Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/0NvhCHgYqt80JKzYuZjGjZf5B5Y.mft
File:                     0NvhCHgYqt80JKzYuZjGjZf5B5Y.mft (raw, json)
Hash identifier:          oJSphOdCW/NiukZntGepMIl6Q15BgVlki2U9ft2Yqgw=
Subject key identifier:   53:80:AE:0B:4D:4C:93:F9:0B:27:02:60:66:AD:E9:C3:D2:31:63:88
Authority key identifier: D0:DB:E1:08:78:18:AA:DF:34:24:AC:D8:B9:98:C6:8D:97:F9:07:96
Certificate issuer:       /CN=d0dbe1087818aadf3424acd8b998c68d97f90796
Certificate serial:       018F9B06AB2C4734B75189088EEFFA7F6FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0NvhCHgYqt80JKzYuZjGjZf5B5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/0NvhCHgYqt80JKzYuZjGjZf5B5Y.mft
Manifest number:          07D2
Signing time:             Tue 21 May 2024 12:00:56 +0000
Manifest this update:     Tue 21 May 2024 12:00:56 +0000
Manifest next update:     Wed 22 May 2024 12:00:56 +0000
Files and hashes:         1: 0NvhCHgYqt80JKzYuZjGjZf5B5Y.crl (hash: MVplqJgILgd0TRZ2RqrbGfC8OxgYyjCSKK5xbzB30cw=)
                          2: Oy-7lbcYeTS48UPD1DePL44ZR_w.roa (hash: 7nsy7HAWMc0hdfDg0djr1tMQercEqxJbQjQ1UBU5ysQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9b:06:ab:2c:47:34:b7:51:89:08:8e:ef:fa:7f:6f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0dbe1087818aadf3424acd8b998c68d97f90796
        Validity
            Not Before: May 21 12:00:56 2024 GMT
            Not After : May 22 12:00:56 2024 GMT
        Subject: CN=5380ae0b4d4c93f90b27026066ade9c3d2316388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:98:4d:a8:e3:0f:84:4a:5f:ca:53:a4:db:
                    7e:6f:35:6b:0d:50:dc:14:4a:05:a0:13:bb:34:24:
                    38:56:07:15:8b:b5:81:43:f5:59:4f:fe:42:be:86:
                    90:5a:ff:ed:d1:97:e6:76:b5:f8:87:54:72:2e:47:
                    9d:39:50:13:98:cc:74:2c:af:6c:e5:52:06:6b:04:
                    3a:82:d3:58:84:52:7f:8f:4a:41:e2:b8:b2:91:35:
                    11:e1:ed:94:f1:67:ed:83:21:fa:e2:b8:07:80:89:
                    1e:2a:26:5a:27:8a:be:6e:41:a9:cd:60:93:5f:1c:
                    15:7c:0d:da:c4:4d:6b:1f:a2:dd:f3:63:fc:eb:60:
                    73:7e:70:52:8e:f4:d7:dd:a5:ab:67:7c:48:73:2d:
                    43:a1:2d:f5:8e:bf:e6:77:d0:51:e6:a0:89:4f:73:
                    e6:53:69:fb:51:a6:23:45:ea:b1:2f:c6:b6:dd:bb:
                    52:e6:c5:7d:31:10:d3:70:b7:4f:52:4f:7c:c2:f0:
                    c0:ee:0a:f8:ca:30:6f:8b:a1:09:81:9b:ce:c3:e5:
                    06:18:c8:d4:da:16:8d:72:08:47:e1:31:3a:ea:cf:
                    d9:62:6d:64:d1:92:34:03:24:aa:5a:8b:14:a4:f1:
                    58:8d:41:34:cf:27:c4:d8:c3:4a:62:37:4c:10:2c:
                    8e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:80:AE:0B:4D:4C:93:F9:0B:27:02:60:66:AD:E9:C3:D2:31:63:88
            X509v3 Authority Key Identifier:
                keyid:D0:DB:E1:08:78:18:AA:DF:34:24:AC:D8:B9:98:C6:8D:97:F9:07:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0NvhCHgYqt80JKzYuZjGjZf5B5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/0NvhCHgYqt80JKzYuZjGjZf5B5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c035f-8bf9-46ab-a2c9-9fd9bd7b28bb/1/0NvhCHgYqt80JKzYuZjGjZf5B5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1e:6b:fe:36:7d:cc:4f:b6:2f:48:7c:f7:d9:de:da:7e:ad:
         07:b4:3f:ab:1d:f2:a4:f6:4b:d9:2b:f0:eb:56:41:06:ce:96:
         9d:31:87:f8:98:73:10:47:44:03:76:62:90:9a:e6:ab:be:a3:
         a2:85:bb:ef:96:f3:86:d2:1e:7f:42:e2:be:31:9f:42:4d:8d:
         38:9e:26:4a:a3:6f:66:7d:5e:39:64:d8:52:b0:bf:bf:38:de:
         f3:51:79:aa:34:95:96:c9:85:d6:04:ca:6e:57:8a:95:fc:79:
         5c:38:39:01:f9:e3:16:57:ed:ac:17:a4:0b:26:cd:4a:53:5d:
         ed:01:f2:5d:ba:6e:33:d2:1e:93:38:15:b7:69:d2:0f:fa:f0:
         a5:73:4a:6f:c1:c9:1e:0f:21:2c:5a:41:30:60:34:d3:98:81:
         0f:9d:1e:47:db:f3:92:62:51:03:86:13:5a:96:1d:9d:3f:2c:
         0f:ae:ca:ab:3f:15:c0:67:0a:b9:94:ab:a0:96:e5:21:08:98:
         88:0b:34:fc:d4:8e:cf:bf:c6:a5:3d:b1:37:57:6e:55:03:fc:
         a6:68:94:09:b9:88:f3:80:c9:23:48:b8:21:2e:38:9e:b8:38:
         79:37:d6:5f:7c:4f:1d:ab:43:a4:14:32:90:1d:a2:24:7f:93:
         5f:95:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org