d6:da:58:fd:4b:fd:5c:9c:14:6b:88:8e:94:
                    a6:2c:b3:e5:91:8a:5b:ca:ce:9b:e9:d0:a4:1d:4a:
                    3b:c3:0e:b2:b6:6f:c4:a3:0a:e1:13:a0:c9:24:60:
                    24:dc:03:ae:af:7d:39:05:6e:88:ba:96:db:31:dc:
                    b9:d1:cc:f9:62:6e:2f:cf:d6:75:8c:93:b6:93:60:
                    b1:b9:8a:99:bc:7f:3b:7a:93:47:da:07:7e:e1:7f:
                    49:e6:73:ee:67:37:d5:d9:4b:63:b6:a8:16:0b:04:
                    36:4e:cf:45:83:55:cb:96:d4:d4:3a:74:d6:33:7c:
                    10:2d:38:fd:33:66:4a:75:5c:f6:0c:f1:05:d5:26:
                    20:f0:f2:b4:f5:d2:e9:82:1b:28:28:d3:09:21:8a:
                    81:25:08:74:9b:60:6b:96:a9:5b:7c:77:1f:5b:07:
                    a7:8e:b7:8a:46:18:fe:1d:f0:68:34:b4:6c:07:5c:
                    ae:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:57:22:BC:CF:AB:47:EF:7A:27:93:B2:87:C0:9A:46:EB:D1:C7:B7
            X509v3 Authority Key Identifier:
                keyid:90:51:F2:2A:D7:D1:1B:A8:9D:DA:F3:0B:D1:A8:B8:9B:2A:DE:C2:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHyKtfRG6id2vML0ai4myrewoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b41e71-c167-4d29-87f6-10b8807d64f1/1/kFHyKtfRG6id2vML0ai4myrewoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/b41e71-c167-4d29-87f6-10b8807d64f1/1/kFHyKtfRG6id2vML0ai4myrewoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:51:07:6b:a6:52:04:c0:b9:09:be:8f:d5:dc:78:f7:86:f7:
         53:23:e7:6a:50:0a:8e:1a:db:e8:f8:66:af:75:6f:a7:5d:6a:
         b8:63:65:c8:21:af:65:d9:74:ac:1d:10:87:1d:0a:a0:2e:e8:
         d5:fb:1c:69:49:1f:25:ab:83:6d:54:86:17:01:1a:87:b3:32:
         16:eb:90:ae:9c:b9:b8:f3:9c:7d:ae:48:88:df:af:f4:19:77:
         ef:5a:0a:20:94:bf:e5:5a:f7:ef:06:a9:11:3b:e2:5a:1d:7e:
         40:6a:0c:8a:df:ee:9d:14:27:35:6b:dc:47:ca:18:59:c6:08:
         b9:0f:6d:d7:cb:8b:6f:be:1c:15:04:bb:2b:5d:48:dd:0c:c8:
         8a:b6:ed:cb:fd:e1:97:81:8b:ad:8b:85:27:e9:82:78:7e:69:
         f6:2b:83:66:8f:80:03:cc:15:18:29:6d:54:ec:94:b8:eb:37:
         d2:fd:c1:c7:80:36:1d:9a:44:23:4e:ad:55:cf:aa:4b:dd:50:
         b5:de:58:8b:27:71:22:48:89:46:47:6e:c0:d2:0d:25:39:68:
         71:87:b8:09:f1:0d:69:de:5d:63:3f:ec:c9:01:40:2b:a6:66:
         ee:4a:0e:92:15:a0:57:e2:f2:65:a5:96:53:8a:c3:fd:51:96:
         28:03:cf:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:01 2024 by rpki-client on console-fra.rpki-client.org