Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
File:                     kCvbgcrzPxCwX4dnsajhiLB-NBs.mft (raw, json)
Hash identifier:          67oRrE0Dixtd8m3mKmcNiko6DeroAjXeIoyNmGnO9qE=
Subject key identifier:   81:C5:9E:6F:3C:C2:B7:EF:18:CD:F9:3C:B8:4F:A9:62:66:C1:96:6D
Authority key identifier: 90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B
Certificate issuer:       /CN=902bdb81caf33f10b05f8767b1a8e188b07e341b
Certificate serial:       019053596C5F17F20D09D5F99836E1A839A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft
Manifest number:          086F
Signing time:             Wed 26 Jun 2024 07:01:27 +0000
Manifest this update:     Wed 26 Jun 2024 07:01:27 +0000
Manifest next update:     Thu 27 Jun 2024 07:01:27 +0000
Files and hashes:         1: kCvbgcrzPxCwX4dnsajhiLB-NBs.crl (hash: 59vRDoex8nA+sl9FjDgUF/b2yR5Mv86heJDsozjRdhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:59:6c:5f:17:f2:0d:09:d5:f9:98:36:e1:a8:39:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=902bdb81caf33f10b05f8767b1a8e188b07e341b
        Validity
            Not Before: Jun 26 07:01:27 2024 GMT
            Not After : Jun 27 07:01:27 2024 GMT
        Subject: CN=81c59e6f3cc2b7ef18cdf93cb84fa96266c1966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:20:ea:4e:f7:35:e5:52:96:dd:4d:bf:7c:cf:
                    37:89:d4:6a:a2:b8:a4:5e:de:26:5c:80:8b:6e:2a:
                    ce:4d:62:28:9f:5e:5a:b7:dd:25:27:1f:0b:a9:6c:
                    fc:71:3a:d2:44:06:9d:39:bf:17:0b:fe:a1:ef:9f:
                    39:73:ca:bd:8e:63:8f:1f:5d:bb:5d:cf:92:5b:4c:
                    aa:a1:23:3b:91:ed:7c:09:8b:4e:a4:85:7b:b8:b7:
                    69:15:15:10:88:9d:77:81:d4:28:3b:d5:cd:94:10:
                    45:c0:06:6a:0e:1a:19:29:07:fa:d4:a1:00:34:91:
                    eb:62:62:be:b6:25:5e:24:90:a6:be:d3:f5:a6:84:
                    f6:2c:bd:41:27:1c:5b:3b:72:c7:3a:5e:1b:17:d7:
                    82:fe:45:6a:a5:bf:f2:69:47:c1:9f:df:4e:eb:e1:
                    f5:10:b5:23:d9:7a:b3:e7:c3:bc:9d:09:c1:fa:5b:
                    40:6e:1e:71:cf:ac:3b:23:71:f6:75:78:d6:89:3f:
                    02:0f:74:0e:fe:f7:6a:de:b5:8d:c8:2c:5a:cc:95:
                    92:e2:8d:fe:13:18:cd:c1:f9:93:30:88:34:1d:a0:
                    d0:c8:a9:c8:fb:d2:e2:76:29:c9:89:be:ed:5f:a7:
                    40:8a:0a:40:e1:ae:eb:9c:7d:dd:16:34:da:e7:5e:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:C5:9E:6F:3C:C2:B7:EF:18:CD:F9:3C:B8:4F:A9:62:66:C1:96:6D
            X509v3 Authority Key Identifier:
                keyid:90:2B:DB:81:CA:F3:3F:10:B0:5F:87:67:B1:A8:E1:88:B0:7E:34:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCvbgcrzPxCwX4dnsajhiLB-NBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/902301-5676-41fc-8ebd-7f17066957af/1/kCvbgcrzPxCwX4dnsajhiLB-NBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c5:89:cc:ef:e7:88:2a:3e:30:b6:3a:8d:41:4f:a9:9a:a1:
         f6:b6:d3:c9:08:74:76:b1:4b:e2:36:b2:cf:c1:9e:4a:23:19:
         ca:6e:f0:40:43:9f:5a:5d:c1:ec:59:e9:e4:8a:d9:3d:14:e5:
         c2:0d:47:7b:f2:e2:ab:1a:f9:c6:80:a1:ec:29:d8:fe:46:4d:
         b4:e3:c3:e4:e6:2e:dc:1d:bf:18:3c:80:37:aa:41:43:93:dc:
         be:76:9c:19:ed:8d:3f:e9:b0:9f:b0:db:01:10:63:54:19:e5:
         e0:0c:c0:87:73:48:f4:ce:2e:d4:c2:83:30:4c:c8:94:c5:6c:
         92:d1:22:87:4b:4a:07:9a:0d:03:b3:f5:63:24:a4:26:52:7b:
         40:fa:36:0b:d2:0c:c5:02:24:15:85:a5:5f:26:76:07:7b:0c:
         03:28:f1:8c:85:62:e5:9b:de:e4:7b:b2:97:91:89:20:0c:27:
         8f:e0:f1:db:74:85:c0:00:2c:3c:cf:5b:c9:9c:0f:44:15:07:
         04:1d:df:7a:9a:73:6e:25:89:be:c7:a2:d9:db:de:85:33:25:
         9d:3e:28:93:65:78:a2:d0:ae:78:3a:ee:7d:b2:41:46:41:01:
         14:44:93:7e:e3:b3:c9:ed:8e:80:af:cd:ec:68:f1:3c:de:75:
         46:4f:c5:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBTWWxfF/INCdX5mDbhqDmjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwMmJkYjgxY2FmMzNmMTBiMDVmODc2N2IxYThlMTg4YjA3
ZTM0MWIwHhcNMjQwNjI2MDcwMTI3WhcNMjQwNjI3MDcwMTI3WjAzMTEwLwYDVQQD
Eyg4MWM1OWU2ZjNjYzJiN2VmMThjZGY5M2NiODRmYTk2MjY2YzE5NjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SDqTvc15VKW3U2/fM83idRqorik
Xt4mXICLbirOTWIon15at90lJx8LqWz8cTrSRAadOb8XC/6h7585c8q9jmOPH127
Xc+SW0yqoSM7ke18CYtOpIV7uLdpFRUQiJ13gdQoO9XNlBBFwAZqDhoZKQf61KEA
NJHrYmK+tiVeJJCmvtP1poT2LL1BJxxbO3LHOl4bF9eC/kVqpb/yaUfBn99O6+H1
ELUj2Xqz58O8nQnB+ltAbh5xz6w7I3H2dXjWiT8CD3QO/vdq3rWNyCxazJWS4o3+
ExjNwfmTMIg0HaDQyKnI+9LidinJib7tX6dAigpA4a7rnH3dFjTa5169+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHFnm88wrfvGM35PLhPqWJmwZZtMB8GA1UdIwQY
MBaAFJAr24HK8z8QsF+HZ7Go4YiwfjQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0N2YmdjcnpQeEN3WDRkbnNhamhpTEItTkJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MDIzMDEtNTY3Ni00MWZjLThlYmQt
N2YxNzA2Njk1N2FmLzEva0N2YmdjcnpQeEN3WDRkbnNhamhpTEItTkJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85MDIzMDEtNTY3Ni00MWZjLThlYmQtN2YxNzA2Njk1N2Fm
LzEva0N2YmdjcnpQeEN3WDRkbnNhamhpTEItTkJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8WJzO/n
iCo+MLY6jUFPqZqh9rbTyQh0drFL4jayz8GeSiMZym7wQEOfWl3B7Fnp5IrZPRTl
wg1He/Liqxr5xoCh7CnY/kZNtOPD5OYu3B2/GDyAN6pBQ5PcvnacGe2NP+mwn7Db
ARBjVBnl4AzAh3NI9M4u1MKDMEzIlMVsktEih0tKB5oNA7P1YySkJlJ7QPo2C9IM
xQIkFYWlXyZ2B3sMAyjxjIVi5Zve5Huyl5GJIAwnj+Dx23SFwAAsPM9byZwPRBUH
BB3feppzbiWJvsei2dvehTMlnT4ok2V4otCueDrufbJBRkEBFESTfuOzye2OgK/N
7GjxPN51Rk/FVQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 15:26:59 2024 by rpki-client on console-fra.rpki-client.org