Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.mft
File:                     TbcX4Evl4gQ1g27XMotBOVM0-KE.mft (raw, json)
Hash identifier:          h1vMkb1tbOg1IkZnXXRy8JHFHeskE4eec4eMuWYQ60U=
Subject key identifier:   0D:2C:74:EE:CF:4D:77:14:60:9B:9F:32:C7:7F:EB:00:77:AF:1C:EB
Authority key identifier: 4D:B7:17:E0:4B:E5:E2:04:35:83:6E:D7:32:8B:41:39:53:34:F8:A1
Certificate issuer:       /CN=4db717e04be5e20435836ed7328b41395334f8a1
Certificate serial:       018538893EC527FBF7FD98B0EE42F1B146B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TbcX4Evl4gQ1g27XMotBOVM0-KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.mft
Manifest number:          04
Signing time:             Thu 22 Dec 2022 06:33:16 +0000
Manifest this update:     Thu 22 Dec 2022 06:33:16 +0000
Manifest next update:     Fri 23 Dec 2022 06:33:16 +0000
Files and hashes:         1: 5AcEKyeVA91OwS0Ww-YNzX-3IJo.roa (hash: aeP6mNnmqs+npQCFWpvTEKthSUguNJNIetnu/mSLRfA=)
                          2: TbcX4Evl4gQ1g27XMotBOVM0-KE.crl (hash: +/n6m02rhmj44u208i8WB7ZYkTrMojRYQQ0qAQUPFss=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:38:89:3e:c5:27:fb:f7:fd:98:b0:ee:42:f1:b1:46:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4db717e04be5e20435836ed7328b41395334f8a1
        Validity
            Not Before: Dec 22 06:33:16 2022 GMT
            Not After : Dec 23 06:33:16 2022 GMT
        Subject: CN=0d2c74eecf4d7714609b9f32c77feb0077af1ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:25:09:e9:22:9d:cd:32:4b:5f:c4:70:79:
                    69:c9:51:3a:d0:8b:35:b3:42:46:62:ef:d0:fb:29:
                    df:8a:92:aa:19:ad:1e:66:bb:fe:66:81:10:96:e0:
                    a6:4e:96:d5:02:b2:d1:4a:5c:59:df:3b:04:de:29:
                    ca:f2:c4:52:4d:7a:2f:c5:e4:05:f6:27:46:35:4e:
                    46:0a:6a:34:b6:59:42:da:10:9c:ea:4b:2d:e9:d0:
                    34:d6:b5:2f:72:8c:f6:5a:41:7d:e6:60:ba:42:7e:
                    7f:fd:be:37:da:2b:62:0a:11:aa:7b:f6:d8:3a:06:
                    d4:0c:e9:02:d6:13:86:91:5f:30:de:5f:b2:14:24:
                    be:66:81:fb:87:30:88:1c:64:4e:fe:c1:6e:da:e3:
                    f5:2b:ea:4f:fe:bd:95:1a:fe:49:03:fd:e6:0a:2c:
                    71:97:13:56:1f:a1:73:2e:cb:28:a2:dd:35:9c:54:
                    f6:64:aa:07:22:2e:c8:aa:a2:02:f2:20:10:43:8a:
                    04:60:6e:fc:aa:c3:43:cf:3b:a5:a5:15:d1:b3:5d:
                    85:1e:7a:5b:f5:67:04:13:8b:26:6e:92:51:74:29:
                    d9:a4:d0:2c:2e:71:44:d2:f0:f4:9c:e3:73:19:63:
                    3f:3d:da:ba:4a:01:6b:7c:cc:9f:7c:b9:7a:40:31:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2C:74:EE:CF:4D:77:14:60:9B:9F:32:C7:7F:EB:00:77:AF:1C:EB
            X509v3 Authority Key Identifier:
                keyid:4D:B7:17:E0:4B:E5:E2:04:35:83:6E:D7:32:8B:41:39:53:34:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbcX4Evl4gQ1g27XMotBOVM0-KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d3c11d-fa02-403f-872b-c7f9f73bb72a/1/TbcX4Evl4gQ1g27XMotBOVM0-KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:92:3b:f9:4b:2b:1a:77:2d:18:4c:2b:ff:3b:9a:37:8c:
         2b:1a:8f:17:08:13:07:fb:23:85:e4:05:06:d3:c4:34:fb:6a:
         cd:44:5c:2d:14:26:4f:77:8d:4e:6d:c2:a5:c3:a4:df:e6:70:
         85:0e:cb:72:a6:e7:bb:9e:ed:32:52:f3:f6:c7:ce:48:33:26:
         80:24:b9:d1:22:b9:a2:eb:f6:fc:18:6a:c8:67:26:0a:9c:7c:
         79:12:e3:c6:1e:77:5a:40:9c:3c:bd:1b:a4:75:05:3d:48:00:
         e0:3f:49:65:32:ae:cc:83:4f:de:cb:46:be:34:e2:c2:39:28:
         d0:00:f2:fd:74:60:34:10:17:a8:83:f3:26:ec:02:81:16:00:
         ee:32:99:aa:73:ff:67:0d:a8:cc:8f:93:fe:c4:30:1b:46:a8:
         9b:2d:18:94:e4:3e:e4:66:b1:9e:12:77:5f:1b:40:e6:b9:19:
         9e:24:51:4a:f6:a9:39:eb:59:83:32:e4:02:eb:64:8a:e8:20:
         48:33:4a:47:b0:dd:da:ea:55:be:41:30:c9:9e:3d:e3:7c:fb:
         d7:4c:1b:a2:1c:ba:87:18:6e:17:af:b2:ae:5f:d2:31:fe:97:
         13:b1:f2:10:55:56:4a:ca:17:5c:82:10:e1:eb:c6:b4:bc:ed:
         0b:85:9a:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYU4iT7FJ/v3/Ziw7kLxsUa3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkYjcxN2UwNGJlNWUyMDQzNTgzNmVkNzMyOGI0MTM5NTMz
NGY4YTEwHhcNMjIxMjIyMDYzMzE2WhcNMjIxMjIzMDYzMzE2WjAzMTEwLwYDVQQD
EygwZDJjNzRlZWNmNGQ3NzE0NjA5YjlmMzJjNzdmZWIwMDc3YWYxY2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleglCekinc0yS1/EcHlpyVE60Is1
s0JGYu/Q+ynfipKqGa0eZrv+ZoEQluCmTpbVArLRSlxZ3zsE3inK8sRSTXovxeQF
9idGNU5GCmo0tllC2hCc6kst6dA01rUvcoz2WkF95mC6Qn5//b432itiChGqe/bY
OgbUDOkC1hOGkV8w3l+yFCS+ZoH7hzCIHGRO/sFu2uP1K+pP/r2VGv5JA/3mCixx
lxNWH6FzLssoot01nFT2ZKoHIi7IqqIC8iAQQ4oEYG78qsNDzzulpRXRs12FHnpb
9WcEE4smbpJRdCnZpNAsLnFE0vD0nONzGWM/Pdq6SgFrfMyffLl6QDGZJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0sdO7PTXcUYJufMsd/6wB3rxzrMB8GA1UdIwQY
MBaAFE23F+BL5eIENYNu1zKLQTlTNPihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGJjWDRFdmw0Z1ExZzI3WE1vdEJPVk0wLUtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kM2MxMWQtZmEwMi00MDNmLTg3MmIt
YzdmOWY3M2JiNzJhLzEvVGJjWDRFdmw0Z1ExZzI3WE1vdEJPVk0wLUtFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kM2MxMWQtZmEwMi00MDNmLTg3MmItYzdmOWY3M2JiNzJh
LzEvVGJjWDRFdmw0Z1ExZzI3WE1vdEJPVk0wLUtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAudySO/lL
Kxp3LRhMK/87mjeMKxqPFwgTB/sjheQFBtPENPtqzURcLRQmT3eNTm3CpcOk3+Zw
hQ7Lcqbnu57tMlLz9sfOSDMmgCS50SK5ouv2/BhqyGcmCpx8eRLjxh53WkCcPL0b
pHUFPUgA4D9JZTKuzINP3stGvjTiwjko0ADy/XRgNBAXqIPzJuwCgRYA7jKZqnP/
Zw2ozI+T/sQwG0aomy0YlOQ+5GaxnhJ3XxtA5rkZniRRSvapOetZgzLkAutkiugg
SDNKR7Dd2upVvkEwyZ4943z710wbohy6hxhuF6+yrl/SMf6XE7HyEFVWSsoXXIIQ
4evGtLztC4WaEw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org