Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/ce17oy4WtVIYTmZVeeiHS3Shyps.mft
File:                     ce17oy4WtVIYTmZVeeiHS3Shyps.mft (raw, json)
Hash identifier:          vwj6Qx4qwYpjNSoU3GY0TPr7wlnpvqUO9debOqw2eP4=
Subject key identifier:   C6:6E:0D:68:36:17:BC:2D:87:82:A1:39:A5:78:B7:69:1A:BD:5E:28
Authority key identifier: 71:ED:7B:A3:2E:16:B5:52:18:4E:66:55:79:E8:87:4B:74:A1:CA:9B
Certificate issuer:       /CN=71ed7ba32e16b552184e665579e8874b74a1ca9b
Certificate serial:       018D8860610D132F775CC006A51718AB9CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ce17oy4WtVIYTmZVeeiHS3Shyps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/ce17oy4WtVIYTmZVeeiHS3Shyps.mft
Manifest number:          106D
Signing time:             Thu 08 Feb 2024 11:00:34 +0000
Manifest this update:     Thu 08 Feb 2024 11:00:34 +0000
Manifest next update:     Fri 09 Feb 2024 11:00:34 +0000
Files and hashes:         1: 27tAxfHrIP9ufmdGH29WXR9Lu-A.roa (hash: ikFjB8ah8z9u0hwx8tIvOllWor+q/UjXYmTd0upSTBo=)
                          2: ce17oy4WtVIYTmZVeeiHS3Shyps.crl (hash: 6eazS9R6xgs4II5pywuJCYRnZezVDlu7wKd9qRZZ5dA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:88:60:61:0d:13:2f:77:5c:c0:06:a5:17:18:ab:9c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ed7ba32e16b552184e665579e8874b74a1ca9b
        Validity
            Not Before: Feb  8 11:00:34 2024 GMT
            Not After : Feb  9 11:00:34 2024 GMT
        Subject: CN=c66e0d683617bc2d8782a139a578b7691abd5e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:52:6c:83:2a:26:d6:bf:78:e5:b7:ce:8e:ed:
                    05:06:6d:47:e3:dd:46:0b:30:ea:83:0e:2e:ab:d4:
                    f3:85:0d:dd:e0:df:42:6a:52:1f:e5:55:0e:a4:dd:
                    10:cb:1e:cd:88:d0:13:7f:ca:9d:23:bb:08:cb:dc:
                    46:0a:39:31:22:f6:c1:85:33:87:5c:23:4c:35:9b:
                    08:f6:9f:5d:94:a4:f2:e0:79:15:85:ed:38:30:ec:
                    b8:f2:4b:f1:f9:07:52:44:f5:7d:83:0e:a6:5b:24:
                    0c:a3:25:ed:a6:f7:89:ff:72:02:85:0e:3e:32:a2:
                    08:a4:61:3c:ea:df:46:d1:9d:d8:b5:41:3e:94:f1:
                    3a:52:aa:f5:8f:d3:ce:f8:da:7d:6e:80:90:de:31:
                    c3:9e:11:17:5c:92:9b:1a:c3:1c:a2:79:b0:d4:60:
                    32:20:02:37:e1:c3:4b:91:a9:13:c8:1f:09:e3:a6:
                    5f:bb:f9:9c:83:4e:7b:b0:37:88:5a:f6:3f:d3:5f:
                    f7:f9:0b:8b:14:97:33:42:87:45:05:98:ea:82:af:
                    b4:bd:8e:ba:bc:44:94:89:cf:7a:69:a3:e9:5c:4b:
                    ff:ae:f2:13:fa:b4:fd:72:a3:28:20:45:aa:6f:c1:
                    8e:cc:f8:15:53:0e:9c:18:21:fd:95:5e:44:b6:67:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6E:0D:68:36:17:BC:2D:87:82:A1:39:A5:78:B7:69:1A:BD:5E:28
            X509v3 Authority Key Identifier:
                keyid:71:ED:7B:A3:2E:16:B5:52:18:4E:66:55:79:E8:87:4B:74:A1:CA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce17oy4WtVIYTmZVeeiHS3Shyps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/ce17oy4WtVIYTmZVeeiHS3Shyps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/25852a-aeee-4002-a8ab-0ff9557967dc/1/ce17oy4WtVIYTmZVeeiHS3Shyps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:36:82:ac:c4:54:f5:3d:26:18:0d:9e:d4:7c:fb:b7:5c:
         3a:cd:47:18:d4:cd:45:f1:36:c3:9e:4e:71:f5:dc:6d:ac:39:
         3f:02:a0:d2:bd:9a:ba:f7:37:00:02:9a:58:50:f0:c5:48:68:
         fe:c2:68:4d:f7:fb:ce:23:81:3f:f0:2b:3b:97:0e:98:67:59:
         c2:b2:7a:57:78:26:a6:f1:a5:d7:5d:02:d2:28:04:df:77:69:
         f4:16:7a:f5:35:3c:5a:61:57:45:ca:b4:cf:84:32:16:98:11:
         9c:af:16:2f:48:25:b7:ca:e8:36:6d:ac:4f:4b:9f:9c:b9:84:
         8d:20:e5:d8:67:9a:dd:81:70:ef:7b:be:cc:0c:3c:88:6c:8c:
         35:e3:5f:a8:3b:9d:76:cf:fe:5f:95:21:0b:3c:20:0a:fc:c1:
         36:ae:f1:bb:7f:ce:91:c8:7a:fb:93:09:e4:47:98:2e:3e:be:
         b6:ab:6f:0e:bc:1d:0d:6f:7c:5b:a5:9c:cc:c9:e4:79:5b:58:
         91:cf:56:2b:30:17:47:19:e8:8f:43:d0:92:c2:23:64:6f:cf:
         7f:81:a5:5f:4e:81:3c:79:50:05:b9:4b:38:d1:78:28:2d:e5:
         f9:be:81:7f:da:cc:1a:4d:1e:ee:4b:c9:a3:66:26:49:9b:a2:
         12:6e:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:57 2024 by rpki-client on console-ams.rpki-client.org