Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.mft
File:                     HsEEJ4yV5wVJUJM3YdRlr0V8WBg.mft (raw, json)
Hash identifier:          wXhoxF6SEG4GNK660NRfzQAbsAvvYC6MPYvt8Rd5560=
Subject key identifier:   98:A0:C4:E9:75:ED:7A:1C:7F:17:48:76:52:2C:F3:0F:2C:9B:6D:08
Authority key identifier: 1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18
Certificate issuer:       /CN=1ec104278c95e7054950933761d465af457c5818
Certificate serial:       01872BDA903BC2F777E248D824A489489763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.mft
Manifest number:          0CFC
Signing time:             Wed 29 Mar 2023 05:32:36 +0000
Manifest this update:     Wed 29 Mar 2023 05:32:36 +0000
Manifest next update:     Thu 30 Mar 2023 05:32:36 +0000
Files and hashes:         1: 1-e7ZahQNgt7FdtcYYtWqxts3iEU.roa (hash: plYytWh2oLhMb/niHr5xaelDHZRlMNtdXDXX7CDohjI=)
                          2: 23WErPOhFsGm0xFPoCi-3t_GmDs.roa (hash: SWC6CQ0MUKTgWneXFxdlZ5gmYsbjKCWA5u+niD3Maz0=)
                          3: HsEEJ4yV5wVJUJM3YdRlr0V8WBg.crl (hash: 3C+BZR3UzFzuFxD0XYJqx0IJxaw30oBIu09nVDkDJSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:2b:da:90:3b:c2:f7:77:e2:48:d8:24:a4:89:48:97:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec104278c95e7054950933761d465af457c5818
        Validity
            Not Before: Mar 29 05:32:36 2023 GMT
            Not After : Mar 30 05:32:36 2023 GMT
        Subject: CN=98a0c4e975ed7a1c7f174876522cf30f2c9b6d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:43:3e:22:66:fc:49:80:7f:5f:48:ad:70:4a:
                    c2:2b:e1:de:72:80:a7:3c:83:c3:72:ca:18:c0:12:
                    17:78:2c:45:f5:bf:40:c8:15:26:56:f1:80:4d:27:
                    c0:83:13:18:c8:c4:ac:f7:be:d8:f7:2d:a3:fd:02:
                    2c:37:bb:32:c4:9e:14:1d:85:35:44:97:f4:c5:87:
                    b5:06:45:ae:30:23:40:7e:88:b4:94:4c:79:3f:67:
                    6b:8b:35:20:bc:6d:25:c0:f9:41:ca:3b:80:2e:4f:
                    b4:cf:0c:2e:39:22:b3:62:6f:8d:c7:7f:66:36:f0:
                    bd:66:6c:2a:4d:50:97:5c:7a:c5:ba:0d:0e:39:9c:
                    a1:97:dd:e4:13:43:c1:65:5e:e3:5a:a2:46:67:69:
                    3f:76:20:27:e7:1a:26:39:fb:f7:41:2f:9e:44:02:
                    8a:c6:73:9b:8a:22:90:ae:76:12:1c:2b:5a:60:cc:
                    6f:59:42:5d:41:eb:92:16:2d:4a:8f:3b:a4:e0:3a:
                    1b:19:d8:d3:da:fb:76:0a:b2:5a:59:bb:56:7b:ed:
                    6d:d8:60:dc:d3:4e:2e:51:db:ad:23:b2:43:22:d7:
                    37:77:3e:c5:38:0b:9c:49:53:3c:d3:47:47:75:82:
                    48:aa:0c:66:db:c3:aa:9e:16:50:fe:1c:ef:65:75:
                    b8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:C4:E9:75:ED:7A:1C:7F:17:48:76:52:2C:F3:0F:2C:9B:6D:08
            X509v3 Authority Key Identifier:
                keyid:1E:C1:04:27:8C:95:E7:05:49:50:93:37:61:D4:65:AF:45:7C:58:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/a7b5f7-f359-461a-b6ad-4e269d844db6/1/HsEEJ4yV5wVJUJM3YdRlr0V8WBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:83:83:d6:cf:27:95:5f:19:7c:3b:f4:02:07:14:35:d1:da:
         cf:0a:f4:b9:1e:42:47:dd:bb:fc:32:d2:a3:26:39:36:8f:59:
         8e:94:45:51:6e:36:84:93:be:a0:31:11:82:e9:f9:fd:9f:19:
         2f:d9:62:0c:d5:f0:41:64:f0:b4:2e:9f:1c:96:20:62:27:de:
         0a:c9:a7:4c:d4:53:bd:c8:b0:15:83:b6:ef:f7:73:48:ee:96:
         4d:e1:a7:5f:a1:dc:62:4b:66:a8:a3:c7:0c:7e:98:6c:24:7d:
         f2:99:60:34:36:ec:71:8b:33:76:fc:38:69:8f:fa:50:83:e9:
         43:f9:87:e3:6c:db:86:88:aa:bd:30:d1:b8:32:59:f1:c2:1c:
         25:3b:03:2d:a8:2f:07:8b:d6:63:b7:57:71:1b:8c:44:c2:c6:
         42:38:22:e6:5d:d0:99:a2:a2:85:de:43:d8:a3:58:fe:4e:29:
         85:d3:7d:b6:21:d2:9e:9a:77:d1:21:9e:1f:34:e2:b9:27:f2:
         8e:41:9d:f5:25:26:eb:27:70:f7:37:90:97:5d:b2:9b:ec:41:
         0b:e7:ed:3a:c2:bc:9b:e5:b3:9e:5f:4f:b6:8a:fb:e8:94:02:
         ef:4e:f7:fc:6c:3e:95:ab:60:7d:da:20:f8:d6:ac:c0:1e:58:
         d5:40:ba:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcr2pA7wvd34kjYJKSJSJdjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYzEwNDI3OGM5NWU3MDU0OTUwOTMzNzYxZDQ2NWFmNDU3
YzU4MTgwHhcNMjMwMzI5MDUzMjM2WhcNMjMwMzMwMDUzMjM2WjAzMTEwLwYDVQQD
Eyg5OGEwYzRlOTc1ZWQ3YTFjN2YxNzQ4NzY1MjJjZjMwZjJjOWI2ZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEM+Imb8SYB/X0itcErCK+HecoCn
PIPDcsoYwBIXeCxF9b9AyBUmVvGATSfAgxMYyMSs977Y9y2j/QIsN7syxJ4UHYU1
RJf0xYe1BkWuMCNAfoi0lEx5P2drizUgvG0lwPlByjuALk+0zwwuOSKzYm+Nx39m
NvC9ZmwqTVCXXHrFug0OOZyhl93kE0PBZV7jWqJGZ2k/diAn5xomOfv3QS+eRAKK
xnObiiKQrnYSHCtaYMxvWUJdQeuSFi1Kjzuk4DobGdjT2vt2CrJaWbtWe+1t2GDc
004uUdutI7JDItc3dz7FOAucSVM800dHdYJIqgxm28OqnhZQ/hzvZXW4nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJigxOl17XocfxdIdlIs8w8sm20IMB8GA1UdIwQY
MBaAFB7BBCeMlecFSVCTN2HUZa9FfFgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHNFRUo0eVY1d1ZKVUpNM1lkUmxyMFY4V0JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9hN2I1ZjctZjM1OS00NjFhLWI2YWQt
NGUyNjlkODQ0ZGI2LzEvSHNFRUo0eVY1d1ZKVUpNM1lkUmxyMFY4V0JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9hN2I1ZjctZjM1OS00NjFhLWI2YWQtNGUyNjlkODQ0ZGI2
LzEvSHNFRUo0eVY1d1ZKVUpNM1lkUmxyMFY4V0JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4OD1s8n
lV8ZfDv0AgcUNdHazwr0uR5CR927/DLSoyY5No9ZjpRFUW42hJO+oDERgun5/Z8Z
L9liDNXwQWTwtC6fHJYgYifeCsmnTNRTvciwFYO27/dzSO6WTeGnX6HcYktmqKPH
DH6YbCR98plgNDbscYszdvw4aY/6UIPpQ/mH42zbhoiqvTDRuDJZ8cIcJTsDLagv
B4vWY7dXcRuMRMLGQjgi5l3QmaKihd5D2KNY/k4phdN9tiHSnpp30SGeHzTiuSfy
jkGd9SUm6ydw9zeQl12ym+xBC+ftOsK8m+Wznl9Ptor76JQC7073/Gw+latgfdog
+NaswB5Y1UC6wg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:07 2024 by rpki-client on console-fra.rpki-client.org