Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/J2b4IzyQSdIMFdnrRsm7eXYX3bc.mft
File:                     J2b4IzyQSdIMFdnrRsm7eXYX3bc.mft (raw, json)
Hash identifier:          /znVggAb5KekBPx94KmvBlLjgv5AUepKWt8gn7LL4ls=
Subject key identifier:   D3:B7:49:B4:ED:03:41:74:AB:7A:96:BB:A6:B6:2C:91:DD:6B:B6:9E
Authority key identifier: 27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7
Certificate issuer:       /CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
Certificate serial:       018FE27A9C4EE628D93AADF8CC799D6344BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/J2b4IzyQSdIMFdnrRsm7eXYX3bc.mft
Manifest number:          11A6
Signing time:             Tue 04 Jun 2024 09:00:37 +0000
Manifest this update:     Tue 04 Jun 2024 09:00:37 +0000
Manifest next update:     Wed 05 Jun 2024 09:00:37 +0000
Files and hashes:         1: ICos3wYwDyehdOHlKDbYoPyEDR8.roa (hash: xTeviH9A+1Hy8Llq7/GQ2aPTB/lYqdFGlbYwrH/ia4s=)
                          2: J2b4IzyQSdIMFdnrRsm7eXYX3bc.crl (hash: whXFyuxCh5+EH4AaoGgb4IAuP58bNp3XvsuPp2O0R3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:e2:7a:9c:4e:e6:28:d9:3a:ad:f8:cc:79:9d:63:44:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2766f8233c9049d20c15d9eb46c9bb797617ddb7
        Validity
            Not Before: Jun  4 09:00:37 2024 GMT
            Not After : Jun  5 09:00:37 2024 GMT
        Subject: CN=d3b749b4ed034174ab7a96bba6b62c91dd6bb69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:0f:c3:c0:86:63:4c:7e:9f:6c:44:7c:21:
                    d3:4a:6b:f1:6f:83:cd:35:0e:c4:ab:85:ff:34:d8:
                    18:e4:dd:12:9c:1b:1c:cf:3e:a5:02:d5:0d:01:6a:
                    cc:1a:ea:dd:e5:32:ca:9f:2e:e7:4c:4d:97:52:18:
                    55:47:6a:28:e3:5c:12:6e:75:3e:81:12:25:dd:d2:
                    08:54:a2:72:59:ca:00:0a:07:4e:7c:3c:f9:da:97:
                    58:39:70:d8:e1:0e:97:ce:0e:e8:96:41:14:23:c2:
                    53:d3:12:a3:f0:a9:86:e5:a9:bc:b8:76:61:e6:d2:
                    ce:a6:cb:2a:8e:9b:2f:85:e9:3f:1e:e4:c3:3d:05:
                    0c:f4:97:0e:e4:66:9a:41:a5:8d:e5:29:b1:e6:3d:
                    72:4c:9a:4c:7f:6f:00:25:55:cb:cf:2d:50:84:44:
                    70:31:b8:84:0b:df:40:be:7d:6b:9e:3b:d3:36:8b:
                    db:7f:08:01:c9:e1:13:66:66:17:95:20:94:d5:58:
                    31:b8:2f:ae:23:92:45:84:0c:23:44:42:52:73:42:
                    94:54:d1:ce:16:11:e3:1c:78:42:42:07:cb:99:b5:
                    fa:8c:51:20:7b:8e:bb:23:1f:a2:b0:95:74:01:f4:
                    b1:f9:06:ca:c9:af:08:c9:2a:d5:d7:73:d2:7f:9b:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B7:49:B4:ED:03:41:74:AB:7A:96:BB:A6:B6:2C:91:DD:6B:B6:9E
            X509v3 Authority Key Identifier:
                keyid:27:66:F8:23:3C:90:49:D2:0C:15:D9:EB:46:C9:BB:79:76:17:DD:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2b4IzyQSdIMFdnrRsm7eXYX3bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/J2b4IzyQSdIMFdnrRsm7eXYX3bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97e849-2346-4a54-b8e0-dcbfebe79915/1/J2b4IzyQSdIMFdnrRsm7eXYX3bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fb:55:d6:2f:21:7f:39:f4:55:8e:b8:71:be:09:40:30:7d:
         e6:bb:44:3d:e9:b5:f3:78:35:80:c7:b7:37:92:83:63:4c:05:
         ee:e6:35:d8:8f:e4:9f:0c:67:1b:ef:ae:60:a5:53:cd:eb:4f:
         8c:29:c2:59:70:52:6d:eb:51:fa:83:71:02:e2:53:10:8d:e2:
         a9:00:de:6e:15:75:30:be:20:27:57:be:fb:dd:ae:97:cf:12:
         d0:2c:0c:0f:4b:c7:8e:b7:8c:64:0e:e6:c2:33:18:cf:e5:58:
         31:ee:a9:98:44:f4:b6:88:97:3f:63:dd:94:9a:49:4c:3f:1d:
         53:b7:7d:9c:7b:73:fd:8e:f1:fc:7e:ef:1d:47:fb:0f:58:7d:
         29:27:9f:87:6b:d7:db:79:91:db:71:0c:be:1b:ea:11:4f:1e:
         ba:28:c1:57:b3:5b:63:57:b1:75:f2:83:a8:cf:89:9d:05:7f:
         d2:72:84:6f:a9:81:fe:0c:60:93:2c:d4:b2:16:c4:f5:ae:a2:
         85:f0:b3:af:23:b6:9f:81:08:0d:54:f3:bc:59:9f:3d:a5:ab:
         65:4c:bf:eb:76:74:d6:fb:41:3f:01:4c:2b:29:86:ae:55:a0:
         18:57:43:83:b1:f5:f5:fc:8a:62:8a:cc:65:99:fe:f9:0d:39:
         52:c3:f1:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY/iepxO5ijZOq34zHmdY0S6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NjZmODIzM2M5MDQ5ZDIwYzE1ZDllYjQ2YzliYjc5NzYx
N2RkYjcwHhcNMjQwNjA0MDkwMDM3WhcNMjQwNjA1MDkwMDM3WjAzMTEwLwYDVQQD
EyhkM2I3NDliNGVkMDM0MTc0YWI3YTk2YmJhNmI2MmM5MWRkNmJiNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCwPw8CGY0x+n2xEfCHTSmvxb4PN
NQ7Eq4X/NNgY5N0SnBsczz6lAtUNAWrMGurd5TLKny7nTE2XUhhVR2oo41wSbnU+
gRIl3dIIVKJyWcoACgdOfDz52pdYOXDY4Q6Xzg7olkEUI8JT0xKj8KmG5am8uHZh
5tLOpssqjpsvhek/HuTDPQUM9JcO5GaaQaWN5Smx5j1yTJpMf28AJVXLzy1QhERw
MbiEC99Avn1rnjvTNovbfwgByeETZmYXlSCU1VgxuC+uI5JFhAwjREJSc0KUVNHO
FhHjHHhCQgfLmbX6jFEge467Ix+isJV0AfSx+QbKya8IySrV13PSf5srYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO3SbTtA0F0q3qWu6a2LJHda7aeMB8GA1UdIwQY
MBaAFCdm+CM8kEnSDBXZ60bJu3l2F923MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjJiNEl6eVFTZElNRmRuclJzbTdlWFlYM2JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2U4NDktMjM0Ni00YTU0LWI4ZTAt
ZGNiZmViZTc5OTE1LzEvSjJiNEl6eVFTZElNRmRuclJzbTdlWFlYM2JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2U4NDktMjM0Ni00YTU0LWI4ZTAtZGNiZmViZTc5OTE1
LzEvSjJiNEl6eVFTZElNRmRuclJzbTdlWFlYM2JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATvtV1i8h
fzn0VY64cb4JQDB95rtEPem183g1gMe3N5KDY0wF7uY12I/knwxnG++uYKVTzetP
jCnCWXBSbetR+oNxAuJTEI3iqQDebhV1ML4gJ1e++92ul88S0CwMD0vHjreMZA7m
wjMYz+VYMe6pmET0toiXP2PdlJpJTD8dU7d9nHtz/Y7x/H7vHUf7D1h9KSefh2vX
23mR23EMvhvqEU8euijBV7NbY1exdfKDqM+JnQV/0nKEb6mB/gxgkyzUshbE9a6i
hfCzryO2n4EIDVTzvFmfPaWrZUy/63Z01vtBPwFMKymGrlWgGFdDg7H19fyKYorM
ZZn++Q05UsPxMQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:34 2024 by rpki-client on console-ams.rpki-client.org