Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.mft
File:                     pV9HeHttIaXZWWAjL-8vTbK5jsM.mft (raw, json)
Hash identifier:          PGRF5VV/4IfDBAgGoDjbYK/VlTIRuosyTYYF/B3DqjA=
Subject key identifier:   96:8F:8E:10:22:0E:69:FC:4D:CA:EC:75:F2:1F:ED:E7:00:33:2A:67
Authority key identifier: A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3
Certificate issuer:       /CN=a55f47787b6d21a5d95960232fef2f4db2b98ec3
Certificate serial:       018C5852BBCEC694FFD54DC9B68F2D3A8B25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pV9HeHttIaXZWWAjL-8vTbK5jsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.mft
Manifest number:          0831
Signing time:             Mon 11 Dec 2023 10:01:06 +0000
Manifest this update:     Mon 11 Dec 2023 10:01:06 +0000
Manifest next update:     Tue 12 Dec 2023 10:01:06 +0000
Files and hashes:         1: KrvORIkftlVrw9oeVEaHkHHnNEw.roa (hash: zg/l4Y/u9+7s2YFX39kg1nzvQydA/ifC6hSu8giTD2M=)
                          2: pV9HeHttIaXZWWAjL-8vTbK5jsM.crl (hash: kHe2OUBcad6TggyONPv8wVLn4qbr5LplBt3SLSMwAUs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:58:52:bb:ce:c6:94:ff:d5:4d:c9:b6:8f:2d:3a:8b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55f47787b6d21a5d95960232fef2f4db2b98ec3
        Validity
            Not Before: Dec 11 10:01:06 2023 GMT
            Not After : Dec 12 10:01:06 2023 GMT
        Subject: CN=968f8e10220e69fc4dcaec75f21fede700332a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:23:99:19:49:1a:c2:9f:cf:92:6e:2d:6c:
                    9b:ff:02:a0:04:5b:eb:9d:9f:43:98:7f:a2:36:d2:
                    9c:02:c5:a9:f1:82:8d:43:32:8b:c6:cb:e0:ff:d7:
                    56:21:8a:c5:7d:09:13:da:11:0b:63:d7:9b:4d:1a:
                    58:37:a9:9c:5e:92:e0:73:90:68:9d:63:a3:9d:5f:
                    61:99:1b:d2:66:13:1b:5e:0e:dd:db:78:40:67:b5:
                    93:02:ee:86:e1:ac:37:be:e6:39:d7:dd:67:e7:76:
                    71:cb:c6:99:10:25:6d:e3:82:e1:ea:13:6d:2f:0f:
                    b0:96:af:2e:dd:b3:b8:ce:ef:98:bb:39:bc:ef:c4:
                    37:fe:d8:6a:28:73:57:1f:44:01:fe:2b:1f:93:0a:
                    26:92:6d:77:10:9a:3b:7b:df:37:2b:a4:51:72:f9:
                    d6:c2:ed:cb:08:1e:6f:34:3f:4a:5f:e7:b3:54:65:
                    65:1c:a5:44:7f:58:ea:65:04:a6:85:4f:46:09:35:
                    c5:32:85:ef:8e:52:10:8a:2a:ef:f5:6a:6d:4b:0a:
                    de:22:ad:25:de:61:d1:20:71:a8:d1:37:c3:db:46:
                    f8:9e:ca:40:69:65:6f:ad:0f:36:9c:7a:12:f5:11:
                    4a:c9:79:3a:e1:b4:67:c6:07:33:73:fb:14:98:cb:
                    c9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8F:8E:10:22:0E:69:FC:4D:CA:EC:75:F2:1F:ED:E7:00:33:2A:67
            X509v3 Authority Key Identifier:
                keyid:A5:5F:47:78:7B:6D:21:A5:D9:59:60:23:2F:EF:2F:4D:B2:B9:8E:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pV9HeHttIaXZWWAjL-8vTbK5jsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f195c-d1f8-4389-a5c9-700d00dfc456/1/pV9HeHttIaXZWWAjL-8vTbK5jsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f6:6e:32:32:ec:df:73:3f:18:cf:44:74:c7:16:3a:a4:7e:
         33:47:72:e5:cd:c7:76:f7:e3:c5:48:08:0b:a6:d9:2f:8a:16:
         d7:8d:00:cd:80:7e:c7:15:0e:bf:09:08:ab:dc:43:59:fe:e7:
         a9:2d:0c:63:df:4a:d3:75:e5:5b:2a:9c:1e:ca:f3:c3:56:42:
         df:a8:d5:e1:8a:77:5c:19:76:90:79:23:4f:a2:ca:0f:02:90:
         07:34:ad:8a:e5:5d:25:c1:ca:57:03:ea:6f:81:8b:fc:64:58:
         e7:05:57:e1:ae:78:a0:35:5e:c7:a9:fd:3d:06:b7:6e:77:4c:
         3d:52:1d:59:c7:a1:e6:36:60:fc:19:7a:4d:74:b4:4a:a4:b5:
         de:30:b8:f6:13:8e:c9:da:11:ce:48:aa:93:77:b7:ba:3f:f6:
         b6:3d:ce:a1:8d:f3:d1:c5:86:e5:68:18:66:21:ee:60:93:14:
         37:0f:eb:a0:23:10:f5:da:95:f6:2a:58:79:7f:15:8d:e9:3f:
         ee:fe:7b:bf:33:f5:80:92:22:0b:42:d0:27:be:bb:e5:9a:84:
         12:38:57:c7:5a:99:7f:2b:9d:60:54:87:c8:b9:17:f3:45:cf:
         ae:6c:44:71:47:f3:a1:d3:bd:4e:1c:60:b8:ea:7a:02:89:f0:
         c2:e7:b7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:42 2024 by rpki-client on console-fra.rpki-client.org