Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/gBCTAfdFigckETVClxEaC4Gvg1s.mft
File:                     gBCTAfdFigckETVClxEaC4Gvg1s.mft (raw, json)
Hash identifier:          V9SgYawBL4Oj72j1Vb35b4rPf1O8l1kWD96sIkJ+02w=
Subject key identifier:   E6:AD:E3:59:84:BD:00:64:70:B9:A9:60:6E:A7:95:00:A9:A6:EF:84
Authority key identifier: 80:10:93:01:F7:45:8A:07:24:11:35:42:97:11:1A:0B:81:AF:83:5B
Certificate issuer:       /CN=80109301f7458a072411354297111a0b81af835b
Certificate serial:       018D781248686C628C8F60A9F97E84962281
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gBCTAfdFigckETVClxEaC4Gvg1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/gBCTAfdFigckETVClxEaC4Gvg1s.mft
Manifest number:          0641
Signing time:             Mon 05 Feb 2024 07:01:20 +0000
Manifest this update:     Mon 05 Feb 2024 07:01:20 +0000
Manifest next update:     Tue 06 Feb 2024 07:01:20 +0000
Files and hashes:         1: gBCTAfdFigckETVClxEaC4Gvg1s.crl (hash: RnAIj4Kz+TRLYXEyVE4rUW7hUZIEKckZwmGldqcHE7U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:78:12:48:68:6c:62:8c:8f:60:a9:f9:7e:84:96:22:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80109301f7458a072411354297111a0b81af835b
        Validity
            Not Before: Feb  5 07:01:20 2024 GMT
            Not After : Feb  6 07:01:20 2024 GMT
        Subject: CN=e6ade35984bd006470b9a9606ea79500a9a6ef84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:61:0e:1a:74:4a:c9:8c:0b:7c:50:8c:48:
                    ef:d4:a9:6b:ca:cf:fa:a8:6a:26:26:ec:75:49:81:
                    2e:e6:fe:dc:db:35:66:98:8c:23:b9:55:f9:0c:30:
                    ab:be:aa:5f:f2:25:07:e0:f0:6e:10:9d:e1:7e:aa:
                    75:75:bd:f3:4e:9e:29:65:7a:8a:c8:69:4e:42:b7:
                    bf:be:a7:50:03:d0:c1:c1:e4:62:fc:b2:b9:37:4b:
                    14:be:d6:71:65:8b:32:af:87:cf:c3:c7:bf:1e:1a:
                    00:8d:11:66:54:f8:11:f6:00:54:61:3e:64:36:4e:
                    13:f1:9b:a4:da:05:d8:23:47:15:38:67:9d:cf:8c:
                    42:f4:e5:8b:09:2b:76:19:29:c6:dd:2b:67:85:ff:
                    a5:cb:9d:95:0b:00:7a:c0:ef:aa:67:69:14:79:25:
                    30:b8:b9:85:8a:b6:5b:3c:3e:3a:19:64:6e:42:b0:
                    cd:15:b5:fa:d4:a6:e6:2e:d0:c0:72:d5:02:bb:32:
                    81:7a:86:00:fc:7f:38:4e:4a:78:5b:7f:8b:6d:f8:
                    1f:7c:01:01:db:e8:30:01:c1:17:35:89:74:f8:df:
                    ff:76:87:01:95:5f:1e:15:ec:ce:7e:e3:3c:0c:19:
                    6d:7f:24:25:e5:73:be:8a:75:d3:82:b2:09:27:9c:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AD:E3:59:84:BD:00:64:70:B9:A9:60:6E:A7:95:00:A9:A6:EF:84
            X509v3 Authority Key Identifier:
                keyid:80:10:93:01:F7:45:8A:07:24:11:35:42:97:11:1A:0B:81:AF:83:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBCTAfdFigckETVClxEaC4Gvg1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/gBCTAfdFigckETVClxEaC4Gvg1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/048d41-8019-4cd9-b46e-829a7df7f890/1/gBCTAfdFigckETVClxEaC4Gvg1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:33:a7:d3:3a:1e:0f:5d:55:cb:3d:69:67:52:04:24:8f:58:
         26:b1:52:bf:23:8d:0b:9b:ea:03:bc:07:f3:09:50:04:2b:dd:
         1f:2a:8e:ed:c0:8d:ea:41:ca:42:8d:e6:30:31:85:6c:d9:67:
         7e:8b:7c:da:d5:aa:70:5a:77:36:2f:f3:b0:fe:93:b0:56:53:
         77:34:71:65:ee:65:c8:c2:a5:c1:eb:9d:fa:1e:88:55:46:cf:
         d7:01:b1:3b:4f:50:ec:12:3b:20:a3:a8:35:9a:f8:ed:c0:04:
         bb:8e:54:42:7c:ba:01:69:65:c7:95:98:28:58:cd:20:92:5f:
         a0:c8:22:ce:f4:87:02:39:2a:8f:fe:a0:88:2e:31:a0:8f:2b:
         11:3f:c6:d0:6c:50:02:fa:1c:55:95:ab:78:e0:45:9b:fb:ea:
         72:16:f0:4c:d7:66:ce:05:33:15:97:f7:b8:3d:37:b4:45:72:
         fd:e4:33:51:f6:e9:6d:e6:c3:0f:3e:43:0e:9d:9c:a5:1d:4f:
         60:00:37:8e:f1:b5:04:b9:11:43:de:80:54:2f:15:75:9a:da:
         bb:77:4b:31:d4:c7:7e:f2:65:56:50:5d:08:8b:33:f0:b4:d5:
         b8:0c:5d:03:bc:40:5e:bb:b8:db:87:25:e8:5a:29:4f:40:42:
         74:c2:ed:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY14EkhobGKMj2Cp+X6EliKBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwMTA5MzAxZjc0NThhMDcyNDExMzU0Mjk3MTExYTBiODFh
ZjgzNWIwHhcNMjQwMjA1MDcwMTIwWhcNMjQwMjA2MDcwMTIwWjAzMTEwLwYDVQQD
EyhlNmFkZTM1OTg0YmQwMDY0NzBiOWE5NjA2ZWE3OTUwMGE5YTZlZjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYNhDhp0SsmMC3xQjEjv1Klrys/6
qGomJux1SYEu5v7c2zVmmIwjuVX5DDCrvqpf8iUH4PBuEJ3hfqp1db3zTp4pZXqK
yGlOQre/vqdQA9DBweRi/LK5N0sUvtZxZYsyr4fPw8e/HhoAjRFmVPgR9gBUYT5k
Nk4T8Zuk2gXYI0cVOGedz4xC9OWLCSt2GSnG3Stnhf+ly52VCwB6wO+qZ2kUeSUw
uLmFirZbPD46GWRuQrDNFbX61KbmLtDActUCuzKBeoYA/H84Tkp4W3+LbfgffAEB
2+gwAcEXNYl0+N//docBlV8eFezOfuM8DBltfyQl5XO+inXTgrIJJ5zJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOat41mEvQBkcLmpYG6nlQCppu+EMB8GA1UdIwQY
MBaAFIAQkwH3RYoHJBE1QpcRGguBr4NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0JDVEFmZEZpZ2NrRVRWQ2x4RWFDNEd2ZzFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNDhkNDEtODAxOS00Y2Q5LWI0NmUt
ODI5YTdkZjdmODkwLzEvZ0JDVEFmZEZpZ2NrRVRWQ2x4RWFDNEd2ZzFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wNDhkNDEtODAxOS00Y2Q5LWI0NmUtODI5YTdkZjdmODkw
LzEvZ0JDVEFmZEZpZ2NrRVRWQ2x4RWFDNEd2ZzFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzOn0zoe
D11Vyz1pZ1IEJI9YJrFSvyONC5vqA7wH8wlQBCvdHyqO7cCN6kHKQo3mMDGFbNln
fot82tWqcFp3Ni/zsP6TsFZTdzRxZe5lyMKlweud+h6IVUbP1wGxO09Q7BI7IKOo
NZr47cAEu45UQny6AWllx5WYKFjNIJJfoMgizvSHAjkqj/6giC4xoI8rET/G0GxQ
AvocVZWreOBFm/vqchbwTNdmzgUzFZf3uD03tEVy/eQzUfbpbebDDz5DDp2cpR1P
YAA3jvG1BLkRQ96AVC8VdZrau3dLMdTHfvJlVlBdCIsz8LTVuAxdA7xAXru424cl
6FopT0BCdMLtfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:00 2024 by rpki-client on console-ams.rpki-client.org