Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.mft
File:                     z2QLAjETdtyW7r_sp1XDsAYRQOw.mft (raw, json)
Hash identifier:          9czXC6on1r72ICphEYx1PsVF4UMQtelCTOyEkXmmX08=
Subject key identifier:   F3:9A:C7:7E:3D:81:DE:A5:30:6D:1E:F8:6C:90:F5:F9:95:DE:26:BA
Authority key identifier: CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC
Certificate issuer:       /CN=cf640b02311376dc96eebfeca755c3b0061140ec
Certificate serial:       0187A1397DD54F978180048665E2D12818DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.mft
Manifest number:          0D4D
Signing time:             Fri 21 Apr 2023 00:31:52 +0000
Manifest this update:     Fri 21 Apr 2023 00:31:52 +0000
Manifest next update:     Sat 22 Apr 2023 00:31:52 +0000
Files and hashes:         1: 0v6CJLlJIN3R2WuyT-1XU4kvwnc.roa (hash: hVUugUYZdmHHHBGw8aYIikDJxZDxW8tb52HM8+WrwZE=)
                          2: 2e8POel6k7fX6_9ypjkDOW072Ns.roa (hash: C/RJ7J+tffi9Kl1smLqWaIF/Yp321ZKDhgX1uuW9u6A=)
                          3: 30t9_yD-qSD6D85QK_TTUQRayYw.roa (hash: ncF6DSvwk5ud5XRe8J26THAuLlaa1RfPi008/Sj4d8A=)
                          4: 3b5OnsDcnCDs5QHkXGh05Hi3BI8.roa (hash: Se325K+ulV/8zZkLbg1zQKXRg/FxnxHfWtwK/Wl0FBc=)
                          5: 8dLBRmtLLAfnCtNmpkoxxFOxrr0.roa (hash: 0SriUWxJ9QSyyewX4UpHSvvFGR1jtq+KeCcwGDKpzzs=)
                          6: 9BmgjilKIBwcB7xDx0Xam3ufG7o.roa (hash: 8s77VCqcVY3D/PZG46OXUG5G2JU6qnTmVOs1u51adlY=)
                          7: AKl-_8Y3orS4bEGStK07mkgjQUc.roa (hash: w5KMpE6+A6t7xnJzIWstaMq/npYXL1hgQOhU0jMxtJc=)
                          8: GoxoO7cKGfcaTXE-K-R8UX5PeI4.roa (hash: bmNK7daUv2BcIofbeTJt+ueslMq3QWLMba8jcrM7jxo=)
                          9: GtD1FrvttQYUMd7bocMkLOp11fQ.roa (hash: VtPRD7IoK4xjqfiYgz1vNyNfQClJClidB/EH6okZUjg=)
                          10: MPilqFY5Oj5ZgZ3JLeaPqXZqWtc.roa (hash: EtcViSAy4hN7lDT97RTB2SBpK7D9hB5ZJuPG5vWoEQE=)
                          11: QRUglKPTcG_HxDcrijF-MYNTxhA.roa (hash: Gpr7CM40brfLLpxS/V4qt5iLjl8Mm2dVyNzc+WzpCFg=)
                          12: YiTgYDioWaeNn7iEHjQqejWkBuM.roa (hash: LUiciMh6l9qwAnFjP8DmyvKljogRwJbVyv1MmR1kLLA=)
                          13: c1bf-1awPS3x60axf4CJODIj9u4.roa (hash: Pw/4aW1wxz4XVmntIU9mAGfBCt7i0oCtGm1T4MXw02c=)
                          14: i3Mta8bP2gxJiN93obM-kIr0CgU.roa (hash: 1E/bY9Rc4zzixHA+4OuhZf/zqUiMgczXHKefMfrX91o=)
                          15: kqb25aOd2dONCILhLpMpjKA4ONo.roa (hash: 81zlV+DB7xkrdpiYtcJMF5GTMluhg5rNyhE9uSyQquw=)
                          16: ntenawpcLe0OB3W0_j3KKP-aeZw.roa (hash: ifUGaRGUHPLFc3hm9qilROdWKpRDittjSNCVa3WgUiw=)
                          17: pIeg7z_TYgzx3dVacAgV1w_kv00.roa (hash: UcDt0kqIajeFjpavtkx+WUiJveP9MENkRnC9oEWZiLQ=)
                          18: qM-lERRLhkTHYXt6h0cZOXrgb8k.roa (hash: IuPIPxJ73WVdHz4+4wrF5t9TPwDMQAs6o0myQ+eoNpA=)
                          19: uaWU0WxtRsyjj2zz-CJ_aAbzZI8.roa (hash: EUr3NRUhT4odmDvJTNeOHWu8gfWuXyiCAyZQnMQcF7o=)
                          20: ujiDsQ86MqHFm6TzD-8dHEwv6gY.roa (hash: 6tY5WEzfdanWspmcsv7w4AhStVxOVBPttRx+6+nfOm0=)
                          21: xjgFnHBGFpFuw6alowH03lx05Oo.roa (hash: WbUosB6FsOZrX9eAkw7wN5DrLueYfEVH5cuZxJgVwaU=)
                          22: z2QLAjETdtyW7r_sp1XDsAYRQOw.crl (hash: Kve/4ZaThDqpDtJTjE7Ma1gcM5xk5v4ATRSsr5zO3tU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a1:39:7d:d5:4f:97:81:80:04:86:65:e2:d1:28:18:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf640b02311376dc96eebfeca755c3b0061140ec
        Validity
            Not Before: Apr 21 00:31:52 2023 GMT
            Not After : Apr 22 00:31:52 2023 GMT
        Subject: CN=f39ac77e3d81dea5306d1ef86c90f5f995de26ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:60:4e:59:bd:e3:6d:07:7f:3b:04:1e:1b:56:
                    6f:93:c7:14:b9:2c:f7:47:2b:55:5b:bb:98:00:49:
                    12:f4:56:ab:30:70:f1:a3:a2:18:e7:f7:e0:a1:e9:
                    25:dd:d3:b9:f3:13:64:9a:00:0b:d1:fc:d1:47:23:
                    2c:f1:42:ca:fe:1d:83:63:d2:1e:d8:7e:9f:89:d2:
                    2d:31:f2:31:3e:b6:63:02:ae:4c:af:17:77:18:91:
                    de:16:f1:7a:05:32:6b:e7:02:03:00:08:e1:a9:46:
                    f0:de:66:ed:bc:98:05:4f:fb:b4:27:a0:99:2d:1d:
                    0b:eb:b7:28:4b:4b:c2:eb:f5:8b:f8:bd:8c:64:9f:
                    0d:28:ca:e6:5d:c3:5f:d6:95:92:14:7a:d2:4a:f3:
                    dd:91:71:3d:43:23:61:ab:f2:82:a9:c0:91:39:e1:
                    2c:e4:e9:06:26:14:17:de:ff:51:a2:11:af:09:d7:
                    c8:07:1a:13:4c:aa:67:52:ab:51:81:86:b5:01:fa:
                    af:27:ae:04:f9:8b:74:9a:16:20:bf:3f:10:8a:f3:
                    52:db:06:31:d2:7c:91:0a:b6:8c:c5:48:a4:0f:36:
                    9f:9d:6f:1d:65:58:70:b3:56:5b:8b:16:00:ef:d0:
                    43:55:c9:31:cd:63:ee:96:ee:fb:d6:d3:ef:08:c2:
                    57:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9A:C7:7E:3D:81:DE:A5:30:6D:1E:F8:6C:90:F5:F9:95:DE:26:BA
            X509v3 Authority Key Identifier:
                keyid:CF:64:0B:02:31:13:76:DC:96:EE:BF:EC:A7:55:C3:B0:06:11:40:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2QLAjETdtyW7r_sp1XDsAYRQOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/00ec78-7e44-49e4-8443-9db5be4d0eff/1/z2QLAjETdtyW7r_sp1XDsAYRQOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f8:9d:5e:00:9e:f7:f8:e3:1d:c4:2b:2e:b5:6d:0e:13:10:
         b5:72:4f:64:59:e5:12:5b:55:b0:d9:35:c7:87:c9:c1:39:28:
         ab:d4:45:8d:23:b3:a1:fe:52:55:ef:a4:e4:3d:6a:7b:b8:ea:
         20:24:5b:40:df:86:4f:c2:58:62:3a:5b:9d:ac:97:77:70:5b:
         73:41:75:0e:8c:b4:a6:4e:3f:d8:4e:b6:79:64:03:c4:1a:d9:
         5e:14:d9:3d:b6:a5:ff:cf:2d:5b:81:54:55:8b:9f:8d:a3:01:
         5e:21:aa:81:0c:a7:26:1a:48:3f:58:c4:71:e7:c2:c4:50:c8:
         f9:79:d2:6e:8a:3b:fd:37:32:d2:30:ca:7e:b3:5d:ed:c8:78:
         8e:41:24:a7:39:9f:3b:e6:3e:9d:ad:25:87:f2:d1:84:46:4f:
         f3:e7:ad:90:63:a7:ba:c4:45:4e:6b:b8:cc:8e:de:98:ec:76:
         8d:3a:7b:29:3d:ae:21:41:9b:68:f4:e9:7b:96:f1:3b:f9:aa:
         23:ad:c6:d0:24:ce:84:e3:af:bf:8e:2e:93:a7:a0:a7:12:e1:
         03:12:e0:a1:30:1e:3a:ce:c3:58:23:a2:c9:4b:0c:19:b2:51:
         47:ec:97:56:01:9d:30:97:f2:f3:d3:9e:24:6b:28:77:34:f1:
         5c:97:96:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:57 2024 by rpki-client on console-ams.rpki-client.org