Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e90937-9905-4152-bf4d-2f49c6577b70/1/i0YIYoFYItlV56dxXzkhWkGMepA.mft
File:                     i0YIYoFYItlV56dxXzkhWkGMepA.mft (raw, json)
Hash identifier:          GKChl88rVrI2LDV8nuaWtW8yCQ7e9T1gRdeBFUtBvng=
Subject key identifier:   CF:E7:0E:28:74:21:A9:DF:9B:A0:23:78:A2:AE:96:D9:12:9A:6A:72
Authority key identifier: 8B:46:08:62:81:58:22:D9:55:E7:A7:71:5F:39:21:5A:41:8C:7A:90
Certificate issuer:       /CN=8b460862815822d955e7a7715f39215a418c7a90
Certificate serial:       0185376D5AE96924541D81B469AD3CC8187A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i0YIYoFYItlV56dxXzkhWkGMepA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/e90937-9905-4152-bf4d-2f49c6577b70/1/i0YIYoFYItlV56dxXzkhWkGMepA.mft
Manifest number:          0BDB
Signing time:             Thu 22 Dec 2022 01:23:11 +0000
Manifest this update:     Thu 22 Dec 2022 01:23:11 +0000
Manifest next update:     Fri 23 Dec 2022 01:23:11 +0000
Files and hashes:         1: i0YIYoFYItlV56dxXzkhWkGMepA.crl (hash: Bm9eFNZ2vaeYByhMukd3sLl+Upjb6AYg+ktyNU9eUgg=)
                          2: jwqIWF7XhiPqddPPUT5NrgzBf4E.roa (hash: sOX1BQ2nH/4Wy8e5Y2Od8vxcJfnpprVHNa2gLG5kMcg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:37:6d:5a:e9:69:24:54:1d:81:b4:69:ad:3c:c8:18:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b460862815822d955e7a7715f39215a418c7a90
        Validity
            Not Before: Dec 22 01:23:11 2022 GMT
            Not After : Dec 23 01:23:11 2022 GMT
        Subject: CN=cfe70e287421a9df9ba02378a2ae96d9129a6a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:d8:9e:b3:97:aa:b5:fc:a8:ee:fb:4c:3d:
                    aa:6a:7f:71:34:9d:72:36:46:8d:35:f0:1c:b1:5b:
                    9d:e1:28:e5:99:9d:ea:d2:0a:ab:2b:db:ab:d3:bf:
                    21:1c:c5:23:ae:e3:71:90:3a:42:62:3d:03:56:50:
                    c1:90:2b:a5:bd:dc:5a:51:e4:76:61:a7:8b:86:c0:
                    cb:3a:43:93:93:b8:79:0f:6c:27:88:fc:f7:3b:cc:
                    d8:fa:f6:79:14:91:06:f9:01:d9:21:e7:3e:a1:30:
                    16:63:69:bf:8d:9f:f0:ea:1a:b3:e4:cc:8b:60:8f:
                    ea:8f:4c:e8:bc:38:c2:4d:21:fa:58:b2:41:61:3f:
                    1b:35:ff:1f:c2:e1:ec:fc:41:47:27:88:79:bd:c3:
                    cf:16:40:c5:ec:01:3a:04:cf:da:f7:c1:bc:c5:3a:
                    d6:1b:06:25:9b:7c:0b:20:30:49:2f:94:25:47:6d:
                    f4:80:43:d5:7c:c8:36:43:b0:e7:c7:e2:44:52:7d:
                    84:4e:e3:c4:4e:56:6e:e1:ee:70:d5:f4:09:a0:13:
                    c5:91:3a:c3:ed:0a:2b:98:a5:8a:d7:80:84:9b:32:
                    ac:54:10:6a:5d:16:73:1f:a2:c4:a8:a2:20:d7:7e:
                    4c:71:87:57:e4:55:85:7f:8d:cd:02:81:07:8f:21:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E7:0E:28:74:21:A9:DF:9B:A0:23:78:A2:AE:96:D9:12:9A:6A:72
            X509v3 Authority Key Identifier:
                keyid:8B:46:08:62:81:58:22:D9:55:E7:A7:71:5F:39:21:5A:41:8C:7A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0YIYoFYItlV56dxXzkhWkGMepA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e90937-9905-4152-bf4d-2f49c6577b70/1/i0YIYoFYItlV56dxXzkhWkGMepA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e90937-9905-4152-bf4d-2f49c6577b70/1/i0YIYoFYItlV56dxXzkhWkGMepA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:36:cd:bf:8e:eb:3c:ae:b1:d2:c2:a6:0b:a8:4e:7c:60:97:
         a6:74:f1:19:10:d6:90:2a:46:16:ef:27:37:00:36:a8:c0:68:
         92:18:50:fd:b9:1f:55:da:7a:fe:06:2a:ed:09:58:90:53:65:
         77:41:6d:d6:0a:ae:65:c3:9d:5a:ca:5e:53:82:6a:ac:97:ed:
         5a:11:8b:12:d6:95:62:73:bc:fa:43:f0:31:74:9a:05:5c:51:
         ce:2e:d4:1e:25:6e:23:af:c3:08:e7:09:cb:e1:d4:c1:80:6c:
         c1:dc:83:5a:21:32:e0:f3:5e:79:48:4a:56:1c:f3:86:a8:ac:
         3d:cb:55:3f:bf:05:a1:78:db:47:29:5f:40:45:43:a2:76:e2:
         71:d5:77:b9:55:62:97:f8:a3:5e:e2:75:0d:c2:59:8d:c6:15:
         97:12:4a:44:4f:50:90:af:20:bc:7b:c2:0c:54:38:c7:b9:60:
         0c:45:8f:3d:68:96:41:62:60:fa:8f:1d:77:72:df:e7:19:59:
         d0:bd:62:fd:63:e1:b6:06:80:c5:29:13:5f:cc:b5:80:e7:d0:
         5a:f8:f8:b0:9b:de:80:0f:f6:18:76:2e:b8:aa:7a:0a:28:ac:
         47:9a:31:98:08:57:2b:cc:ef:17:3d:61:f5:bb:cf:1b:56:de:
         e4:90:2f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:51 2024 by rpki-client on console-fra.rpki-client.org