Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.mft
File:                     0bS1qglWi2vgU2UNh2s6lJoSZFI.mft (raw, json)
Hash identifier:          WSnjwmgq3bjG5rQwi0PK3N3DNhpSkpMTlpGoko47FlA=
Subject key identifier:   96:63:7C:6A:1A:58:F7:E5:03:07:E0:EC:02:FC:54:95:41:FF:4C:33
Authority key identifier: D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52
Certificate issuer:       /CN=d1b4b5aa09568b6be053650d876b3a949a126452
Certificate serial:       018B94D76C4AE2A2701263BF31D1BEF20E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0bS1qglWi2vgU2UNh2s6lJoSZFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.mft
Manifest number:          0855
Signing time:             Fri 03 Nov 2023 11:00:27 +0000
Manifest this update:     Fri 03 Nov 2023 11:00:27 +0000
Manifest next update:     Sat 04 Nov 2023 11:00:27 +0000
Files and hashes:         1: 0bS1qglWi2vgU2UNh2s6lJoSZFI.crl (hash: YXsxpXRk8Vu7vN5iFsSE2SQM5IrBS55H6JJlFtnlIiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:94:d7:6c:4a:e2:a2:70:12:63:bf:31:d1:be:f2:0e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b4b5aa09568b6be053650d876b3a949a126452
        Validity
            Not Before: Nov  3 11:00:27 2023 GMT
            Not After : Nov  4 11:00:27 2023 GMT
        Subject: CN=96637c6a1a58f7e50307e0ec02fc549541ff4c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:36:70:88:b8:62:9d:41:14:d3:35:49:ba:
                    e4:77:e5:95:08:2e:ba:0e:6e:83:eb:5e:4c:cb:31:
                    6b:2f:37:06:c5:51:1e:c6:e7:36:e6:47:47:63:a0:
                    b3:8b:ed:e4:7e:1a:42:8a:97:ff:0d:fc:1f:02:b0:
                    be:9e:9b:9b:b1:3a:59:22:c5:59:5c:8e:bb:5b:c6:
                    7c:a1:9b:9b:e6:26:56:db:80:00:a6:07:23:61:c4:
                    3d:c2:fc:f1:69:4b:2b:98:91:09:2e:db:c5:2c:50:
                    56:e8:ed:2a:66:7b:a1:2e:69:3a:e7:93:cf:d7:9b:
                    1f:28:54:9d:d9:8b:5f:0f:08:60:4d:80:dc:63:ff:
                    44:c7:8a:ee:f7:68:1e:d4:4a:38:95:17:7f:37:e0:
                    60:10:54:1a:50:6f:5b:c5:72:e1:c9:5a:cf:ca:55:
                    03:27:78:fc:53:b9:e3:6e:37:8f:c3:99:b2:6f:1a:
                    a7:b9:db:49:e1:1c:d5:1d:b4:fb:78:fa:b5:3b:3d:
                    80:bf:f3:7b:eb:17:d1:dd:48:21:20:61:aa:e6:66:
                    a4:f8:f4:1f:85:d8:3b:48:ec:b5:25:5e:da:5b:10:
                    25:15:4d:8f:61:9a:0a:ff:ac:00:bf:70:9f:35:15:
                    a3:48:52:98:5e:a3:0f:19:ea:8e:5f:db:ea:1e:84:
                    41:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:63:7C:6A:1A:58:F7:E5:03:07:E0:EC:02:FC:54:95:41:FF:4C:33
            X509v3 Authority Key Identifier:
                keyid:D1:B4:B5:AA:09:56:8B:6B:E0:53:65:0D:87:6B:3A:94:9A:12:64:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS1qglWi2vgU2UNh2s6lJoSZFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/13a213-4c98-4d95-8f1d-127d38d08b2b/1/0bS1qglWi2vgU2UNh2s6lJoSZFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:1f:49:a9:47:4e:e5:b7:14:57:1c:25:43:3b:77:79:95:7f:
         d3:63:37:e4:e7:3c:83:87:d8:27:be:8e:81:93:21:17:45:c1:
         c5:65:3c:da:4f:c9:18:f0:1f:dc:da:91:f3:a4:12:59:87:df:
         1b:ed:fb:e2:6f:97:31:1b:6f:ac:8f:dd:64:43:16:51:34:ad:
         dd:31:cc:6a:0d:88:fe:fc:ea:94:05:72:e5:12:89:03:78:d4:
         11:f7:b8:de:c1:b7:32:68:9f:91:ae:55:d7:97:f7:c7:63:3c:
         f2:27:ef:a2:83:31:bc:87:bd:ea:1a:38:15:ed:60:8a:5f:30:
         48:2f:c5:bc:2e:2d:f7:7d:7b:b5:de:32:76:17:00:06:76:55:
         dc:b9:28:a4:5e:55:b0:ed:80:27:e2:e4:1a:f7:26:50:07:f2:
         85:16:1b:fe:1a:8c:22:28:aa:4f:ae:19:85:26:2e:73:dc:46:
         21:d4:3d:d1:df:25:07:a0:f1:da:0b:fb:9d:86:b1:97:4f:db:
         4e:a4:d3:b0:c4:e2:6b:d2:e2:2f:42:ae:78:01:bf:58:44:08:
         18:2d:ee:2f:e4:74:16:28:06:1d:dd:92:ae:92:e9:b4:d8:ed:
         f1:61:aa:48:57:f6:ba:65:b8:8a:76:69:37:44:f5:2e:ea:00:
         12:82:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 12:39:52 2023 by rpki-client on console-ams.rpki-client.org