Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/Ll12obOwXeQkj-sctW8PG1hRu7o.mft
File:                     Ll12obOwXeQkj-sctW8PG1hRu7o.mft (raw, json)
Hash identifier:          ukZvO9JyuDXuAIMe9eSDUyY62D9bwfv23JPAnt8O698=
Subject key identifier:   42:A7:FB:7B:8F:66:06:58:89:D1:4A:53:30:36:88:45:21:76:DF:0E
Authority key identifier: 2E:5D:76:A1:B3:B0:5D:E4:24:8F:EB:1C:B5:6F:0F:1B:58:51:BB:BA
Certificate issuer:       /CN=2e5d76a1b3b05de4248feb1cb56f0f1b5851bbba
Certificate serial:       018BF077AA5E7BDA84565879C4F9B162ACBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ll12obOwXeQkj-sctW8PG1hRu7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/Ll12obOwXeQkj-sctW8PG1hRu7o.mft
Manifest number:          035E
Signing time:             Tue 21 Nov 2023 06:00:55 +0000
Manifest this update:     Tue 21 Nov 2023 06:00:55 +0000
Manifest next update:     Wed 22 Nov 2023 06:00:55 +0000
Files and hashes:         1: Ll12obOwXeQkj-sctW8PG1hRu7o.crl (hash: P5eExsiqx61jLesI3dEruTE31WdJeLQRl5+1gemYw8w=)
                          2: S3JoQaBMBr0ndaROBplG69gZK4I.roa (hash: XyioIK0PszcmyIpfTQvDTmk2C7Ih4JQ0VkV/b1oxid4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f0:77:aa:5e:7b:da:84:56:58:79:c4:f9:b1:62:ac:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e5d76a1b3b05de4248feb1cb56f0f1b5851bbba
        Validity
            Not Before: Nov 21 06:00:55 2023 GMT
            Not After : Nov 22 06:00:55 2023 GMT
        Subject: CN=42a7fb7b8f66065889d14a53303688452176df0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:e4:ab:38:ea:67:92:d1:46:6f:56:4c:34:ec:
                    c2:5f:fb:53:52:64:2d:94:30:90:ea:ed:06:57:16:
                    1a:b1:b0:90:02:8a:6b:9b:16:32:a7:4a:7c:58:c8:
                    9b:50:5f:76:42:7e:29:8a:37:60:84:a8:ef:a6:d4:
                    7e:17:94:c3:4d:06:fb:d1:97:7e:e8:e3:d4:7c:d0:
                    76:3e:2b:9f:a6:b0:3a:55:54:7f:d1:72:aa:6f:f3:
                    06:97:6c:8e:e3:02:95:b1:5a:8a:94:8c:38:08:ae:
                    55:6c:c1:31:a9:27:90:8b:b6:9e:89:61:27:e9:b5:
                    3d:e9:45:fd:3a:23:66:53:e9:dd:47:c2:0d:8c:cf:
                    34:82:6f:29:be:5d:ac:20:28:90:dd:6d:14:25:18:
                    9e:17:00:75:3b:d2:3b:5d:09:c9:71:cc:f6:44:08:
                    4c:42:86:38:6f:cd:fd:3b:de:43:af:54:79:58:48:
                    70:99:aa:28:12:30:4a:48:19:48:e7:bc:0b:62:98:
                    74:fa:90:d0:49:e2:68:d3:10:99:bd:b5:02:5f:53:
                    1e:5b:9a:79:de:c8:3f:84:3a:d4:7d:bf:76:b9:ab:
                    45:c0:35:d5:ba:11:eb:9d:47:0e:1d:d0:26:74:0f:
                    c5:64:b6:c9:d1:49:52:b9:da:65:51:d6:dd:a1:8b:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A7:FB:7B:8F:66:06:58:89:D1:4A:53:30:36:88:45:21:76:DF:0E
            X509v3 Authority Key Identifier:
                keyid:2E:5D:76:A1:B3:B0:5D:E4:24:8F:EB:1C:B5:6F:0F:1B:58:51:BB:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ll12obOwXeQkj-sctW8PG1hRu7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/Ll12obOwXeQkj-sctW8PG1hRu7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/bb0bba-f095-423e-92d2-7995bf60803b/1/Ll12obOwXeQkj-sctW8PG1hRu7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:31:52:4f:f1:71:11:4d:2f:fe:0c:a2:a2:63:86:28:71:20:
         52:d9:cf:fe:aa:ba:11:9f:ed:7e:f6:fe:b8:06:2b:70:b3:14:
         50:f9:09:c0:ad:d9:e4:39:1d:80:42:e9:51:ec:67:71:40:67:
         49:6a:d4:20:ba:58:2e:c3:bf:2d:fe:c1:da:7c:65:8d:76:7a:
         17:67:eb:f0:3f:fd:54:f7:fb:f6:63:a1:3a:72:63:2e:11:cf:
         14:ed:37:84:eb:1c:79:ad:06:b8:69:9a:9f:83:0d:45:82:14:
         97:d9:2f:38:56:38:99:42:53:ee:f7:ba:94:21:60:ef:e4:c9:
         42:8c:8d:58:2e:6c:57:6f:e5:a4:76:d4:9f:ae:27:61:d5:3e:
         08:ea:db:a6:c7:f6:93:e8:d8:7d:7c:a5:9a:87:84:8f:03:13:
         3f:c6:e6:73:2a:48:4e:0d:ab:fb:89:54:1f:77:ba:64:e0:27:
         f2:e1:6c:bb:7f:00:39:c9:35:9d:6f:c8:cb:9b:58:c9:0d:e1:
         66:a8:b6:80:63:58:35:e0:c0:44:ee:8e:6c:42:c8:d1:fe:d4:
         e7:26:bb:8f:53:5a:6f:2f:96:18:e9:fa:0c:04:fa:b1:c0:68:
         8b:28:41:29:e5:6b:e7:81:d1:43:a8:b6:94:e1:b7:36:3a:53:
         db:c2:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:47 2024 by rpki-client on console-fra.rpki-client.org