Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.mft
File:                     rm8TbfPo_GU4paDP6Dj-dkpBY0Q.mft (raw, json)
Hash identifier:          xRQPk77IvvhA2jqT5GIYryBckia74zN4idqx8mi+zkI=
Subject key identifier:   59:54:8A:96:CF:67:45:E4:E4:A2:F2:7F:E0:37:DF:3B:8B:E8:EA:DA
Authority key identifier: AE:6F:13:6D:F3:E8:FC:65:38:A5:A0:CF:E8:38:FE:76:4A:41:63:44
Certificate issuer:       /CN=ae6f136df3e8fc6538a5a0cfe838fe764a416344
Certificate serial:       018CC85549DF3A20CD623C4029FEC5963916
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.mft
Manifest number:          0A42
Signing time:             Tue 02 Jan 2024 04:01:21 +0000
Manifest this update:     Tue 02 Jan 2024 04:01:21 +0000
Manifest next update:     Wed 03 Jan 2024 04:01:21 +0000
Files and hashes:         1: rm8TbfPo_GU4paDP6Dj-dkpBY0Q.crl (hash: Lh5dfsGni/qF/i10AYj96NhbyaQW2zc9aeu716ih20c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:55:49:df:3a:20:cd:62:3c:40:29:fe:c5:96:39:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6f136df3e8fc6538a5a0cfe838fe764a416344
        Validity
            Not Before: Jan  2 04:01:21 2024 GMT
            Not After : Jan  3 04:01:21 2024 GMT
        Subject: CN=59548a96cf6745e4e4a2f27fe037df3b8be8eada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:61:c6:53:6c:df:28:a3:27:1c:59:7e:84:64:
                    dc:f9:f0:82:4c:f2:69:9f:e3:bb:ef:85:e6:3e:1e:
                    de:05:5b:c9:0e:40:e1:84:17:3d:a0:7e:0c:38:f1:
                    5f:62:f1:20:8d:99:88:70:97:69:bf:fc:19:b8:7a:
                    a8:36:77:25:7d:2c:09:db:2e:33:07:7c:20:73:ee:
                    28:0e:86:42:2c:b2:0b:18:dc:30:b0:2f:9a:b1:28:
                    fc:00:dc:70:9c:34:5d:e8:af:2d:08:21:d1:79:15:
                    27:56:d5:0a:2b:ba:9e:66:e4:5f:35:c3:31:bb:b7:
                    86:23:12:ba:ab:4b:88:82:08:14:cf:2e:f4:69:dd:
                    7b:e7:a0:cc:4c:87:aa:08:b6:09:86:3a:b8:8c:70:
                    ee:36:7f:7f:47:c5:9e:36:04:81:44:b3:e5:71:9c:
                    75:e5:d9:69:0b:86:fb:ac:84:aa:be:54:48:ec:17:
                    19:94:28:b6:9e:13:39:72:bf:cc:63:4c:bf:6d:53:
                    2f:df:12:51:31:1a:a3:d3:c1:ce:c5:aa:72:9e:70:
                    85:ff:fe:ec:fe:a7:eb:ec:3e:db:a4:93:5b:ca:36:
                    fd:70:61:3d:c7:3d:f4:84:31:8c:02:45:e0:a4:18:
                    e3:03:ce:2b:40:b0:92:99:b3:3d:db:d1:c7:c0:01:
                    f4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:54:8A:96:CF:67:45:E4:E4:A2:F2:7F:E0:37:DF:3B:8B:E8:EA:DA
            X509v3 Authority Key Identifier:
                keyid:AE:6F:13:6D:F3:E8:FC:65:38:A5:A0:CF:E8:38:FE:76:4A:41:63:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/540685-0af1-4edd-9221-1dd7b6da85e8/1/rm8TbfPo_GU4paDP6Dj-dkpBY0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7b:a3:09:c1:c5:c1:cf:28:2f:9b:2a:c1:e9:12:16:b7:3a:
         e0:09:92:00:ae:5c:35:23:7f:62:fa:95:5d:1d:3c:d8:49:21:
         a8:69:b0:cb:0f:29:ce:c2:76:a5:e3:7a:ec:ca:b0:ff:26:fa:
         61:34:ed:b1:2f:5b:b4:31:3d:cf:89:ba:ee:1a:88:08:75:68:
         61:d7:0a:6a:e7:15:c7:33:5d:28:e7:52:cc:6c:73:61:fa:78:
         2c:e4:98:d1:19:72:9b:13:48:9b:2d:ab:37:b9:fe:78:3f:03:
         99:d8:8e:44:4a:0e:f6:ac:1b:8d:0b:3d:4f:fc:f1:fe:3f:27:
         6a:f3:b6:07:e7:30:8a:5a:da:56:82:70:5b:65:20:f8:e0:85:
         fe:00:5d:fb:08:43:bb:f0:8c:98:09:c9:81:96:8c:d3:6a:7c:
         67:07:44:be:23:79:b7:89:01:70:38:40:2b:41:bd:81:4b:63:
         15:de:7d:99:e5:80:89:99:b7:14:6c:2a:24:4c:65:ac:4d:3a:
         89:b3:0e:34:ac:48:5c:d5:e9:4b:77:72:a4:4a:5c:de:83:13:
         1b:83:40:ab:c7:02:28:56:e3:19:38:b9:2a:c4:55:bd:20:ce:
         b0:e3:a4:b0:f7:51:d9:13:b1:60:cf:f1:d4:58:10:c9:b3:d1:
         02:ce:ed:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzIVUnfOiDNYjxAKf7FljkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmYxMzZkZjNlOGZjNjUzOGE1YTBjZmU4MzhmZTc2NGE0
MTYzNDQwHhcNMjQwMTAyMDQwMTIxWhcNMjQwMTAzMDQwMTIxWjAzMTEwLwYDVQQD
Eyg1OTU0OGE5NmNmNjc0NWU0ZTRhMmYyN2ZlMDM3ZGYzYjhiZThlYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2HGU2zfKKMnHFl+hGTc+fCCTPJp
n+O774XmPh7eBVvJDkDhhBc9oH4MOPFfYvEgjZmIcJdpv/wZuHqoNnclfSwJ2y4z
B3wgc+4oDoZCLLILGNwwsC+asSj8ANxwnDRd6K8tCCHReRUnVtUKK7qeZuRfNcMx
u7eGIxK6q0uIgggUzy70ad1756DMTIeqCLYJhjq4jHDuNn9/R8WeNgSBRLPlcZx1
5dlpC4b7rISqvlRI7BcZlCi2nhM5cr/MY0y/bVMv3xJRMRqj08HOxapynnCF//7s
/qfr7D7bpJNbyjb9cGE9xz30hDGMAkXgpBjjA84rQLCSmbM929HHwAH0AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlUipbPZ0Xk5KLyf+A33zuL6OraMB8GA1UdIwQY
MBaAFK5vE23z6PxlOKWgz+g4/nZKQWNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm04VGJmUG9fR1U0cGFEUDZEai1ka3BCWTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NDA2ODUtMGFmMS00ZWRkLTkyMjEt
MWRkN2I2ZGE4NWU4LzEvcm04VGJmUG9fR1U0cGFEUDZEai1ka3BCWTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NDA2ODUtMGFmMS00ZWRkLTkyMjEtMWRkN2I2ZGE4NWU4
LzEvcm04VGJmUG9fR1U0cGFEUDZEai1ka3BCWTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXujCcHF
wc8oL5sqwekSFrc64AmSAK5cNSN/YvqVXR082EkhqGmwyw8pzsJ2peN67Mqw/yb6
YTTtsS9btDE9z4m67hqICHVoYdcKaucVxzNdKOdSzGxzYfp4LOSY0RlymxNImy2r
N7n+eD8DmdiOREoO9qwbjQs9T/zx/j8navO2B+cwilraVoJwW2Ug+OCF/gBd+whD
u/CMmAnJgZaM02p8ZwdEviN5t4kBcDhAK0G9gUtjFd59meWAiZm3FGwqJExlrE06
ibMONKxIXNXpS3dypEpc3oMTG4NAq8cCKFbjGTi5KsRVvSDOsOOksPdR2ROxYM/x
1FgQybPRAs7tbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:35 2024 by rpki-client on console-fra.rpki-client.org