Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.mft
File:                     tUmmAN8a15dPqA40ZrW3ZEE5N1k.mft (raw, json)
Hash identifier:          akOg6ox65TrazOoKj1wgv7MYM4s6jtdbdxBe7Ey/Brc=
Subject key identifier:   5C:48:9C:DD:3F:7E:10:8D:E3:ED:25:D8:E4:7C:7C:A5:0F:F5:7D:A8
Authority key identifier: B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59
Certificate issuer:       /CN=b549a600df1ad7974fa80e3466b5b76441393759
Certificate serial:       018D77DB3C431CC862D08E5D71DAA14C453D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.mft
Manifest number:          084A
Signing time:             Mon 05 Feb 2024 06:01:12 +0000
Manifest this update:     Mon 05 Feb 2024 06:01:12 +0000
Manifest next update:     Tue 06 Feb 2024 06:01:12 +0000
Files and hashes:         1: YjVex5U9NICH9vwJaYU9dbkfhC0.roa (hash: 8EoF4i/0aDYo8sxTYWH8U/m3adRHH42V4owUQGkJ3C8=)
                          2: tUmmAN8a15dPqA40ZrW3ZEE5N1k.crl (hash: Y5CeXID1CpBnqK/ho0TVA6j6pvleKwJmI5iepu+AgK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:77:db:3c:43:1c:c8:62:d0:8e:5d:71:da:a1:4c:45:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b549a600df1ad7974fa80e3466b5b76441393759
        Validity
            Not Before: Feb  5 06:01:12 2024 GMT
            Not After : Feb  6 06:01:12 2024 GMT
        Subject: CN=5c489cdd3f7e108de3ed25d8e47c7ca50ff57da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:73:71:9d:cc:be:a4:95:78:ae:c5:30:1e:
                    0b:70:f8:2f:90:38:46:3b:ba:f3:6c:cb:4a:b8:d8:
                    ac:ce:ce:68:bd:18:1d:76:dc:98:3b:d3:63:30:9e:
                    d0:10:cc:5d:fa:8c:59:95:2d:9a:fb:93:fb:64:b3:
                    6b:24:14:dc:14:2f:b0:16:b3:ed:51:86:1b:93:90:
                    3d:42:fa:64:ac:58:79:a4:a7:d9:1c:62:0a:77:f2:
                    2a:34:a7:f1:e1:46:cd:d3:a2:17:22:b9:26:e2:36:
                    55:b2:6a:89:a4:89:c8:e7:e7:e7:82:94:78:19:d1:
                    5e:8f:af:04:4f:4b:ce:03:d1:93:b3:08:7b:66:39:
                    b0:bc:aa:b2:72:68:9b:e4:11:21:6a:cf:d6:b3:90:
                    8c:ca:b5:19:77:8d:82:87:9e:f9:02:9d:a3:78:c0:
                    3a:1a:6e:5e:b3:1a:0a:f7:95:25:b6:51:96:d5:5f:
                    33:cf:10:25:a5:a9:53:8d:19:08:d9:07:81:c5:28:
                    23:c6:64:bc:e9:a1:07:52:23:f9:50:21:7c:85:64:
                    0e:a5:a7:29:64:b3:9d:04:b7:1b:53:4d:39:70:ee:
                    d8:d3:35:05:c0:6c:a2:24:db:a0:d4:6e:88:3f:a9:
                    68:3f:db:f5:a0:d7:e8:c7:68:85:9e:d3:65:39:fe:
                    a9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:48:9C:DD:3F:7E:10:8D:E3:ED:25:D8:E4:7C:7C:A5:0F:F5:7D:A8
            X509v3 Authority Key Identifier:
                keyid:B5:49:A6:00:DF:1A:D7:97:4F:A8:0E:34:66:B5:B7:64:41:39:37:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUmmAN8a15dPqA40ZrW3ZEE5N1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f3a076-27ca-4cb1-8efa-583faf827fa0/1/tUmmAN8a15dPqA40ZrW3ZEE5N1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:9b:14:9b:39:38:cf:34:16:8a:3d:cb:59:59:bd:5a:5a:46:
         3d:77:8c:bd:e5:d5:3e:b9:c7:9f:1c:fc:5e:dc:e1:30:50:ce:
         21:1d:b3:a0:7f:79:4e:65:03:26:27:e3:74:ed:38:17:d0:93:
         8c:56:e1:f5:26:08:6d:c5:e8:c4:36:a9:30:d2:3a:32:a9:fc:
         38:cf:f6:d4:cf:c9:00:df:5a:e5:58:99:a4:89:e4:9c:86:26:
         d7:62:73:79:ae:08:72:4c:29:47:db:02:00:b3:b9:9c:1e:35:
         9b:50:b2:4a:a7:96:39:89:3f:a0:0d:7b:32:23:ac:ac:3d:b7:
         3b:2c:78:c0:01:24:ad:68:0b:c3:91:4a:f6:82:ea:ac:cb:1f:
         5f:22:9d:b4:95:e0:5e:df:09:8c:af:17:93:b9:6e:0b:e8:a3:
         3f:2c:c2:44:41:53:c1:b4:cc:9a:1c:ab:88:ea:39:28:7a:56:
         10:31:18:2c:37:b1:2f:3a:ef:bd:01:a2:86:90:76:4d:2f:b9:
         b7:a0:da:74:f1:a7:57:c2:93:9a:19:9a:7e:4c:02:37:ca:73:
         b8:08:b9:2e:df:20:bd:c3:ec:5a:f8:54:8b:56:97:2f:37:0d:
         df:2b:7e:6c:b4:d4:7b:a2:df:78:00:c0:6e:67:73:be:0b:37:
         2b:60:f9:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY132zxDHMhi0I5dcdqhTEU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NDlhNjAwZGYxYWQ3OTc0ZmE4MGUzNDY2YjViNzY0NDEz
OTM3NTkwHhcNMjQwMjA1MDYwMTEyWhcNMjQwMjA2MDYwMTEyWjAzMTEwLwYDVQQD
Eyg1YzQ4OWNkZDNmN2UxMDhkZTNlZDI1ZDhlNDdjN2NhNTBmZjU3ZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKNzcZ3MvqSVeK7FMB4LcPgvkDhG
O7rzbMtKuNiszs5ovRgddtyYO9NjMJ7QEMxd+oxZlS2a+5P7ZLNrJBTcFC+wFrPt
UYYbk5A9QvpkrFh5pKfZHGIKd/IqNKfx4UbN06IXIrkm4jZVsmqJpInI5+fngpR4
GdFej68ET0vOA9GTswh7ZjmwvKqycmib5BEhas/Ws5CMyrUZd42Ch575Ap2jeMA6
Gm5esxoK95UltlGW1V8zzxAlpalTjRkI2QeBxSgjxmS86aEHUiP5UCF8hWQOpacp
ZLOdBLcbU005cO7Y0zUFwGyiJNug1G6IP6loP9v1oNfox2iFntNlOf6p1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxInN0/fhCN4+0l2OR8fKUP9X2oMB8GA1UdIwQY
MBaAFLVJpgDfGteXT6gONGa1t2RBOTdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFVtbUFOOGExNWRQcUE0MFpyVzNaRUU1TjFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mM2EwNzYtMjdjYS00Y2IxLThlZmEt
NTgzZmFmODI3ZmEwLzEvdFVtbUFOOGExNWRQcUE0MFpyVzNaRUU1TjFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mM2EwNzYtMjdjYS00Y2IxLThlZmEtNTgzZmFmODI3ZmEw
LzEvdFVtbUFOOGExNWRQcUE0MFpyVzNaRUU1TjFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5sUmzk4
zzQWij3LWVm9WlpGPXeMveXVPrnHnxz8XtzhMFDOIR2zoH95TmUDJifjdO04F9CT
jFbh9SYIbcXoxDapMNI6Mqn8OM/21M/JAN9a5ViZpInknIYm12Jzea4IckwpR9sC
ALO5nB41m1CySqeWOYk/oA17MiOsrD23Oyx4wAEkrWgLw5FK9oLqrMsfXyKdtJXg
Xt8JjK8Xk7luC+ijPyzCREFTwbTMmhyriOo5KHpWEDEYLDexLzrvvQGihpB2TS+5
t6DadPGnV8KTmhmafkwCN8pzuAi5Lt8gvcPsWvhUi1aXLzcN3yt+bLTUe6LfeADA
bmdzvgs3K2D5zg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:24 2024 by rpki-client on console-fra.rpki-client.org