Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/17bf7d-c69e-4be5-8a45-fd8ead27cfba/1/KwTPALpO6M3Z_0SuiD5muz0br6A.mft
File:                     KwTPALpO6M3Z_0SuiD5muz0br6A.mft (raw, json)
Hash identifier:          wwRReEjRfZgQWpjFfJD/lQz/g6ZFOILgE+VFA1rVUC0=
Subject key identifier:   77:4F:58:D7:8E:99:D1:BF:59:58:8E:8A:C9:C3:53:BF:35:3F:53:21
Authority key identifier: 2B:04:CF:00:BA:4E:E8:CD:D9:FF:44:AE:88:3E:66:BB:3D:1B:AF:A0
Certificate issuer:       /CN=2b04cf00ba4ee8cdd9ff44ae883e66bb3d1bafa0
Certificate serial:       018B5BFA949BBF494C5967C79CD84428740B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KwTPALpO6M3Z_0SuiD5muz0br6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/17bf7d-c69e-4be5-8a45-fd8ead27cfba/1/KwTPALpO6M3Z_0SuiD5muz0br6A.mft
Manifest number:          0649
Signing time:             Mon 23 Oct 2023 10:00:30 +0000
Manifest this update:     Mon 23 Oct 2023 10:00:30 +0000
Manifest next update:     Tue 24 Oct 2023 10:00:30 +0000
Files and hashes:         1: KwTPALpO6M3Z_0SuiD5muz0br6A.crl (hash: Q68eJpiTpp0CcjtCpekEvWUiYNM9Ef1ZH6toxXvpFwI=)
                          2: TtbwLggbs_01HwPe84xM9Avnjcg.roa (hash: IkriLlMbsw5nFnx0YkabKrXcoprWrlNmQtceu+QC2xA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:5b:fa:94:9b:bf:49:4c:59:67:c7:9c:d8:44:28:74:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b04cf00ba4ee8cdd9ff44ae883e66bb3d1bafa0
        Validity
            Not Before: Oct 23 10:00:30 2023 GMT
            Not After : Oct 24 10:00:30 2023 GMT
        Subject: CN=774f58d78e99d1bf59588e8ac9c353bf353f5321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:38:83:31:0a:5e:2a:22:c2:e9:86:80:c7:
                    df:d8:1e:97:a2:1c:12:73:5f:14:e5:f6:ec:94:84:
                    76:e7:2d:4b:91:e8:4e:99:4e:ea:bd:74:6f:ab:15:
                    25:af:62:55:53:cf:3d:26:6a:9e:63:c8:95:84:22:
                    04:86:f6:28:1e:17:aa:d0:c1:9f:d5:39:d9:c9:9d:
                    ed:71:ee:bf:fa:ef:8b:f6:0b:64:42:19:39:ba:6a:
                    1b:6d:f4:88:5c:3f:bc:db:72:ab:ba:45:eb:c0:e1:
                    fd:8c:93:3a:66:43:53:9b:02:7e:38:6c:83:a4:01:
                    88:c4:35:e7:fc:c5:ae:0c:b1:5f:61:13:b2:25:4c:
                    3d:a0:b1:03:9e:a2:74:b4:3c:aa:d8:85:cf:33:fb:
                    b6:98:38:a3:b5:ec:ac:05:5b:db:3f:b2:9e:17:9d:
                    f4:50:d7:8e:10:63:29:aa:49:5b:e0:a8:5a:44:8d:
                    2b:5b:fa:3d:7b:40:bd:d5:93:54:90:5d:55:89:00:
                    da:47:88:74:6b:25:f2:d5:2b:e9:56:9a:bd:ed:32:
                    23:5b:06:57:ff:50:3f:8c:26:0d:0a:e2:e1:47:ee:
                    f8:02:52:38:71:f2:28:16:23:f1:e0:33:c7:f4:bd:
                    7e:ba:c4:2e:f9:78:38:ac:7a:ab:27:65:97:ca:df:
                    35:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4F:58:D7:8E:99:D1:BF:59:58:8E:8A:C9:C3:53:BF:35:3F:53:21
            X509v3 Authority Key Identifier:
                keyid:2B:04:CF:00:BA:4E:E8:CD:D9:FF:44:AE:88:3E:66:BB:3D:1B:AF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwTPALpO6M3Z_0SuiD5muz0br6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/17bf7d-c69e-4be5-8a45-fd8ead27cfba/1/KwTPALpO6M3Z_0SuiD5muz0br6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/17bf7d-c69e-4be5-8a45-fd8ead27cfba/1/KwTPALpO6M3Z_0SuiD5muz0br6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:02:a0:61:4b:5c:f0:8f:41:af:90:25:89:40:8c:88:ce:06:
         f3:7f:f2:62:15:fb:6c:ed:f6:44:18:75:82:00:2b:31:a3:74:
         f2:1e:ff:3d:dd:b0:12:98:7e:5c:1c:3f:33:fa:e5:13:71:61:
         b9:8c:c9:f6:4b:ad:c2:c1:76:93:73:68:bf:9f:09:7e:db:f9:
         38:af:0c:e7:81:45:53:3a:72:95:8d:b9:41:e9:25:0a:44:1d:
         fa:cb:83:73:2f:ee:63:07:32:85:d3:e8:f8:cd:52:88:75:c7:
         2b:c1:4f:ba:ff:23:ee:db:22:a6:c1:33:79:74:54:eb:02:26:
         a1:97:8e:67:d3:a9:97:a0:cc:45:a1:17:11:6e:63:b1:9b:f3:
         fc:a3:09:4f:6f:47:5b:83:c0:3a:e1:cd:3c:c7:6d:61:2d:89:
         43:83:10:5a:ec:31:13:b7:dd:a1:c8:98:9d:1f:bd:ef:71:33:
         d0:8d:a2:19:91:95:2b:10:b8:5c:eb:9c:2c:80:00:12:68:19:
         99:b1:39:44:1f:45:d0:a7:d0:cb:6a:44:e9:b3:36:f2:75:c9:
         f2:31:a2:33:74:b9:0c:51:fe:77:4f:b0:6c:d1:1c:13:b6:eb:
         ba:c9:1e:e9:e8:cd:03:5a:17:8a:ab:53:a2:3e:34:69:d8:57:
         4e:8f:dc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:32 2024 by rpki-client on console-fra.rpki-client.org