Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft
File:                     nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft (raw, json)
Hash identifier:          vLen9VBEi+NdaMdxplytmKlU5yzU2uxjH420f1f2e8s=
Subject key identifier:   D3:64:B2:41:BA:3F:D7:47:78:B3:BB:B1:C3:AF:42:AE:90:F4:07:1A
Authority key identifier: 9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA
Certificate issuer:       /CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
Certificate serial:       01886BF915C2820E19DAC71DCDEC20E3055C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft
Manifest number:          09E4
Signing time:             Tue 30 May 2023 09:24:25 +0000
Manifest this update:     Tue 30 May 2023 09:24:25 +0000
Manifest next update:     Wed 31 May 2023 09:24:25 +0000
Files and hashes:         1: 1-EGrs_xcIoZ-tIMFNhxR8sTVAlk.roa (hash: d2O/hmDQyIjvVcR9mHA/1jNqJ3lZIlJfcVUNXPCv568=)
                          2: nTFcvKZU2A-y8mkl1afk4Y5ajbo.crl (hash: pkI+bQIM5w/1e6E35XOvoNHEOMYGzMMASM6FUoJSV3Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6b:f9:15:c2:82:0e:19:da:c7:1d:cd:ec:20:e3:05:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d315cbca654d80fb2f26925d5a7e4e18e5a8dba
        Validity
            Not Before: May 30 09:24:25 2023 GMT
            Not After : May 31 09:24:25 2023 GMT
        Subject: CN=d364b241ba3fd74778b3bbb1c3af42ae90f4071a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:45:99:db:a6:1d:a1:c6:5a:b5:27:68:2c:f8:
                    68:9c:23:8a:68:21:5e:64:42:86:d8:19:bf:4f:f6:
                    23:dd:10:61:a0:08:c8:e8:98:53:0c:f2:1a:8a:49:
                    d5:b7:86:a2:73:6c:21:fd:b9:ea:90:36:74:97:9f:
                    c4:f4:7a:5e:5b:a3:72:aa:f0:7f:bc:62:d3:4a:49:
                    a2:2a:4d:ce:34:39:5c:76:d6:11:0c:63:7c:b4:65:
                    4a:b3:7e:13:94:02:67:8c:fc:35:48:02:3b:1b:e2:
                    bf:4b:1f:dc:39:c3:c5:63:00:d7:4c:ab:d8:4d:3c:
                    e5:2e:1a:9b:72:d0:11:a8:a3:65:8d:e7:5e:54:ba:
                    38:42:35:85:31:1d:b5:ca:e6:9f:17:82:71:bf:e6:
                    a3:61:97:5a:17:db:53:82:92:dd:76:f5:6a:98:ce:
                    f3:ab:21:31:52:53:cb:fc:8e:0d:f6:1f:8c:4b:53:
                    5a:30:9f:98:37:96:53:e6:48:24:6f:4e:26:78:e7:
                    1f:7d:77:f1:88:95:5d:34:a3:ec:84:4d:07:02:b6:
                    5a:a2:5f:48:f5:0e:21:91:4b:5a:a0:87:97:ca:15:
                    9c:6a:09:78:3b:54:02:59:c6:09:cc:01:28:cb:a4:
                    d0:4a:9e:e4:77:0a:2f:de:9a:65:50:20:cc:ab:0e:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:B2:41:BA:3F:D7:47:78:B3:BB:B1:C3:AF:42:AE:90:F4:07:1A
            X509v3 Authority Key Identifier:
                keyid:9D:31:5C:BC:A6:54:D8:0F:B2:F2:69:25:D5:A7:E4:E1:8E:5A:8D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTFcvKZU2A-y8mkl1afk4Y5ajbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/f301cd-9f4e-4113-a5fc-66018f715b03/1/nTFcvKZU2A-y8mkl1afk4Y5ajbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:30:77:6b:5e:cf:16:4d:07:ff:11:d4:49:b1:05:cf:8c:5c:
         69:41:ee:44:d8:53:f1:50:30:74:43:8a:15:26:85:80:e3:d3:
         32:5d:8f:3d:34:63:58:07:93:be:c0:7f:eb:e7:28:17:3e:6b:
         b9:c9:e1:47:97:f4:53:50:8c:d2:90:65:ad:26:1d:f2:1b:62:
         e8:32:40:3e:dc:5b:76:df:d2:5e:ba:a0:2e:7c:b0:de:40:27:
         1d:a2:d4:1f:ea:ca:cb:b1:e8:30:10:c5:81:6e:5b:1f:d6:d2:
         00:78:cd:17:7b:ee:02:64:49:27:b6:c7:e5:36:9e:65:70:56:
         3e:2e:b6:1a:ea:df:64:45:ba:4e:8c:f8:f1:40:f3:32:05:ad:
         d6:84:36:b6:74:b3:c5:30:84:5c:f1:08:ba:3f:ff:f6:51:14:
         40:48:b8:12:fb:15:93:fc:62:3f:e6:b4:e1:df:67:8b:c3:a3:
         46:50:ff:66:9f:dd:f7:0f:3c:71:9a:60:b9:bf:20:41:b3:ba:
         23:67:14:cb:53:80:24:43:84:17:bf:05:87:65:de:fd:b2:a9:
         26:30:63:48:24:a2:e2:c7:6e:87:aa:a1:64:79:ff:62:6e:c3:
         48:f6:59:6f:4c:86:bd:50:6a:79:24:02:93:85:5e:96:f7:ed:
         71:07:4d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:25 2023 by rpki-client on console.sobornost.net