Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
File:                     1nSvl-7USr-_pNAi_3Xwd86qQOE.mft (raw, json)
Hash identifier:          L7aNnjQfZknIt4WnuV4FWkzBldriRUC+UXQvzWXJMJ0=
Subject key identifier:   B6:24:9B:9C:9C:2D:36:4C:CF:47:73:35:97:DD:1E:9E:75:80:88:84
Authority key identifier: D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1
Certificate issuer:       /CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
Certificate serial:       018D62D41550D9105DB729D662108E676D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft
Manifest number:          084F
Signing time:             Thu 01 Feb 2024 04:01:22 +0000
Manifest this update:     Thu 01 Feb 2024 04:01:22 +0000
Manifest next update:     Fri 02 Feb 2024 04:01:22 +0000
Files and hashes:         1: 1nSvl-7USr-_pNAi_3Xwd86qQOE.crl (hash: jnPcBZonYhqa8/MSXTiFg3UvgwhpSELs5VNcUdm7tuU=)
                          2: VBzXmyt77aFmVw6Bc6jYfwVsx_A.roa (hash: UBrj98k1B/+rhAR4mr19NtE2u26U/zi0zfW9C9mbyaU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:62:d4:15:50:d9:10:5d:b7:29:d6:62:10:8e:67:6d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d674af97eed44abfbfa4d022ff75f077ceaa40e1
        Validity
            Not Before: Feb  1 04:01:22 2024 GMT
            Not After : Feb  2 04:01:22 2024 GMT
        Subject: CN=b6249b9c9c2d364ccf47733597dd1e9e75808884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fc:3a:62:2b:3f:e5:4c:52:d1:e6:12:b1:03:
                    06:52:94:7e:c4:1d:9e:24:a1:c5:e3:dd:c5:4b:05:
                    2d:ca:5c:fb:c6:58:44:6a:0e:76:a3:f9:d7:41:ea:
                    31:75:0f:ff:fc:42:ef:38:86:7d:55:de:05:6c:6b:
                    0c:6a:ea:5a:e5:7d:ef:de:2b:fb:ad:fa:56:41:c5:
                    d9:89:63:60:1d:b2:c8:30:19:33:5d:ae:89:ab:83:
                    29:a2:bc:5e:6c:b2:01:f6:89:88:04:4c:f9:d0:cc:
                    6e:3f:5c:4d:00:09:d1:2e:a4:c5:60:d6:bb:d4:17:
                    73:0b:0d:65:b2:fa:99:c2:76:2a:41:81:f1:ce:40:
                    31:1c:38:3c:0e:59:3c:02:84:02:59:f9:66:c0:35:
                    cc:f8:f8:98:03:3b:44:04:b2:3e:9e:2c:f4:0b:d3:
                    b3:28:a3:39:1f:e2:ae:c5:d7:47:94:80:88:e1:1b:
                    46:c2:d0:51:3a:98:58:2b:4e:06:d8:4d:81:1f:f0:
                    b7:c6:fe:59:05:66:e6:62:cd:44:74:30:5d:91:d0:
                    e7:ff:b9:a0:ef:a7:da:57:4b:f4:83:90:5b:e2:cf:
                    d0:46:db:f0:49:d7:a0:53:a7:7a:02:f6:af:4f:bd:
                    da:bf:ff:4e:45:76:3c:b1:e7:43:17:da:05:5f:b4:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:9B:9C:9C:2D:36:4C:CF:47:73:35:97:DD:1E:9E:75:80:88:84
            X509v3 Authority Key Identifier:
                keyid:D6:74:AF:97:EE:D4:4A:BF:BF:A4:D0:22:FF:75:F0:77:CE:AA:40:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nSvl-7USr-_pNAi_3Xwd86qQOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/597e97-ff07-4102-ad88-1f234a957061/1/1nSvl-7USr-_pNAi_3Xwd86qQOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9a:46:2f:78:3c:ca:67:06:92:6a:0d:52:b4:d3:39:f3:0e:
         45:fc:91:b9:88:15:f4:a9:a6:5f:f1:f7:e8:9e:cd:0b:53:52:
         b8:e0:a6:ab:e9:36:53:b5:d5:1f:69:8c:86:e4:bb:27:33:a6:
         b7:0e:53:de:e6:66:76:e4:d7:cc:c3:d4:0a:3b:5f:35:5d:b3:
         29:95:24:49:b0:a3:3b:45:84:9e:d1:29:65:d6:11:29:38:32:
         cf:80:83:f2:5f:eb:3c:24:92:17:37:c1:6f:03:2d:ec:77:24:
         64:aa:7b:c0:7f:21:32:5d:3b:cd:75:29:21:56:07:f8:54:a9:
         26:83:84:5d:f9:43:3d:7c:5c:73:20:65:1d:e1:61:6a:b4:91:
         4a:bc:82:96:2c:a8:a9:87:bf:74:30:a6:e5:e7:38:25:ef:26:
         64:3d:d7:09:f9:7f:6f:e2:35:08:b5:95:e8:8b:e9:f3:09:0c:
         a7:81:f2:b7:ec:8e:37:46:be:3f:18:a5:3a:c7:65:81:66:51:
         a4:9f:94:34:1d:b1:1f:47:4f:cf:86:51:d3:30:dd:39:a1:63:
         05:ce:e6:31:5c:41:45:63:59:3c:d6:c5:de:a1:d3:6c:91:13:
         40:c7:fc:96:80:73:f3:48:65:44:c2:7a:07:23:a5:60:dc:54:
         e7:71:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:12 2024 by rpki-client on console-ams.rpki-client.org