Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.mft
File:                     tm3kn-yzfXgBi2UBzCh3lbjEVWQ.mft (raw, json)
Hash identifier:          Mdxpi7/ABd0YjF+9Y+2RkkXY/LmHzirrq3GArX6FKpI=
Subject key identifier:   75:96:4C:F4:CF:23:46:EE:21:4E:B9:34:14:95:B1:F4:2F:EE:02:9C
Authority key identifier: B6:6D:E4:9F:EC:B3:7D:78:01:8B:65:01:CC:28:77:95:B8:C4:55:64
Certificate issuer:       /CN=b66de49fecb37d78018b6501cc287795b8c45564
Certificate serial:       018C81172F0F0E6D2D18E6F31EA858DC82B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.mft
Manifest number:          04F7
Signing time:             Tue 19 Dec 2023 08:00:29 +0000
Manifest this update:     Tue 19 Dec 2023 08:00:29 +0000
Manifest next update:     Wed 20 Dec 2023 08:00:29 +0000
Files and hashes:         1: FnzdKKjxPmamPX_NCy-vbob58nw.roa (hash: Q30v8nsJ4ObCB3ns+iA9aMDNpBnY0cHntaS9XogqXsQ=)
                          2: tm3kn-yzfXgBi2UBzCh3lbjEVWQ.crl (hash: 0vG//1ajmqOHpB292DJ1o4SaJyXASS0FeEgmwNJ7woo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:81:17:2f:0f:0e:6d:2d:18:e6:f3:1e:a8:58:dc:82:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b66de49fecb37d78018b6501cc287795b8c45564
        Validity
            Not Before: Dec 19 08:00:29 2023 GMT
            Not After : Dec 20 08:00:29 2023 GMT
        Subject: CN=75964cf4cf2346ee214eb9341495b1f42fee029c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:ae:52:46:d9:73:6d:2f:d9:de:98:2a:b8:
                    44:58:9c:8c:bb:b6:ab:5d:0e:d0:6b:59:77:1a:c3:
                    d6:6d:16:a5:62:5f:19:22:74:ba:24:2b:81:c7:7d:
                    53:99:44:6b:5a:07:1e:6b:75:97:1f:3f:b2:8a:f7:
                    71:8c:a6:09:f1:6f:e1:ab:0a:35:a5:4a:bd:6c:b4:
                    79:92:6b:2e:8c:cb:8b:21:09:39:7d:91:f9:d6:0e:
                    7b:bd:12:5a:e6:6f:60:02:dc:d6:de:a7:bd:6c:6f:
                    15:81:ca:6a:92:7f:fa:ed:a4:bb:56:2d:e2:f8:ab:
                    a3:00:2f:91:df:f4:4d:90:e9:3e:12:2f:ec:1f:fb:
                    5e:f5:83:5c:7a:a6:07:56:81:86:7d:f8:64:18:64:
                    69:32:04:f9:53:11:f9:90:38:87:ed:14:c4:46:47:
                    dc:fd:aa:c3:bd:f8:0d:92:94:13:b9:d9:04:7c:79:
                    33:95:b8:57:50:5f:a7:08:ee:4f:e1:e4:d3:71:48:
                    7d:f4:93:26:f2:a6:17:78:b9:4a:f6:26:21:1f:c0:
                    07:72:f3:3f:23:40:01:72:2d:da:47:8c:d4:5a:e8:
                    19:13:98:6d:ee:10:d3:30:7e:3c:de:6f:0f:50:5d:
                    39:33:a8:64:02:21:8f:eb:77:de:2e:7c:27:0d:e5:
                    dc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:96:4C:F4:CF:23:46:EE:21:4E:B9:34:14:95:B1:F4:2F:EE:02:9C
            X509v3 Authority Key Identifier:
                keyid:B6:6D:E4:9F:EC:B3:7D:78:01:8B:65:01:CC:28:77:95:B8:C4:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/c12adb-b748-46c9-9656-a041ddeda260/1/tm3kn-yzfXgBi2UBzCh3lbjEVWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3f:38:de:0c:e5:6f:d2:19:ea:f4:99:e7:a8:92:0e:6d:c7:
         46:09:04:6e:aa:b5:84:27:7a:15:d5:cf:47:c7:01:66:fc:72:
         1a:5f:da:0a:24:2f:fe:7a:ca:0f:35:10:9a:4c:45:a0:51:ba:
         90:28:70:01:9c:13:8b:2e:64:fb:52:f7:34:81:64:46:be:42:
         40:6a:1c:74:3c:76:9f:c5:5a:b4:d3:8e:a3:a9:d5:0c:90:58:
         eb:20:0f:b9:2f:17:da:57:d5:ae:82:46:84:49:d9:1c:1b:f6:
         cb:fd:48:71:7e:41:d7:b1:f7:64:cb:8f:07:fe:bb:44:6e:ed:
         40:65:9d:00:c7:9e:8e:0a:f4:52:a0:f9:19:ed:ac:4b:93:7d:
         9d:38:83:5f:37:cf:3e:43:29:05:db:88:1b:4f:3e:69:54:0f:
         45:1a:7d:9c:4f:35:77:55:00:32:d7:3e:9d:95:e9:de:dc:9a:
         42:e9:48:00:21:7b:72:52:64:3e:ea:ef:d4:74:d0:5f:f6:e4:
         6c:ee:66:d8:ae:c1:48:e0:03:1f:26:4d:64:45:b3:1c:42:19:
         e6:80:35:21:d8:6c:1f:79:c1:58:6f:61:ad:a2:b3:03:75:73:
         c9:43:e3:7d:b0:0d:58:57:b6:1d:19:ce:ce:f6:47:31:3f:d3:
         06:95:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:52 2024 by rpki-client on console-fra.rpki-client.org