Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/87d00b-d598-4a55-884c-210cb3b8c4b0/1/aFfgSZhmxjSToAh0FkAIHYs1bGU.mft
File:                     aFfgSZhmxjSToAh0FkAIHYs1bGU.mft (raw, json)
Hash identifier:          VahtFqqfqEKlYvmUZHNu5txpNe85phDNtCi3AVylj4U=
Subject key identifier:   9F:56:D9:C2:41:8C:9A:1C:46:4C:E8:43:6D:5C:D4:A6:0A:3E:C5:F4
Authority key identifier: 68:57:E0:49:98:66:C6:34:93:A0:08:74:16:40:08:1D:8B:35:6C:65
Certificate issuer:       /CN=6857e0499866c63493a008741640081d8b356c65
Certificate serial:       018B19089A36710410B0754E1BE723C4BDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFfgSZhmxjSToAh0FkAIHYs1bGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/87d00b-d598-4a55-884c-210cb3b8c4b0/1/aFfgSZhmxjSToAh0FkAIHYs1bGU.mft
Manifest number:          0867
Signing time:             Tue 10 Oct 2023 10:01:15 +0000
Manifest this update:     Tue 10 Oct 2023 10:01:15 +0000
Manifest next update:     Wed 11 Oct 2023 10:01:15 +0000
Files and hashes:         1: aFfgSZhmxjSToAh0FkAIHYs1bGU.crl (hash: oHnrJyGmUA3HkglWzWsEX9MsIc8dXEJx3n8STBib434=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:19:08:9a:36:71:04:10:b0:75:4e:1b:e7:23:c4:bd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6857e0499866c63493a008741640081d8b356c65
        Validity
            Not Before: Oct 10 10:01:15 2023 GMT
            Not After : Oct 11 10:01:15 2023 GMT
        Subject: CN=9f56d9c2418c9a1c464ce8436d5cd4a60a3ec5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:9a:77:0b:10:8d:a6:4c:35:94:dd:4d:41:
                    47:25:ef:90:ab:25:8a:b8:a3:ca:fd:48:f4:b1:1b:
                    b4:ad:75:1e:c3:ea:7c:64:8e:79:22:be:57:77:0b:
                    2c:92:be:ff:1d:76:de:6c:04:39:9c:e3:ff:27:5c:
                    05:a6:b6:e4:ba:5d:af:46:74:f8:3a:9a:3c:70:68:
                    5f:25:17:9a:63:41:9f:f2:cd:6d:9e:c2:62:91:6d:
                    01:3d:3a:63:f8:84:fa:3c:3c:03:70:13:f8:ea:c0:
                    fd:58:be:f2:64:c6:a5:02:22:21:7b:ce:56:44:ae:
                    fb:2b:29:76:ce:3f:eb:a6:98:9c:13:58:16:d9:d5:
                    c4:3d:f2:28:2d:59:f6:16:04:bb:ce:d9:ae:1d:43:
                    01:78:99:5e:3a:cc:14:20:6f:a7:06:d4:48:c2:0f:
                    b6:a0:13:9a:ab:09:3f:17:9f:e3:a4:a3:c3:fb:20:
                    f0:97:73:45:f5:71:18:ef:30:a4:2f:f9:2f:0f:ce:
                    b7:8f:c3:9f:a1:8d:47:91:69:ae:de:e4:f7:00:a6:
                    dc:f7:19:65:c7:c9:64:0d:36:4e:49:df:a0:ac:0e:
                    a6:b7:bf:01:a4:fb:11:ee:e4:2b:e1:70:f1:a0:2c:
                    75:e7:0b:a1:b6:a2:82:fb:92:b5:21:09:3c:df:be:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:56:D9:C2:41:8C:9A:1C:46:4C:E8:43:6D:5C:D4:A6:0A:3E:C5:F4
            X509v3 Authority Key Identifier:
                keyid:68:57:E0:49:98:66:C6:34:93:A0:08:74:16:40:08:1D:8B:35:6C:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFfgSZhmxjSToAh0FkAIHYs1bGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/87d00b-d598-4a55-884c-210cb3b8c4b0/1/aFfgSZhmxjSToAh0FkAIHYs1bGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/87d00b-d598-4a55-884c-210cb3b8c4b0/1/aFfgSZhmxjSToAh0FkAIHYs1bGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:8a:ee:cd:34:ca:45:19:df:91:85:05:80:ae:18:b4:54:
         26:a4:a2:f9:f8:f2:54:39:97:43:25:67:18:43:1f:88:75:80:
         e3:12:c9:9a:6c:d7:fc:b8:13:43:c8:02:af:68:91:6e:75:a2:
         14:fb:54:f8:d0:5a:4a:74:85:8f:04:dd:f4:2a:04:33:29:94:
         c6:ee:9d:fd:af:9e:a2:13:45:87:be:b9:1a:24:a0:33:89:a9:
         a8:db:ae:11:e3:b5:d4:d1:c1:f7:88:f1:67:65:5b:4a:9f:fc:
         c9:4b:1a:03:1e:14:0e:e1:91:e1:37:fa:ef:b2:ba:00:c3:2e:
         9a:d2:dd:2d:2c:14:64:2d:f1:9b:f6:3f:9d:c3:21:06:a6:56:
         42:4e:0a:d6:0d:4e:30:06:3b:8a:b2:91:04:cf:ab:64:db:41:
         29:58:dc:71:f2:8b:89:70:02:bd:21:51:40:73:78:6e:cc:ab:
         79:9a:ea:04:c5:3a:d8:24:b5:68:aa:e9:e2:35:a6:1a:24:db:
         c1:3d:f2:86:c7:37:4d:79:1d:09:22:93:6c:31:e2:1c:ba:14:
         9b:ae:2f:25:3f:20:6c:e2:27:9d:f3:50:70:49:b5:a5:d6:46:
         94:ae:50:08:93:d4:20:7c:c0:ca:ec:3b:0e:bf:97:be:d6:7d:
         05:27:8a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:37 2024 by rpki-client on console-fra.rpki-client.org