Manifest

$ rpki-client -vvf rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.mft
File:                     1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.mft (raw, json)
Hash identifier:          AXY37H07hDOfODr4l5SUlCCjxKc25JkwVgW6qrXmroE=
Subject key identifier:   4F:34:45:92:A6:4F:8F:D5:1B:2E:66:37:A8:9F:D4:A0:47:32:33:67
Authority key identifier: 1B:A1:2C:A1:D5:8D:BF:55:42:39:16:86:E6:CF:8C:62:BF:8B:F1:F9
Certificate issuer:       /CN=1ba12ca1d58dbf5542391686e6cf8c62bf8bf1f9
Certificate serial:       3E6CA1705B7A9577C27306A740DBECCB3223E751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6EsodWNv1VCORaG5s-MYr-L8fk.cer
Subject info access:      rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.mft
Manifest number:          0196
Signing time:             Tue 09 Jan 2024 09:45:28 +0000
Manifest this update:     Tue 09 Jan 2024 09:40:28 +0000
Manifest next update:     Wed 10 Jan 2024 10:27:28 +0000
Files and hashes:         1: 1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.crl (hash: sTrVVufdRNpPB1iIVCp2mqc24VVOcPgAOflqSUvc8e8=)
                          2: AS208690.asa (hash: pU3F8Q5IDtjzqlBttAdWAs/WjeB/Ia+NFqqrFisMMz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:6c:a1:70:5b:7a:95:77:c2:73:06:a7:40:db:ec:cb:32:23:e7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba12ca1d58dbf5542391686e6cf8c62bf8bf1f9
        Validity
            Not Before: Jan  9 09:40:28 2024 GMT
            Not After : Jan 10 10:27:28 2024 GMT
        Subject: CN=4F344592A64F8FD51B2E6637A89FD4A047323367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:87:67:ce:a1:9c:8e:93:66:19:b3:03:26:
                    bf:04:9e:6d:6a:81:fe:e0:5d:3e:50:72:70:88:ee:
                    a8:67:c6:fd:61:8a:c4:ca:6d:32:28:8d:e3:f6:9c:
                    ea:99:15:73:37:14:49:6d:a8:f1:84:09:37:a5:88:
                    df:93:ce:29:e9:e3:aa:81:9e:5e:5e:3f:50:68:0c:
                    e6:36:01:e2:08:96:dd:4e:ca:ed:d4:de:ca:12:33:
                    8d:e0:20:2b:ea:d3:b6:e9:d7:f3:a9:67:4e:64:b4:
                    d5:59:2d:11:ca:44:4b:0c:26:a7:3f:73:01:b7:71:
                    c4:82:8a:42:cf:4b:17:56:ef:83:c2:0f:4b:d4:56:
                    25:9a:13:a2:bc:70:a9:97:cf:f3:48:2a:9b:0b:cf:
                    b8:bf:55:0b:50:1a:46:89:cb:36:c9:e6:2c:ba:02:
                    88:9a:19:5a:16:2f:a9:72:03:c6:3e:1f:b3:e0:20:
                    f9:b1:a9:35:db:ac:fa:9e:bd:cb:dc:57:05:bf:74:
                    09:45:25:24:7d:67:45:2e:50:d1:57:6d:41:27:0b:
                    7b:42:f9:c5:de:e6:91:e8:67:e4:c5:4c:bc:88:09:
                    c4:3f:01:0a:ec:5f:47:7c:c1:f2:04:5b:70:35:01:
                    1d:d8:c6:5e:27:4f:b2:81:8d:03:70:4e:10:c7:b9:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:45:92:A6:4F:8F:D5:1B:2E:66:37:A8:9F:D4:A0:47:32:33:67
            X509v3 Authority Key Identifier:
                keyid:1B:A1:2C:A1:D5:8D:BF:55:42:39:16:86:E6:CF:8C:62:BF:8B:F1:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6EsodWNv1VCORaG5s-MYr-L8fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Cube/0/1BA12CA1D58DBF5542391686E6CF8C62BF8BF1F9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:20:dd:b9:18:9c:4e:5e:f4:15:00:30:a5:0a:01:12:71:5f:
         9f:9b:05:08:99:ee:d2:00:0a:20:e7:e1:8b:5d:d2:9f:69:0d:
         c5:93:c9:1c:25:08:7f:07:ae:6f:fc:da:82:74:60:74:5c:f8:
         5b:9a:d7:6b:af:ae:3b:fa:7a:d7:3a:28:37:1d:c6:7e:05:6b:
         49:65:ad:b5:cc:ad:ef:31:d7:de:f1:e2:1b:44:fa:f8:f8:58:
         b6:81:05:d5:2f:fb:42:29:f2:92:90:d4:d0:d7:67:f5:a5:c5:
         52:c4:a0:2b:06:7c:30:99:5b:dc:6c:3a:c6:30:e5:47:1f:c5:
         9b:74:7b:98:2e:a2:77:cd:a5:77:eb:83:37:94:43:d0:53:27:
         bf:a0:7c:8e:d3:45:57:cc:a8:67:5f:ff:68:a1:12:5d:13:48:
         a7:f9:d5:69:d6:76:1b:52:ea:5d:5e:67:6d:0a:7a:89:d8:9c:
         e7:70:74:62:73:af:40:9d:73:14:ba:28:3d:fd:6d:34:3b:44:
         74:1b:08:72:70:bb:0f:8a:7b:40:d3:7b:a8:bc:33:50:98:15:
         3e:39:88:95:49:86:35:c3:d8:e7:f5:c4:fa:9e:37:81:b1:11:
         c2:89:5f:41:0e:82:fa:6a:34:36:3f:99:85:c8:a9:f2:da:2d:
         fe:fe:bb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:31 2024 by rpki-client on console-ams.rpki-client.org