Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/mfbYFxhqyQKCmALMje_1uExjcY4.mft
File:                     mfbYFxhqyQKCmALMje_1uExjcY4.mft (raw, json)
Hash identifier:          xrapfX4dTKDdTg1eZlR0utmXhaAiyi/oCw/tZGxWA7E=
Subject key identifier:   DC:94:26:C8:30:EE:FD:4B:D5:62:68:20:08:18:67:B1:FD:63:CB:A1
Authority key identifier: 99:F6:D8:17:18:6A:C9:02:82:98:02:CC:8D:EF:F5:B8:4C:63:71:8E
Certificate issuer:       /CN=99f6d817186ac902829802cc8deff5b84c63718e
Certificate serial:       018B8F7B1312D27AA3446392C73E5CF61E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfbYFxhqyQKCmALMje_1uExjcY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/mfbYFxhqyQKCmALMje_1uExjcY4.mft
Manifest number:          087D
Signing time:             Thu 02 Nov 2023 10:01:29 +0000
Manifest this update:     Thu 02 Nov 2023 10:01:29 +0000
Manifest next update:     Fri 03 Nov 2023 10:01:29 +0000
Files and hashes:         1: mfbYFxhqyQKCmALMje_1uExjcY4.crl (hash: Lsq6vmRd7ncAkPav/Hq1q1BZge573Mdj3ElOhmjG3KI=)
                          2: pRkqTj0c7LUXTrlEHKkCrc2OL6k.roa (hash: 1cRkbD+yvkq/n8P4W1l9K5oLPthqW8t+WW7h76tBE+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:8f:7b:13:12:d2:7a:a3:44:63:92:c7:3e:5c:f6:1e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f6d817186ac902829802cc8deff5b84c63718e
        Validity
            Not Before: Nov  2 10:01:29 2023 GMT
            Not After : Nov  3 10:01:29 2023 GMT
        Subject: CN=dc9426c830eefd4bd5626820081867b1fd63cba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:86:85:c1:7d:b9:e6:b1:54:40:65:e4:81:59:
                    8f:37:e9:3a:96:30:33:1a:22:bc:ed:85:c0:6d:69:
                    1c:1e:0a:8d:e5:9c:04:e3:96:3d:59:12:f8:c1:09:
                    0a:a6:20:4c:c6:e3:f4:cc:e6:e9:fa:90:e6:75:f7:
                    b1:46:68:1a:de:d8:f4:b3:50:62:94:63:e4:91:d0:
                    69:97:ea:8b:65:e0:83:34:2e:4a:08:93:f4:ef:6f:
                    21:6c:3b:e3:0b:f8:a3:17:6a:bc:f3:e6:50:66:8e:
                    0f:83:7a:e5:ba:29:db:63:8c:94:3f:07:a7:57:e3:
                    48:74:7b:9a:92:3b:9a:64:d3:da:8a:12:2c:ac:13:
                    d1:3b:b4:77:d4:4d:99:28:3a:88:2e:44:39:71:39:
                    e8:93:2c:92:55:85:14:fd:ee:80:69:73:8d:63:c3:
                    7c:fd:bc:de:3e:00:54:b9:c9:8f:b9:14:a7:32:b7:
                    35:a8:7c:08:42:d1:ae:58:1b:ff:45:c8:6b:83:f6:
                    92:f9:90:3d:7e:57:3c:d5:f9:ce:47:85:c0:ae:f3:
                    6d:70:e8:30:33:21:9b:c0:57:58:83:af:f3:c2:3e:
                    d1:47:e5:f1:07:9e:56:c7:65:63:35:bd:e7:4f:e6:
                    55:57:a8:66:7d:c5:03:24:85:a3:00:7a:6d:43:2f:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:94:26:C8:30:EE:FD:4B:D5:62:68:20:08:18:67:B1:FD:63:CB:A1
            X509v3 Authority Key Identifier:
                keyid:99:F6:D8:17:18:6A:C9:02:82:98:02:CC:8D:EF:F5:B8:4C:63:71:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfbYFxhqyQKCmALMje_1uExjcY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/mfbYFxhqyQKCmALMje_1uExjcY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/71ba61-35aa-4a86-ba32-1e24e778518a/1/mfbYFxhqyQKCmALMje_1uExjcY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d1:d4:b3:22:4c:d1:65:50:6d:27:01:6a:8c:7d:be:b7:ae:
         3c:8d:fe:2a:90:73:44:b0:0e:55:e7:7f:a7:d3:f3:f9:94:11:
         61:3b:56:7b:81:c1:54:a6:dc:73:06:af:e1:7d:51:18:58:0c:
         92:1c:7e:c4:be:e2:ce:88:31:b2:94:a5:7e:a3:55:26:56:b7:
         66:0c:c2:fe:14:22:27:c6:79:9d:30:54:08:fd:d8:91:dc:57:
         ff:7f:5e:63:93:75:ce:26:87:9c:87:7c:a7:45:d4:d8:1c:7e:
         f1:b2:3a:e3:b3:1b:fb:a1:08:3e:37:ee:8a:54:89:b2:51:09:
         9e:81:1b:96:21:6f:94:c3:9c:d9:2e:34:3d:84:e0:56:bc:a3:
         c6:b7:16:31:19:a9:11:e2:fe:d2:6d:46:ec:1f:80:c9:bd:f2:
         35:e9:60:15:72:50:b8:00:e4:72:1a:94:40:88:6a:d1:83:5f:
         3a:4b:3f:75:53:00:d3:da:b6:a8:ed:e6:50:74:2a:5b:8c:73:
         2b:d0:19:51:b1:c2:da:aa:2e:cf:f5:73:74:83:e9:66:ee:63:
         bc:00:e8:df:e9:48:30:da:44:b7:59:da:74:60:fd:29:56:fc:
         1d:1d:36:d7:c8:15:71:7c:81:03:77:eb:47:17:b0:ca:ca:69:
         00:12:25:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:10 2024 by rpki-client on console-fra.rpki-client.org