Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.mft
File:                     HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.mft (raw, json)
Hash identifier:          t4hFMezYvepkH7aCxvneEbUS4HXPuYxP9AoeQSIg5+I=
Subject key identifier:   F1:B1:E8:AD:0C:47:7A:3E:20:06:FF:89:D5:56:EB:C4:A6:E5:22:BC
Authority key identifier: 1C:3F:C9:BE:8C:E4:6E:3D:6C:E5:C6:7E:A3:3E:2E:19:9D:40:9C:7A
Certificate issuer:       /CN=1c3fc9be8ce46e3d6ce5c67ea33e2e199d409c7a
Certificate serial:       018B70940E75B90D8C7547E8742D1DA24640
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.mft
Manifest number:          01FA
Signing time:             Fri 27 Oct 2023 10:00:33 +0000
Manifest this update:     Fri 27 Oct 2023 10:00:33 +0000
Manifest next update:     Sat 28 Oct 2023 10:00:33 +0000
Files and hashes:         1: HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.crl (hash: /VozJ5zL2DpeequG7aZxoQUTO2LHmnCfNidldeLEt+Y=)
                          2: sEKFsRvCqFe3lBoZQI9oteRw_6c.roa (hash: BqwHfyOoC96C0n04NuJBWxUqtKgcFBa+ZFPq7LrQbPQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:70:94:0e:75:b9:0d:8c:75:47:e8:74:2d:1d:a2:46:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c3fc9be8ce46e3d6ce5c67ea33e2e199d409c7a
        Validity
            Not Before: Oct 27 10:00:33 2023 GMT
            Not After : Oct 28 10:00:33 2023 GMT
        Subject: CN=f1b1e8ad0c477a3e2006ff89d556ebc4a6e522bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:42:17:72:f9:6e:4b:e0:31:48:f9:f1:c0:
                    67:82:8f:cb:84:f0:51:34:de:6b:0a:67:72:19:ab:
                    16:bc:78:bb:da:08:e8:b0:dd:4a:e4:39:9c:a7:d0:
                    07:3a:99:6f:39:e0:52:8b:bd:f1:0d:cc:c7:64:41:
                    ad:a7:26:7d:e7:c5:a0:b3:65:1f:ed:42:d5:0a:6b:
                    4f:57:ca:f4:f2:8b:b8:16:d4:aa:e4:41:b9:ac:4e:
                    45:3e:ea:b5:f8:52:3b:fa:7f:29:b4:38:41:31:cf:
                    b7:85:a8:4b:b4:17:fc:58:c9:21:72:a6:2a:41:ab:
                    ae:35:ee:a7:87:e9:83:2d:dd:85:b3:96:24:46:78:
                    e5:6a:cb:10:00:59:58:1e:8f:c9:24:67:3d:db:e8:
                    d3:5e:32:b4:ac:17:60:ab:8b:8a:d9:7e:5b:71:fc:
                    dc:4a:9f:8b:7c:8e:6d:c1:4c:23:56:f7:e0:b0:06:
                    5e:11:cb:67:e6:8b:7c:f6:3f:47:ab:a9:cb:77:54:
                    98:fe:32:1b:41:6c:01:5a:a7:a7:58:56:ee:a7:c4:
                    76:85:8c:42:57:53:36:5e:d3:46:c9:3e:2a:dd:ee:
                    30:4f:20:62:61:79:b2:92:db:fb:ab:1c:2a:52:2f:
                    29:db:89:16:3e:c4:63:db:a3:45:be:4b:a8:14:22:
                    33:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:E8:AD:0C:47:7A:3E:20:06:FF:89:D5:56:EB:C4:A6:E5:22:BC
            X509v3 Authority Key Identifier:
                keyid:1C:3F:C9:BE:8C:E4:6E:3D:6C:E5:C6:7E:A3:3E:2E:19:9D:40:9C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6e63c0-7a72-459e-aa7e-9af303339ba3/1/HD_Jvozkbj1s5cZ-oz4uGZ1AnHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d3:a2:ca:cb:08:af:37:b2:77:6a:bc:59:91:4a:c0:c5:a5:
         94:5a:49:63:ff:f7:5c:5d:33:3f:72:d1:81:0a:84:cf:52:ce:
         a3:68:70:0b:f6:f5:41:b2:39:76:1f:58:39:24:68:91:e3:b5:
         42:ac:55:9a:ad:18:33:d1:b2:ef:dd:69:4d:2b:c2:85:6d:4c:
         8f:d0:26:45:18:56:ff:d9:06:d4:df:b7:a2:61:2c:ca:3c:7e:
         1f:2a:64:7f:e7:4e:22:48:bc:37:19:e4:05:94:4b:85:06:fd:
         89:27:c5:97:ce:94:ee:5f:00:40:3b:01:66:21:a0:4f:d7:17:
         5f:2c:8c:4c:38:ed:aa:a6:99:e2:70:60:e8:e6:de:21:4d:fa:
         b7:24:c3:1c:91:46:ca:d9:b4:1d:2d:0c:e6:60:87:95:fe:5d:
         ce:6a:5d:fe:5d:fe:82:24:62:7d:2a:f1:5a:98:59:51:cd:4c:
         0f:20:31:b4:e5:cc:ce:e3:ed:d1:d6:a0:12:97:20:37:f9:96:
         aa:2e:dd:5a:97:37:00:e7:eb:40:b0:36:0a:17:c0:fa:d6:15:
         31:e5:05:28:b2:20:fb:26:0f:74:6e:bf:89:c2:df:cc:07:0c:
         69:9b:13:bf:3b:e3:6c:fd:13:d7:5d:7b:09:2f:79:f9:33:c4:
         db:07:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:41 2024 by rpki-client on console-ams.rpki-client.org