Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.mft
File:                     TcPBj0fqXt1xNd8keGjhF8aByH8.mft (raw, json)
Hash identifier:          ROadF90SdFFgHLUiwgTeyTafgNkV7b3rqn+YpPW/iFQ=
Subject key identifier:   D1:61:CE:28:5F:34:1A:33:CF:27:DC:88:38:E7:50:B3:80:AA:0C:6A
Authority key identifier: 4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F
Certificate issuer:       /CN=4dc3c18f47ea5edd7135df247868e117c681c87f
Certificate serial:       0187306E7265A40594FEAA8553DF0C1478F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.mft
Manifest number:          082C
Signing time:             Thu 30 Mar 2023 02:52:37 +0000
Manifest this update:     Thu 30 Mar 2023 02:52:37 +0000
Manifest next update:     Fri 31 Mar 2023 02:52:37 +0000
Files and hashes:         1: SAieZdDNoUvwhRYCOhWQTOcGMmQ.roa (hash: Wfr2T44w+RroB12HLDedwnrHbh5nFSwO05Q0aLnthgw=)
                          2: TcPBj0fqXt1xNd8keGjhF8aByH8.crl (hash: 0xv9jqZeyxslplvrUoFOt1wTGj2xrY7rRbcR8wkgbI8=)
                          3: X_2lBxUfEmgqvXLFUXgHl5-oue0.roa (hash: XYwTV3PFWBmge5KyXR5w4ZwxJTHh8+oTulW7imvo1wQ=)
                          4: _cG8oNWxh4h5iIZJIaVBtqqKOCY.roa (hash: fVWzaWzGAFUBBlB7elctSdhvD6RVcBdy+kA3sKQytsY=)
                          5: u1-kKU5kZkKnApVIAy8MJS6sIhY.roa (hash: elQOfe+lClmlj4CTzpfU+H1GVFh9zYp7vEF6hTu38lQ=)
                          6: xLzivp4jigHbaZfVjFzr9jZuM8M.roa (hash: /gwF5guoWFI6z2UHHdg6lCko05M0CS5LCIWG1RHBep0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:30:6e:72:65:a4:05:94:fe:aa:85:53:df:0c:14:78:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dc3c18f47ea5edd7135df247868e117c681c87f
        Validity
            Not Before: Mar 30 02:52:37 2023 GMT
            Not After : Mar 31 02:52:37 2023 GMT
        Subject: CN=d161ce285f341a33cf27dc8838e750b380aa0c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7a:cd:4a:b6:6c:73:30:74:6c:53:e2:fb:77:
                    a9:5c:f1:b1:f9:dc:e1:3e:fb:02:2b:ca:c6:09:d1:
                    b6:ad:9f:21:b5:89:93:21:61:a4:19:02:e7:5b:b7:
                    a2:c6:13:f0:0a:09:e8:f2:4c:6e:f4:1d:30:88:25:
                    15:37:9f:d1:d8:0f:42:f0:35:5a:15:81:64:45:44:
                    ee:e9:c9:56:06:4c:06:0a:01:ac:84:2d:83:bb:2b:
                    4a:ef:06:0a:c9:07:cb:4e:db:1e:88:78:25:c4:8e:
                    12:c4:d7:fa:ef:f0:88:de:8c:b7:0d:3a:af:cd:e9:
                    07:67:3a:58:69:f5:c3:57:cc:b8:ff:41:2c:3b:d4:
                    86:1f:84:14:ec:80:72:7f:4d:2f:b2:96:8c:32:c4:
                    9c:40:a3:56:17:3a:3c:bf:c0:82:34:0c:30:9d:df:
                    6b:fe:1a:98:11:07:66:cc:57:c5:c9:9d:7f:19:09:
                    36:ab:b7:2f:80:6c:06:ad:2c:b6:df:92:c8:84:f7:
                    92:f1:ec:40:a8:97:ed:86:b8:3a:98:fb:87:7e:d0:
                    55:33:5d:d9:f1:62:f2:5f:06:0c:3e:96:8e:0e:d0:
                    6d:2f:c0:7a:e9:15:44:fa:89:ec:a3:f2:19:ad:77:
                    80:33:09:b1:f2:0c:aa:80:f1:ee:f0:3c:6c:bb:3c:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:61:CE:28:5F:34:1A:33:CF:27:DC:88:38:E7:50:B3:80:AA:0C:6A
            X509v3 Authority Key Identifier:
                keyid:4D:C3:C1:8F:47:EA:5E:DD:71:35:DF:24:78:68:E1:17:C6:81:C8:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcPBj0fqXt1xNd8keGjhF8aByH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/5aec25-216d-43a7-abe1-3879e33802e6/1/TcPBj0fqXt1xNd8keGjhF8aByH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a2:6a:8f:dd:64:e8:da:1f:e6:b2:3b:66:8d:4b:12:ba:81:
         ca:50:14:5f:87:8b:a0:bb:1d:cd:80:7e:32:e3:42:46:3d:c0:
         94:d5:95:55:d4:08:95:43:3d:84:76:9d:bf:32:c5:54:da:7b:
         bf:b0:23:6e:88:97:81:f7:eb:3c:73:5b:ce:e5:97:38:09:87:
         27:16:c9:b6:81:64:d2:d4:16:00:f8:ac:3c:10:28:84:72:3c:
         fe:96:d8:6f:52:26:df:c0:a6:4a:f1:17:6d:11:a9:d7:4f:2d:
         21:4c:c3:29:19:c1:3b:44:ad:3a:cb:42:b8:e1:49:6a:cd:f5:
         63:d9:5d:68:50:a2:0d:9a:28:d9:03:d9:a1:1c:c6:7a:a3:9b:
         19:c2:9d:93:72:78:55:b5:8b:0d:72:6f:f5:38:64:43:68:4e:
         dd:c6:be:94:ac:5d:f3:4b:0c:95:52:ae:3c:f4:ef:22:56:44:
         da:7e:d7:46:ec:67:77:43:62:e6:e6:d4:8b:4f:be:ce:f3:5f:
         a4:10:9b:7d:ac:a7:27:ec:43:da:e5:7d:e8:49:b7:2d:94:c5:
         3b:f1:ed:63:a8:ed:d2:c7:60:5d:ad:53:24:51:ce:5c:6b:a0:
         65:22:a8:63:21:9d:a6:31:79:93:d5:08:89:7d:e7:64:2a:4d:
         8b:20:4a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcwbnJlpAWU/qqFU98MFHjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYzNjMThmNDdlYTVlZGQ3MTM1ZGYyNDc4NjhlMTE3YzY4
MWM4N2YwHhcNMjMwMzMwMDI1MjM3WhcNMjMwMzMxMDI1MjM3WjAzMTEwLwYDVQQD
EyhkMTYxY2UyODVmMzQxYTMzY2YyN2RjODgzOGU3NTBiMzgwYWEwYzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXrNSrZsczB0bFPi+3epXPGx+dzh
PvsCK8rGCdG2rZ8htYmTIWGkGQLnW7eixhPwCgno8kxu9B0wiCUVN5/R2A9C8DVa
FYFkRUTu6clWBkwGCgGshC2DuytK7wYKyQfLTtseiHglxI4SxNf67/CI3oy3DTqv
zekHZzpYafXDV8y4/0EsO9SGH4QU7IByf00vspaMMsScQKNWFzo8v8CCNAwwnd9r
/hqYEQdmzFfFyZ1/GQk2q7cvgGwGrSy235LIhPeS8exAqJfthrg6mPuHftBVM13Z
8WLyXwYMPpaODtBtL8B66RVE+onso/IZrXeAMwmx8gyqgPHu8DxsuzzdGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFhzihfNBozzyfciDjnULOAqgxqMB8GA1UdIwQY
MBaAFE3DwY9H6l7dcTXfJHho4RfGgch/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNQQmowZnFYdDF4TmQ4a2VHamhGOGFCeUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi81YWVjMjUtMjE2ZC00M2E3LWFiZTEt
Mzg3OWUzMzgwMmU2LzEvVGNQQmowZnFYdDF4TmQ4a2VHamhGOGFCeUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi81YWVjMjUtMjE2ZC00M2E3LWFiZTEtMzg3OWUzMzgwMmU2
LzEvVGNQQmowZnFYdDF4TmQ4a2VHamhGOGFCeUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqJqj91k
6Nof5rI7Zo1LErqBylAUX4eLoLsdzYB+MuNCRj3AlNWVVdQIlUM9hHadvzLFVNp7
v7AjboiXgffrPHNbzuWXOAmHJxbJtoFk0tQWAPisPBAohHI8/pbYb1Im38CmSvEX
bRGp108tIUzDKRnBO0StOstCuOFJas31Y9ldaFCiDZoo2QPZoRzGeqObGcKdk3J4
VbWLDXJv9ThkQ2hO3ca+lKxd80sMlVKuPPTvIlZE2n7XRuxnd0Ni5ubUi0++zvNf
pBCbfaynJ+xD2uV96Em3LZTFO/HtY6jt0sdgXa1TJFHOXGugZSKoYyGdpjF5k9UI
iX3nZCpNiyBKIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:13 2024 by rpki-client on console-ams.rpki-client.org