Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
File:                     7t3kHzYumK430e_HyvPn08FlPuI.mft (raw, json)
Hash identifier:          6LfD0uGekJ8F6MMwhMDV2oYH6AvlMCR5GhVnpiBWV9A=
Subject key identifier:   19:2D:87:1A:C5:C3:1B:54:03:26:A1:17:13:91:80:7F:24:2A:DF:9D
Authority key identifier: EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2
Certificate issuer:       /CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
Certificate serial:       018FCC60D6E728FA97B439C5BC7905FCE678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft
Manifest number:          11A4
Signing time:             Fri 31 May 2024 02:00:49 +0000
Manifest this update:     Fri 31 May 2024 02:00:49 +0000
Manifest next update:     Sat 01 Jun 2024 02:00:49 +0000
Files and hashes:         1: 7t3kHzYumK430e_HyvPn08FlPuI.crl (hash: boMtPQCf165z/ta/hhTQjPMMhbT8Vju2LyyzE3zQ6Ls=)
                          2: BRLtv2bHAQdJF73V9LxnZAZP9o0.roa (hash: FEZB5yiTls5J8J0E28yNVUAEk3M8uLVxsZkmJP7/NZg=)
                          3: pQzdhVKFmzw5Ff-IwQe6f4oJjbU.roa (hash: 9FqKAnn6lTbVPZl3tFM6UZFZSPuQ13ePhggIEkhVq00=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:cc:60:d6:e7:28:fa:97:b4:39:c5:bc:79:05:fc:e6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eedde41f362e98ae37d1efc7caf3e7d3c1653ee2
        Validity
            Not Before: May 31 02:00:49 2024 GMT
            Not After : Jun  1 02:00:49 2024 GMT
        Subject: CN=192d871ac5c31b540326a1171391807f242adf9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:19:cf:2f:bb:1c:7d:1c:e3:0b:e5:4d:22:
                    08:82:39:0c:b3:77:67:2a:da:7f:0f:2d:5c:76:b0:
                    b5:3d:71:21:23:12:4a:f0:e8:d5:1e:2b:20:b4:36:
                    aa:ef:9c:7c:1e:de:34:2e:8a:0f:f3:a4:85:7d:7d:
                    fb:4a:9a:a2:05:cb:44:d7:03:4f:c8:fe:4d:49:7c:
                    62:f4:36:42:07:2e:c9:9c:7c:a4:f5:63:66:30:aa:
                    30:5e:1f:b0:fd:bb:c3:8f:12:fe:c5:82:7b:66:61:
                    b3:f3:7b:ef:f7:02:2e:63:33:b0:1d:30:8d:15:91:
                    ab:7a:04:37:0e:b2:20:a2:7c:e2:62:78:99:93:6f:
                    95:73:7e:ce:e7:21:2f:36:71:a9:be:7c:b1:7a:30:
                    1c:ae:6a:53:fe:72:b7:50:59:a2:02:46:b5:ff:b7:
                    d5:8e:03:e5:3b:5b:48:70:e2:1a:48:59:45:45:e4:
                    7e:f6:f8:6f:94:9f:77:d7:f4:40:88:ce:65:be:74:
                    37:6d:fe:a2:0a:74:f7:1b:87:e1:ac:34:5c:48:59:
                    9b:dc:60:9d:1c:be:08:61:3e:f1:f8:b7:7c:4e:df:
                    72:c5:50:6a:8f:0f:a7:55:f5:05:dd:fa:6f:82:87:
                    fe:31:d1:57:7c:7b:c7:cc:d8:88:98:b0:e9:eb:16:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2D:87:1A:C5:C3:1B:54:03:26:A1:17:13:91:80:7F:24:2A:DF:9D
            X509v3 Authority Key Identifier:
                keyid:EE:DD:E4:1F:36:2E:98:AE:37:D1:EF:C7:CA:F3:E7:D3:C1:65:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7t3kHzYumK430e_HyvPn08FlPuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/626fa6-6eca-476e-a5af-afe63376c88f/1/7t3kHzYumK430e_HyvPn08FlPuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:26:d2:d6:61:e2:76:03:3a:04:58:c3:4e:2b:7e:17:85:7b:
         69:a2:cd:21:63:c1:58:30:ae:4e:b4:b8:b1:7c:e8:24:31:33:
         fb:9d:4b:70:bb:b7:f0:d3:4d:ae:ff:c3:d3:44:05:bb:8e:8e:
         91:b6:a4:62:1c:81:fc:d8:5c:19:30:79:7a:49:c9:ab:7b:88:
         7a:18:7a:d8:26:80:2d:58:90:7e:41:70:2d:80:72:21:93:77:
         e2:73:a5:83:a0:03:ff:bc:24:ec:cc:bd:53:87:4f:20:05:65:
         94:3e:fc:df:27:ac:33:e0:f9:06:46:a1:68:fd:37:28:48:5a:
         3a:8d:b8:66:de:7d:8f:4e:ee:fe:77:7b:2c:07:ab:2f:3f:0d:
         f6:79:39:7a:ff:f2:db:f4:fe:99:77:8e:bb:1f:7b:13:94:ff:
         45:9b:33:cf:17:12:cb:e9:b5:9c:63:57:4f:ce:da:88:84:95:
         bd:82:d6:de:f6:85:6a:71:8f:b1:b1:f1:04:d2:d6:16:8b:02:
         aa:57:e0:a8:5a:5e:50:27:a4:5a:de:34:ff:48:05:57:8c:24:
         23:d1:fd:09:5b:f1:c3:5c:01:f5:46:12:bf:57:fd:60:6e:3d:
         30:18:47:d0:87:5f:62:97:e5:7d:5d:a3:bd:cf:2c:13:d8:ff:
         57:37:14:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:12 2024 by rpki-client on console-fra.rpki-client.org