Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/u2UUK5B3T5CSQgsf30xn7XN-2LY.mft
File:                     u2UUK5B3T5CSQgsf30xn7XN-2LY.mft (raw, json)
Hash identifier:          EYK4w8ih7VhBApwu4c4laflirBYcuGwkKWHO6BAlLzk=
Subject key identifier:   DC:21:02:FF:DE:25:DD:CF:36:05:46:4A:3D:83:FA:4B:E9:EB:D9:1E
Authority key identifier: BB:65:14:2B:90:77:4F:90:92:42:0B:1F:DF:4C:67:ED:73:7E:D8:B6
Certificate issuer:       /CN=bb65142b90774f9092420b1fdf4c67ed737ed8b6
Certificate serial:       018C1DBE223A5F5C20ADA8020C72B3B44853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u2UUK5B3T5CSQgsf30xn7XN-2LY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/u2UUK5B3T5CSQgsf30xn7XN-2LY.mft
Manifest number:          0490
Signing time:             Thu 30 Nov 2023 01:00:48 +0000
Manifest this update:     Thu 30 Nov 2023 01:00:48 +0000
Manifest next update:     Fri 01 Dec 2023 01:00:48 +0000
Files and hashes:         1: 2PIQrJY_fGNvHDV41yplfOurRzg.roa (hash: WGH2qgX7OcVwcjnacbqIYB+ApNzjojtqYGBYCm9yY9g=)
                          2: u2UUK5B3T5CSQgsf30xn7XN-2LY.crl (hash: N1e8hWDZMZYSEO/DlYyG6gDz+23xLwGvjkDPZHJ242g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1d:be:22:3a:5f:5c:20:ad:a8:02:0c:72:b3:b4:48:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb65142b90774f9092420b1fdf4c67ed737ed8b6
        Validity
            Not Before: Nov 30 01:00:48 2023 GMT
            Not After : Dec  1 01:00:48 2023 GMT
        Subject: CN=dc2102ffde25ddcf3605464a3d83fa4be9ebd91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:e1:73:4f:f4:a9:71:ab:1f:0c:99:cf:ab:
                    d0:ed:82:17:77:38:1e:32:c8:36:50:a4:f9:6e:11:
                    9b:af:ee:97:e0:0b:54:88:e4:28:fd:58:c7:78:3b:
                    c2:d0:a1:0a:a2:3b:43:40:3f:3c:54:43:43:60:62:
                    4c:83:01:b4:50:b3:1e:29:5b:9b:46:bf:57:9f:ca:
                    d4:47:2b:66:85:b4:4d:e1:f0:e6:b3:79:b1:b2:af:
                    12:89:4c:5d:b6:17:b2:ff:88:31:d6:0d:bb:41:7a:
                    96:5b:ce:fd:8f:67:df:80:a6:8c:80:53:fa:2f:a9:
                    58:60:54:19:50:4b:60:5b:3a:d6:a6:27:17:8d:96:
                    73:33:8b:f1:ea:33:96:4c:d4:25:db:85:66:4f:f2:
                    37:49:2a:dd:c9:5f:da:c3:7d:ae:94:ec:e6:67:79:
                    a8:4d:a6:0f:5c:0c:8b:18:08:6c:6e:14:99:84:52:
                    3f:c1:be:5d:eb:0b:9a:f8:a8:20:54:cc:ae:68:19:
                    73:b9:f2:86:9f:ac:88:73:44:34:5e:c2:11:76:4d:
                    ea:e8:76:05:2e:7a:03:65:bf:8a:f1:41:4b:84:98:
                    56:f7:29:56:13:03:65:6f:21:e5:ef:90:26:c2:f4:
                    80:5b:6d:fc:54:8a:54:d4:59:f2:34:dd:db:28:ff:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:21:02:FF:DE:25:DD:CF:36:05:46:4A:3D:83:FA:4B:E9:EB:D9:1E
            X509v3 Authority Key Identifier:
                keyid:BB:65:14:2B:90:77:4F:90:92:42:0B:1F:DF:4C:67:ED:73:7E:D8:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2UUK5B3T5CSQgsf30xn7XN-2LY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/u2UUK5B3T5CSQgsf30xn7XN-2LY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b18a26-38fb-44e7-9a48-56063ce24da3/1/u2UUK5B3T5CSQgsf30xn7XN-2LY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:58:c3:91:48:8d:80:81:37:72:2b:3c:f1:9d:79:3d:42:
         c0:e0:50:d4:59:85:f4:df:b7:6a:4d:8d:6e:ec:48:d7:e4:69:
         9d:f7:9e:27:79:95:83:1d:40:7f:95:73:3f:53:b6:76:0d:f0:
         47:b5:ee:e9:a0:54:62:54:11:31:7d:d0:ae:c8:16:e0:6c:34:
         e2:c5:b9:5d:61:d7:96:e9:8d:70:4d:a4:a1:78:74:7b:0d:5a:
         d3:3b:e2:a0:a1:38:fc:24:29:be:f3:2d:84:15:19:3d:4b:76:
         0e:26:14:be:ee:bf:c7:d3:31:d7:64:38:9f:7b:a0:6b:cd:4b:
         92:36:2b:a2:ec:e4:66:46:a0:c4:39:0f:c6:5f:ab:b7:d2:8d:
         f4:3b:b9:1b:54:45:dd:e2:8f:86:c6:7d:bc:ac:95:4d:bf:5d:
         42:bb:2f:9c:65:e0:f4:2a:74:bb:44:aa:9b:fd:3f:5d:fc:84:
         ae:25:47:15:ca:b2:08:43:ee:dc:5b:e2:f7:c1:7a:4f:80:db:
         aa:3a:bc:34:0b:6a:ca:af:ca:d2:a4:25:8f:db:71:98:b0:df:
         47:31:75:53:5c:75:bb:4d:14:5a:aa:0f:2d:9d:79:c4:d0:bf:
         47:6c:69:90:86:40:4b:2e:72:cd:78:f2:88:87:8a:77:32:03:
         d5:1b:db:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:36 2024 by rpki-client on console-fra.rpki-client.org