Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
File:                     NNTev4f2fLtEI3OBfn1i91ilms0.mft (raw, json)
Hash identifier:          7ntsZtwmu7brmZuFpSxTykQnh9ElIz5EQs9qzfvzPBw=
Subject key identifier:   A6:98:A5:D1:BE:F5:93:33:D9:A6:CE:C2:3E:63:D7:ED:A9:A8:D0:F7
Authority key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Certificate issuer:       /CN=34d4debf87f67cbb442373817e7d62f758a59acd
Certificate serial:       018D8CAAECA4BFC5178E9222987E50AF4E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft
Manifest number:          085F
Signing time:             Fri 09 Feb 2024 07:00:28 +0000
Manifest this update:     Fri 09 Feb 2024 07:00:28 +0000
Manifest next update:     Sat 10 Feb 2024 07:00:28 +0000
Files and hashes:         1: MyGPkACskWy7-5CvBoEuOKTBknU.roa (hash: py4bK8mc0WK/SG3BQK9xOE8sXhHJUWNhnU33XYtYB9I=)
                          2: NNTev4f2fLtEI3OBfn1i91ilms0.crl (hash: opBzeQ28EZG3WHc2FFiFHZo4HCyCeHAsvvAEtrf64v0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8c:aa:ec:a4:bf:c5:17:8e:92:22:98:7e:50:af:4e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34d4debf87f67cbb442373817e7d62f758a59acd
        Validity
            Not Before: Feb  9 07:00:28 2024 GMT
            Not After : Feb 10 07:00:28 2024 GMT
        Subject: CN=a698a5d1bef59333d9a6cec23e63d7eda9a8d0f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6d:c7:ac:0d:b4:c1:10:bf:37:46:93:b7:56:
                    57:24:ce:7b:db:be:c6:24:84:7d:1d:a6:f8:97:ea:
                    9b:47:e1:ea:bb:d7:07:34:c3:50:c6:84:0c:e9:d1:
                    51:b0:90:5d:a7:99:40:36:8f:04:a3:31:ca:82:70:
                    6c:c2:7f:c8:98:00:3b:d2:9c:35:18:f2:d0:fb:11:
                    64:f8:21:c1:a3:a9:29:84:de:25:a8:e4:c3:8b:34:
                    44:84:d2:48:41:ef:cb:26:2c:43:23:9a:d0:6e:7f:
                    c6:c4:45:e7:55:c4:ca:b8:15:da:c4:84:3b:83:2e:
                    d3:14:43:f1:6e:55:fa:4c:88:77:3e:62:a7:76:64:
                    39:2a:7f:fe:28:01:74:c8:4b:98:a0:ce:6b:f6:67:
                    b8:44:9d:5e:37:f9:66:26:4d:8c:24:0b:d6:2b:c5:
                    f6:17:32:20:2c:4f:4f:2c:e9:4e:dc:b1:95:8b:e3:
                    f0:c0:ed:9a:9a:45:3a:7a:ed:c2:12:3a:1d:8f:b6:
                    3d:b2:c1:37:2d:8c:b7:f5:1d:ae:5c:5d:c2:47:b9:
                    04:2e:ab:fa:42:12:4d:96:84:74:55:a2:7a:84:c7:
                    c3:6e:77:18:1d:a8:3c:f5:45:4b:35:01:62:ec:4d:
                    84:8e:3b:30:f3:db:45:89:ed:b2:e3:3b:7e:82:81:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:98:A5:D1:BE:F5:93:33:D9:A6:CE:C2:3E:63:D7:ED:A9:A8:D0:F7
            X509v3 Authority Key Identifier:
                keyid:34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:7f:3b:af:39:98:94:7f:74:cc:2f:ce:ca:ba:f5:4a:50:1d:
         3b:aa:8a:3f:85:7e:3e:6f:b5:78:94:6a:75:d9:7e:53:0b:a8:
         d1:a8:ad:ea:e9:58:c7:58:98:65:d4:84:ad:0a:42:60:46:8b:
         88:6a:ba:a5:fe:b4:8e:65:74:86:6f:05:5c:50:12:1d:56:e8:
         b0:7e:74:c6:58:d5:f1:1a:3d:50:eb:66:e1:c6:e7:48:5c:68:
         0e:1b:4d:c5:ea:f4:ff:51:d2:60:52:fc:85:d1:97:99:0f:80:
         6d:fa:46:10:b3:95:db:08:fc:0a:b3:2e:2d:d8:84:7b:7c:6f:
         50:02:d6:78:55:5a:b5:5d:22:9d:3c:be:9b:ab:fa:52:c5:d1:
         43:5a:e7:36:d7:97:ed:c2:8f:9e:df:3d:a0:84:94:79:82:6d:
         01:c1:a6:55:a9:0a:15:fe:cc:48:03:56:a5:8b:27:a2:f4:ba:
         e2:03:f6:e8:97:c0:94:35:39:04:cc:3b:81:96:fb:e6:ef:40:
         7e:f5:2f:97:50:3a:01:58:13:7b:9c:ad:8f:46:8f:a8:a6:e6:
         87:ca:c6:a5:e3:c4:07:50:4e:02:96:7c:d4:dd:7e:50:be:c2:
         65:4d:2a:32:1a:0e:f0:7e:3a:f1:9f:6b:8d:4f:25:19:de:4f:
         01:28:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:49 2024 by rpki-client on console-ams.rpki-client.org