Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft
File:                     7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft (raw, json)
Hash identifier:          jxKzIRAI0s6DX6+Spwnfwt6G7sFWX/jXBcaJW3DH6+g=
Subject key identifier:   4A:23:2F:50:05:21:4B:F5:EF:4F:87:C1:F9:3A:B9:62:A8:09:72:B0
Authority key identifier: EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D
Certificate issuer:       /CN=ec6c347064cfc942699fcd67c522b8924074ae4d
Certificate serial:       018EA7455913B1E4F02A0174A77F8A95B8C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft
Manifest number:          09D9
Signing time:             Thu 04 Apr 2024 04:02:03 +0000
Manifest this update:     Thu 04 Apr 2024 04:02:03 +0000
Manifest next update:     Fri 05 Apr 2024 04:02:03 +0000
Files and hashes:         1: 7Gw0cGTPyUJpn81nxSK4kkB0rk0.crl (hash: xHb1lx7ZpHLT/1W3Y/fdQN4oVTco7JIFYNxtrWX87Ko=)
                          2: i7FuQZqrQACh70qm6xG1VOQP82Q.roa (hash: RV9WC0WOAGuRJJ1cscNpr9UpDK1dErYLi6eTFvc5kvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a7:45:59:13:b1:e4:f0:2a:01:74:a7:7f:8a:95:b8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec6c347064cfc942699fcd67c522b8924074ae4d
        Validity
            Not Before: Apr  4 04:02:03 2024 GMT
            Not After : Apr  5 04:02:03 2024 GMT
        Subject: CN=4a232f5005214bf5ef4f87c1f93ab962a80972b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1c:21:9b:f7:3d:88:6a:ae:e1:de:b0:1e:01:
                    3b:cd:35:17:81:25:bb:a8:5d:16:0c:67:44:29:82:
                    cf:0a:64:bc:51:3d:f1:6b:cd:bb:5a:48:8a:3f:36:
                    ca:35:4a:fc:f1:28:1f:64:a0:1e:ab:80:4f:d6:7e:
                    b4:4b:db:0b:54:1a:0f:4b:35:3e:db:33:c7:28:33:
                    61:11:45:82:51:4d:4f:d6:95:73:fd:b1:14:87:29:
                    2f:70:b3:04:cb:d0:d6:99:70:86:d3:b6:ee:81:c8:
                    38:14:63:4c:79:7e:95:09:ed:19:54:d7:8a:33:d6:
                    82:d2:42:d9:d1:57:86:dd:f6:19:79:23:70:a5:b0:
                    4b:ac:68:70:2f:82:d3:5f:82:e5:ba:f5:69:58:a4:
                    41:1f:10:b1:57:29:4a:df:a4:f0:7a:bf:a9:a4:97:
                    f8:ff:ab:20:8b:be:14:54:98:04:fe:ca:50:c3:cb:
                    6a:90:98:8a:d1:41:4c:bc:41:63:3c:65:5b:94:f5:
                    fe:a8:c9:79:24:68:b2:dd:a4:94:28:43:54:8f:ec:
                    47:9a:d9:4f:84:84:d4:bc:bd:6d:e0:4f:ec:ac:b6:
                    30:e5:11:69:58:8a:cd:15:5d:6c:15:b1:07:2b:7a:
                    de:6d:d8:2f:fb:f4:bd:5a:1a:f7:77:2a:78:b5:ac:
                    15:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:23:2F:50:05:21:4B:F5:EF:4F:87:C1:F9:3A:B9:62:A8:09:72:B0
            X509v3 Authority Key Identifier:
                keyid:EC:6C:34:70:64:CF:C9:42:69:9F:CD:67:C5:22:B8:92:40:74:AE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gw0cGTPyUJpn81nxSK4kkB0rk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/887c1e-38eb-40bc-91d9-19c8eff620d8/1/7Gw0cGTPyUJpn81nxSK4kkB0rk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:93:a7:d2:0a:ad:cb:eb:08:22:36:e7:66:c8:2f:8d:13:9c:
         be:c2:04:d1:80:60:9d:d9:2b:fe:77:b1:25:fa:6b:c8:cb:6d:
         97:a4:d1:ee:95:7c:3d:b6:ca:ba:50:22:28:89:75:92:e4:b1:
         0e:f8:82:af:80:c3:ec:6e:4b:d3:03:c1:35:84:3c:d8:6c:b5:
         61:77:98:65:2a:0f:8b:00:83:85:25:fd:a5:15:45:bc:70:13:
         13:9d:eb:07:36:04:90:3a:87:c8:2d:b1:36:83:07:ef:2f:24:
         13:2e:48:63:6f:5d:34:b5:ce:0b:c5:2f:06:3c:68:69:53:11:
         4a:fc:3b:c5:84:fd:2a:c9:06:9b:b6:97:be:14:aa:45:30:f8:
         18:bb:16:c8:3b:db:ce:f9:a2:ff:68:60:ef:38:3b:23:82:6d:
         29:a0:d8:e3:4c:e1:03:9b:14:90:e6:5d:3e:10:d2:e2:d7:0e:
         2a:3f:0f:d2:ee:3d:7e:ba:fd:76:e1:c8:99:a9:d3:96:59:f6:
         82:4e:01:a9:bb:5e:3f:d3:a6:d7:24:dc:25:1e:a3:73:87:27:
         ef:14:3d:6d:26:ef:c2:89:e6:f1:51:20:52:ba:ba:b0:c8:40:
         62:4b:ec:47:a3:47:47:a7:09:91:9c:9b:e1:44:e0:ed:ee:00:
         33:ed:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 14:38:31 2024 by rpki-client on console-ams.rpki-client.org