Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/23017d-423f-4942-ab9f-ae21fac8d350/1/KCeketoWRwNFzS-Mb7ADcTzRFFg.mft
File:                     KCeketoWRwNFzS-Mb7ADcTzRFFg.mft (raw, json)
Hash identifier:          R4SpARPuGA62yQjxUUsGS9zxwpWz5U4koW67TJCEn9U=
Subject key identifier:   69:BF:FC:42:0D:BE:BC:89:FB:4D:B2:E2:80:D4:F3:3F:6C:28:0D:84
Authority key identifier: 28:27:A4:7A:DA:16:47:03:45:CD:2F:8C:6F:B0:03:71:3C:D1:14:58
Certificate issuer:       /CN=2827a47ada16470345cd2f8c6fb003713cd11458
Certificate serial:       018CAAEF78D50961BF0D25C756B52959E196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KCeketoWRwNFzS-Mb7ADcTzRFFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/23017d-423f-4942-ab9f-ae21fac8d350/1/KCeketoWRwNFzS-Mb7ADcTzRFFg.mft
Manifest number:          0691
Signing time:             Wed 27 Dec 2023 11:01:09 +0000
Manifest this update:     Wed 27 Dec 2023 11:01:09 +0000
Manifest next update:     Thu 28 Dec 2023 11:01:09 +0000
Files and hashes:         1: KCeketoWRwNFzS-Mb7ADcTzRFFg.crl (hash: nkdQfy0/xe6cnTZWHj8cL4WO7kF70RTZzPmULQtt35c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:aa:ef:78:d5:09:61:bf:0d:25:c7:56:b5:29:59:e1:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2827a47ada16470345cd2f8c6fb003713cd11458
        Validity
            Not Before: Dec 27 11:01:09 2023 GMT
            Not After : Dec 28 11:01:09 2023 GMT
        Subject: CN=69bffc420dbebc89fb4db2e280d4f33f6c280d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bd:2f:27:de:de:fb:93:49:02:ac:f4:66:e8:
                    64:39:6f:52:e6:78:56:ae:60:d7:8c:8a:31:e4:43:
                    ad:e3:14:e6:78:d5:a8:9d:1e:6d:0c:12:c8:fe:62:
                    7e:16:f0:03:24:06:d5:79:43:6b:75:4b:c3:c4:e4:
                    ea:e6:15:7e:6f:c2:e2:45:8b:38:5b:64:84:34:76:
                    f3:bf:ab:61:8e:e9:30:62:ac:f5:00:eb:2a:0b:9d:
                    b6:9c:68:50:cf:0d:e4:a6:08:12:f7:fa:30:dd:6c:
                    8b:1c:e8:8e:82:89:c7:c5:90:d5:88:c0:47:d9:5f:
                    9e:c5:91:70:5c:68:e2:0b:50:0e:b5:86:c1:30:75:
                    a6:ac:b1:48:36:47:f4:8c:0a:40:b0:d1:66:1d:0b:
                    62:9b:9a:bd:31:ff:dd:af:12:8a:94:c4:ce:5c:6b:
                    c3:cb:72:12:d7:6b:4e:19:d3:d8:9a:1e:b3:f8:35:
                    52:57:71:88:73:51:3a:05:03:fb:ac:14:bd:7c:d9:
                    ad:b0:62:b2:2a:c8:2e:71:96:24:78:d0:c1:42:49:
                    74:69:76:e8:de:8f:4f:ad:e6:59:8d:50:4f:c4:eb:
                    80:fa:1f:de:e5:e8:5a:db:d9:71:8d:10:e3:84:38:
                    75:e0:6e:c7:f7:53:8f:a1:2a:3b:78:37:fc:da:91:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BF:FC:42:0D:BE:BC:89:FB:4D:B2:E2:80:D4:F3:3F:6C:28:0D:84
            X509v3 Authority Key Identifier:
                keyid:28:27:A4:7A:DA:16:47:03:45:CD:2F:8C:6F:B0:03:71:3C:D1:14:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCeketoWRwNFzS-Mb7ADcTzRFFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/23017d-423f-4942-ab9f-ae21fac8d350/1/KCeketoWRwNFzS-Mb7ADcTzRFFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/23017d-423f-4942-ab9f-ae21fac8d350/1/KCeketoWRwNFzS-Mb7ADcTzRFFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2d:da:08:5e:1e:1c:60:c7:d6:c3:35:fb:e2:1e:44:93:5e:
         10:6d:4f:9f:83:38:7a:30:e6:30:fc:38:41:37:fd:94:d7:a4:
         ce:bd:a8:ad:0b:12:c9:1b:1f:0e:bc:e1:a9:25:f7:92:cc:ef:
         1f:92:7a:64:0b:7e:b1:2b:39:ba:aa:c1:28:52:e8:6b:58:ee:
         fa:4f:42:10:49:b7:93:be:e8:fb:7e:77:a0:57:91:f9:90:01:
         80:3f:3d:37:01:ad:89:07:05:ca:6e:2a:fc:e4:e7:1d:ee:99:
         d5:d0:7c:17:a6:66:02:69:7c:19:93:23:0a:89:95:36:c0:c9:
         c7:a6:34:9c:19:33:82:9e:15:d5:de:47:54:ce:68:64:24:b9:
         92:40:f7:43:e2:6e:d8:12:14:68:83:56:6e:35:2f:88:c9:d9:
         47:53:51:a2:0c:e1:c8:07:c5:a9:82:5b:b7:14:da:ab:fb:0f:
         07:4c:0d:c9:bd:a0:8f:60:fc:0a:4a:46:b1:2c:f7:bb:b4:0f:
         be:40:60:0f:d9:bd:a0:c3:ab:43:fe:d2:1f:a0:db:49:d4:e4:
         3a:c9:1b:f0:e6:3e:b1:13:1e:06:92:8b:82:0a:a1:19:fd:89:
         af:72:35:78:f6:03:fd:b6:82:f8:a4:f2:4f:a5:d7:85:42:e6:
         52:8f:ea:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyq73jVCWG/DSXHVrUpWeGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjdhNDdhZGExNjQ3MDM0NWNkMmY4YzZmYjAwMzcxM2Nk
MTE0NTgwHhcNMjMxMjI3MTEwMTA5WhcNMjMxMjI4MTEwMTA5WjAzMTEwLwYDVQQD
Eyg2OWJmZmM0MjBkYmViYzg5ZmI0ZGIyZTI4MGQ0ZjMzZjZjMjgwZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r0vJ97e+5NJAqz0ZuhkOW9S5nhW
rmDXjIox5EOt4xTmeNWonR5tDBLI/mJ+FvADJAbVeUNrdUvDxOTq5hV+b8LiRYs4
W2SENHbzv6thjukwYqz1AOsqC522nGhQzw3kpggS9/ow3WyLHOiOgonHxZDViMBH
2V+exZFwXGjiC1AOtYbBMHWmrLFINkf0jApAsNFmHQtim5q9Mf/drxKKlMTOXGvD
y3IS12tOGdPYmh6z+DVSV3GIc1E6BQP7rBS9fNmtsGKyKsgucZYkeNDBQkl0aXbo
3o9PreZZjVBPxOuA+h/e5eha29lxjRDjhDh14G7H91OPoSo7eDf82pFmIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGm//EINvryJ+02y4oDU8z9sKA2EMB8GA1UdIwQY
MBaAFCgnpHraFkcDRc0vjG+wA3E80RRYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0Nla2V0b1dSd05GelMtTWI3QURjVHpSRkZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yMzAxN2QtNDIzZi00OTQyLWFiOWYt
YWUyMWZhYzhkMzUwLzEvS0Nla2V0b1dSd05GelMtTWI3QURjVHpSRkZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yMzAxN2QtNDIzZi00OTQyLWFiOWYtYWUyMWZhYzhkMzUw
LzEvS0Nla2V0b1dSd05GelMtTWI3QURjVHpSRkZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqi3aCF4e
HGDH1sM1++IeRJNeEG1Pn4M4ejDmMPw4QTf9lNekzr2orQsSyRsfDrzhqSX3kszv
H5J6ZAt+sSs5uqrBKFLoa1ju+k9CEEm3k77o+353oFeR+ZABgD89NwGtiQcFym4q
/OTnHe6Z1dB8F6ZmAml8GZMjComVNsDJx6Y0nBkzgp4V1d5HVM5oZCS5kkD3Q+Ju
2BIUaINWbjUviMnZR1NRogzhyAfFqYJbtxTaq/sPB0wNyb2gj2D8CkpGsSz3u7QP
vkBgD9m9oMOrQ/7SH6DbSdTkOskb8OY+sRMeBpKLggqhGf2Jr3I1ePYD/baC+KTy
T6XXhULmUo/qdg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:09 2024 by rpki-client on console-ams.rpki-client.org