Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.mft
File:                     Nrh4htaLRaHgXvsRyrfcR3Xj_F8.mft (raw, json)
Hash identifier:          PVl/xd9JpAUvn3rosJqPwGpeJF6uYbE6Ibv4II3aqh4=
Subject key identifier:   19:56:57:2E:0A:74:DB:AB:67:56:58:F2:19:C2:6D:EC:12:2E:8A:05
Authority key identifier: 36:B8:78:86:D6:8B:45:A1:E0:5E:FB:11:CA:B7:DC:47:75:E3:FC:5F
Certificate issuer:       /CN=36b87886d68b45a1e05efb11cab7dc4775e3fc5f
Certificate serial:       018899442EB97B532C8E50B8172C894C156B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.mft
Manifest number:          086B
Signing time:             Thu 08 Jun 2023 04:29:22 +0000
Manifest this update:     Thu 08 Jun 2023 04:29:22 +0000
Manifest next update:     Fri 09 Jun 2023 04:29:22 +0000
Files and hashes:         1: J0qZU-I64sgDiYzBk_1ZgPK_VWs.roa (hash: 8vabCNGl2c4pg1jOCTAgRGOYlaBKmbv+Waway/TAVnA=)
                          2: Nrh4htaLRaHgXvsRyrfcR3Xj_F8.crl (hash: y5f3rl84D3U9hiOnG4fzEEyU7gCf+598EIH/ru+MS4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:99:44:2e:b9:7b:53:2c:8e:50:b8:17:2c:89:4c:15:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36b87886d68b45a1e05efb11cab7dc4775e3fc5f
        Validity
            Not Before: Jun  8 04:29:22 2023 GMT
            Not After : Jun  9 04:29:22 2023 GMT
        Subject: CN=1956572e0a74dbab675658f219c26dec122e8a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5b:d6:c9:b5:cb:7f:dc:d6:8d:f4:a2:1e:fc:
                    19:0e:07:6a:17:85:6e:97:26:78:5d:fa:fd:f5:67:
                    58:fa:7a:b9:14:49:1c:14:bc:a6:92:9f:8d:f6:0c:
                    a3:ed:bb:b0:10:62:99:2b:d4:bf:67:6d:82:8e:e9:
                    fc:4c:ca:94:2e:2d:5f:15:cb:82:7d:9e:e4:b8:96:
                    c6:9e:0e:1c:ac:96:da:57:6e:fd:ad:14:df:72:a7:
                    97:92:88:9a:9e:21:df:70:c4:48:38:47:ee:9d:10:
                    d5:c1:43:17:ce:2b:2a:99:07:09:04:29:45:8c:41:
                    b1:ed:72:62:f5:0f:02:7c:27:bf:8b:e6:2b:4e:64:
                    fa:3b:64:df:75:cc:15:97:74:98:c5:03:8a:c0:e6:
                    c6:68:09:b6:c4:76:6b:b0:b9:ce:74:ef:79:2f:2a:
                    95:71:aa:99:c4:20:9e:0a:5e:25:8a:09:c0:db:28:
                    a2:27:e5:69:93:b0:87:db:c7:07:db:94:1e:d6:95:
                    11:80:4e:19:f6:d3:9c:76:08:8f:e0:12:eb:0f:a8:
                    45:9a:10:29:b0:51:75:71:9e:1f:a0:4a:fd:58:28:
                    e5:bc:14:e0:a1:f9:35:d2:6b:b0:85:7d:96:2a:99:
                    1c:fc:cd:ed:6b:ef:81:70:db:7b:50:03:03:ca:6a:
                    b8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:56:57:2E:0A:74:DB:AB:67:56:58:F2:19:C2:6D:EC:12:2E:8A:05
            X509v3 Authority Key Identifier:
                keyid:36:B8:78:86:D6:8B:45:A1:E0:5E:FB:11:CA:B7:DC:47:75:E3:FC:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90dae6-c190-4eb8-b6a2-60a165560bdb/1/Nrh4htaLRaHgXvsRyrfcR3Xj_F8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:fb:9c:dc:c7:52:67:1d:96:42:42:6f:7c:7f:28:db:6d:a8:
         90:93:2a:8c:46:74:56:95:a8:b0:37:da:29:55:66:61:bf:c6:
         74:ed:a5:47:97:34:26:f8:47:7f:0f:5f:74:f1:55:d3:ac:d8:
         dd:52:e9:d6:9b:53:56:a2:03:bb:a0:6c:10:bd:14:ac:ed:cb:
         c2:f9:cc:de:80:5e:23:ed:f6:19:bf:99:2a:46:ca:ea:8e:bf:
         c1:98:92:0b:91:ee:ee:12:62:4e:18:6b:33:fc:98:6a:15:86:
         aa:d6:6d:4a:d5:64:5f:ff:c7:e6:2a:9a:6e:90:8c:c6:5d:a3:
         e3:00:9a:0a:38:f4:db:fe:01:bf:79:a9:48:08:7f:c3:29:4d:
         e7:7b:33:7c:83:46:3a:c6:d5:df:f0:13:f9:7d:08:ab:de:16:
         f9:50:da:86:4a:8f:45:1f:bb:4e:c6:ed:3e:d9:eb:8d:f2:da:
         57:66:55:4b:9a:b4:40:d0:d1:a4:6d:09:c1:82:74:59:dd:22:
         e5:de:fd:78:31:2a:21:02:c0:50:bd:c0:66:23:46:78:88:90:
         d2:87:2f:7f:6f:ed:15:33:fa:54:8d:07:7d:61:2a:24:e9:2c:
         35:b1:5b:b9:eb:dc:27:84:81:09:2d:18:01:98:9d:6f:07:ce:
         3e:8e:06:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:25 2024 by rpki-client on console-ams.rpki-client.org