Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.mft
File:                     kWCYsCldYXSI09nn0jtZozHBXmA.mft (raw, json)
Hash identifier:          RHxVlygpyYru2SXh8RaMj6t5Ble347oMh3EzrYc/Y2I=
Subject key identifier:   C4:02:96:68:19:E1:1E:5C:20:94:28:DE:FD:4B:59:23:3E:AF:7D:96
Authority key identifier: 91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60
Certificate issuer:       /CN=916098b0295d617488d3d9e7d23b59a331c15e60
Certificate serial:       018CC9D5A2C78717F5C5472FFFEC07A0F46D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.mft
Manifest number:          0758
Signing time:             Tue 02 Jan 2024 11:01:10 +0000
Manifest this update:     Tue 02 Jan 2024 11:01:10 +0000
Manifest next update:     Wed 03 Jan 2024 11:01:10 +0000
Files and hashes:         1: MI47C6rO123vV6CAmmx-XrJUoRk.roa (hash: e1Inc2inrK6RprOYIU5sD6m3R95Sospx0YQV/b34z9Y=)
                          2: kWCYsCldYXSI09nn0jtZozHBXmA.crl (hash: zsUzf6ieYFq9aF5IDbET7yB26l2OC8bj50MQpegsIec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:d5:a2:c7:87:17:f5:c5:47:2f:ff:ec:07:a0:f4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916098b0295d617488d3d9e7d23b59a331c15e60
        Validity
            Not Before: Jan  2 11:01:10 2024 GMT
            Not After : Jan  3 11:01:10 2024 GMT
        Subject: CN=c402966819e11e5c209428defd4b59233eaf7d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6a:ad:d0:b7:d4:a4:04:5d:26:19:5b:56:dc:
                    45:05:19:68:31:ec:6c:cc:14:1b:d1:46:83:2c:b5:
                    3d:f3:41:31:30:59:7b:ae:d6:08:32:2c:14:25:a5:
                    4d:27:a0:bd:ea:5f:b8:d6:39:5a:4d:d8:20:be:7d:
                    c1:0f:22:73:81:0b:38:65:2c:3c:e3:59:84:6d:3f:
                    d0:9e:db:4e:84:8d:f7:1f:f6:d2:5e:9c:bd:27:08:
                    51:58:99:bd:59:17:d0:8a:f0:ca:86:10:6e:08:ba:
                    03:28:92:21:62:59:f8:f5:c4:e6:03:3b:81:e8:f3:
                    ff:1f:7c:c3:04:e3:fb:64:5d:79:54:e5:0e:36:05:
                    41:ce:a5:e9:4c:3e:fa:3a:ff:8b:1f:7d:08:f4:5d:
                    ef:72:b6:aa:19:e1:2a:93:e8:e5:8a:e1:db:a0:69:
                    05:e4:05:1b:33:57:b1:18:5b:76:9d:34:5f:0b:a4:
                    d0:30:1e:5e:72:80:1a:0a:13:b9:c4:85:98:77:f6:
                    85:d9:cb:2c:23:59:3d:16:e0:05:50:eb:c9:80:bb:
                    8f:f5:61:91:ca:38:cb:7a:6b:fd:d9:2f:5c:44:19:
                    20:0a:10:de:98:de:8f:f3:00:4e:29:30:8b:29:eb:
                    7d:6e:5f:c2:dc:41:9c:6e:0e:4a:0d:54:0e:bb:de:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:02:96:68:19:E1:1E:5C:20:94:28:DE:FD:4B:59:23:3E:AF:7D:96
            X509v3 Authority Key Identifier:
                keyid:91:60:98:B0:29:5D:61:74:88:D3:D9:E7:D2:3B:59:A3:31:C1:5E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWCYsCldYXSI09nn0jtZozHBXmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/14ce03-23f2-4f7b-88c0-410e09477685/1/kWCYsCldYXSI09nn0jtZozHBXmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:65:1f:44:9f:a1:10:6d:cc:85:7b:9b:13:9e:67:c6:ed:db:
         9a:52:4d:75:da:34:9d:98:57:8d:ce:16:50:eb:cd:65:40:31:
         ef:b7:1a:51:73:12:a1:70:16:2e:60:0c:55:17:3a:5b:a6:f9:
         70:b8:57:b4:ce:58:6f:cf:f0:c3:d0:ff:19:22:5d:6d:96:86:
         31:0f:bd:81:75:8e:06:25:a2:40:e9:bc:b2:71:64:c7:ee:a4:
         6a:6a:12:f7:d2:0f:1c:67:b7:2d:94:b6:5a:c6:6a:e7:ab:1b:
         21:5e:5a:4e:a2:7f:84:cf:8c:96:44:e4:a4:61:2a:64:3b:54:
         75:47:8f:75:60:e3:d2:18:4e:c2:ba:dc:6e:a9:ee:db:56:8b:
         ce:ee:06:a7:fd:ea:88:77:34:dc:14:fa:f0:ec:de:ce:23:2d:
         14:85:5b:47:55:e8:a9:a7:39:03:25:40:d5:29:a6:bb:5e:61:
         30:8e:93:e8:03:ed:87:a4:52:dd:ea:f7:a4:af:e0:b2:df:c4:
         e2:aa:82:74:39:6e:a8:f1:fd:a6:43:3b:44:3a:3c:b7:97:e8:
         76:41:d2:68:50:4e:21:b7:fb:02:77:bf:86:b3:c0:f4:be:89:
         62:38:54:dd:b0:26:bb:ff:06:d6:16:0b:79:4c:6a:53:89:e3:
         a4:19:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:33 2024 by rpki-client on console-fra.rpki-client.org