Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.mft
File:                     0ZE0K5g2itS-gypn41XbJ1yNo60.mft (raw, json)
Hash identifier:          qhWJfGDiN5Ac2Ka6WW72Op5SwA5XHvACI7XCM+xoiFc=
Subject key identifier:   59:1A:80:EC:8D:EF:6A:63:73:30:C3:70:C6:62:C0:16:BF:07:BB:EE
Authority key identifier: D1:91:34:2B:98:36:8A:D4:BE:83:2A:67:E3:55:DB:27:5C:8D:A3:AD
Certificate issuer:       /CN=d191342b98368ad4be832a67e355db275c8da3ad
Certificate serial:       018BA85E6F444C5CBB3AB5E814F52D82A12D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZE0K5g2itS-gypn41XbJ1yNo60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.mft
Manifest number:          065D
Signing time:             Tue 07 Nov 2023 06:00:42 +0000
Manifest this update:     Tue 07 Nov 2023 06:00:42 +0000
Manifest next update:     Wed 08 Nov 2023 06:00:42 +0000
Files and hashes:         1: 0ZE0K5g2itS-gypn41XbJ1yNo60.crl (hash: hwuXAEebij87SrnLlYrYNtWD32z+JUgdIc+Ecn4XU5k=)
                          2: dTxU0pY0HzQ4OYyIZFnXCkPDET8.roa (hash: jxf7cKGzeoJjzHn1/sWIp2JZv0wMn+3s8vxtuvmtJCc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a8:5e:6f:44:4c:5c:bb:3a:b5:e8:14:f5:2d:82:a1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d191342b98368ad4be832a67e355db275c8da3ad
        Validity
            Not Before: Nov  7 06:00:42 2023 GMT
            Not After : Nov  8 06:00:42 2023 GMT
        Subject: CN=591a80ec8def6a637330c370c662c016bf07bbee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:9e:9b:55:7d:a1:7a:81:54:bc:79:a1:bf:
                    4e:d4:45:5a:65:ef:2d:c4:6c:2a:d1:82:b4:a4:04:
                    ab:22:83:7d:4a:19:7e:18:a1:9a:6e:d9:78:d1:8d:
                    42:ca:d7:1f:1a:59:7b:76:af:ab:77:93:46:c3:18:
                    ec:87:f7:d5:ee:1e:6d:f0:1a:fc:50:0e:b9:17:cc:
                    a0:c5:9e:8a:8b:66:65:9d:f3:3e:33:49:3e:6f:d8:
                    8e:02:bc:09:75:76:2f:82:92:3b:c6:b4:5e:d5:65:
                    6e:9d:1d:a3:2d:13:4c:5e:60:5f:59:89:1e:1e:31:
                    c6:ae:5d:4d:0b:59:69:49:b5:0d:13:8f:59:be:82:
                    e7:18:84:6e:0a:ba:30:55:df:f4:10:1d:ef:e5:86:
                    ae:71:33:ff:5d:e8:55:1f:77:89:d8:41:5a:e6:d4:
                    c1:9c:5f:a0:ad:26:48:ed:79:58:95:37:d0:47:cf:
                    b3:c7:18:fe:39:63:d1:57:af:b7:4b:06:27:3c:c3:
                    a4:cb:27:6b:4e:67:0c:42:80:15:a9:3f:12:c5:5a:
                    d8:a2:ad:b4:4c:c7:9c:40:2c:88:a6:8f:a9:09:cb:
                    cb:96:4e:b9:3e:d7:a5:3b:20:18:43:80:4e:7f:fb:
                    6a:f2:83:5f:33:1d:6a:37:84:55:a4:db:97:f8:79:
                    5e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:80:EC:8D:EF:6A:63:73:30:C3:70:C6:62:C0:16:BF:07:BB:EE
            X509v3 Authority Key Identifier:
                keyid:D1:91:34:2B:98:36:8A:D4:BE:83:2A:67:E3:55:DB:27:5C:8D:A3:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZE0K5g2itS-gypn41XbJ1yNo60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e6d996-87d9-4fdc-b654-46705881b161/1/0ZE0K5g2itS-gypn41XbJ1yNo60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b0:f0:d6:60:6c:c6:7e:ff:2b:b5:ba:9d:7a:91:f6:83:c7:
         b0:5b:15:64:91:1d:4c:d5:fb:b1:9a:4b:c4:c6:af:03:1b:c1:
         dd:0b:53:e4:67:12:c8:6e:d3:fd:d5:94:32:20:42:92:df:c7:
         30:e1:e1:03:c5:dc:dd:03:03:86:39:8c:ee:85:c8:61:55:73:
         5d:9a:3a:5b:08:4d:3c:42:07:df:fd:52:28:49:90:4f:50:51:
         c3:5b:1b:7c:b7:fa:64:ec:b3:f7:16:c7:3c:88:5e:b5:9f:ca:
         1f:80:1e:97:d5:4a:64:d9:f1:ad:8b:ab:a0:07:3d:d1:10:ae:
         ee:8e:04:92:2c:eb:92:c7:12:4c:c1:10:0d:a1:0f:ae:e7:de:
         74:cb:c4:7e:db:bf:a8:8c:1a:a6:ae:f4:02:76:6a:76:70:cf:
         23:36:6a:3a:d0:86:11:89:87:3c:4e:0b:ab:cd:77:aa:71:39:
         6e:f4:e9:17:ca:e0:9e:72:fa:de:80:2a:76:a4:a1:35:b4:0c:
         10:a2:64:53:a1:74:81:9c:70:97:76:a5:0d:57:f5:e4:3a:3b:
         71:bd:60:51:3c:91:dd:f3:85:85:bb:c1:23:eb:fa:52:d1:74:
         80:8b:85:2a:1e:7b:cd:ba:6c:76:0a:b2:09:ed:61:3a:af:81:
         cf:02:0d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYuoXm9ETFy7OrXoFPUtgqEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTEzNDJiOTgzNjhhZDRiZTgzMmE2N2UzNTVkYjI3NWM4
ZGEzYWQwHhcNMjMxMTA3MDYwMDQyWhcNMjMxMTA4MDYwMDQyWjAzMTEwLwYDVQQD
Eyg1OTFhODBlYzhkZWY2YTYzNzMzMGMzNzBjNjYyYzAxNmJmMDdiYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIKem1V9oXqBVLx5ob9O1EVaZe8t
xGwq0YK0pASrIoN9Shl+GKGabtl40Y1CytcfGll7dq+rd5NGwxjsh/fV7h5t8Br8
UA65F8ygxZ6Ki2ZlnfM+M0k+b9iOArwJdXYvgpI7xrRe1WVunR2jLRNMXmBfWYke
HjHGrl1NC1lpSbUNE49ZvoLnGIRuCrowVd/0EB3v5YaucTP/XehVH3eJ2EFa5tTB
nF+grSZI7XlYlTfQR8+zxxj+OWPRV6+3SwYnPMOkyydrTmcMQoAVqT8SxVrYoq20
TMecQCyIpo+pCcvLlk65PtelOyAYQ4BOf/tq8oNfMx1qN4RVpNuX+HleCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkagOyN72pjczDDcMZiwBa/B7vuMB8GA1UdIwQY
MBaAFNGRNCuYNorUvoMqZ+NV2ydcjaOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpFMEs1ZzJpdFMtZ3lwbjQxWGJKMXlObzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lNmQ5OTYtODdkOS00ZmRjLWI2NTQt
NDY3MDU4ODFiMTYxLzEvMFpFMEs1ZzJpdFMtZ3lwbjQxWGJKMXlObzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lNmQ5OTYtODdkOS00ZmRjLWI2NTQtNDY3MDU4ODFiMTYx
LzEvMFpFMEs1ZzJpdFMtZ3lwbjQxWGJKMXlObzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7Dw1mBs
xn7/K7W6nXqR9oPHsFsVZJEdTNX7sZpLxMavAxvB3QtT5GcSyG7T/dWUMiBCkt/H
MOHhA8Xc3QMDhjmM7oXIYVVzXZo6WwhNPEIH3/1SKEmQT1BRw1sbfLf6ZOyz9xbH
PIhetZ/KH4Ael9VKZNnxrYuroAc90RCu7o4EkizrkscSTMEQDaEPrufedMvEftu/
qIwapq70AnZqdnDPIzZqOtCGEYmHPE4Lq813qnE5bvTpF8rgnnL63oAqdqShNbQM
EKJkU6F0gZxwl3alDVf15Do7cb1gUTyR3fOFhbvBI+v6UtF0gIuFKh57zbpsdgqy
Ce1hOq+BzwINeQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:04 2024 by rpki-client on console-fra.rpki-client.org