Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.mft
File:                     YqqTMoEZj9LRm8l6AljAAf_J7Z0.mft (raw, json)
Hash identifier:          xgX9BIFoKRcA8/7RyjYPVptV+Y6HJa3SRWmeUKCzokA=
Subject key identifier:   BE:BE:1A:23:A2:97:18:34:14:F1:FA:0F:E8:F2:C2:9F:A8:F1:CE:5D
Authority key identifier: 62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D
Certificate issuer:       /CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
Certificate serial:       018C90F92627F705D44CAE2DFA8E87AE1898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.mft
Manifest number:          0D51
Signing time:             Fri 22 Dec 2023 10:01:36 +0000
Manifest this update:     Fri 22 Dec 2023 10:01:36 +0000
Manifest next update:     Sat 23 Dec 2023 10:01:36 +0000
Files and hashes:         1: 8kU-gz78KYFK2_1Ij6hNFEv_am0.roa (hash: kEhZwI/Vuf9Pmi5AdgZaRtDWAj6ENSc18Pe5m1S3aio=)
                          2: FMQo7Vg14LHz48iwy6bGRDFQU8c.roa (hash: RLHm8vQTpvt7hinVUzdW7QbvrT+qbaSIBFbTDmkdwUA=)
                          3: HCvdIvyEh0OV3g5NC51kHfN5_mE.roa (hash: NCYtFst8b+6szWYLZvyvSSfGUWt9ct6gKGTSOZ8JJ68=)
                          4: YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl (hash: NEvJcPvWnW6+X7JePRV68MB31k0cKNrqeoBFQfepyU8=)
                          5: bKj0hpVqOcQmMTXQ25CJNOR_c1o.roa (hash: M05LNRmicKhgqxKCsfT4JQxQwFfQ426ykL2eo+rf3sw=)
                          6: bpcgprQzxf0IOGzQCxtI5uobGbg.roa (hash: HGEUIj3f5+Y+TtlsLrjCh9tSVFNtArR23FQCSnNzfGI=)
                          7: ga-ABDZjJjBbsm8Ghcm2Ky6yy9U.roa (hash: qTVfiruSSs5eD8m/aB957h20tTpYO0EpivXXHrZiAaQ=)
                          8: urDxT8BkBkCVFvpeJ6zvcHm6hqc.roa (hash: 7CK6RQfX49ou9htJE6QypNUq4vISaxgSoLweQbp8LKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:90:f9:26:27:f7:05:d4:4c:ae:2d:fa:8e:87:ae:18:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62aa933281198fd2d19bc97a0258c001ffc9ed9d
        Validity
            Not Before: Dec 22 10:01:36 2023 GMT
            Not After : Dec 23 10:01:36 2023 GMT
        Subject: CN=bebe1a23a297183414f1fa0fe8f2c29fa8f1ce5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:a4:8c:bb:25:44:33:fd:e4:c5:85:36:7b:
                    1a:09:b6:e6:a3:7f:b0:ed:ba:8e:af:a9:79:99:46:
                    d5:f0:58:63:40:7a:ce:8b:d5:e1:f9:2a:fb:1a:76:
                    ce:1a:9b:68:3d:85:96:15:b8:ce:37:2c:ce:ed:9a:
                    5c:c3:77:c4:62:2b:cb:14:24:64:a5:52:5f:fd:3f:
                    70:7e:dd:6b:00:2c:1b:06:8c:23:e9:71:3e:f3:72:
                    aa:5b:96:28:d1:21:00:8e:79:45:75:e9:65:94:84:
                    bc:45:75:60:1f:b4:22:63:80:22:aa:81:02:b6:ed:
                    74:1a:e4:ee:eb:6a:9b:fa:6c:70:7b:8e:a5:b8:20:
                    96:ff:c8:b5:31:0c:af:e3:9d:b4:ae:4e:b3:30:c2:
                    66:3a:1f:51:53:b3:e4:66:c3:32:ce:d6:a6:a3:ee:
                    2a:76:6e:dc:65:cb:b2:f7:73:16:f0:dd:f1:81:eb:
                    62:a3:3d:cb:d1:5c:5d:63:ae:95:f1:15:ce:c5:b4:
                    de:92:0d:08:44:94:c1:56:6a:0c:38:78:3f:31:e4:
                    27:ee:c1:79:76:97:b2:75:fe:d3:c5:83:b5:f9:7a:
                    53:e8:c9:ee:09:25:07:26:79:5f:6b:e3:e8:de:80:
                    e9:8c:58:d7:48:0a:76:94:65:70:03:40:66:af:e5:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BE:1A:23:A2:97:18:34:14:F1:FA:0F:E8:F2:C2:9F:A8:F1:CE:5D
            X509v3 Authority Key Identifier:
                keyid:62:AA:93:32:81:19:8F:D2:D1:9B:C9:7A:02:58:C0:01:FF:C9:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqqTMoEZj9LRm8l6AljAAf_J7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/059b97-5912-42a8-9c2a-6c5930ced73d/1/YqqTMoEZj9LRm8l6AljAAf_J7Z0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:5f:b7:a9:ee:2c:f1:c6:67:6a:22:6d:bd:ff:c2:a0:aa:
         7d:5b:be:0a:46:d7:31:a5:a0:d8:5c:63:61:6d:bd:fc:74:84:
         7a:53:65:2d:1a:01:4a:4d:17:b6:0a:29:81:74:d4:ae:aa:27:
         ed:6b:dc:8f:50:fa:7b:ce:9b:81:f8:81:7e:fe:b0:73:d4:87:
         b1:9d:3c:95:cf:68:2a:e8:77:5c:3d:8f:23:3b:92:a2:3a:45:
         c7:8b:d4:a7:88:83:a7:ea:a4:de:8f:69:ea:3a:1e:d5:f2:8a:
         cc:37:d9:cd:b2:8a:95:90:89:96:a4:c0:05:7c:05:ce:09:ef:
         f9:47:8b:e3:72:7e:38:a6:05:77:12:c1:19:c8:28:d0:ec:60:
         03:ca:02:90:35:06:e8:b6:c1:60:a1:6c:9e:b2:b9:10:c7:03:
         e8:a2:be:1d:62:4b:bb:31:8d:87:ab:c0:48:7e:36:f6:9a:f8:
         92:f0:c0:bb:f7:78:9a:12:06:73:6d:73:81:53:d7:d0:63:33:
         ca:e4:30:54:e8:58:be:3b:20:bf:7a:b8:66:36:dc:62:22:93:
         d1:aa:fc:23:4e:4b:31:74:9f:8d:53:df:ea:ff:76:61:ec:78:
         13:8d:cb:52:ac:db:89:d4:a1:b1:97:ba:31:b0:b6:3f:29:68:
         11:05:a7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:26 2024 by rpki-client on console-ams.rpki-client.org