Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.mft
File:                     ns8AG5m6mj3MAEcyY4H63quRjfQ.mft (raw, json)
Hash identifier:          8UjBCQwpqjhz+HfUFuAEBHjRMecviqTxBxuV7CcjJ/c=
Subject key identifier:   C6:F2:73:C4:EE:24:D9:F0:D9:C8:FB:19:B9:87:88:C0:51:DC:16:65
Authority key identifier: 9E:CF:00:1B:99:BA:9A:3D:CC:00:47:32:63:81:FA:DE:AB:91:8D:F4
Certificate issuer:       /CN=9ecf001b99ba9a3dcc0047326381fadeab918df4
Certificate serial:       019072E49082BF5187EACA349314ADA58179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ns8AG5m6mj3MAEcyY4H63quRjfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.mft
Manifest number:          02AB
Signing time:             Tue 02 Jul 2024 10:01:40 +0000
Manifest this update:     Tue 02 Jul 2024 10:01:40 +0000
Manifest next update:     Wed 03 Jul 2024 10:01:40 +0000
Files and hashes:         1: ns8AG5m6mj3MAEcyY4H63quRjfQ.crl (hash: aZODuntHxnDEhZKz+qR81STRHsUrF88cpTKKC3WpxlM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:72:e4:90:82:bf:51:87:ea:ca:34:93:14:ad:a5:81:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ecf001b99ba9a3dcc0047326381fadeab918df4
        Validity
            Not Before: Jul  2 10:01:40 2024 GMT
            Not After : Jul  3 10:01:40 2024 GMT
        Subject: CN=c6f273c4ee24d9f0d9c8fb19b98788c051dc1665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:0a:fb:e0:5a:f8:bb:82:a8:2c:58:8c:a3:
                    43:ae:8a:ab:80:8c:f4:23:6a:51:67:45:c8:d4:88:
                    54:26:88:e6:04:f3:82:9e:9b:e1:8e:e7:a8:e4:9a:
                    5e:8d:10:7c:da:a0:70:80:18:7c:1c:e0:6d:53:b6:
                    42:03:97:b0:5a:c8:0c:9c:fb:82:af:83:73:8c:2d:
                    24:23:e1:73:15:8c:78:6b:09:d9:16:85:88:e7:75:
                    59:25:d5:30:40:ac:ed:5f:03:8b:be:dc:06:0a:e3:
                    fb:7e:85:ed:b3:1d:a1:68:8b:f1:f6:4c:8e:8c:18:
                    bf:78:4e:f7:b7:f8:b7:a9:50:34:f3:4f:a8:0a:ba:
                    79:46:bc:f9:2a:f6:28:36:81:6b:dd:67:2f:7e:89:
                    55:4d:00:58:3b:d3:ea:57:3a:ab:2e:90:60:56:42:
                    61:5b:7e:67:4b:b5:ba:d0:14:20:5e:f1:3a:27:7e:
                    da:86:3b:5d:0b:0c:78:50:c4:aa:39:a4:a0:c7:eb:
                    44:b3:d6:39:b7:fc:00:b1:f6:4d:1b:b5:c2:d0:ec:
                    51:1f:88:5a:4c:8d:5c:12:4e:aa:8d:d8:67:e8:27:
                    7b:ed:0f:fe:ab:4b:ae:d0:32:3e:79:11:c0:8f:93:
                    02:db:66:1e:af:12:9c:30:73:b0:99:fe:c6:a9:a2:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F2:73:C4:EE:24:D9:F0:D9:C8:FB:19:B9:87:88:C0:51:DC:16:65
            X509v3 Authority Key Identifier:
                keyid:9E:CF:00:1B:99:BA:9A:3D:CC:00:47:32:63:81:FA:DE:AB:91:8D:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ns8AG5m6mj3MAEcyY4H63quRjfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7f62b1-12ad-41db-8671-3386a7c9c135/1/ns8AG5m6mj3MAEcyY4H63quRjfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e8:d1:33:c3:96:2f:70:fa:d2:19:32:86:72:43:78:11:1e:
         f3:f4:2d:37:ad:97:d5:c9:b4:b7:39:e3:5b:fa:7b:09:a3:18:
         c0:c2:d3:1d:62:5b:4d:db:59:f4:07:a3:8d:2d:fa:cc:84:5c:
         e9:60:22:d7:6d:52:d8:ea:32:5d:66:98:02:7c:3d:92:09:c4:
         48:bc:b0:6b:5f:b7:2a:3e:d3:15:19:b7:e3:b9:24:d5:b7:7e:
         d1:4a:0e:e6:b5:fc:80:c5:5d:09:8c:3e:89:c0:5a:66:74:eb:
         d1:50:48:c7:44:c9:c7:94:f2:b8:d8:e8:0c:a7:34:ad:e7:3f:
         88:62:69:37:db:58:9c:e7:d4:94:93:7a:07:51:50:d7:58:47:
         8f:c8:a3:3d:c4:00:86:c3:82:63:f5:68:a1:8f:f5:8c:da:8a:
         af:22:52:6d:e2:47:f8:ad:f7:86:e5:a3:af:5c:12:bd:cf:9e:
         74:1f:7f:89:f1:3a:cc:a0:b9:6c:15:ef:71:1b:57:53:fd:e6:
         3c:14:92:66:7c:35:f1:26:07:f5:04:73:18:eb:fd:42:50:14:
         2e:9d:ab:b6:90:0c:bb:05:df:79:e9:da:74:75:80:78:ac:d3:
         af:a8:2c:45:1a:99:89:3b:37:8c:0c:e5:53:2b:c5:87:32:4c:
         40:46:44:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBy5JCCv1GH6so0kxStpYF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllY2YwMDFiOTliYTlhM2RjYzAwNDczMjYzODFmYWRlYWI5
MThkZjQwHhcNMjQwNzAyMTAwMTQwWhcNMjQwNzAzMTAwMTQwWjAzMTEwLwYDVQQD
EyhjNmYyNzNjNGVlMjRkOWYwZDljOGZiMTliOTg3ODhjMDUxZGMxNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYwK++Ba+LuCqCxYjKNDroqrgIz0
I2pRZ0XI1IhUJojmBPOCnpvhjueo5JpejRB82qBwgBh8HOBtU7ZCA5ewWsgMnPuC
r4NzjC0kI+FzFYx4awnZFoWI53VZJdUwQKztXwOLvtwGCuP7foXtsx2haIvx9kyO
jBi/eE73t/i3qVA080+oCrp5Rrz5KvYoNoFr3WcvfolVTQBYO9PqVzqrLpBgVkJh
W35nS7W60BQgXvE6J37ahjtdCwx4UMSqOaSgx+tEs9Y5t/wAsfZNG7XC0OxRH4ha
TI1cEk6qjdhn6Cd77Q/+q0uu0DI+eRHAj5MC22YerxKcMHOwmf7GqaL+1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbyc8TuJNnw2cj7GbmHiMBR3BZlMB8GA1UdIwQY
MBaAFJ7PABuZupo9zABHMmOB+t6rkY30MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnM4QUc1bTZtajNNQUVjeVk0SDYzcXVSamZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83ZjYyYjEtMTJhZC00MWRiLTg2NzEt
MzM4NmE3YzljMTM1LzEvbnM4QUc1bTZtajNNQUVjeVk0SDYzcXVSamZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My83ZjYyYjEtMTJhZC00MWRiLTg2NzEtMzM4NmE3YzljMTM1
LzEvbnM4QUc1bTZtajNNQUVjeVk0SDYzcXVSamZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATejRM8OW
L3D60hkyhnJDeBEe8/QtN62X1cm0tznjW/p7CaMYwMLTHWJbTdtZ9AejjS36zIRc
6WAi121S2OoyXWaYAnw9kgnESLywa1+3Kj7TFRm347kk1bd+0UoO5rX8gMVdCYw+
icBaZnTr0VBIx0TJx5TyuNjoDKc0rec/iGJpN9tYnOfUlJN6B1FQ11hHj8ijPcQA
hsOCY/VooY/1jNqKryJSbeJH+K33huWjr1wSvc+edB9/ifE6zKC5bBXvcRtXU/3m
PBSSZnw18SYH9QRzGOv9QlAULp2rtpAMuwXfeenadHWAeKzTr6gsRRqZiTs3jAzl
UyvFhzJMQEZEDQ==
-----END CERTIFICATE-----
Generated at Tue Jul 2 14:30:22 2024 by rpki-client on console-fra.rpki-client.org