Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/164e27-04a8-42dc-8272-86d5cb3b22b8/1/ltM6HvrGMmqaQ4W9ArICRNU2fxw.mft
File:                     ltM6HvrGMmqaQ4W9ArICRNU2fxw.mft (raw, json)
Hash identifier:          NgdvUWxbDdjFMOE/BM5uEO92RTlWM6+nV/97wSnVEr8=
Subject key identifier:   A1:C8:A6:49:25:83:B0:2A:CE:69:9E:3E:D5:AC:C8:BB:7B:1B:23:64
Authority key identifier: 96:D3:3A:1E:FA:C6:32:6A:9A:43:85:BD:02:B2:02:44:D5:36:7F:1C
Certificate issuer:       /CN=96d33a1efac6326a9a4385bd02b20244d5367f1c
Certificate serial:       018A5DEB21A459E2F6D0FD8937A04B115EBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ltM6HvrGMmqaQ4W9ArICRNU2fxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/164e27-04a8-42dc-8272-86d5cb3b22b8/1/ltM6HvrGMmqaQ4W9ArICRNU2fxw.mft
Manifest number:          0A8B
Signing time:             Mon 04 Sep 2023 02:00:05 +0000
Manifest this update:     Mon 04 Sep 2023 02:00:05 +0000
Manifest next update:     Tue 05 Sep 2023 02:00:05 +0000
Files and hashes:         1: ltM6HvrGMmqaQ4W9ArICRNU2fxw.crl (hash: 4lixc9dGSqwdHHlISqFmUKt9wZ5/xGRt9Y6jg7Xxm3o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5d:eb:21:a4:59:e2:f6:d0:fd:89:37:a0:4b:11:5e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96d33a1efac6326a9a4385bd02b20244d5367f1c
        Validity
            Not Before: Sep  4 02:00:05 2023 GMT
            Not After : Sep  5 02:00:05 2023 GMT
        Subject: CN=a1c8a6492583b02ace699e3ed5acc8bb7b1b2364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:24:fa:54:5c:70:2c:6f:63:e2:7c:dd:86:44:
                    91:99:c8:18:21:f2:43:e2:fe:b0:34:02:ae:e7:da:
                    5c:98:79:30:a4:a7:0d:30:8d:5d:d7:69:28:81:f0:
                    db:24:f5:dc:da:cf:fa:2d:b1:39:2c:54:9e:83:3f:
                    56:20:8a:9b:bf:21:7f:28:14:8f:bd:bd:c3:c3:26:
                    ea:4f:29:32:1e:da:c2:89:01:69:66:40:40:63:4f:
                    58:d8:5d:02:14:5d:66:01:c5:d1:40:20:28:7c:07:
                    4d:d8:1b:0b:ed:66:43:90:83:ac:5d:51:5e:c4:9e:
                    93:8a:f4:1d:6c:ea:cb:c1:77:f6:c8:e2:65:d9:50:
                    4f:37:30:7b:b4:4d:59:9e:21:4e:e1:b3:5d:82:f1:
                    b0:c0:58:0c:c3:fd:ec:ff:37:5a:01:43:03:95:2b:
                    ac:df:fb:38:ca:6a:74:c4:fb:05:74:24:01:b9:19:
                    ef:01:b3:1d:58:9c:35:b7:f3:52:26:8e:19:25:f8:
                    3f:37:e4:07:6f:66:1f:f4:c4:a0:a2:7d:19:c0:43:
                    df:f5:86:08:39:9a:c7:5a:c5:b0:9e:de:fb:7c:b8:
                    ab:bf:64:90:83:12:76:65:81:b0:f6:08:4d:0a:0f:
                    3c:0b:96:73:03:4b:a7:91:62:59:4c:6c:ca:dc:43:
                    a5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:A6:49:25:83:B0:2A:CE:69:9E:3E:D5:AC:C8:BB:7B:1B:23:64
            X509v3 Authority Key Identifier:
                keyid:96:D3:3A:1E:FA:C6:32:6A:9A:43:85:BD:02:B2:02:44:D5:36:7F:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltM6HvrGMmqaQ4W9ArICRNU2fxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/164e27-04a8-42dc-8272-86d5cb3b22b8/1/ltM6HvrGMmqaQ4W9ArICRNU2fxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/164e27-04a8-42dc-8272-86d5cb3b22b8/1/ltM6HvrGMmqaQ4W9ArICRNU2fxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:75:42:bc:35:66:55:f7:ea:54:65:c8:4c:90:75:f1:d4:69:
         e1:1a:96:35:4d:84:ca:d1:25:d7:40:58:66:94:9c:a5:aa:67:
         38:e7:18:f5:88:50:a6:9c:51:cb:e6:26:da:82:42:d0:09:14:
         a9:37:cd:07:a8:fa:3f:67:5b:f8:77:3e:3b:5e:1f:8c:26:fb:
         85:83:2e:7f:41:b8:9d:75:df:42:ea:6b:6f:a7:59:c4:ca:02:
         c9:39:e0:6a:1b:18:de:cd:57:88:54:d5:73:4c:81:24:3f:53:
         57:03:1c:7a:03:71:8d:79:e4:20:fe:c2:ee:77:e5:94:20:4c:
         9b:8f:0a:61:71:76:fa:ad:f1:95:dd:5f:c1:74:86:d2:23:1f:
         ff:2b:1c:b2:c2:83:cb:b4:47:6d:36:8a:73:b4:b6:37:fd:d0:
         95:6f:8f:cd:eb:68:0b:23:29:d1:08:d8:e9:89:12:70:a6:e3:
         52:73:cd:3c:24:f5:32:da:2d:de:14:d4:a8:08:57:f5:e8:b6:
         8e:7a:cb:88:29:83:98:9c:32:b9:db:e3:aa:18:35:87:55:e0:
         41:d3:f6:cf:89:39:c1:58:d7:33:aa:2c:ea:23:0a:00:22:2d:
         19:44:26:a5:e8:42:79:bf:f2:dc:7a:d7:62:1f:0e:44:82:d9:
         6b:1f:35:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:34 2024 by rpki-client on console-ams.rpki-client.org