Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.mft
File:                     bIaDiq4WvDaBgnFPy0-Or4fID88.mft (raw, json)
Hash identifier:          /TJY0GoRmbyDPcLj01777UgqCIPGwb2i4NL1yrUlG9Y=
Subject key identifier:   7B:E0:C2:67:F6:B1:95:ED:F7:A5:E9:FD:12:AE:F1:9A:27:DD:FC:BE
Authority key identifier: 6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF
Certificate issuer:       /CN=6c86838aae16bc368182714fcb4f8eaf87c80fcf
Certificate serial:       018C3E24F488F1EF378447984E841723570C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIaDiq4WvDaBgnFPy0-Or4fID88.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.mft
Manifest number:          086C
Signing time:             Wed 06 Dec 2023 08:00:58 +0000
Manifest this update:     Wed 06 Dec 2023 08:00:58 +0000
Manifest next update:     Thu 07 Dec 2023 08:00:58 +0000
Files and hashes:         1: Exj1ZMbH4xBs4IwnxzbcfwkSWxE.roa (hash: R+r3pK62nm+HxsjwlbvUUEzZDsz0FbxJgoL4TUN/PZo=)
                          2: bIaDiq4WvDaBgnFPy0-Or4fID88.crl (hash: CXv3MdovCYSMe5cTgT0sUamFXWNmb8HKvvEaY+UU8E8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3e:24:f4:88:f1:ef:37:84:47:98:4e:84:17:23:57:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86838aae16bc368182714fcb4f8eaf87c80fcf
        Validity
            Not Before: Dec  6 08:00:58 2023 GMT
            Not After : Dec  7 08:00:58 2023 GMT
        Subject: CN=7be0c267f6b195edf7a5e9fd12aef19a27ddfcbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ac:0d:c4:87:a6:56:17:25:b4:81:52:ec:79:
                    bf:63:4e:14:2e:68:47:c6:1a:31:01:c7:20:3a:fc:
                    65:7f:d0:05:c3:1a:dd:29:53:fa:ac:22:8e:9f:dd:
                    3a:7c:d3:28:d5:f2:f3:6c:0b:fb:e1:ce:3d:55:c8:
                    4d:6c:9c:ef:d1:d8:c8:1b:0a:37:20:74:ba:0b:f7:
                    48:f3:fc:6a:31:25:33:50:6e:3e:55:73:4a:21:9f:
                    b1:bc:9e:c4:49:ea:c9:db:9b:6e:0b:83:44:7d:0c:
                    54:a9:3c:51:ad:c4:4d:71:56:95:98:b0:97:db:ae:
                    4f:05:56:81:db:5d:64:33:ca:d6:76:13:00:ef:82:
                    90:f2:9d:18:03:89:c0:3e:b4:ab:6c:a4:04:87:b1:
                    e3:89:81:8f:67:e0:13:a1:ed:2b:14:ae:b2:30:2b:
                    b6:46:b7:15:85:1d:fe:d1:84:16:f6:d9:8d:1c:47:
                    9b:72:39:b5:78:c7:8b:87:75:cd:4a:d0:eb:bc:1c:
                    59:55:d0:f1:31:b5:9f:01:6c:12:9f:c4:9f:dd:31:
                    09:77:87:f6:ed:c4:52:ea:5c:22:21:cb:10:5a:a9:
                    a2:26:c7:0c:a4:65:67:3c:ec:d6:27:ec:1c:62:56:
                    91:93:70:4d:d7:03:72:30:db:90:0c:1f:64:a7:ac:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E0:C2:67:F6:B1:95:ED:F7:A5:E9:FD:12:AE:F1:9A:27:DD:FC:BE
            X509v3 Authority Key Identifier:
                keyid:6C:86:83:8A:AE:16:BC:36:81:82:71:4F:CB:4F:8E:AF:87:C8:0F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIaDiq4WvDaBgnFPy0-Or4fID88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/68536b-da89-4063-90da-104984df48b1/1/bIaDiq4WvDaBgnFPy0-Or4fID88.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:52:bc:5d:cd:68:92:ad:da:59:e8:4e:29:1b:56:fe:ea:
         dc:07:13:26:bf:32:4a:7f:11:28:e9:15:1a:e8:3e:14:49:e8:
         7c:31:43:56:d2:89:85:4c:20:19:78:c1:57:4e:51:fc:e5:25:
         05:67:13:fd:a8:c5:b0:17:cd:04:5a:98:c3:f4:fe:6d:e2:c3:
         83:a2:6f:2b:22:57:73:eb:b3:b6:ea:eb:e1:10:fa:85:54:3f:
         2e:b0:c8:e8:21:a0:46:0b:3c:72:63:68:d7:5f:75:fa:41:7c:
         e6:cd:e0:31:12:4c:5b:8d:db:f9:d1:c5:88:7f:46:57:4a:50:
         ca:22:48:76:f0:db:38:c5:40:9a:f6:59:b4:31:85:cb:c1:34:
         ad:24:fe:b9:6f:06:ea:32:ee:d2:fb:52:d7:39:a5:54:27:fd:
         ba:f4:2a:23:bf:03:e2:44:b6:06:ca:c7:0e:d4:b7:e9:98:4a:
         6e:0d:90:c6:40:56:58:d8:f7:d0:12:46:24:f6:0f:3c:5c:b0:
         53:fc:52:51:56:b6:56:97:ec:5c:7f:77:14:a3:04:15:d8:bf:
         4b:0d:79:ad:83:f7:1f:73:21:ca:68:4e:fa:b9:4f:5e:01:b3:
         05:ad:be:51:e9:0d:e3:15:6c:4e:07:a0:57:3d:8a:28:18:e7:
         b8:de:4a:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYw+JPSI8e83hEeYToQXI1cMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODY4MzhhYWUxNmJjMzY4MTgyNzE0ZmNiNGY4ZWFmODdj
ODBmY2YwHhcNMjMxMjA2MDgwMDU4WhcNMjMxMjA3MDgwMDU4WjAzMTEwLwYDVQQD
Eyg3YmUwYzI2N2Y2YjE5NWVkZjdhNWU5ZmQxMmFlZjE5YTI3ZGRmY2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKwNxIemVhcltIFS7Hm/Y04ULmhH
xhoxAccgOvxlf9AFwxrdKVP6rCKOn906fNMo1fLzbAv74c49VchNbJzv0djIGwo3
IHS6C/dI8/xqMSUzUG4+VXNKIZ+xvJ7ESerJ25tuC4NEfQxUqTxRrcRNcVaVmLCX
265PBVaB211kM8rWdhMA74KQ8p0YA4nAPrSrbKQEh7HjiYGPZ+AToe0rFK6yMCu2
RrcVhR3+0YQW9tmNHEebcjm1eMeLh3XNStDrvBxZVdDxMbWfAWwSn8Sf3TEJd4f2
7cRS6lwiIcsQWqmiJscMpGVnPOzWJ+wcYlaRk3BN1wNyMNuQDB9kp6xlrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvgwmf2sZXt96Xp/RKu8Zon3fy+MB8GA1UdIwQY
MBaAFGyGg4quFrw2gYJxT8tPjq+HyA/PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklhRGlxNFd2RGFCZ25GUHkwLU9yNGZJRDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82ODUzNmItZGE4OS00MDYzLTkwZGEt
MTA0OTg0ZGY0OGIxLzEvYklhRGlxNFd2RGFCZ25GUHkwLU9yNGZJRDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi82ODUzNmItZGE4OS00MDYzLTkwZGEtMTA0OTg0ZGY0OGIx
LzEvYklhRGlxNFd2RGFCZ25GUHkwLU9yNGZJRDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/BSvF3N
aJKt2lnoTikbVv7q3AcTJr8ySn8RKOkVGug+FEnofDFDVtKJhUwgGXjBV05R/OUl
BWcT/ajFsBfNBFqYw/T+beLDg6JvKyJXc+uzturr4RD6hVQ/LrDI6CGgRgs8cmNo
1191+kF85s3gMRJMW43b+dHFiH9GV0pQyiJIdvDbOMVAmvZZtDGFy8E0rST+uW8G
6jLu0vtS1zmlVCf9uvQqI78D4kS2BsrHDtS36ZhKbg2QxkBWWNj30BJGJPYPPFyw
U/xSUVa2VpfsXH93FKMEFdi/Sw15rYP3H3MhymhO+rlPXgGzBa2+UekN4xVsTgeg
Vz2KKBjnuN5KhQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:07 2024 by rpki-client on console-fra.rpki-client.org