Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.mft
File:                     zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.mft (raw, json)
Hash identifier:          fBRVpbJP02yzYlJ5mtcQRJ/f+wYoapG5AnBf/N7Ak7E=
Subject key identifier:   A1:9C:A0:06:F4:28:5F:E3:2F:3E:21:02:2F:A3:7D:43:6B:50:71:B6
Authority key identifier: CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3
Certificate issuer:       /CN=cd5aca299d355aadfe1ef939546280e588d249a3
Certificate serial:       0189D469197E69717BA7F300B11785E141A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.mft
Manifest number:          0853
Signing time:             Tue 08 Aug 2023 09:10:04 +0000
Manifest this update:     Tue 08 Aug 2023 09:10:04 +0000
Manifest next update:     Wed 09 Aug 2023 09:10:04 +0000
Files and hashes:         1: U1GJFfqzZCa_yfMn8hCWbo99CIo.roa (hash: HfBi1U6tQ6x/33WPbI+E2lQHgxDiy/c5WsKBEjzq098=)
                          2: zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.crl (hash: 0YLjMJ6DXN6SYnUm5iH01z0UybzphMAL9wCGpYIT7m8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:69:19:7e:69:71:7b:a7:f3:00:b1:17:85:e1:41:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5aca299d355aadfe1ef939546280e588d249a3
        Validity
            Not Before: Aug  8 09:10:04 2023 GMT
            Not After : Aug  9 09:10:04 2023 GMT
        Subject: CN=a19ca006f4285fe32f3e21022fa37d436b5071b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:48:d6:01:15:1d:e6:84:68:11:77:b3:9f:
                    11:2a:af:7c:07:58:c3:47:a3:bc:cc:1e:23:a3:54:
                    c4:47:37:ef:93:a3:f6:38:e1:a4:4c:e0:8d:af:b7:
                    9a:d8:d3:3a:05:25:45:d1:38:62:13:21:ad:93:e6:
                    26:67:3b:dd:51:79:fe:9f:0b:3a:a0:84:e5:2d:28:
                    39:52:6e:69:68:3b:23:87:59:5e:43:23:d1:f2:bb:
                    8f:38:47:93:17:b1:9f:65:89:d3:14:09:9e:27:2a:
                    de:2c:f1:d5:bf:86:cf:f7:f1:ef:a9:87:e0:bd:78:
                    03:f4:1b:3a:a2:cc:97:ed:1b:67:9d:e5:0a:47:40:
                    07:95:d5:12:72:2c:0d:7f:ad:ba:2d:f8:dd:8e:f7:
                    f7:61:76:ff:4f:3a:56:30:81:3b:4c:0b:bf:0c:9d:
                    23:9f:4e:79:45:83:af:17:e2:f5:43:64:6c:4a:91:
                    fb:9d:33:33:9e:3b:53:cd:ef:3b:30:46:e7:f5:c6:
                    3a:12:59:21:98:24:c2:b6:98:d9:64:4f:f3:ea:d3:
                    3b:04:d5:3d:d6:41:25:28:8f:b5:4e:24:51:58:30:
                    d4:23:4b:d0:d5:e6:fa:7c:04:a2:96:ef:67:94:df:
                    96:f8:f2:4d:0f:17:d8:0f:f9:d1:0b:02:08:49:f1:
                    e9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9C:A0:06:F4:28:5F:E3:2F:3E:21:02:2F:A3:7D:43:6B:50:71:B6
            X509v3 Authority Key Identifier:
                keyid:CD:5A:CA:29:9D:35:5A:AD:FE:1E:F9:39:54:62:80:E5:88:D2:49:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7f8e9-a9ef-406d-a593-9cc4805e6777/1/zVrKKZ01Wq3-Hvk5VGKA5YjSSaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:21:65:3f:a4:6d:79:dd:5a:c7:96:39:91:d3:58:80:f1:f2:
         86:03:f9:3a:5d:e7:7d:ae:27:ba:7f:8d:66:4d:ef:99:f2:f1:
         61:bd:0e:e2:98:82:0d:91:20:1f:24:c3:a8:cc:5b:34:a5:c3:
         ea:8b:6f:a7:ce:a7:de:dd:55:80:e0:6f:74:16:c0:4b:b6:45:
         1d:0f:8c:8e:99:7f:6a:6a:c6:b3:3e:d9:bb:a1:99:8e:14:3d:
         5e:17:21:40:96:d4:ea:b1:14:96:e6:f1:1a:d6:d3:99:8b:43:
         8b:da:12:a0:73:f7:5e:7b:4e:e5:6c:a9:52:c3:ef:46:b1:dd:
         20:f8:e5:b5:8e:bb:74:0d:b0:50:76:95:6d:f6:33:5b:53:2e:
         68:b4:78:23:8f:92:22:45:61:ac:ee:be:11:d0:8a:89:e6:da:
         ae:7b:67:10:bd:31:f0:82:c8:56:31:88:9f:fb:a0:06:96:c8:
         49:76:01:53:0b:76:73:49:a2:1f:b7:31:84:83:eb:58:02:4c:
         ce:a7:ca:a1:a5:e6:a2:8b:51:99:cb:a3:2e:30:13:54:ed:99:
         2e:6d:51:e9:53:7c:1d:22:83:33:8a:4b:44:9b:83:31:e4:79:
         6b:01:71:a1:e9:94:03:16:24:48:e6:65:7d:d7:fd:c8:5e:a9:
         9e:7e:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:25:38 2023 by rpki-client on console-fra.rpki-client.org