Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/d0fc8b-c8ed-4c90-9d59-3cdacef8776e/1/VldbLDAHCgmy_LmOmEVQNTPXbYg.mft
File:                     VldbLDAHCgmy_LmOmEVQNTPXbYg.mft (raw, json)
Hash identifier:          jeRqPClLrm1zLmILhCUGforX6MhTQxaCbMLmpbroGu0=
Subject key identifier:   B2:81:57:6B:27:46:0B:AD:9A:37:9D:3C:19:FF:47:89:5A:36:45:33
Authority key identifier: 56:57:5B:2C:30:07:0A:09:B2:FC:B9:8E:98:45:50:35:33:D7:6D:88
Certificate issuer:       /CN=56575b2c30070a09b2fcb98e9845503533d76d88
Certificate serial:       0187027F479D61738085F58CB5F8DEB9F656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VldbLDAHCgmy_LmOmEVQNTPXbYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/d0fc8b-c8ed-4c90-9d59-3cdacef8776e/1/VldbLDAHCgmy_LmOmEVQNTPXbYg.mft
Manifest number:          08D9
Signing time:             Tue 21 Mar 2023 04:48:28 +0000
Manifest this update:     Tue 21 Mar 2023 04:48:28 +0000
Manifest next update:     Wed 22 Mar 2023 04:48:28 +0000
Files and hashes:         1: VldbLDAHCgmy_LmOmEVQNTPXbYg.crl (hash: reqsBL1uUPCjupE/AqW00WG0n+4ovfqshwVdjemWCds=)
                          2: g_25MMjAsvPX2bpVHj5D5ccZmHs.roa (hash: 7OV6+dkgSnc5MMcquykJa/PTzo42vJefxlObCVdhTWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:02:7f:47:9d:61:73:80:85:f5:8c:b5:f8:de:b9:f6:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56575b2c30070a09b2fcb98e9845503533d76d88
        Validity
            Not Before: Mar 21 04:48:28 2023 GMT
            Not After : Mar 22 04:48:28 2023 GMT
        Subject: CN=b281576b27460bad9a379d3c19ff47895a364533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:18:96:83:3c:cd:b3:ce:34:aa:e7:4a:4b:
                    d8:6f:2b:a5:dc:e6:5c:3c:c1:e5:16:48:ec:b5:23:
                    4c:d9:16:94:ad:99:72:81:04:3b:78:e0:11:33:d5:
                    d6:74:7e:36:3e:0e:9c:43:97:55:10:e3:4c:46:7e:
                    0e:a5:a2:ce:09:97:36:3b:3c:b5:82:bf:af:e4:93:
                    11:67:16:f5:5a:ea:96:e4:6d:95:b2:0f:3b:61:57:
                    62:89:46:0a:f1:99:bd:72:ca:49:d9:c4:cc:39:e0:
                    09:38:80:66:7a:63:46:f9:c9:3d:66:5c:8e:65:27:
                    7f:f7:44:67:a0:b2:0b:ff:40:38:dd:17:54:cf:7a:
                    72:d8:d8:9c:93:71:6c:75:c0:53:2d:f6:7a:4d:43:
                    97:36:13:71:f6:96:e7:8d:29:ec:a9:6a:ae:ec:ca:
                    d7:b0:60:57:85:69:28:7d:c5:40:c1:33:81:37:24:
                    20:d1:a6:db:60:c2:1a:71:98:82:41:f7:21:c7:cf:
                    5d:84:8c:3a:47:e7:28:2a:8c:55:8f:67:49:94:a6:
                    8c:75:d5:cd:05:b3:2f:21:24:51:cb:d5:d4:19:b9:
                    0f:0a:4c:61:e3:ff:b3:f0:5e:86:37:89:d4:ab:3a:
                    b7:14:d3:e7:1b:1c:49:8c:17:9f:a1:25:ea:71:fd:
                    8a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:57:6B:27:46:0B:AD:9A:37:9D:3C:19:FF:47:89:5A:36:45:33
            X509v3 Authority Key Identifier:
                keyid:56:57:5B:2C:30:07:0A:09:B2:FC:B9:8E:98:45:50:35:33:D7:6D:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VldbLDAHCgmy_LmOmEVQNTPXbYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d0fc8b-c8ed-4c90-9d59-3cdacef8776e/1/VldbLDAHCgmy_LmOmEVQNTPXbYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/d0fc8b-c8ed-4c90-9d59-3cdacef8776e/1/VldbLDAHCgmy_LmOmEVQNTPXbYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ab:38:4e:9c:f7:ae:4f:31:a8:d8:34:84:ba:bc:8a:73:3e:
         0f:ed:d2:34:50:c0:4e:2f:07:a7:bc:af:6f:89:31:aa:63:88:
         eb:88:9b:6e:15:dc:aa:42:a5:2d:e9:cb:f3:e8:57:d2:cf:81:
         37:f9:fb:49:d0:a5:31:27:31:3e:ed:9e:d8:e1:13:33:aa:4f:
         5f:ca:1e:57:50:cb:8f:de:53:43:51:82:9b:b2:15:c4:e7:61:
         2b:c8:3c:b9:44:7a:cc:68:0b:f3:5d:ad:56:86:3a:a7:82:db:
         22:f8:39:49:84:ec:b1:de:fb:b2:19:ce:b8:97:15:8f:5c:99:
         98:a0:bc:e5:6a:93:6a:45:18:28:df:fa:a3:e8:f6:bd:19:09:
         f0:82:c4:57:54:68:6e:a8:ef:e4:76:59:40:bf:fe:d7:2d:b0:
         90:a7:b4:15:23:f9:83:6e:84:20:96:e5:f4:94:52:f8:1c:8b:
         70:ae:b8:a8:c3:35:fa:c4:23:fe:e1:c4:8d:ff:f8:29:da:e2:
         0b:3d:d6:92:96:a3:a2:13:44:46:47:a8:ff:b0:b0:3d:be:9a:
         6f:0e:7b:b0:cc:b1:f8:16:14:4a:45:c6:bb:17:6a:f5:c7:92:
         78:51:02:38:c5:9f:30:52:7c:8e:4b:fa:72:25:60:51:d9:80:
         56:ad:0d:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcCf0edYXOAhfWMtfjeufZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTc1YjJjMzAwNzBhMDliMmZjYjk4ZTk4NDU1MDM1MzNk
NzZkODgwHhcNMjMwMzIxMDQ0ODI4WhcNMjMwMzIyMDQ0ODI4WjAzMTEwLwYDVQQD
EyhiMjgxNTc2YjI3NDYwYmFkOWEzNzlkM2MxOWZmNDc4OTVhMzY0NTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPAYloM8zbPONKrnSkvYbyul3OZc
PMHlFkjstSNM2RaUrZlygQQ7eOARM9XWdH42Pg6cQ5dVEONMRn4OpaLOCZc2Ozy1
gr+v5JMRZxb1WuqW5G2Vsg87YVdiiUYK8Zm9cspJ2cTMOeAJOIBmemNG+ck9ZlyO
ZSd/90RnoLIL/0A43RdUz3py2Nick3FsdcBTLfZ6TUOXNhNx9pbnjSnsqWqu7MrX
sGBXhWkofcVAwTOBNyQg0abbYMIacZiCQfchx89dhIw6R+coKoxVj2dJlKaMddXN
BbMvISRRy9XUGbkPCkxh4/+z8F6GN4nUqzq3FNPnGxxJjBefoSXqcf2KOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKBV2snRgutmjedPBn/R4laNkUzMB8GA1UdIwQY
MBaAFFZXWywwBwoJsvy5jphFUDUz122IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxkYkxEQUhDZ215X0xtT21FVlFOVFBYYllnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9kMGZjOGItYzhlZC00YzkwLTlkNTkt
M2NkYWNlZjg3NzZlLzEvVmxkYkxEQUhDZ215X0xtT21FVlFOVFBYYllnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9kMGZjOGItYzhlZC00YzkwLTlkNTktM2NkYWNlZjg3NzZl
LzEvVmxkYkxEQUhDZ215X0xtT21FVlFOVFBYYllnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR6s4Tpz3
rk8xqNg0hLq8inM+D+3SNFDATi8Hp7yvb4kxqmOI64ibbhXcqkKlLenL8+hX0s+B
N/n7SdClMScxPu2e2OETM6pPX8oeV1DLj95TQ1GCm7IVxOdhK8g8uUR6zGgL812t
VoY6p4LbIvg5SYTssd77shnOuJcVj1yZmKC85WqTakUYKN/6o+j2vRkJ8ILEV1Ro
bqjv5HZZQL/+1y2wkKe0FSP5g26EIJbl9JRS+ByLcK64qMM1+sQj/uHEjf/4Kdri
Cz3WkpajohNERkeo/7CwPb6abw57sMyx+BYUSkXGuxdq9ceSeFECOMWfMFJ8jkv6
ciVgUdmAVq0N1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:07 2024 by rpki-client on console-ams.rpki-client.org