Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
File:                     c9BuvTmqjedLVlMsnatAaU-hyOg.mft (raw, json)
Hash identifier:          seVA2fdHx3r2QxA3afRcrMLK5RZJu+YGzRO9eXLmb2U=
Subject key identifier:   B8:54:1E:9A:7A:AE:AF:9C:3F:33:5A:72:51:53:20:47:F7:47:03:00
Authority key identifier: 73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8
Certificate issuer:       /CN=73d06ebd39aa8de74b56532c9dab40694fa1c8e8
Certificate serial:       0186FD0EBFA6DB9C2824B5F6DABDD4913FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9BuvTmqjedLVlMsnatAaU-hyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft
Manifest number:          0868
Signing time:             Mon 20 Mar 2023 03:27:27 +0000
Manifest this update:     Mon 20 Mar 2023 03:27:27 +0000
Manifest next update:     Tue 21 Mar 2023 03:27:27 +0000
Files and hashes:         1: 1RKkl-K3_z75SII0MZxLi4S_gHI.roa (hash: erq4T0vd09vvImH9q+zDemlSrFk6eJkgk918YrUsfrU=)
                          2: c9BuvTmqjedLVlMsnatAaU-hyOg.crl (hash: gsp3JidYV5+XuA17fxpEprS7vwUvjG5Sw3PiGzlz/Jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fd:0e:bf:a6:db:9c:28:24:b5:f6:da:bd:d4:91:3f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d06ebd39aa8de74b56532c9dab40694fa1c8e8
        Validity
            Not Before: Mar 20 03:27:27 2023 GMT
            Not After : Mar 21 03:27:27 2023 GMT
        Subject: CN=b8541e9a7aaeaf9c3f335a7251532047f7470300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:14:2c:96:ad:59:5b:86:19:d4:a8:4e:95:
                    ef:49:c2:39:f2:dd:4b:92:08:df:53:cd:c4:15:f4:
                    02:47:b8:10:b3:76:70:73:83:ff:c4:e3:ca:2a:97:
                    7d:48:6a:7d:c9:1a:c5:3a:0c:33:6c:38:1b:5f:00:
                    a6:3f:c4:ed:e4:03:9f:63:85:9e:ec:21:de:cd:16:
                    9c:20:83:ee:3d:cd:57:71:d1:65:c8:f2:ab:bf:2c:
                    0d:a9:5b:9f:c3:df:73:a1:01:38:63:2b:b8:c4:34:
                    5c:4a:f6:7b:be:a0:7e:05:92:e8:da:16:63:22:1b:
                    f4:00:03:75:e3:31:4e:9f:36:e4:d3:19:cb:9a:58:
                    1c:89:9d:ca:d2:4a:37:3f:41:f3:15:2e:cf:58:e9:
                    12:89:e7:17:f7:f6:b2:a2:ad:41:92:4b:3f:4e:71:
                    7f:24:1d:e8:eb:a9:8b:4b:64:cb:f9:8a:80:9c:49:
                    d8:68:06:09:53:b0:ed:12:c0:98:14:e3:3b:a2:a0:
                    c3:8f:04:15:7e:33:37:c8:ee:1f:5e:6b:fd:be:4b:
                    d7:87:2f:d5:07:38:de:c0:ec:78:40:24:54:ae:18:
                    2a:a6:46:9a:b3:ee:60:e1:33:8b:a6:bd:df:e9:ed:
                    5b:e1:96:5b:16:ec:67:06:ac:72:ca:f3:9b:46:f4:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:54:1E:9A:7A:AE:AF:9C:3F:33:5A:72:51:53:20:47:F7:47:03:00
            X509v3 Authority Key Identifier:
                keyid:73:D0:6E:BD:39:AA:8D:E7:4B:56:53:2C:9D:AB:40:69:4F:A1:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9BuvTmqjedLVlMsnatAaU-hyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4f0ae2-27a2-4e70-a659-9e6e4402753f/1/c9BuvTmqjedLVlMsnatAaU-hyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:23:a2:76:94:f7:42:4c:e7:7c:0d:12:31:b6:63:4f:bc:45:
         e4:2a:56:65:74:3f:c4:e2:6b:6f:ee:eb:0a:8c:26:00:df:ba:
         09:89:13:a0:f3:cb:98:3b:5d:6e:65:9e:67:74:ad:04:58:2a:
         e3:57:58:d7:a8:89:38:bd:8b:ba:9b:61:0f:4a:e0:08:51:e5:
         04:15:20:e6:f1:4d:3f:11:1a:59:ab:0e:0f:d8:57:3b:77:0b:
         35:b1:16:8f:d6:cf:1d:dd:f0:dc:95:cd:bb:53:0e:7d:d6:56:
         3c:ea:60:2e:42:43:54:72:f5:92:eb:31:08:5c:e4:9b:b3:dd:
         9c:9b:34:c1:65:a5:bf:99:d5:f0:95:dc:e6:c1:be:52:ac:91:
         b8:e8:7e:40:52:89:05:a4:99:93:17:38:7b:5a:2e:f0:a0:f2:
         27:f0:12:90:f6:d0:a9:a3:af:0f:71:af:53:68:06:47:39:a1:
         e6:c4:30:9c:89:da:2f:49:e6:55:14:da:df:75:a3:08:37:f0:
         82:a6:f6:e0:2d:4a:5a:14:79:70:8f:bf:fb:5f:8a:76:de:7c:
         34:3c:de:b8:98:f5:06:cd:88:bc:1c:30:ed:cc:ac:a2:6c:a8:
         ef:43:7d:ce:2f:72:bd:7f:96:7e:5a:1d:46:ac:bc:79:d6:39:
         0e:55:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:41 2024 by rpki-client on console-fra.rpki-client.org