Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a09e0d-4fd7-4cb9-a835-250427768a6f/1/stlWHb5Sz_QKBOBWYoHACUN9T3w.mft
File:                     stlWHb5Sz_QKBOBWYoHACUN9T3w.mft (raw, json)
Hash identifier:          qXZhx2uirXg7xRLhUSqkZiIzK4Epf009aCw+KHs7rA4=
Subject key identifier:   94:3E:39:91:3D:81:C3:74:E1:1A:BC:26:50:CC:62:64:0A:2E:D2:12
Authority key identifier: B2:D9:56:1D:BE:52:CF:F4:0A:04:E0:56:62:81:C0:09:43:7D:4F:7C
Certificate issuer:       /CN=b2d9561dbe52cff40a04e0566281c009437d4f7c
Certificate serial:       0774F163
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/stlWHb5Sz_QKBOBWYoHACUN9T3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/a09e0d-4fd7-4cb9-a835-250427768a6f/1/stlWHb5Sz_QKBOBWYoHACUN9T3w.mft
Manifest number:          0997
Signing time:             Thu 23 Jun 2022 14:30:41 +0000
Manifest this update:     Thu 23 Jun 2022 14:30:41 +0000
Manifest next update:     Fri 24 Jun 2022 14:30:41 +0000
Files and hashes:         1: stlWHb5Sz_QKBOBWYoHACUN9T3w.crl (hash: US3EkAYkwhlke4+p7CzXoYJjOLvwdO+H0vIoqhyMXIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125104483 (0x774f163)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2d9561dbe52cff40a04e0566281c009437d4f7c
        Validity
            Not Before: Jun 23 14:30:41 2022 GMT
            Not After : Jun 24 14:30:41 2022 GMT
        Subject: CN=943e39913d81c374e11abc2650cc62640a2ed212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:1e:6e:65:cf:28:d1:77:00:8d:bd:18:59:
                    e2:86:12:55:c3:f3:cf:34:e6:fd:fc:45:78:10:1b:
                    c5:7e:08:38:bf:d7:bb:91:4d:47:24:8d:78:4e:8a:
                    cc:43:5f:c5:d3:d7:c1:e1:77:df:d6:93:b0:90:af:
                    0e:86:26:61:92:34:f4:6d:6f:42:e0:b8:81:88:c3:
                    82:20:54:46:12:e2:ea:96:bc:07:50:9f:7b:64:8e:
                    66:f5:05:28:32:c8:ef:71:51:18:db:d8:cf:89:77:
                    00:73:dd:05:a3:98:bb:5b:b8:17:e7:fd:1c:48:d8:
                    ed:3a:d9:2d:79:6f:30:1d:9d:1e:40:0a:c7:36:62:
                    14:97:e8:f9:44:8d:87:b9:12:cc:0d:5e:61:49:c0:
                    87:af:13:ec:17:81:4f:3e:57:95:d0:80:fc:06:e7:
                    6e:60:90:5e:03:6c:d9:95:cc:0c:3d:cb:4c:a6:a0:
                    7f:53:6f:fb:26:3b:d3:71:bf:54:82:a4:87:bc:19:
                    f0:c1:90:33:96:0c:71:6d:aa:b7:71:14:51:3f:7a:
                    ab:ff:8d:e4:5c:49:10:b5:43:e8:74:26:90:b9:50:
                    a6:60:56:59:55:ec:11:33:df:f6:bd:9d:c5:79:30:
                    06:18:8f:e0:82:1e:7b:cb:b5:9c:16:ba:27:ee:f0:
                    6d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:3E:39:91:3D:81:C3:74:E1:1A:BC:26:50:CC:62:64:0A:2E:D2:12
            X509v3 Authority Key Identifier:
                keyid:B2:D9:56:1D:BE:52:CF:F4:0A:04:E0:56:62:81:C0:09:43:7D:4F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/stlWHb5Sz_QKBOBWYoHACUN9T3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a09e0d-4fd7-4cb9-a835-250427768a6f/1/stlWHb5Sz_QKBOBWYoHACUN9T3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a09e0d-4fd7-4cb9-a835-250427768a6f/1/stlWHb5Sz_QKBOBWYoHACUN9T3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:b8:83:3f:cd:a1:30:a6:3b:d9:ea:2d:4a:71:6a:b6:b7:
         b5:ea:6f:d6:68:3b:9e:5f:27:d7:77:57:d5:0d:5b:e4:09:f0:
         68:73:96:55:79:f3:53:68:d8:f7:b6:18:11:2e:ce:25:36:e5:
         a4:aa:73:e6:f5:b3:9e:49:c1:03:fd:8c:b3:6f:41:8c:3b:d6:
         51:3f:e2:f0:f9:0c:cf:25:14:4a:90:1c:46:78:f4:c6:d9:d4:
         2c:c4:e1:23:ea:94:79:44:53:c6:57:98:21:7c:2d:d2:ec:b1:
         2b:66:ea:da:9e:2a:da:6a:3d:e0:c3:58:2c:f2:ff:dd:db:a2:
         29:1b:93:e0:9b:b7:fb:ad:c4:7a:2d:c5:e4:6f:63:88:fa:93:
         97:1e:81:ec:c5:dc:b6:7f:d0:b5:47:e8:47:e4:fd:62:2c:3d:
         c0:15:8c:37:bd:58:96:a1:58:dd:aa:0d:7d:83:94:84:11:de:
         d9:95:ff:2d:fc:d3:7d:71:fc:21:16:81:09:e9:cc:6f:ae:f9:
         f0:e1:a9:55:ba:3a:99:89:2f:8b:62:d0:45:ea:db:a4:ac:72:
         71:4b:87:a6:a8:ef:09:f2:80:19:e7:24:c7:3c:49:0b:f3:05:
         b8:bc:6f:1c:60:0a:e4:4d:7b:d5:5b:42:ec:e6:b6:4c:49:27:
         b0:c6:9a:f9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEB3TxYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhi
MmQ5NTYxZGJlNTJjZmY0MGEwNGUwNTY2MjgxYzAwOTQzN2Q0ZjdjMB4XDTIyMDYy
MzE0MzA0MVoXDTIyMDYyNDE0MzA0MVowMzExMC8GA1UEAxMoOTQzZTM5OTEzZDgx
YzM3NGUxMWFiYzI2NTBjYzYyNjQwYTJlZDIxMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALvJHm5lzyjRdwCNvRhZ4oYSVcPzzzTm/fxFeBAbxX4IOL/X
u5FNRySNeE6KzENfxdPXweF339aTsJCvDoYmYZI09G1vQuC4gYjDgiBURhLi6pa8
B1Cfe2SOZvUFKDLI73FRGNvYz4l3AHPdBaOYu1u4F+f9HEjY7TrZLXlvMB2dHkAK
xzZiFJfo+USNh7kSzA1eYUnAh68T7BeBTz5XldCA/AbnbmCQXgNs2ZXMDD3LTKag
f1Nv+yY703G/VIKkh7wZ8MGQM5YMcW2qt3EUUT96q/+N5FxJELVD6HQmkLlQpmBW
WVXsETPf9r2dxXkwBhiP4IIee8u1nBa6J+7wbS0CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSUPjmRPYHDdOEavCZQzGJkCi7SEjAfBgNVHSMEGDAWgBSy2VYdvlLP9AoE
4FZigcAJQ31PfDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3N0bFdIYjVTel9RS0JPQldZb0hBQ1VOOVQzdy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZDkvYTA5ZTBkLTRmZDctNGNiOS1hODM1LTI1MDQyNzc2OGE2Zi8x
L3N0bFdIYjVTel9RS0JPQldZb0hBQ1VOOVQzdy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkv
YTA5ZTBkLTRmZDctNGNiOS1hODM1LTI1MDQyNzc2OGE2Zi8xL3N0bFdIYjVTel9R
S0JPQldZb0hBQ1VOOVQzdy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB2duIM/zaEwpjvZ6i1KcWq2t7Xq
b9ZoO55fJ9d3V9UNW+QJ8GhzllV581No2Pe2GBEuziU25aSqc+b1s55JwQP9jLNv
QYw71lE/4vD5DM8lFEqQHEZ49MbZ1CzE4SPqlHlEU8ZXmCF8LdLssStm6tqeKtpq
PeDDWCzy/93boikbk+Cbt/utxHotxeRvY4j6k5cegezF3LZ/0LVH6Efk/WIsPcAV
jDe9WJahWN2qDX2DlIQR3tmV/y38031x/CEWgQnpzG+u+fDhqVW6OpmJL4ti0EXq
26SscnFLh6ao7wnygBnnJMc8SQvzBbi8bxxgCuRNe9VbQuzmtkxJJ7DGmvk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:54 2024 by rpki-client on console-fra.rpki-client.org