Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.mft
File:                     m650SgTJo03ccEApLOVZNEUGh2w.mft (raw, json)
Hash identifier:          g41wMnDJsLLo813Hi/iu4RD8TmncxCo3F9DzbocU5AI=
Subject key identifier:   8F:DB:BC:56:43:DE:9C:4C:28:5B:CC:19:59:37:F4:1D:0D:11:9D:7C
Authority key identifier: 9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C
Certificate issuer:       /CN=9bae744a04c9a34ddc7040292ce559344506876c
Certificate serial:       018B938DB3B51AB5FCA070268D9B493AB7CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.mft
Manifest number:          08DB
Signing time:             Fri 03 Nov 2023 05:00:19 +0000
Manifest this update:     Fri 03 Nov 2023 05:00:19 +0000
Manifest next update:     Sat 04 Nov 2023 05:00:19 +0000
Files and hashes:         1: G7FcyiIw4qqXeCXRUVzd4ZeLHHY.roa (hash: H9FWaeklxQGvzQcHNYKiDesKWl2GG/ogjbUEzmKLvRA=)
                          2: m650SgTJo03ccEApLOVZNEUGh2w.crl (hash: 1hVgFFMM6if9961m8GwBxoFbfaD3KY0Lq1UVJKI6i7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:93:8d:b3:b5:1a:b5:fc:a0:70:26:8d:9b:49:3a:b7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bae744a04c9a34ddc7040292ce559344506876c
        Validity
            Not Before: Nov  3 05:00:19 2023 GMT
            Not After : Nov  4 05:00:19 2023 GMT
        Subject: CN=8fdbbc5643de9c4c285bcc195937f41d0d119d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:75:60:a0:aa:05:10:da:d4:d4:b8:20:5e:
                    90:05:fc:a3:ec:c6:76:17:55:49:c6:cd:9d:2f:6d:
                    a8:6c:06:a7:46:a9:de:c8:6a:a5:26:3e:e7:1c:73:
                    4a:cc:b9:62:b8:d6:ee:00:fb:2e:da:19:08:0a:09:
                    9e:90:52:bb:6c:29:09:36:a2:21:6a:9a:28:36:68:
                    ea:d6:f0:28:b5:21:4d:c4:56:18:24:bc:c1:c0:0f:
                    f4:36:94:86:cd:ee:4d:0c:c4:56:26:c5:ba:05:8a:
                    35:6e:18:a6:d6:94:52:7e:6c:1d:a2:a5:a4:0f:39:
                    51:1a:bd:0b:1e:52:dd:25:ab:71:fd:03:50:75:ae:
                    04:0f:dc:0b:fc:c9:ad:a9:de:95:61:6b:6a:43:ae:
                    bf:ee:46:08:c3:c7:6b:0d:b1:6a:ab:bd:15:dd:ca:
                    6e:8e:ae:f0:b3:e8:bf:ab:06:1f:bc:e5:21:b5:92:
                    30:a9:b7:37:56:d1:b1:54:22:70:b6:06:f4:fa:1a:
                    7c:c1:93:5c:87:ae:b7:7a:6f:52:4b:47:fa:03:9c:
                    88:51:9b:2e:42:aa:e6:af:b1:ac:76:f1:1a:df:67:
                    5e:32:72:a5:24:db:6c:80:20:e0:15:b5:e0:38:57:
                    8e:53:f0:bf:ff:a7:de:11:d7:8f:75:76:00:32:26:
                    1c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:BC:56:43:DE:9C:4C:28:5B:CC:19:59:37:F4:1D:0D:11:9D:7C
            X509v3 Authority Key Identifier:
                keyid:9B:AE:74:4A:04:C9:A3:4D:DC:70:40:29:2C:E5:59:34:45:06:87:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m650SgTJo03ccEApLOVZNEUGh2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e3867f-1d60-489e-83ad-6c3e766caa1f/1/m650SgTJo03ccEApLOVZNEUGh2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:c7:1e:7c:82:f7:00:f0:39:46:b2:fa:1a:a0:fb:cb:c5:
         28:68:de:19:f1:7b:50:f2:5a:90:24:bb:72:15:9e:1b:2e:dc:
         e0:78:91:e3:02:b4:48:5a:fc:d3:fb:ff:1a:58:00:e0:5c:d1:
         09:4b:ef:0d:cf:d1:4d:2c:bc:da:2c:bc:3b:f1:bd:80:54:46:
         c0:1d:c7:82:2a:71:cb:39:3e:9d:87:c8:f9:c0:ad:2e:87:f5:
         d0:1a:5f:8e:e2:6f:94:df:d0:bd:1f:f6:7e:14:c3:2a:00:cb:
         ee:d2:d8:8c:93:99:4c:52:7f:0e:a5:65:49:fc:b4:ae:3d:96:
         1f:2c:81:a0:92:50:15:16:4a:9e:83:29:13:4e:41:14:ef:65:
         43:b4:5e:eb:d5:34:1d:4c:dd:a0:54:37:21:8f:f9:4a:35:2a:
         ef:86:4d:2d:31:61:ef:6b:47:b0:2c:79:f9:a0:dd:32:1a:38:
         54:e7:a0:e5:20:f6:16:0f:69:fc:3f:18:98:2a:d2:ab:d3:db:
         ea:39:47:ee:c8:9b:74:52:0d:d8:59:fc:72:b4:50:4b:b9:f5:
         38:84:bd:4a:2b:05:b3:61:b1:cd:6b:8e:56:43:dc:57:b9:9a:
         16:07:9e:c2:e5:47:bd:ba:66:76:00:85:62:4e:84:0c:a9:48:
         35:4c:81:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:56 2024 by rpki-client on console-fra.rpki-client.org