Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/kU-R3RDez040qAbsBNTA4Iwh9zI.mft
File:                     kU-R3RDez040qAbsBNTA4Iwh9zI.mft (raw, json)
Hash identifier:          alsug3nSYGrUaB3KzYhzKC//jblOFiOn4r3yyS0S2fs=
Subject key identifier:   9E:D9:5B:18:CA:44:FE:1E:14:05:F8:28:39:85:03:9F:03:37:C6:9C
Authority key identifier: 91:4F:91:DD:10:DE:CF:4E:34:A8:06:EC:04:D4:C0:E0:8C:21:F7:32
Certificate issuer:       /CN=914f91dd10decf4e34a806ec04d4c0e08c21f732
Certificate serial:       018627061B4CD16B26CF87BA2AE79642FD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kU-R3RDez040qAbsBNTA4Iwh9zI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/kU-R3RDez040qAbsBNTA4Iwh9zI.mft
Manifest number:          01BC
Signing time:             Mon 06 Feb 2023 13:59:16 +0000
Manifest this update:     Mon 06 Feb 2023 13:59:16 +0000
Manifest next update:     Tue 07 Feb 2023 13:59:16 +0000
Files and hashes:         1: WWYkEljN3uq70KX6T3r__k-qYHQ.roa (hash: 0aTtZnBYcULbse53i68LAri21GDteijNpJn1YFEfUcM=)
                          2: kU-R3RDez040qAbsBNTA4Iwh9zI.crl (hash: pzZ7Iqq0uQV/WQ2zCSvJJO3WhbRVM1xuzmDErZ4XK7g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:27:06:1b:4c:d1:6b:26:cf:87:ba:2a:e7:96:42:fd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914f91dd10decf4e34a806ec04d4c0e08c21f732
        Validity
            Not Before: Feb  6 13:59:16 2023 GMT
            Not After : Feb  7 13:59:16 2023 GMT
        Subject: CN=9ed95b18ca44fe1e1405f8283985039f0337c69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ff:65:e6:d3:3b:a4:e8:28:3b:dc:da:fc:3e:
                    da:61:8e:0c:e7:46:9a:9d:40:c3:b5:e8:74:95:1e:
                    c1:c3:fa:ca:e7:7f:c4:be:92:c0:76:d5:d4:5e:cb:
                    78:24:90:36:42:82:85:a8:4d:d0:71:44:1b:ea:38:
                    06:f4:21:4b:f9:46:1d:3b:25:41:83:3c:79:50:30:
                    50:79:c9:dd:20:0e:a7:09:94:90:8e:5c:4f:ce:b7:
                    e3:82:4b:17:c9:32:66:8e:90:29:98:33:4a:5e:cd:
                    a1:d2:26:df:b2:c4:b1:13:12:c5:01:e6:69:ac:b3:
                    19:01:06:08:53:4e:9b:fe:02:7c:97:03:ad:6c:4d:
                    e7:a1:be:6d:fd:25:cb:60:0d:9b:32:6e:09:d5:e1:
                    5c:19:7f:2b:18:12:74:49:be:1f:e5:aa:fd:56:47:
                    47:b2:e4:fa:6e:58:bf:47:00:85:cb:c9:8b:64:58:
                    ce:b0:66:92:ec:e1:c1:52:b3:2f:66:1c:1f:11:3e:
                    de:cc:ff:14:7b:cd:35:61:7d:17:49:90:28:3b:4b:
                    b1:4d:22:e9:52:9e:b1:03:4e:95:7f:26:06:23:0f:
                    cc:b6:f9:9c:50:ac:5f:74:31:d2:04:4d:1e:39:ca:
                    44:bc:38:5e:af:d6:3c:3c:3f:9e:52:72:5d:e0:54:
                    31:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D9:5B:18:CA:44:FE:1E:14:05:F8:28:39:85:03:9F:03:37:C6:9C
            X509v3 Authority Key Identifier:
                keyid:91:4F:91:DD:10:DE:CF:4E:34:A8:06:EC:04:D4:C0:E0:8C:21:F7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kU-R3RDez040qAbsBNTA4Iwh9zI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/kU-R3RDez040qAbsBNTA4Iwh9zI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3a10d8-8155-484d-b42d-fc5568c8627d/1/kU-R3RDez040qAbsBNTA4Iwh9zI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:69:22:84:e0:e6:9a:a4:0b:04:d9:4c:4f:2f:47:b0:68:5d:
         e2:2f:49:d0:15:c2:ec:2a:90:08:e7:62:0f:20:50:8a:4c:9e:
         c9:d0:98:93:ff:a2:0d:f9:be:02:32:47:e3:37:99:8b:10:af:
         0f:e8:be:5f:ea:d3:51:1c:7e:7b:81:33:f0:06:8f:91:13:b4:
         61:72:be:93:69:c8:2b:8a:7b:28:f7:c0:59:48:09:29:2e:11:
         05:d0:7b:02:60:59:02:8e:25:f5:2c:3a:9d:d8:e8:95:64:18:
         0e:b1:7a:4d:54:c2:e6:30:89:5d:82:cc:e0:b0:ed:1c:ee:9d:
         65:79:41:c9:82:50:e2:17:dc:71:d0:90:3d:7b:39:6f:86:f0:
         b7:57:fd:5e:4e:b6:62:1e:9d:99:75:c1:fb:3c:49:9c:b3:75:
         48:55:b7:55:a2:46:be:eb:82:75:12:af:bb:18:aa:14:63:71:
         2d:fa:96:34:50:1e:ac:30:76:22:b5:69:c0:df:53:da:1c:b8:
         af:dc:e8:41:e2:c5:51:4d:ab:41:06:0d:84:23:be:b8:e5:45:
         b4:2c:92:f2:44:d0:8b:cb:d2:0e:93:28:44:c8:b8:80:5e:e9:
         45:e5:84:63:d6:c9:2d:87:6c:c1:37:da:c6:23:70:e1:74:2e:
         8c:fb:fd:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYYnBhtM0Wsmz4e6KueWQv1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNGY5MWRkMTBkZWNmNGUzNGE4MDZlYzA0ZDRjMGUwOGMy
MWY3MzIwHhcNMjMwMjA2MTM1OTE2WhcNMjMwMjA3MTM1OTE2WjAzMTEwLwYDVQQD
Eyg5ZWQ5NWIxOGNhNDRmZTFlMTQwNWY4MjgzOTg1MDM5ZjAzMzdjNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/9l5tM7pOgoO9za/D7aYY4M50aa
nUDDteh0lR7Bw/rK53/EvpLAdtXUXst4JJA2QoKFqE3QcUQb6jgG9CFL+UYdOyVB
gzx5UDBQecndIA6nCZSQjlxPzrfjgksXyTJmjpApmDNKXs2h0ibfssSxExLFAeZp
rLMZAQYIU06b/gJ8lwOtbE3nob5t/SXLYA2bMm4J1eFcGX8rGBJ0Sb4f5ar9VkdH
suT6bli/RwCFy8mLZFjOsGaS7OHBUrMvZhwfET7ezP8Ue801YX0XSZAoO0uxTSLp
Up6xA06VfyYGIw/MtvmcUKxfdDHSBE0eOcpEvDher9Y8PD+eUnJd4FQxOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7ZWxjKRP4eFAX4KDmFA58DN8acMB8GA1UdIwQY
MBaAFJFPkd0Q3s9ONKgG7ATUwOCMIfcyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1UtUjNSRGV6MDQwcUFic0JOVEE0SXdoOXpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zYTEwZDgtODE1NS00ODRkLWI0MmQt
ZmM1NTY4Yzg2MjdkLzEva1UtUjNSRGV6MDQwcUFic0JOVEE0SXdoOXpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zYTEwZDgtODE1NS00ODRkLWI0MmQtZmM1NTY4Yzg2Mjdk
LzEva1UtUjNSRGV6MDQwcUFic0JOVEE0SXdoOXpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWkihODm
mqQLBNlMTy9HsGhd4i9J0BXC7CqQCOdiDyBQikyeydCYk/+iDfm+AjJH4zeZixCv
D+i+X+rTURx+e4Ez8AaPkRO0YXK+k2nIK4p7KPfAWUgJKS4RBdB7AmBZAo4l9Sw6
ndjolWQYDrF6TVTC5jCJXYLM4LDtHO6dZXlByYJQ4hfccdCQPXs5b4bwt1f9Xk62
Yh6dmXXB+zxJnLN1SFW3VaJGvuuCdRKvuxiqFGNxLfqWNFAerDB2IrVpwN9T2hy4
r9zoQeLFUU2rQQYNhCO+uOVFtCyS8kTQi8vSDpMoRMi4gF7pReWEY9bJLYdswTfa
xiNw4XQujPv9Lg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:54 2024 by rpki-client on console-ams.rpki-client.org