Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/kVXdXhoA_xsJY2BcHe7x448jMZs.mft
File:                     kVXdXhoA_xsJY2BcHe7x448jMZs.mft (raw, json)
Hash identifier:          e4jle65IAKdHnWacCkRiEKikFUL32M7ZVmidYYVt1pA=
Subject key identifier:   77:48:6C:85:3E:9A:07:B3:C3:20:38:A3:2A:AC:B2:29:0F:CE:4F:BD
Authority key identifier: 91:55:DD:5E:1A:00:FF:1B:09:63:60:5C:1D:EE:F1:E3:8F:23:31:9B
Certificate issuer:       /CN=9155dd5e1a00ff1b0963605c1deef1e38f23319b
Certificate serial:       018BA782716062AB0D3F641F37DFB24C362A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kVXdXhoA_xsJY2BcHe7x448jMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/kVXdXhoA_xsJY2BcHe7x448jMZs.mft
Manifest number:          0335
Signing time:             Tue 07 Nov 2023 02:00:25 +0000
Manifest this update:     Tue 07 Nov 2023 02:00:25 +0000
Manifest next update:     Wed 08 Nov 2023 02:00:25 +0000
Files and hashes:         1: doEHz1kZCF_pd2u5ynr76_gcHY8.roa (hash: h/jJ11RYnhGxtLYWMFBq0HA87Jnenwit2HGzBX24x4M=)
                          2: kVXdXhoA_xsJY2BcHe7x448jMZs.crl (hash: UM7tAMOe5UcEAbykN0AUEOrktFGVHJq96rEJc8iBD6k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a7:82:71:60:62:ab:0d:3f:64:1f:37:df:b2:4c:36:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9155dd5e1a00ff1b0963605c1deef1e38f23319b
        Validity
            Not Before: Nov  7 02:00:25 2023 GMT
            Not After : Nov  8 02:00:25 2023 GMT
        Subject: CN=77486c853e9a07b3c32038a32aacb2290fce4fbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:01:5e:4c:a0:c5:92:ca:27:d7:98:f6:17:
                    5d:43:2a:05:fc:b0:39:49:20:27:ea:34:91:68:21:
                    7f:bd:c2:88:44:ba:16:f6:1f:4c:9c:93:8b:40:e6:
                    2c:68:ad:4b:f1:87:cc:cf:82:d2:47:a6:41:c5:33:
                    14:a4:a4:1e:18:ab:20:21:77:c1:27:c1:4a:23:c4:
                    a9:ef:b4:d1:42:75:a9:69:af:88:fc:e9:90:99:13:
                    dd:c5:70:77:3d:f0:cf:07:4a:85:75:da:fb:bd:fd:
                    d7:9e:76:75:51:c9:5b:be:a8:63:8e:48:95:c9:fb:
                    cb:13:32:1b:d5:6d:4c:c8:a3:cd:9b:59:a2:51:9e:
                    3d:5d:72:da:23:cd:21:68:35:9b:c3:9f:c7:60:1a:
                    cc:4c:00:c0:1d:dc:86:d8:e7:a4:a1:f1:ec:c7:2d:
                    21:ec:ae:ce:b2:d1:df:7f:60:ec:b0:5c:db:62:77:
                    67:29:c9:be:44:8e:69:12:26:46:75:3c:30:99:43:
                    8a:89:b1:23:6a:02:b4:a3:80:3b:8e:bc:9a:e2:14:
                    ed:65:a3:d1:a2:11:dc:b0:fe:d6:46:6d:77:85:dc:
                    88:77:be:0d:d2:81:ad:64:a1:87:e8:08:ef:e3:ef:
                    b5:20:1c:15:0c:a4:6d:44:ac:f9:93:2a:59:c5:6b:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:48:6C:85:3E:9A:07:B3:C3:20:38:A3:2A:AC:B2:29:0F:CE:4F:BD
            X509v3 Authority Key Identifier:
                keyid:91:55:DD:5E:1A:00:FF:1B:09:63:60:5C:1D:EE:F1:E3:8F:23:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVXdXhoA_xsJY2BcHe7x448jMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/kVXdXhoA_xsJY2BcHe7x448jMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d5c377-6441-4f42-8fc1-2bd5bc46a1dd/1/kVXdXhoA_xsJY2BcHe7x448jMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:da:9a:97:63:f8:f8:fa:fc:07:00:63:69:77:d1:b2:6f:b4:
         1f:e4:78:7e:03:f5:c0:1b:0e:28:c4:d1:58:07:7a:69:07:46:
         f4:f7:81:46:04:be:74:c7:f9:2c:54:15:0f:74:78:e2:19:75:
         8a:5f:81:a1:cd:c3:55:a8:a3:42:2b:9d:f8:a8:6d:99:0a:e2:
         f3:87:5e:46:a8:6d:88:2d:4a:58:36:b7:35:74:50:12:13:d2:
         b2:87:b1:96:33:c1:e7:b1:9a:a2:98:48:0d:63:00:b5:17:3d:
         af:56:1f:71:d8:1e:13:75:57:9a:40:3a:d7:74:90:49:77:43:
         f7:98:83:ab:3e:42:10:74:40:c7:3e:56:90:f5:e9:b5:2a:b1:
         c5:64:fe:e7:39:a2:ae:bb:2f:e9:b3:91:de:d7:eb:06:6c:b8:
         0a:06:20:28:97:cd:94:1a:88:2b:88:0a:9a:24:04:52:f4:5d:
         c8:c2:88:98:cb:82:09:5a:47:75:1f:a0:63:47:fd:46:80:29:
         b8:4c:1a:27:e2:10:2d:b5:7a:08:b0:86:4a:04:be:65:5b:2f:
         e0:fa:b2:d6:90:3f:9e:76:dd:b2:f3:90:aa:d9:5f:d8:a3:0e:
         e2:af:76:1f:95:3b:f7:d8:be:d0:92:66:49:73:b2:96:ff:5b:
         fc:77:f3:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYungnFgYqsNP2QfN9+yTDYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNTVkZDVlMWEwMGZmMWIwOTYzNjA1YzFkZWVmMWUzOGYy
MzMxOWIwHhcNMjMxMTA3MDIwMDI1WhcNMjMxMTA4MDIwMDI1WjAzMTEwLwYDVQQD
Eyg3NzQ4NmM4NTNlOWEwN2IzYzMyMDM4YTMyYWFjYjIyOTBmY2U0ZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyYBXkygxZLKJ9eY9hddQyoF/LA5
SSAn6jSRaCF/vcKIRLoW9h9MnJOLQOYsaK1L8YfMz4LSR6ZBxTMUpKQeGKsgIXfB
J8FKI8Sp77TRQnWpaa+I/OmQmRPdxXB3PfDPB0qFddr7vf3XnnZ1UclbvqhjjkiV
yfvLEzIb1W1MyKPNm1miUZ49XXLaI80haDWbw5/HYBrMTADAHdyG2OekofHsxy0h
7K7OstHff2DssFzbYndnKcm+RI5pEiZGdTwwmUOKibEjagK0o4A7jrya4hTtZaPR
ohHcsP7WRm13hdyId74N0oGtZKGH6Ajv4++1IBwVDKRtRKz5kypZxWsf9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdIbIU+mgezwyA4oyqssikPzk+9MB8GA1UdIwQY
MBaAFJFV3V4aAP8bCWNgXB3u8eOPIzGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ZYZFhob0FfeHNKWTJCY0hlN3g0NDhqTVpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9kNWMzNzctNjQ0MS00ZjQyLThmYzEt
MmJkNWJjNDZhMWRkLzEva1ZYZFhob0FfeHNKWTJCY0hlN3g0NDhqTVpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9kNWMzNzctNjQ0MS00ZjQyLThmYzEtMmJkNWJjNDZhMWRk
LzEva1ZYZFhob0FfeHNKWTJCY0hlN3g0NDhqTVpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtqal2P4
+Pr8BwBjaXfRsm+0H+R4fgP1wBsOKMTRWAd6aQdG9PeBRgS+dMf5LFQVD3R44hl1
il+Boc3DVaijQiud+KhtmQri84deRqhtiC1KWDa3NXRQEhPSsoexljPB57GaophI
DWMAtRc9r1YfcdgeE3VXmkA613SQSXdD95iDqz5CEHRAxz5WkPXptSqxxWT+5zmi
rrsv6bOR3tfrBmy4CgYgKJfNlBqIK4gKmiQEUvRdyMKImMuCCVpHdR+gY0f9RoAp
uEwaJ+IQLbV6CLCGSgS+ZVsv4Pqy1pA/nnbdsvOQqtlf2KMO4q92H5U799i+0JJm
SXOylv9b/HfzCg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:57 2024 by rpki-client on console-ams.rpki-client.org