Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft
File:                     EHc_MtPLThPkPxCj3EIvHzJxv7o.mft (raw, json)
Hash identifier:          JhYju1ahsMmVTAGIo59RRt2im9WJ5+HoDKiBJpmTEX4=
Subject key identifier:   CA:5B:AA:EF:2A:34:A9:6E:3E:48:5D:B0:CC:37:09:72:BB:76:CD:43
Authority key identifier: 10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA
Certificate issuer:       /CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
Certificate serial:       018FBD5C828B086305D77E38311865943802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft
Manifest number:          1192
Signing time:             Tue 28 May 2024 04:01:47 +0000
Manifest this update:     Tue 28 May 2024 04:01:47 +0000
Manifest next update:     Wed 29 May 2024 04:01:47 +0000
Files and hashes:         1: 8ZF30T14MYe8rC-miATh_yS5DCE.roa (hash: p/bPhIuGL21v5f301xPUVEWs2I7YkrZqG7+4yFdOxcI=)
                          2: D-pYB57HeRH0d2yTPhWpbcwng_w.roa (hash: qzETCghLQevBtMx2Ko6gLNTbbfR3D+S444F2QWm76j0=)
                          3: EHc_MtPLThPkPxCj3EIvHzJxv7o.crl (hash: qlcz1auRUCLIuikQYVWdvQYPgThlYK1r+IINRT9K0TE=)
                          4: GHSn7Ieic-oGtAEIoIT1QanURSc.roa (hash: kZ3j2kOkfTLov1q762zBL5HjNPi/EeBOd73VH2v3Dds=)
                          5: Qi_OHXfu1hiOizh3NIPGz_LUSB0.roa (hash: iw5+sIBLpjz7j+dRbqeKbqwkL+0xyhT0VKgU1xLRDCw=)
                          6: g4YPnsvt9HohOEy_kgWCcE7YSHA.roa (hash: n8FC+ypN2+fbXf4iXjL4XzImy3b+imUaGfRz36V6ZrI=)
                          7: gX-qCcCD5B_9nIsUOZ5Qobytv98.roa (hash: Bl4gs2SaONMXRiZYBNCExkmfvpzatrIWXT5qgV6TImA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:bd:5c:82:8b:08:63:05:d7:7e:38:31:18:65:94:38:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10773f32d3cb4e13e43f10a3dc422f1f3271bfba
        Validity
            Not Before: May 28 04:01:47 2024 GMT
            Not After : May 29 04:01:47 2024 GMT
        Subject: CN=ca5baaef2a34a96e3e485db0cc370972bb76cd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:95:b6:7e:41:ea:20:99:05:3b:99:e1:77:
                    31:d7:e7:59:92:9e:54:8f:fc:18:0c:f6:a5:5b:85:
                    4e:3d:a4:5e:e9:ff:78:3e:d2:80:2f:63:e1:48:41:
                    8d:e0:69:e6:df:23:49:ec:72:3f:0b:b3:c7:fa:ff:
                    24:c5:51:32:28:c7:98:43:cf:d5:41:7d:5f:02:9f:
                    23:30:d7:05:63:3e:f9:7b:d3:c3:f4:3f:75:04:f6:
                    7e:ad:57:46:f0:65:53:12:8e:26:bd:ed:0c:66:04:
                    80:0b:49:3e:1e:f3:b0:a5:23:d2:52:19:64:b5:1d:
                    58:93:bc:4f:3d:db:b9:65:03:37:df:46:e5:06:32:
                    2f:45:ca:16:f7:1f:ee:0a:c4:44:80:aa:0e:2c:e0:
                    58:5f:b2:01:01:5f:db:6b:bc:b2:a4:de:a8:a3:cf:
                    e9:50:f3:72:40:ce:2f:d0:e4:78:66:24:eb:99:84:
                    1b:bd:c9:b3:18:99:a2:4b:d3:27:fc:96:cf:64:f6:
                    cf:df:17:81:5f:c6:a8:36:65:85:07:13:90:7c:8b:
                    07:7f:6c:b6:6b:56:ee:89:5f:75:c7:33:f5:96:e1:
                    61:ca:18:3a:7b:02:9e:b1:cb:e9:d6:59:e7:70:a2:
                    b3:96:b2:2c:e2:ec:d3:51:c8:72:53:f6:da:e5:57:
                    b8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5B:AA:EF:2A:34:A9:6E:3E:48:5D:B0:CC:37:09:72:BB:76:CD:43
            X509v3 Authority Key Identifier:
                keyid:10:77:3F:32:D3:CB:4E:13:E4:3F:10:A3:DC:42:2F:1F:32:71:BF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHc_MtPLThPkPxCj3EIvHzJxv7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/09cafd-68bc-41a2-8bab-80b84e4f20c9/1/EHc_MtPLThPkPxCj3EIvHzJxv7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:bf:6d:6f:e0:93:d9:6d:cd:64:83:79:51:dc:83:8f:72:2f:
         da:6a:96:39:35:41:ee:61:6e:dc:cf:9b:a8:38:5b:2d:8c:ad:
         e2:5d:d2:e7:a1:e8:aa:cd:ef:a1:25:26:e7:5a:ba:0a:a7:2e:
         f5:74:74:26:ae:2b:ed:c2:dc:09:7d:8a:ce:96:e0:4c:fe:5f:
         51:c9:56:97:63:12:7e:0f:e6:4a:db:c9:13:45:9f:70:93:01:
         16:2a:2a:2b:e4:e2:08:34:57:78:24:1f:77:6e:8d:42:5b:b9:
         26:e8:45:e7:b2:fa:91:54:c0:ee:b4:a5:67:78:2f:9f:54:7a:
         6a:60:a9:84:32:ba:f2:17:15:3a:12:aa:0f:6b:be:f5:0d:01:
         32:0a:f7:7f:a5:ea:2b:db:70:c4:0f:50:02:39:50:f4:71:ad:
         53:39:00:0d:85:00:84:b2:09:3e:59:28:82:e0:76:a7:62:50:
         06:18:34:35:f8:81:fa:39:e5:39:57:c4:3c:eb:4a:bb:5b:bc:
         2f:05:3f:80:c3:ee:30:1a:49:bd:20:7d:5a:64:80:7f:3d:ad:
         67:c7:8e:a3:78:17:5e:4e:84:ff:e7:76:ab:c0:11:27:90:a9:
         6d:f0:80:d7:a4:8e:a3:1c:a1:9b:c6:5a:a2:4e:77:0f:28:b9:
         65:2b:70:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:39 2024 by rpki-client on console-fra.rpki-client.org