Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/1-XTMLa_y8jSHnXlVe1U73iqxCDY.mft
File:                     1-XTMLa_y8jSHnXlVe1U73iqxCDY.mft (raw, json)
Hash identifier:          hEALwWbRkTgU9qyS+Kq9Q594Ygk1bBoDY3xAApU53AU=
Subject key identifier:   5E:6B:FA:FD:20:49:34:20:49:55:52:51:75:2B:90:68:CE:8C:F5:9B
Authority key identifier: F9:74:CC:2D:AF:F2:F2:34:87:9D:79:55:7B:55:3B:DE:2A:B1:08:36
Certificate issuer:       /CN=f974cc2daff2f234879d79557b553bde2ab10836
Certificate serial:       01879C80F017D0AB4931516C2CC16A465623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XTMLa_y8jSHnXlVe1U73iqxCDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/1-XTMLa_y8jSHnXlVe1U73iqxCDY.mft
Manifest number:          0F
Signing time:             Thu 20 Apr 2023 02:31:48 +0000
Manifest this update:     Thu 20 Apr 2023 02:31:48 +0000
Manifest next update:     Fri 21 Apr 2023 02:31:48 +0000
Files and hashes:         1: 1-XTMLa_y8jSHnXlVe1U73iqxCDY.crl (hash: 8+fFuR/GKQiUlvXtY18J9jyFuf0toDxDq28z72SS6sg=)
                          2: A8QsHiw78Xr0g52l1vGwIyqMLt8.roa (hash: OlkP/Z64lm2dqifd+5Sv4Xr5CKsA4RiR6qwCDSUzl3Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9c:80:f0:17:d0:ab:49:31:51:6c:2c:c1:6a:46:56:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f974cc2daff2f234879d79557b553bde2ab10836
        Validity
            Not Before: Apr 20 02:31:48 2023 GMT
            Not After : Apr 21 02:31:48 2023 GMT
        Subject: CN=5e6bfafd2049342049555251752b9068ce8cf59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f2:d0:a8:80:b0:49:06:ae:f7:39:76:bc:c2:
                    7b:bc:47:ba:4f:79:f0:20:6a:cd:bb:5f:da:94:99:
                    ac:8d:e5:29:2f:2c:a1:6e:f9:23:a7:df:bf:6f:ff:
                    a5:40:b4:a0:59:29:10:f7:ba:e1:73:2e:f2:6e:ed:
                    e0:d8:a9:d9:a6:f0:03:88:a0:52:ce:1f:0c:19:54:
                    23:3e:a3:a4:c8:84:b9:8f:3a:10:68:9d:71:a8:a8:
                    2b:64:b5:65:fc:09:19:92:1a:76:7a:c9:fc:e5:88:
                    2c:de:35:08:a9:51:56:c2:5f:0b:9b:dc:52:f0:f7:
                    c6:72:8b:7b:97:64:fd:ca:de:a9:a1:82:5a:54:71:
                    15:7f:d9:28:f8:95:a5:26:11:78:89:a7:91:d4:61:
                    e4:67:1a:92:d5:a9:0a:18:54:04:6b:b9:94:d0:e3:
                    68:73:7b:38:a4:22:53:8d:4c:88:ed:31:23:6c:30:
                    2f:aa:84:8c:7f:34:a5:0b:3f:c5:64:2b:31:7e:dc:
                    49:e5:20:3d:07:a9:87:bb:0d:a4:50:40:46:d8:65:
                    bb:45:82:be:10:18:75:25:bf:16:80:17:77:a6:ea:
                    88:8e:a2:ff:cf:e6:d8:30:39:ce:b7:9d:5a:e9:6b:
                    f7:3d:d9:f3:2a:42:65:ca:18:37:cf:34:5f:cc:17:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6B:FA:FD:20:49:34:20:49:55:52:51:75:2B:90:68:CE:8C:F5:9B
            X509v3 Authority Key Identifier:
                keyid:F9:74:CC:2D:AF:F2:F2:34:87:9D:79:55:7B:55:3B:DE:2A:B1:08:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XTMLa_y8jSHnXlVe1U73iqxCDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/1-XTMLa_y8jSHnXlVe1U73iqxCDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8a5888-fbe6-478e-ba7b-719a03a59db9/1/1-XTMLa_y8jSHnXlVe1U73iqxCDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:33:af:3e:5b:a0:6d:cd:68:27:f9:c5:06:a6:95:25:45:20:
         98:99:ea:56:d5:04:5b:a9:1f:67:e8:0b:01:5d:ec:b0:76:e3:
         63:ad:8d:a2:4c:15:c6:25:46:3c:ab:e1:8f:a0:d9:7c:95:2b:
         94:90:6d:06:c8:a1:6b:7a:8b:27:ef:6a:6c:e1:c4:6d:e0:39:
         43:42:88:92:04:2d:6e:02:86:44:84:2f:98:17:7c:32:14:55:
         19:f7:91:94:41:de:8a:ea:e3:d8:3d:70:db:b9:04:cc:0b:1f:
         8b:6e:af:b1:44:fd:37:08:f8:45:e0:a2:98:17:dc:c6:9e:c9:
         ae:71:64:38:af:e4:ff:b7:4b:10:be:83:5e:86:83:9b:9c:7c:
         83:3c:3b:83:7b:af:ef:28:87:9c:24:2b:85:60:bf:e7:8a:a5:
         6e:10:00:fd:c6:91:30:06:08:3a:93:02:36:54:11:54:58:bb:
         9a:5f:27:7b:ed:e9:cf:d7:ce:ad:e7:45:53:fd:7f:e1:97:03:
         3a:ce:69:9a:4e:21:52:13:ae:6c:6e:be:63:76:b4:ee:44:3c:
         db:32:9b:17:3b:aa:ea:63:c5:a5:b9:8f:3b:01:da:c6:f3:64:
         2b:95:b2:32:4b:5b:3f:64:77:bc:65:67:cc:29:50:4a:c9:63:
         f3:0a:3d:69
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYecgPAX0KtJMVFsLMFqRlYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NzRjYzJkYWZmMmYyMzQ4NzlkNzk1NTdiNTUzYmRlMmFi
MTA4MzYwHhcNMjMwNDIwMDIzMTQ4WhcNMjMwNDIxMDIzMTQ4WjAzMTEwLwYDVQQD
Eyg1ZTZiZmFmZDIwNDkzNDIwNDk1NTUyNTE3NTJiOTA2OGNlOGNmNTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfLQqICwSQau9zl2vMJ7vEe6T3nw
IGrNu1/alJmsjeUpLyyhbvkjp9+/b/+lQLSgWSkQ97rhcy7ybu3g2KnZpvADiKBS
zh8MGVQjPqOkyIS5jzoQaJ1xqKgrZLVl/AkZkhp2esn85Ygs3jUIqVFWwl8Lm9xS
8PfGcot7l2T9yt6poYJaVHEVf9ko+JWlJhF4iaeR1GHkZxqS1akKGFQEa7mU0ONo
c3s4pCJTjUyI7TEjbDAvqoSMfzSlCz/FZCsxftxJ5SA9B6mHuw2kUEBG2GW7RYK+
EBh1Jb8WgBd3puqIjqL/z+bYMDnOt51a6Wv3PdnzKkJlyhg3zzRfzBeihwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFF5r+v0gSTQgSVVSUXUrkGjOjPWbMB8GA1UdIwQY
MBaAFPl0zC2v8vI0h515VXtVO94qsQg2MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YVE1MYV95OGpTSG5YbFZlMVU3M2lxeENEWS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcvOGE1ODg4LWZiZTYtNDc4ZS1iYTdi
LTcxOWEwM2E1OWRiOS8xLzEtWFRNTGFfeThqU0huWGxWZTFVNzNpcXhDRFkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI3LzhhNTg4OC1mYmU2LTQ3OGUtYmE3Yi03MTlhMDNhNTlk
YjkvMS8xLVhUTUxhX3k4alNIblhsVmUxVTczaXF4Q0RZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjOv
Plugbc1oJ/nFBqaVJUUgmJnqVtUEW6kfZ+gLAV3ssHbjY62NokwVxiVGPKvhj6DZ
fJUrlJBtBsiha3qLJ+9qbOHEbeA5Q0KIkgQtbgKGRIQvmBd8MhRVGfeRlEHeiurj
2D1w27kEzAsfi26vsUT9Nwj4ReCimBfcxp7JrnFkOK/k/7dLEL6DXoaDm5x8gzw7
g3uv7yiHnCQrhWC/54qlbhAA/caRMAYIOpMCNlQRVFi7ml8ne+3pz9fOredFU/1/
4ZcDOs5pmk4hUhOubG6+Y3a07kQ82zKbFzuq6mPFpbmPOwHaxvNkK5WyMktbP2R3
vGVnzClQSslj8wo9aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:08 2024 by rpki-client on console-ams.rpki-client.org