Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/Gjccq68OGpyay9jfJUSjakKele4.mft
File:                     Gjccq68OGpyay9jfJUSjakKele4.mft (raw, json)
Hash identifier:          bcwueQuLs5j8yjXrkMeolaGn5MGQ6mLLH5ZKsmfzfcM=
Subject key identifier:   F8:2E:9E:14:10:82:77:96:36:8B:C8:0C:57:2F:69:9E:AC:86:2B:44
Authority key identifier: 1A:37:1C:AB:AF:0E:1A:9C:9A:CB:D8:DF:25:44:A3:6A:42:9E:95:EE
Certificate issuer:       /CN=1a371cabaf0e1a9c9acbd8df2544a36a429e95ee
Certificate serial:       0185291C220766296E54E55433B3DAA6DD05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gjccq68OGpyay9jfJUSjakKele4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/Gjccq68OGpyay9jfJUSjakKele4.mft
Manifest number:          024D
Signing time:             Mon 19 Dec 2022 06:39:47 +0000
Manifest this update:     Mon 19 Dec 2022 06:39:47 +0000
Manifest next update:     Tue 20 Dec 2022 06:39:47 +0000
Files and hashes:         1: EZl21R1Fyhf9SrEgJCOaBNqf1qY.roa (hash: hYXa+rmUqDach0sopJLJ1Ekw6/NX+D98ZyF/WhCZxs4=)
                          2: Gjccq68OGpyay9jfJUSjakKele4.crl (hash: QUr8CK9N9fYU86RWnh7thyTYaleIAXXUPLWjtjlxrbI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:1c:22:07:66:29:6e:54:e5:54:33:b3:da:a6:dd:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a371cabaf0e1a9c9acbd8df2544a36a429e95ee
        Validity
            Not Before: Dec 19 06:39:47 2022 GMT
            Not After : Dec 20 06:39:47 2022 GMT
        Subject: CN=f82e9e1410827796368bc80c572f699eac862b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:70:4c:26:ee:d2:c0:ad:42:f6:74:e3:67:
                    19:fe:e9:9d:77:71:67:68:a6:d6:0f:42:7f:50:d5:
                    4c:8f:27:ee:f1:65:28:78:ad:43:d0:15:bd:d0:71:
                    e1:e1:95:83:61:f1:b0:2e:1e:a9:3e:a7:8b:e8:60:
                    0c:67:95:b8:a2:01:52:60:95:aa:b9:cf:a5:94:a2:
                    b1:82:52:d5:ae:9f:bb:a8:74:fd:00:a3:7a:4e:03:
                    f5:33:53:36:23:da:ed:b9:d4:b7:b8:8c:e6:5f:83:
                    30:2f:10:91:4f:b1:fb:b7:56:c5:51:9b:ef:6a:c0:
                    f4:dd:65:cd:84:ae:e3:77:74:b5:d9:2d:4c:78:bc:
                    3a:ea:bf:85:e5:ed:44:4f:ae:ea:ac:8a:c1:57:52:
                    ad:04:4c:00:98:c3:14:8d:2f:d2:a9:6e:d2:fa:e3:
                    71:6a:70:c4:30:78:2c:c7:7a:e8:61:23:e1:45:15:
                    b2:ca:0c:bc:38:7b:73:a6:c0:a3:18:3d:bf:9b:40:
                    52:5b:57:46:83:67:74:e6:fb:b6:b9:96:dd:81:95:
                    fa:60:42:83:d6:24:d0:4a:cc:48:96:b5:3d:fa:50:
                    8e:f7:32:7c:6f:19:ba:32:48:3a:43:e0:81:86:1b:
                    74:78:80:ce:89:34:37:7c:a8:79:d3:13:53:99:40:
                    ed:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2E:9E:14:10:82:77:96:36:8B:C8:0C:57:2F:69:9E:AC:86:2B:44
            X509v3 Authority Key Identifier:
                keyid:1A:37:1C:AB:AF:0E:1A:9C:9A:CB:D8:DF:25:44:A3:6A:42:9E:95:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gjccq68OGpyay9jfJUSjakKele4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/Gjccq68OGpyay9jfJUSjakKele4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/52e6bc-d818-4d51-a87e-c0d752cbe6c5/1/Gjccq68OGpyay9jfJUSjakKele4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:4f:ab:6c:ee:68:b4:53:3b:5d:62:c3:fa:e7:36:4e:25:
         56:48:dd:39:a5:09:bf:f4:f5:ed:65:0c:66:ae:2c:c7:e3:a3:
         ed:5e:5e:cd:5e:57:72:57:6c:32:27:2f:55:eb:b9:2c:27:10:
         cc:da:46:f3:f0:a1:28:9b:b1:32:b8:cf:b7:9d:ca:ca:a7:57:
         e9:f2:60:eb:44:4e:db:45:c7:48:79:0c:7e:77:94:b4:24:27:
         eb:a6:dd:39:d3:8c:33:86:68:02:65:79:b5:55:0a:f2:62:65:
         0d:24:16:c6:54:39:56:9e:36:df:bc:07:ea:2e:f3:cb:22:e8:
         97:c6:6c:eb:07:f6:1a:e7:aa:86:ef:cb:01:be:67:d0:e8:ef:
         27:c1:f6:e5:aa:54:d4:80:14:e6:da:fd:b7:cc:b2:10:78:33:
         26:35:b1:9a:37:8d:bb:7c:be:bb:9f:37:42:c4:ba:e2:5c:36:
         18:3a:68:a1:c6:ee:04:f8:44:52:72:ac:95:3b:07:bc:18:91:
         9e:49:8d:55:8b:7f:1c:69:2f:13:1c:8e:95:a6:de:c8:7a:c2:
         aa:53:b3:be:ce:5e:b6:cc:ad:d8:41:35:a9:b7:8c:2d:bc:6e:
         08:d9:f9:67:53:0c:3a:80:be:47:01:20:65:67:b8:87:67:46:
         8e:b5:b4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:56 2024 by rpki-client on console-fra.rpki-client.org